Error in workflow sending email: "You cannot send email as the selected user."

I have a workflow which sends notification email from a dedicated CRM account, eg. email reminder when a contract is reaching its expiry date.

The following error occurred when executing the workflow:

"You cannot send email as the selected user. The selected user has not allowed this or you do not have sufficient privileges to do so."

To resolve the error, there are two things to check:

a. The dedicated CRM account must allow other users to send email on its behalf. Login to CRM webclient as the user, Go to Options -> Email tab, then tick the option 'Allow other Microsoft Dynamics CRM users to send email on your behalf.'

b. Any other users executing the workflow must be given the privilege to send email on behalf of other user. Go to Security Role, under Business Management, tick the 'Send Email on behalf of other user'. 

However, I feel reluctant to allow most, if not all, users the ability to send email on behalf of other users as it opens up the possibility to send unsolicited emails on behalf of other users from within CRM, although the functionality is still constrained by the other option described in point a. above.

Alternate solution is to use Queue:

a. Create a new Queue, enter the email address, and set the inbound/outbound email processing method.

b. Reconfigure the workflow to send email from the Queue, rather than the dedicated crm account.

c. Ensure that users have sufficient access to Queue in Security Role.

While the above solution does not prevent other users from sending unsolicited email from the Queue, I feel it is a more elegant solution where the option to send email on other's behalf can be given to the users whom truly require it. Also, no CRM user CAL is required for using Queue as opposed to User, although the dedicated CRM account would most likely still be required for other purpose.