Hello, We have Exchange server 2007 and I need deny Send As permission for any domain administrators. These domain administrators are in the other security group ITCA too. I open Active Directory Users and Computers console- I add ITCA groupon domain security tab and setspecial permissionSend Asto denyfor group ITCA . But these domain administratorswho are also members of ITCA can stillsend email messages as other users. Any idea or best practices for this problem? Thanks, Josef

get-mailbox | remove-MailboxPermission -User "Domain Admins" -AccessRights sendas

you could also do it with the add-mailboxpermission -user "user or group" -accessrights sendas -deny depends whether you just want to remove the permission or ad a deny