"From" Mail option

[Igymann]

Hello,

We just found out that users can click on the "from" option and type anyones name and it will send it just like if that person did.

How can we block that? Besides the obvious sending on behalf options?

 

[Pinheadh]

Have you checked under the security TAB in AD (not 'Exchange Advanced') the actual security TAB. Lots of options in there "Send as" will be the one you are looking for. Check that 'domain users' or 'all users' or another global group don't have those permissions set by default.
Thanks,
Tim.

 

[Zelandakh]

check the delegation / permissions in ESM. Most of the time you'll find a group in there that doesn't belong.