Send As Permissions for a Mail-Enabled Security Group

[LEFT][B][URL="http://cbfive.com/blog/post/Send-As-Permissions-for-a-Mail-Enabled-Security-Group.aspx"]Send As Permissions for a Mail-Enabled Security Group[/URL][/B]

[B]by Chris Crandall[/B]


In this post I cover the steps on how to enable [B]Send As [/B]permissions for a security group that is mail-enabled. Since you want to limit the amount of security groups your users are members of, we will walk through the steps of allowing the members of a mail enabled security group to have [B]Send As [/B]permissions forthe group.
[INDENT] [I][B]Note: [/B]You need to make the group a security group to allow members send as permission using the steps below but, in most cases mail-enabled groups should be distribution groups and not security groups. The reason I make this statement is because the more security groups users are members of, the larger their token size. I have seen large companies take down Exchange and many, many other applications because they let their token size grow out of control. With that said there are times when you need to use a security group and for that reason I have included the steps below.[/I][/INDENT][INDENT] [I][B]Note: [/B]I used the Exchange 2007 VHD file has my lab that can be downloaded from [/I][URL="http://tinyurl.com/E2K7VHD"][I]http://tinyurl.com/E2K7VHD[/I][/URL][I]. [/I][/INDENT]1. I created a new security group called [B]z-IT [/B]and made the group a [B]Universal Security [/B]group
[URL="http://cbfive.com/blog/image.axd?picture=clip_image001_3.jpg"][IMG]http://cbfive.com/blog/image.axd?picture=clip_image001_thumb_3.jpg[/IMG][/URL]
2. Mail enabled the group through EMC
3. Add members to the group
[URL="http://cbfive.com/blog/image.axd?picture=clip_image002_5.jpg"][IMG]http://cbfive.com/blog/image.axd?picture=clip_image002_thumb_5.jpg[/IMG][/URL]
4. Open Active Directory Users and Computers and enable [B]Advance Features [/B]from the [B]View[/B] menu.
5. Bring up the P[B]roperties [/B]of the mail-enabled security group you want to add [B]Send As[/B] permission to.
6. Click on the [B]Security [/B]tab and add the mail-enabled security group. In this case, I will be adding [B]z-IT[/B] and providing [B]Send As [/B]permissions
[URL="http://cbfive.com/blog/image.axd?picture=clip_image003_3.jpg"][IMG]http://cbfive.com/blog/image.axd?picture=clip_image003_thumb_3.jpg[/IMG][/URL]
7. Now the waiting game starts, you can determine when the permissions will be added to the user accounts by navigating back to the [B]Security [/B]tab in the mail-enabled security groups and click [B]Advance [/B]> [B]Effective Permissions [/B]> and typing in a name of a member of the security group.
[URL="http://cbfive.com/blog/image.axd?picture=clip_image005_3.jpg"][IMG]http://cbfive.com/blog/image.axd?picture=clip_image005_thumb_3.jpg[/IMG][/URL]
8. When you see the permission of [B]Send As [/B]added to the account you should be good to go. So open [B]Outlook [/B]as a user account that has [B]Send As [/B]permissions
9. In [B]Outlook [/B]type the name of the mail-enabled security group you want to [B]Send As [/B]in the [B]To [/B]field
[URL="http://cbfive.com/blog/image.axd?picture=clip_image007_3.jpg"][IMG]http://cbfive.com/blog/image.axd?picture=clip_image007_thumb_3.jpg[/IMG][/URL]
10. Now the last step - let’s make sure the message got to Tom and we’ll take a look at the message headers.
[URL="http://cbfive.com/blog/image.axd?picture=clip_image008_2.jpg"][IMG]http://cbfive.com/blog/image.axd?picture=clip_image008_thumb_2.jpg[/IMG][/URL]
[URL="http://cbfive.com/blog/image.axd?picture=clip_image010_2.jpg"][IMG]http://cbfive.com/blog/image.axd?picture=clip_image010_thumb_2.jpg[/IMG][/URL]
That should do it. If you have any questions please let me know.
Happy Exchanging[/LEFT]