Add-ADPermission “CN=Users,DC=domain,DC=com” –User domain\user_Account –ExtendedRights Send-As –InheritanceType Descendents –InheritedObjectType User please explain what are the attributes below 1 ) ExtendedRights 2 InheritanceType Descendents – 3) InheritedObjectType User

Hi, In Exchange server, inheritance describes the process by which the creation of an object causes the object to assume the permissions of its parent object by default. Generally speaking, inheritance simplifies the task of managing permission in your Exchange system as follows: 1. It eliminates the need to manually apply permissions to child objects as they are created. 2. It makes sure that the permissions attached to a parent object are applied consistently to all child objects. 3. When permissions on all objects in a container must be modified, you change the permissions on the container only one time. The objects inside the container inherit the changes automatically. For some Exchange objects, you can customize this inheritance. These objects are public folder trees, address lists, and mailbox stores. For these objects, you can specify that the child does not inherit permissions. Hope it helps. ThanksPlease remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Although we're talking about Exchange, the Add-ADPermission cmdlet is really just updating Access Control Entries (ACEs) on AD objects. In other words these are AD concepts we are talking about. For more information see: http://msdn.microsoft.com/en-us/library/aa374872(v=vs.85).aspxTony