You cannot remove the send permission from a mailbox in Exchange 2000 or in Exchange 2003

In some scenarios, you may want to remove the send permission from some mailboxes. For example, you may want to remove the send permissions from some mailboxes in order to prevent a virus spread. However, you cannot remove the send permission from mailboxes in Microsoft Exchange.

If you want to remove send permissions for some mailboxes in Exchange, use one of the following methods to work around this issue.

Method 1: Change the storage limits to 0

1. On the Microsoft Exchange server, click Start, click Run, type dsa.msc in the Open box, and then click OK.
2. Locate the user account that you want to change, and then double-click the object to open the object properties.
3. On the Exchange General tab, click Storage Limits.
4. Make sure that the Use Mailbox store defaults check box is not selected.
5. Click to select the Prohibit send at (KB): check box, and then type 0 as the prohibit send value.
6. Click OK two times, and then close the Active Directory Users and Computers box.

Result The user cannot send any messages.

Method 2: Change the delivery restrictions to 1

1. On the Exchange server, click Start, click Run, type dsa.msc in the Open box, and then click OK.
2. Locate the user account that you want to change, and then double-click the object to open the object properties.
3. On the Exchange General tab, click Delivery Restrictions.
4. Click Maximum KB in Sending message size, and then type 1 as the Sending message size value.
5. Click OK two times, and then close the Active Directory Users and Computers box.

Result This stops the user from sending any messages that are larger than 1 kilobyte (KB). This size should cover about any virus-infected messages. However, setting the delivery restrictions to 0 is interpreted by transport as an unlimited quota.

Note Both of these two methods require that you set the Active Directory properties. However, the Active Directory properties cannot be applied immediately because the Information Store caches the Active Directory object.

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.

For more information, click the following article numbers to view the articles in the Microsoft Knowledge Base: