OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Michael Devlin (Michael.Devlinfigleaves.com)
Date: Thu Feb 28 2002 - 11:47:08 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    System: Windows 2000 SP2
                    Exchange 2000 SP2

    I have checked this on our live domain and a test domain.

    It appears that "account operators" group , by default has "Send As"
    permission on new users..... This is uninherited, so it will be set
    wherever the user is created within AD.

    This then means that anyone in an Exchange20000 environment who is an AO
    is able to send mail as anyone else.

    Could someone please confirm this....

    It also brings to light another question.... The default permissions set
    upon creation of a user are derived from where? Ie is there a
    permissions "template"?

    Regards

    Michael Devlin