New Exchange fixes may disrupt Blackberry, Goodlink and other services

re: New Exchange fixes may disrupt Blackberry, Goodlink and other services

Abby — Fri, 28 Apr 2006 20:27:25 GMT

Will this Effect If we assign Send As and Receive As Permission at the Exchange Org Level also ?

/var/log » Exchange “fixes”

/var/log » Exchange “fixes” — Fri, 28 Apr 2006 22:35:50 GMT

PingBack from http://www.varlog.us/2006/04/28/exchange-fixes/

re: New Exchange fixes may disrupt Blackberry, Goodlink and other services

Brian.Kronberg — Fri, 28 Apr 2006 23:19:54 GMT

ADModify.Net can also grant this access and it is much easier to use than the script if you wish to select a subset of users with an LDAP query or by OU. The setting is on the Mailbox Rights tab, the first item.

Otherwise, thanks for bringing attention to the issue!

Permissions Changes in Exchange 2003 SP2

Gerod Serafin's WebLog — Fri, 28 Apr 2006 23:54:04 GMT

Under the heading of: "You may already be aware of this, but we wanted to make sure..."
Some of our...

re: New Exchange fixes may disrupt Blackberry, Goodlink and other services

Mike Lee — Sat, 29 Apr 2006 01:13:53 GMT

@Abby,
No, you can't grant "Send As" on Exchange servers or the organization object to get the same effect as granting "Send As" on user accounts.

For the Exchange organization and server objects, "Receive As" is the functional equivalent of "Full Mailbox Access." Getting this permission on a database gives you access to all the contents of the database--including mailboxes and folders.

So you'd think "Send As" on a database or on the whole organization would give you rights to send as any mailbox in a database, but it doesn't. It actually gives you the right to send as *the database object* (lot of good that does you).

Send As must be granted on the user account or on a container that holds user accounts, not on a database or server.

To grant Send As for all users inside a container, you must use the Advanced button on the Security properties for the container. From there, you can grant an account Send As for all User Objects in the container.

So, some of you haven't listened to the advice...

TenBrink Tech — Sat, 29 Apr 2006 01:30:55 GMT

&hellip;and now PSS is likely getting slammed by phone calls.
For the last time, you Exchange Admin...

Lots of Cool Happenings Since January

Is this thing on? — Sun, 30 Apr 2006 18:44:05 GMT

Well, although I started this blog with the best intentions, I have been very bad at keeping it regular.&nbsp;...

Henrik Walther Blog » Blog Archive » New Exchange fixes may disrupt Blackberry, Goodlink and other services

Sun, 30 Apr 2006 22:52:30 GMT

PingBack from http://blogs.msexchange.org/walther/2006/04/30/new-exchange-fixes-may-disrupt-blackberry-goodlink-and-other-services/

Exchange Server 2003: pozor na pr

Martin Pavlis - pavlis.net — Tue, 02 May 2006 12:27:33 GMT

Exchange Server 2003: pozor na práva!

TechNet Blog CZ, SK — Tue, 02 May 2006 12:30:43 GMT

Pozor na změnu v Microsoft Exchange 2003! Pokud jste používali přidělení práv na poštovní schránce v...

Security Infor for Exchange Admins

TenBrink Tech — Thu, 04 May 2006 21:16:41 GMT

From the May advance notification&hellip;
&bull; One Microsoft Security Bulletin affecting Microsoft...

Weekend reading

subject: exchange — Fri, 05 May 2006 20:02:33 GMT

Since there was no "weekend reading" last week, today's list is abnormally long. If you don't have the...

Exchange-palvelimen toiminnallisesta muutoksesta

Microsoft-tietoturvan weblogi — Mon, 08 May 2006 09:01:33 GMT

Huomenillalla julkaistavista tietoturvapäivityksistä yksi koskee Exchange-sähköpostipalvelinta, ja kuten...

re: New Exchange fixes may disrupt Blackberry, Goodlink and other services

Jason Shaw — Mon, 08 May 2006 16:33:26 GMT

Any reason you can't just Delegate Authority to your User OU's for the GL/BB service accounts and move on with your life? Seems simple enough to me. No need to run a script.

If someone knows why this won't work, PLEASE tell me.

re: New Exchange fixes may disrupt Blackberry, Goodlink and other services

Mike Lee — Tue, 09 May 2006 05:05:34 GMT

@Jason

Yes, Jason, you can delegate by container or domain to grant the appropriate Send As by inheritance. Due to popular demand, KB 912918 has been revised now to include specific instructions for doing this.

I still stand by my caveat that this is not an optimal solution because it may grant permissions for users you didn't intend and you may lose permissions when months later you move an account and forget that the Send As was granted by container inheritance.

But it definitely works as a quick way to get the job done.

New Exchange fixes may disrupt Blackberry, Goodlink and other services

re: New Exchange fixes may disrupt Blackberry, Goodlink and other services

/var/log » Exchange “fixes”

re: New Exchange fixes may disrupt Blackberry, Goodlink and other services

Permissions Changes in Exchange 2003 SP2

re: New Exchange fixes may disrupt Blackberry, Goodlink and other services

So, some of you haven't listened to the advice...

Lots of Cool Happenings Since January

Henrik Walther Blog » Blog Archive » New Exchange fixes may disrupt Blackberry, Goodlink and other services

Exchange Server 2003: pozor na pr

Exchange Server 2003: pozor na pr&#225;va!

Security Infor for Exchange Admins

Weekend reading

Exchange-palvelimen toiminnallisesta muutoksesta

re: New Exchange fixes may disrupt Blackberry, Goodlink and other services

re: New Exchange fixes may disrupt Blackberry, Goodlink and other services

Exchange Server 2003: pozor na práva!