Exchange 2010：如何在没有“代理发送”权限的情况下以另一个用户身份发送电子邮件 [英] Exchange 2010: how can an user send email as another user without Send As permission

问题描述

我今天刚刚注意到这个问题。用户A可以像其他一些用户（不是所有用户）一样发送电子邮件，而不是"发送为"，"完全许可"。 （即同事可以向我发送电子邮件作为我的帐户。我确定他没有我帐户的许可。

有人知道Exchange 2010中是否存在已知问题SP1 RU5？ 

我还在努力解决这个问题。

谢谢，

---

JohnnyW2012

解决方案

我会针对相关邮箱运行Get-ADPermission cmdlet。

get-mailbox 你@ yourdomain。 com | Get-ADPermission | fl

是否显示其他用户具有任何类型的权限？

您可以尝试Get-MailboxPermissions我认为SendAs会与Get-ADPermissions相关联。

*

我认为你可以用这样的方式挑出有问题的用户：

获取邮箱你@ yourdomain.com | Get-ADPermission | where {

_。User-like * bob *}

或{

_。User-like" * bob *"}

不是100％肯定那里的语法而且我不接近要测试的机器。

*

如果在其他地方（在Active Directory中的对象属性上）授予了非常精确的权限，那么这些权限很多都不会反映在GUI中（我说可能不会）。

I just noticed this issue today. User A can send email as some other users (not all users) without "Send As", "Full permission". (i.e. A colleague can send an email as my account to me. I'm sure he does not have permission on my account.

Does anyone know if there is an known issue in Exchange 2010 SP1 RU5? 

I'm still working on the cause.

Thank you,

---

JohnnyW2012

解决方案

I would run the Get-ADPermission cmdlet against the mailbox in question.

get-mailbox [e-mail] | Get-ADPermission | fl

Is the other user shown with any sort of permissions?

You can try Get-MailboxPermissions too.

I believe SendAs would be associated with Get-ADPermissions.

*

I think you can single out the user in question with something like this:

get-mailbox [e-mail] | Get-ADPermission | where {

_.User -like *bob*}

Or {

_.User -like "*bob*"}

Not 100% sure about the syntax there and am not close to a machine to test.

*

If very precise permissions were granted elsewhere (on the object properties in Active Directory perhaps) those permissions many not be reflected in the GUI (I say may not).

这篇关于Exchange 2010：如何在没有“代理发送”权限的情况下以另一个用户身份发送电子邮件的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！