Hi, thereI need to run a cmdlet todeny user A"send as" or "send-on-behalf" onUser B'smailbox.What cmdlet I can use to do it.Any help is much appreciated.

From GUI check this out http://www.shudnow.net/2007/08/12/send-on-behalf-and-send-as/From Shell , User1 has full access rights to User2's mailbox, but User1 should not have permissions to the mailbox. You can use the Remove-MailboxPermission command to deny access to a mailbox as shown below. Remove-MailboxPermission ID User2 User User1 AccessRights Full Access Raj

Hi, For denying UserA send-as permission on UserB you can use this cmdlet: Remove-ADPermission -Identity UserB -User UserA -ExtendedRights Send-As -confirm:$false Also Correct value for Full Access is 'FullAccess' inRemove-MailboxPermission Cmdlet, not 'Full Access'. Regards, Laeeq Qazi|Snr Software Engineer(Exchange + Sharepoint + BES + DynamicsCRM) www.HostingController.com

Hi, there:My scenario is as below:Due to some reason, we have to grant User A"Full Access" permission on user B's mailbox, however we need to deny user A send-as or sned-on-behalf on user's B.Is this achievable?

Hi,Yes I think this is possible as these all (Send-as, Full-Access, Send-on-behalf) are separate permission, andsetting or denying one will not effect the other. Full Access is read only access to mailbox as I remember.Regards,Laeeq Qazi|Snr Software Engineer(Exchange + Sharepoint + BES + DynamicsCRM) www.HostingController.com

Hi, Base on my experience, in Exchange2007, users who are granted the Full Mailbox Access permission to a mailbox do not have Send As permission.You can use Add-ADPermission -Identity UserB -User UserA -ExtendedRights Send-As -confirm:$false to deny send as permission.If we do not configure the send on behalf of permission from Delivery Option,then user who have full access permission cannot send email on behalf of the manager.So if you do only grant full access mailbox permission, then I think you do not worry that user can send email as the manager or send on behalf of manager.We do not have cmdlt to deny delegation. We can check the delegation list from PublicDelegates attribute on user.Understanding Mailbox Permissionshttp://technet.microsoft.com/en-us/library/bb123879.aspx Regards,Xiu