Hello We has a distribution list for all our users that is restricted so that only certain users, such as PAs etc can send global emails out. Recently someone used reply all and the email was not restricted. I can see that the user does not have access to send to the distribution list in message delivery restrictions. Can anyone help? Thanks Craig

On Thu, 9 Aug 2012 11:27:49 +0000, Craig L2012 wrote: >We has a distribution list for all our users that is restricted so that only certain users, such as PAs etc can send global emails out. Recently someone used reply all and the email was not restricted. > >I can see that the user does not have access to send to the distribution list in message delivery restrictions. > >Can anyone help? Did they expand the DL and then send to the individual members? Check the message tracking logs and see if the reply was addressed to the group or to a slew of individual addresses. A quick way to check is to look for an EXPAND event for the message in the tracking log for that message. --- Rich Matheisen MCSE+I, Exchange MVP --- Rich Matheisen MCSE+I, Exchange MVP

Are you sure this user in not in some nested group that belongs to the group that has rights to send?James Chong MCITP | EA | EMA; MCSE | M+, S+ Security+, Project+, ITIL msexchangetips.blogspot.com

Hi I can confirm he didn't expand the distribution list and he is not in a nested group either. Craig

Recently someone used reply all and the email was not restricted. Hi Craig, Did you also try to send a mail to the DG directly and what's the result? I cannot reproduce the issue. In other works, restricted users cannot "Reply All" to send mails to the DG. Could you please create a new DG to test again? Frank Wang TechNet Community Support

Recently someone used reply all and the email was not restricted. Hi Craig, Did you also try to send a mail to the DG directly and what's the result? I cannot reproduce the issue. In other works, restricted users cannot "Reply All" to send mails to the DG. Could you please create a new DG to test again? Frank Wang TechNet Community Support Hello I will set up a test DG on Monday and test this with some colleagues - Will let you know. Thanks Craig

Can you test voa owa/online mode to and verify via MT.Sukh

Hello I have set up a test DG with only myself as an authorised sender and no one else is able to reply to the email I sent out. Any ideas? Craig

Hmmm back to basics is this group universal?James Chong MCITP | EA | EMA; MCSE | M+, S+ Security+, Project+, ITIL msexchangetips.blogspot.com

Can you test voa owa/online mode to and verify via MT. And please check it in Outlook online/OWA as Sukh said.Frank Wang TechNet Community Support

what are the restrictions on the dynamic group? do you have an expansion server set or does it use any? Only 2007 exch in your env?Sukh

The dynamic group has restrcitions so only certain people are allowed to send to the list and it required authentication. It does have an expansion server set in the exchange console but not in AD. We're running a mixture of 2007 and 2010: The original email was sent by a 2010 user with permissions to the DG The reply came from a 2007 user without permissions to the DG The test DG and testing was all done on 2010 Could this be an issue between 2007/2010?

Did the same test with the actual dynamic DG using online mode via olk?Sukh

Yes I receive a message advising I cannot send to the original dynamic DG via web access, and it was the same with OLK disabled

so it all seems to be working with the test dynamic group as expected?Sukh

Yes. It's just the original email that someone was able to reply to Craig

Can you check if this happens again with the same user when the next email goes out? Maybe have a transport rule to drop and Cc another mailbox so you can stop it, if needed.Sukh

Hi I'll see if we can get them to test this Thanks