Hi all, Our company is running Exchange 2007, Support team need to have domain adminis right and this powerfull right is including 'Send as' permission. Now this admin can use the 'From' feild to send emails as someone else which may cause a secuirty concern, How can I prsevent it and let this user have admin right but no send as permission. thanks Keith

In Exchange 2007, domain admins do not have SEND AS permissions by default, in fact, its set to DENY, so if they do, someone has changed something.

Yes, send as permission will not grant to domain admins (by default). I suggest you go to check the send as permission for domain admins, make sure other administrators have not changed send as permission for domain admins. You can use this command to check for send as permission: Get-mailbox -resultsize unlimited| get-Adpermission -User domain admin | Where{ $_.ExtendedRights -like "Send-As"}| FT -wrap If you don't need domain admins have send as permission, you can use Remove-ADPermission to do that: Remove-ADPermission http://technet.microsoft.com/en-us/library/aa996048.aspx Thanks, Evan Liu TechNet Subscriber Support in forum If you have any feedback on our support, please contact tngfb@microsoft.com Evan Liu TechNet Community Support

Evan, Thank for suggestion. Can you tell me where to found "Send As" permission already set on Domain Admins right ?

Do you use this command to check? Get-mailbox -resultsize unlimited| get-Adpermission -User username| Where{ $_.ExtendedRights -like "Send-As"}| FT -wrap Thanks, Evan Liu TechNet Subscriber Support in forum If you have any feedback on our support, please contact tngfb@microsoft.com Evan Liu TechNet Community Support

Try the below links out and see if it resolve your problem. http://social.technet.microsoft.com/forums/en-US/exchangesvrgeneral/thread/c5efdfaf-33e4-4b35-8535-57aaaece401e http://www.networksteve.com/exchange/topic.php/How_do_I_remove_Domain_Admins_Send_As_settings_for_ALL_users/?TopicId=4916&Posts=6 Girishp