XADM: "Send As" Functionality Does Not Work When DPA Is Used as Authentication Method

ID: Q221434

The information in this article applies to:

SYMPTOMS

When using Distributed Password Authentication (DPA) as the authentication method, "SendAs" functionality does not work correctly.

Steps to Reproduce the Problem

  1. Assign "SendAs" Permission for User1 to User2.


  2. Log on as User2 and make sure you are able to send as User1.


  3. Log on as User3 and send message using User1 in the From field. This message will also get delivered.


The above problem does not occur when Windows NT Lan Manager (NTLM) is used as authentication method.


CAUSE

This behavior is caused by a logic error in the code. The main difference between Windows NT and Membership security is that with Membership, one Windows NT account, the "broker," is mapped to all the Exchange mailboxes.


RESOLUTION

A supported fix that corrects this problem is now available from Microsoft, but it has not been fully regression tested and should be applied only to systems experiencing this specific problem. If you are not severely affected by this specific problem, Microsoft recommends that you wait for the next Microsoft Exchange Server version 5.5 service pack that contains this fix.

To resolve this problem immediately, contact Microsoft Product Support Services to obtain the fix. For a complete list of Microsoft Product Support Services phone numbers and information on support costs, please go to the following address on the World Wide Web:

http://www.microsoft.com/support/supportnet/overview/overview.asp
The English version of this fix should have the following file attributes or later:

Component: Information Store

File name Version
Gapi32.dll 5.5.2561.0
Mdbmsg.dll 5.5.2561.0
Store.exe 5.5.2561.0


NOTE: If this product was already installed on your computer when you purchased it from the Original Equipment Manufacturer (OEM) and you need this fix, please call the Pay Per Incident number listed on the above Web site. If you contact Microsoft to obtain this fix, and if it is determined that you only require the fix you requested, no fee will be charged. However, if you request additional technical support, and if your no-charge technical support period has expired, or if you are not eligible for standard no-charge technical support, you may be charged a non-refundable fee.

For more information about eligibility for no-charge technical support, see the following article in the Microsoft Knowledge Base:
Q154871 Determining If You Are Eligible for No-Charge Technical Support


STATUS

Microsoft has confirmed this to be a problem in Microsoft Exchange Server version 5.5.

Additional query words: SendAs DPA NTLM Authentication 


Keywords          : 
Version           : winnt:5.5
Platform          : winnt 
Issue type        : kbbug

Last Reviewed: June 28, 1999