Prevent Exchange 2003 users from sending or receiving Internet mail

To make this happen, you first need to prevent Exchange users from sending e-mail to the Internet:

1. Create a new mail-enabled group in Exchange that will be used to identify all users who have this restriction.

2. Add any users to have incoming mail restricted to this group.

3. Create a new SMTP Connector on the Exchange server and associate it with the appropriate Exchange server.

4. Under the Delivery Restrictions tab of the connector's Properties, add the created group to the "Reject messages from:" section.

Now, you need to configure Exchange to prohibit users from receiving Internet-based e-mail:

1. In Active Directory Users and Computers, go to the Properties page for the group (or individual user) for which you want to restrict e-mail access.

2. Under the Exchange General tab, click Delivery Restrictions.

3. Check the box labeled "Accept messages: From authenticated users only."

4. Click OK to close all dialogs.

About the author: Serdar Yegulalp is editor of the Windows Power Users Newsletter and a regular contributor to SearchExchange.com.

I created a ...

Digg This!     StumbleUpon     Del.icio.us

RELATED CONTENT Exchange Security Tips How to install Forefront Security for Exchange Server Is full email encryption the solution to Exchange security? Lock down direct file access and protect OWA users Controlling spam in Exchange 2007 at the edge transport server level When to use a self-signed certificate with Exchange Server 2007 Obtaining and verifying SSL certificates in Exchange Server How file-level antivirus software can harm your Exchange Server Understanding Exchange Server 2007 SP1 mobile security settings Which ActiveSync authentication method is best for your mobile device? Why you should secure Exchange 2007 using administrative policies Exchange Server Administration Tips Remove Exchange 2003 objects from AD to install Exchange 2010 Don'ts for optimal Exchange 2007 mailbox server efficiency Is your Exchange 2007 hub transport server healthy? Avoid Outlook 2007 performance issues during repairs Developing an Exchange 2007 server role DR plan How DSAccess service improves Exchange Server 2007 reliability An introduction to the Exchange Remote Connectivity Analyzer tool Monitor Exchange 2007 with disk- and RPC-related counters DPM 2007 replica inconsistencies in Exchange databases Track Exchange 2007 mailbox server health using database counters Microsoft Exchange Server User Settings Email issues after configuring hosted Exchange server on laptop Control Outlook 2007 in cached mode settings with group policies Group policy settings for Outlook 2007 in cached mode Restrict access to Outlook Web Access via Exchange System Manager How to custom-configure a Microsoft Outlook 2007 install using OCT Expand Microsoft Outlook email rules with the Auto-Mate add-on tool Exchange 2007 out-of-office (OOF) feature adds usability and security Managing Microsoft Outlook search folder functionality Back up and restore Microsoft Outlook settings Managing Microsoft Outlook's AutoComplete option

RELATED RESOURCES 2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems Search Bitpipe.com for the latest white papers and business webcasts Whatis.com, the online computer dictionary

security group and mail-enabled it. I assigned the users that I wanted to have only internal mail capability to this group and followed all the other steps in the tip. It didn't prevent outgoing OR incoming email to/from the Internet. Please advise.
—Pouya M.

******************************************

I did a little more digging and found that there are a couple of Microsoft Knowledge Base articles that deal with the possibility that connector delivery restrictions might not work properly or connector restrictions might be disabled. It looks like both of these articles talk about the same registry setting, but talk about it in slightly different contexts.
—Serdar Yegulalp, tip author

Do you have comments on this tip? Let us know.

Related information from SearchExchange.com:

Please let others know how useful this tip is via the rating scale below. Do you have a useful Exchange Server or Microsoft Outlook tip, timesaver or workaround to share? Submit it to our tip contest and you could win a prize.

Rate this Tip To rate tips, you must be a member of SearchExchange.com. Register now to start rating these tips. Log in if you are already a member. DISCLAIMER: Our Tips Exchange is a forum for you to share technical advice and expertise with your peers and to learn from other enterprise IT professionals. TechTarget provides the infrastructure to facilitate this sharing of information. However, we cannot guarantee the accuracy or validity of the material submitted. You agree that your use of the Ask The Expert services and your reliance on any questions, answers, information or other materials received through this Web site is at your own risk.