OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
RE: Exchange Information Store Security? Send As...

From: Glenn Pearl (glennpdatasync.com)
Date: Thu Jun 03 2004 - 09:20:46 CDT


As far as I know, the issue is that there is nothing on the received
email to indicate that it came from a different person/application than
the owner of the mailbox. So if Bob has 'Send As' privileges in Alice's
mailbox, an email Bob sends as Alice will show up as From: Alice.

'Send on behalf of', though, will tag the From line with 'Bob on behalf
of Alice'.

Hope it helps.

Regards,
Glenn Pearl

> -----Original Message-----
> From: A. Bluecoat [mailto:abluecoathotmail.com]
> Sent: Wednesday, June 02, 2004 4:23 PM
> To: focus-mssecurityfocus.com
> Subject: Exchange Information Store Security? Send As...
>
> Hey all,
> I have a user with an application and userID that needs Send As and
> Administer Information Store access on our Exchange servers. I've
found one
> doc that advises against granting Send As to a single user but nothing
real
> specific about why not - what are the risks? I understand it's best
> practice, but I've got pressure to give an example of "why not?" Any
help
> is appreciated. Thanks.
>
> _________________________________________________________________
> Getting married? Find great tips, tools and the latest trends at MSN
Life
> Events. http://lifeevents.msn.com/category.aspx?cid=married
>
>
>
------------------------------------------------------------------------
---
>
------------------------------------------------------------------------
---

---------------------------------------------------------------------------
---------------------------------------------------------------------------