While doing a security audit on the Exchange Server I came under one scenario if the user has full mailbox rights he is by default given access to Send As the mailbox Owner . There is a Microsoft Kb Hotfix for the same.
"A fix has been released that changes the behavior of the "Full Mailbox Access" feature in Microsoft Exchange Server 2003. Prior to this change, any user with the “Full Mailbox Access” permission for a mailbox also had the ability to “Send As” the mailbox owner. "
Microsoft Kb : http://support.microsoft.com/kb/89594
Sunday, January 17, 2010
Subscribe to:
Post Comments (Atom)
No comments:
Post a Comment