• 1. London, UK
  • 2. New York, NY
  • 3. Sydney, Australia
  • 4. Melbourne, Australia
  • 5. Moscow, Russia
  • 6. Singapore
  • 7. Paris, France
  • 8. Chicago, IL
  • 9. Hong Kong
  • 10. Houston, TX

Wednesday, March 07, 2007

 

HOW TO: Assign SendAs right using Exchange shell

Posted by Bharat Suneja at 5:45 PM
In Exchange Server 2007, recipients are managed from the Exchange console or shell. The Exchange console does not show security tab for a recipient.

You can still use AD Users & Computers console to modify permissions on a recipient, as the documentation suggests ["How to Grant Send As Permissions for a Mailbox"] - and in this case, assign the Send As permission. In ADUC | select recipient | Properties | Security tab.

You can use the Exchange shell to assign SendAs right (e.g. on a Distribution Group) to a user:

Add-AdPermission "Group Name" -user "User Name" -AccessRights
extendedright -ExtendedRights "send as"

Documentation for Add-ADPermission

icon - updates.gif
11/29/2007:
Exchange Server 2007 SP1 includes a Manage Send As Permissions wizard, similar to the Full Mailbox Access wizard found in the RTM version.

1. In EMC, right-click a recipient | select Manage Send As Permission



2. In the Managed Send As Permission wizard, click the Add button to add the recipient which needs to be assigned Send As permission on the selected recipient

Labels: , , , ,

5 Comments:

September 18, 2007 12:45 PM
Blogger Pete said...

THis command worked great for me, thanks! I am, however, having difficulty piping users with this command... I.E... Get-user -organizationalunit NAMEOFOU | add-adpermission ....etc. It returns an error saying the command is not able to be pipelined. Do you know the correct usage of this command?

 
October 4, 2007 4:05 PM
Anonymous Jason said...

I had the same problem, I don't want to do one at a time, I want to add the sendas permission on a large group of users, I tried the get-user and then pipe add-adpermission but got an error

 
November 29, 2007 4:55 PM
Blogger Bharat Suneja said...

You need to do a Get-Mailbox instead of Get-User. You can constrain that based on -OrganizationalUnit or -Server parameters.

Alternatively, you can do this for members of a Distribution Group - Get-DistributionGroupMember "Dist Group Name"

You can further constrain Dist Group members to a particular recipient type:
Get-DistributionGroupMember "DG Name" | where {$_.RecipientType -eq "UserMailbox"}

Pipe the above command to Add-ADPermission.

 
November 16, 2008 2:47 PM
Anonymous hus said...

how to take back "send as" permisson on org. unit?

 
May 10, 2010 9:33 AM
Blogger Shane said...

Once this is all added in, it takes up to two hours for it to update on the server cache. Is there a way to force this?

 

Post a Comment

Links to this post:

Create a Link

<< Home