Quote:
Originally Posted by dding0919
I was new to BES and was watching the toolkit for installation. BlackBerry. In its module 2 it applied "send as" permission 1) on the user object at domain level in AD 2) on Exchange server.
I thought "send as" is a permission to let you send email as someone else. If you did in one place why you have to do it again in another place? Appreatly, applying the permisison at different object gives different rights, at least to BES. So, does anyone know what difference it is when you apply "send as" on user object in AD than on Exhange server?
Thanks.
|
The reason you have to do this is because Microsoft changed how store.exe (Exchange Information Store process) interprets the "Send As" permission.
Until Microsoft changed this you would simply need to grant permissions within Exchange System Manager and that is all that would be needed. With certain patches applied to Exchange (I forget the slew of which ones change the "Send As" permission interpreted), you now have to not only apply the permissions within ESM, but also in AD.
Microsoft claims this was for security purposes and customers wanted this ... I can't see how / why this would be the case, but then I never looked into it.
Needless to say, BOTH are needed for proper functionality. (NOTE: this does not affect RECEIVE AS at all).