RE: [ActiveDir] Delegates

[Steve Shaff]

That would make sense.  I thought the permissions may have been the issue.  Thanks for confirming that.   S From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of joe Sent: Thursday, October 28, 2004 7:20 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Delegates   Ok under the category of duh, sorry. I didn't read the full post...   Under Security - this person has full control Full Control means a user has all permissions over an object. For some reason MS did the Send As functionality as a permission (instead of an attribute say like public delegates) so it isn't possible to query for who can do what but also you can have side effects. That is... if you have full control over some user object, you have every permission on that user object unless something otherwise denies it. Now I haven't specifically tested if Exchange will treat a FC granted Send As like a normal granted Send As I would be willing to bet that it does work that way.     joe     From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of joe Sent: Thursday, October 28, 2004 9:57 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Delegates They could also have FC over the user object directly or through a group...     joe   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mulnick, Al Sent: Thursday, October 28, 2004 9:50 AM To: '[EMAIL PROTECTED]' Subject: RE: [ActiveDir] Delegates Sounds like the user has too many rights for example the 'Send As' rights along with the send on behalf of.      Can you verify the behavior with some test accounts and just follow this to grant send on behalf of rights and nothing else? http://support.microsoft.com/?kbid=327000   Al   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Steve Shaff Sent: Wednesday, October 27, 2004 5:29 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Delegates I would have to ask, which permissions?  (Since there are several places where the permissions are specified.) In ADUC Under mailbox rights (Exchange Advanced tab) - this person has full access. Under Delivery Options (Exchange General tab) - this person is specified in the grant this permission to: send on behalf of Under Security - this person has full control     From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mulnick, Al Sent: Wednesday, October 27, 2004 2:19 PM To: '[EMAIL PROTECTED]' Subject: RE: [ActiveDir] Delegates   That header change occurs on the server and is displayed by clients that understand it properly.    What type of permission does the originator have and where is it granted?   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Steve Shaff Sent: Wednesday, October 27, 2004 5:03 PM To: [EMAIL PROTECTED] Subject: [ActiveDir] Delegates Hey Group,   One of our "users" reports that when they send a message on behalf of another person, it no longer states that in the header.  I have checked both the outlook client, Office 2003 and the Exchange tabs within ADUC.  Oh.  It is on an Exchange 2003 server.  Anyone have any ideas of what the problem may be?   Thanks, S