Software

Ask something
Discussion Locked

How do you restrict users external e-mai

0 helpful
5 replies

by rickaz

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
I am in a corporate environment using Windows 2000 servers and Exchange 2000 for e-mail. Clients are a mixture of Win98 and W2K Pro. According to corporate policy, users can have three e-mail access levels, 1) No access, 2) Internal mail only, or 3) Full access. I have been able to configure the no access and full access option, but do not see a feature in Exchange 2000 to limit users to just internal or local e-mail. I did locate an article in MSKB that provides instructions to setup a local e-mail address such as domain.org.local which prevents users from receiving external e-mail, however, it does seem to prevent users from sending to external address.

5 replies

by brasslet

This was pretty easy to accomplish in Ex 5.5. However Ex2k uses SMTP as the native transport. Fortunately there is a workaround:

(From http://www.swinc.com/resource/e2kfaq_sec5.htm)

5.3 Q: How can I prevent a user from sending and receiving Internet mail?

A: Follow the steps outlined below:

Create a group called InternalOnly.

Create a recipient policy that gives them a fake SMTP address. i.e. @fake.domain. Leave the X400 address alone so they can receive internal mail.

Drill down through Routing Groups > Group Name > Connectors > SMTP internet connector(s), choose its properties. Choose the Delivery Restrictions tab, and under "reject", add this group. Do this for each connector.

Follow the steps in Q277872, regardingConnector Restrictions.
[Now they can't use the SMTP connector(s) to send external mail]

by nettek

Unfortunately, we do not run Exchange 2000, but 5.5. I can tell you how we prevent users from having outside E-mail in 5.5. There must be something similar in 2000, so hopefully this will point you in the right direction.

To prevent users from receiving outside mail, we simply delete their SMTP address.

To prevent users from sending, we go to Connections -> Internet Mail Service -> Delivery Restrictions. We then place the user in the "Reject messages from" category. This causes the Internet mail service, which passes mail out to the Internet, to reject any outbound message from an internal user.

This discussion is closed to new replies.