XCLN: Post On Behalf Possible without Proper Permissions

ID: Q147485

The information in this article applies to:

Microsoft Exchange Windows 95/98 client, versions 4.0, 5.0
Microsoft Exchange Windows 3.x client, versions 4.0, 5.0
Microsoft Exchange Windows NT client, versions 4.0, 5.0

SYMPTOMS

When you use Microsoft Exchange Windows clients, it is possible to post a message to a Public Folder on behalf of another user, even without the proper permissions.

CAUSE

When a Public Folder is created, its Drag/Drop Posting option (on the Administration tab) defaults to Move/Copy. This allows any user to post a message to a Public Folder on behalf of another user. Postings can be made regardless of the Give Send On Behalf Of permissions.

This is by product design.

RESOLUTION

Changing the Public Folder's Drag/Drop Posting option to Forward will prevent posting on behalf of another user. A message will be displayed indicating you do not have permission to send as the user.

Additional query words:

Keywords : kbusage XCLN
Version : WINDOWS:4.0,5.0
Platform : WINDOWS
Issue type :