Microsoft KB Archive/277898

{|
 * width="100%"|

XADM: Specified Accounts Have Send As Permissions for All Users

 * }

Q277898

-

The information in this article applies to:


 * Microsoft Exchange 2000 Server

-

SUMMARY
This article describes how to remove default Send As permissions.

By default, the Administrators, Domain Admins, Enterprise Admins, and Account Operators groups have Send As permissions for all users. Administrators and Enterprise Admins group rights are inherited from the domain level. Account Operators and Domain Admins groups receive explicit rights based on the definition of the user object in the schema.

MORE INFORMATION
NOTE: You need to perform steps 1 through 5 in each domain that exists in the forest.

To remove these default Send As permissions:

Start Active Directory Users and Computers: Click Start, point to Programs, point to Administrative Tools, and then click Active Directory Users and Computers.

Click the domain in question, right-click the domain, and then click Properties.

Click the Security tab, and then click Advanced.

Click the Enterprise Admin group:

 Under Apply Onto, click User objects. Click Send As, click to clear the Allow check box, and then click OK.

Click Administrator (the group with &quot;special&quot; permissions):

 Under Apply Onto, click User objects. Click Send As, click to clear the Allow check box, and then click OK.

NOTE: Steps 6 through 12 require Schema Admin rights, and affect the creation of all new user objects in the forest.

Start Active Directory Schema Manager.

Click Classes, and then click User.

Open the properties of the user.

Click the Security tab.

Click the Account Operators group, click Send As, and then click to clear the Allow check box.

Click the Domain Admins group, click Send As, and then click to clear the Allow check box.

Click OK.

You need to manually or programmatically modify users that were already created to remove the default Send As permissions.

Additional query words:

Keywords :

Issue type : kbinfo

Technology :