Skip navigation

Access Denied: Using AD's Send As and Receive As Permissions

What's the purpose of the Send As and Receive As permissions on user objects in Active Directory (AD)? Can they help me handle situations in which a user needs to access multiple mailboxes?

The Send As and Receive As permissions relate to Microsoft Exchange 2000 Server and let users send and receive email without revealing their identity. To view these permissions, open the Microsoft Management Console (MMC) Active Directory Users and Computers snap-in, then select View, Advanced Features. Right-click a user object to open the user's Properties dialog box, and select the Security tab, as Web Figure 1 (http://www.secadministrator.com, InstantDoc ID 37449) shows. Typically, Exchange 2000 associates one mailbox with each user. For one user to access multiple mailboxes, you must create user accounts for each mailbox, then disable those user accounts.

For example, say Sally needs to access three mailboxes: Complaints, Unsafe Activity Reports, and Harassment Reports. She needs to send and receive email from all three mailboxes without revealing her identity. First, you create user accounts called Complaints, Unsafe Activity Reports, and Harassment Reports, then disable them. Next, open the Properties dialog box for the Complaints user object and select the Security tab. Click Add and add an entry for Sally that grants her Send As and Receive As permissions. Repeat these steps for the other two mailboxes. For more information about how Send As and Receive As work and an explanation of how Send\Receive on behalf of access works, see the Microsoft article "XADM: How to Grant a User 'Send As' Rights in Exchange Server 5.5 and Exchange 2000" (http://support.microsoft.com/?kbid=281208).

Hide comments

Comments

  • Allowed HTML tags: <em> <strong> <blockquote> <br> <p>

Plain text

  • No HTML tags allowed.
  • Web page addresses and e-mail addresses turn into links automatically.
  • Lines and paragraphs break automatically.
Publish