Avatar of JimmyRiverside
JimmyRiverside
Flag for United States of America asked on

How can you view who sent a message with "Send As" permissions on a shared mailbox?

How can you view who sent a message with "Send As" permissions on a shared mailbox?  Is there a tool I can purchase?
Server SoftwareEmail Servers

Avatar of undefined
Last Comment
JimmyRiverside

8/22/2022 - Mon
Phillip Burton

It's possible that Filecats Professional can help. Assuming the email is in Microsoft Outlook, if you drag it to Windows Explorer, it is able to analyse the metadata contained in the email and give you a lot of information (see the link for information). I note that this information includes Sender [address] and Sent Representing  [address], so hopefully one of those will give you the information you request.

If the email is not in Microsoft Outlook, then please be a bit more specific.
ASKER CERTIFIED SOLUTION
Jian An Lim

Log in or sign up to see answer
Become an EE member today7-DAY FREE TRIAL
Members can start a 7-Day Free trial then enjoy unlimited access to the platform
Sign up - Free for 7 days
or
Learn why we charge membership fees
We get it - no one likes a content blocker. Take one extra minute and find out why we block content.
Not exactly the question you had in mind?
Sign up for an EE membership and get your own personalized solution. With an EE membership, you can ask unlimited troubleshooting, research, or opinion questions.
ask a question
JimmyRiverside

ASKER
We are running Exchange 2010 SP3.
Jian An Lim

sure.

exchange 2010 sp3 by default do not audit such.
you need to enable them manually as below
set-mailbox <sharedmailbox> -auditadmin sendas -auditdelegate sendas

to search them run,
search-mailboxauditlog <sharedmailbox> -showdetails

Again, if you need to audit more detail, you can as well, read the below for details example.
http://www.msexchange.org/articles-tutorials/exchange-server-2010/compliance-policies-archiving/auditing-mailbox-access.html
This is the best money I have ever spent. I cannot not tell you how many times these folks have saved my bacon. I learn so much from the contributors.
rwheeler23
JimmyRiverside

ASKER
I've requested that this question be deleted for the following reason:

Never mind I got the answer from another source.