timbo343 Posted August 9, 2017 Posted August 9, 2017 We have to have a service account listed as a SendAs permission for each mail account so users are able to scan to their email accounts via our MFDs. This isn't an issue as ive created a group on O365 that has this service account in. The issue is, when new accounts are created, the powershell script would have to be ran each time. Is there a way to set this group as a default sendas group so when accounts are created, this group is automatically added to the sendas permission. Somehow i managed to do a similar thing on our OnPrem but i cannot for the life of me remember how i set it.
Sylv3r Posted August 9, 2017 Posted August 9, 2017 What MFD's are you using? I couldn't get our Canon machines up and running with Office365 so setup a gmail account just for our MFD's for staff to scan to e-mail.
timbo343 Posted August 9, 2017 Author Posted August 9, 2017 What MFD's are you using? I couldn't get our Canon machines up and running with Office365 so setup a gmail account just for our MFD's for staff to scan to e-mail. We have the toshiba eStudio range. After a bit of testing i couldn't understand why only a 2 accounts worked with each other (the network admin account and my account), then found the SendAs setting in O365 which i get on the admin account and my account. Adding a service account to the SendAs permission on my tech's account got this working however i dont like the idea of having to run something like: Get-Recipient | Where-Object {($_.RecipientType -eq “MailUser”) -or ($_.RecipientType -eq “UserMailbox”)} | Add-RecipientPermission -AccessRights SendAs -Trustee “email.address” each time a user is created or on a schedule task. The settings on our Toshibas are: SMTP CLIENT: Enable SMTP Client: Enable Enable SSL: Accept All certificates without CA SSL/TLS: STARTTLS SMTP Server Address: smtp.office365.com POP Before SMTP: Disable Authentication: Auto Login Name: *Email address* Max Email: 30mb Port Number: 25 I may have to look at a gmail account just for this *sigh*
MatthewL Posted August 9, 2017 Posted August 9, 2017 I used powershell script before but I'm sure you can set a connector up on Office 365 that allows this to work without the need for doing the permissions. I was looking into it but never did get any further.
timbo343 Posted August 9, 2017 Author Posted August 9, 2017 I used powershell script before but I'm sure you can set a connector up on Office 365 that allows this to work without the need for doing the permissions. I was looking into it but never did get any further. hmm i wonder if the following would work: Exchange admin center > Mail Flow > Connectors > New connector From: Partner Organisation To: Office 365 -NEXT Name: **What ever** Description: ** add information** - Next User the sender's IP Address - Next Add IP address of our external IP address - Next Tick "Reject email messages if they aren't sent over TLS" - Next - Save
Cache Posted August 9, 2017 Posted August 9, 2017 Is there any reason you can't just have the photocopier email as photocopier@domain and then just have an account with permissions to send as that?
timbo343 Posted August 9, 2017 Author Posted August 9, 2017 (edited) Is there any reason you can't just have the photocopier email as photocopier@domain and then just have an account with permissions to send as that? Thats what i have got. Ive got mfdscan@.... and added this to group called SendAs however either the user account or group has to be added to every mail account. When a user logs into the MFD and scans to their mailbox, they are essentially sending an email from themself to themself hence why the service account needs to be in every account as SendAs. Edited August 9, 2017 by timbo343
timbo343 Posted August 10, 2017 Author Posted August 10, 2017 hmm i wonder if the following would work: Exchange admin center > Mail Flow > Connectors > New connector From: Partner Organisation To: Office 365 -NEXT Name: **What ever** Description: ** add information** - Next User the sender's IP Address - Next Add IP address of our external IP address - Next Tick "Reject email messages if they aren't sent over TLS" - Next - Save This doesn't work, looks like i'm going to have a script that is ran at various times so that all users get the SendAs group.
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now