Link to home
Start Free TrialLog in
Avatar of jmchristy
jmchristy

asked on

Grant permission to send e-mail for person outside my organization

I received a request, and I'm fairly certain I know the answer but wanted to double check.

An outside sales group wants to send e-mail as a person within our company.  This person does not work for our company but is temporarily contracted, this isn't possible without granting them a login to our OWA correct?
Avatar of Simon Butler (Sembee)
Simon Butler (Sembee)
Flag of United Kingdom of Great Britain and Northern Ireland image

Anyone can send email as a user in your environment. They just put fake information in to the headers - it is what spammers have been doing for the past 20 years.

However whether it will work depends on how your domain is setup. Do you have SPF records for example? This is technically spoofing, which is where most of the antispam measures have been concentrated recently. The most reliable way would be to have a login on your server so the email comes from your server, but it depends on what they are doing.

Simon.
ASKER CERTIFIED SOLUTION
Avatar of jrhelgeson
jrhelgeson
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of jmchristy
jmchristy

ASKER

Thanks for the responses!

jrhelgson - even with setting it up that way, the changes of the messages getting flagged as spam are pretty high aren't they?  Will that affect my regular e-mail being sent to and from my existing domain, after that SPF record is created?

I guess it's one way of doing it, nice to know that we'd be capable should I want to set that up.
Without SPF, a Sales/Marketing message is more likely to get flagged as spam.
Adding the SPF record indicates the mail is coming from an authorized sender, and is less likely to be flagged.

I would presume that you already have an SPF record configured for your domain, if not, create one that has both your IP address and the address of the vendor sending on your behalf.