Security Problem

  • Thread starter Thread starter ferg
  • Start date Start date
F

ferg

G'Day List,
How do I fix this problem?
While creating a new email to send, the user clicked on "View" and selected
"From Field".
Now his newly created email, to be sent, now has an option to select the
sender, and he can select any name from the Global Address List. This is NOT
GOOD. How can I disable this permanently?

Thanks.
 
This shouldn't be a problem unless you have also granted the user Send As or Send on Behalf Of permission over every mailbox. If the user tries to send and doesn't have correct permissions, they'll get an error message.
 
Sue,
Thanks for the reply.
The user did infact send an email as coming from the other person and I was
one of the recipients, curious as how it happened.
I will check into it.

by-the-way. The sending user is a IT support staff who has domain admin
privileges. Would that make a differenct?

Thanks again




This shouldn't be a problem unless you have also granted the user Send As or
Send on Behalf Of permission over every mailbox. If the user tries to send
and doesn't have correct permissions, they'll get an error message.
 
Permissions make all the difference, but a domain admin would not have Send As or Send on Behalf Of permission by default. I suspect mailbox permissions are set too loosely throughout the organization. Since there are legitimate uses for one user sending as another, you'll want to make sure only those uses are supported by the permissions set for the mailboxes.

--
Sue Mosher, Outlook MVP
Author of
Microsoft Outlook Programming - Jumpstart for
Administrators, Power Users, and Developers
 
Sur,
Thanks again for the pointers. 'preciate it.
I now have some reading and research to do.

Thanks again.



Permissions make all the difference, but a domain admin would not have Send
As or Send on Behalf Of permission by default. I suspect mailbox permissions
are set too loosely throughout the organization. Since there are legitimate
uses for one user sending as another, you'll want to make sure only those
uses are supported by the permissions set for the mailboxes.

--
Sue Mosher, Outlook MVP
Author of
Microsoft Outlook Programming - Jumpstart for
Administrators, Power Users, and Developers
 
Back
Top