I have Exchange Server 2003 and Active Directory 2003. I stumbled across the fact that I have permission to send-as anybody in the organization. I am a domain administrator.I started digging around in the permissions in the ExchangeSystemManagerand found on the security tab of my server object that domain admins have send-as permission so that must be how I am getting the permission. This permission is inherited but I can't find fromwhere. The parent object to the server is the domain and it doesn't have a security tab, only a delegate control option. Domain admins are not in thedelegate control list ofeither the domain or thetop level object.Where could my server be inheriting this permission from?

Get adsiedit and check the store and org level permissions http://technet2.microsoft.com/WindowsServer/en/Library/ebca3324-5427-471a-bc19-9aa1decd3d401033.mspx Configuration container of the domain, exchange servers.

I have adsiedit but I don't understand where you are telling me to look.

Configuration/Services/Microsoft Exchange/CN=ORGNAME/CN=Administrative Groups/CN=First Administrative Group/CN=Servers/CN=SERVERNAME/CN=STORAGEGROUPNAME its kind of like digging down through the registry or a file system. I'd print screen it for you, but it won't let me imbed an image.