Exchange Server users may be able to send a message as another user, even if they have not been granted the rights to do so.
↑ Back to the top
This issue may occur if there is a problem with user permissions. Any user account that is included in the local Administrators group on an Exchange 2000 server has the rights to send messages as another user.
↑ Back to the top
To resolve this issue, check the local Administrators group on the affected Exchange 2000 server. Remove any accounts or groups that should not be members of the local Administrators group.
NOTE: If the affected Exchange 2000 server is also a domain controller, verify the permissions set at the server level.
↑ Back to the top
Microsoft has confirmed that this is a problem in the Microsoft products that are listed at the beginning of this article.
↑ Back to the top