Prevent Exchange 2003 users from sending or receiving Internet mail

VIEW MEMBER FEEDACK TO THIS EXCHANGE TIP

To make this happen, you first need to prevent Exchange users from sending e-mail to the Internet:

1. Create a new mail-enabled group in Exchange that will be used to identify all users who have this restriction.

2. Add any users to have incoming mail restricted to this group.

3. Create a new SMTP Connector on the Exchange server and associate it with the appropriate Exchange server.

4. Under the Delivery Restrictions tab of the connector's Properties, add the created group to the "Reject messages from:" section.

Now, you need to configure Exchange to prohibit users from receiving Internet-based e-mail:

1. In Active Directory Users and Computers, go to the Properties page for the group (or individual user) for which you want to restrict e-mail access.

2. Under the Exchange General tab, click Delivery Restrictions.

3. Check the box labeled "Accept messages: From authenticated users only."

4. Click OK to close all dialogs.

About the author: Serdar Yegulalp is editor of the Windows Power Users Newsletter and a regular contributor to SearchExchange.com.

I created a security group and mail-enabled it. I assigned the users that I wanted to have only internal mail capability to this group and followed all the other steps in the tip. It didn't prevent outgoing OR incoming email to/from the Internet. Please advise.
—Pouya M.

******************************************

I did a little more digging and found that there are a couple of Microsoft Knowledge Base articles that deal with the possibility that connector delivery restrictions might not work properly or connector restrictions might be disabled. It looks like both of these articles talk about the same registry setting, but talk about it in slightly different contexts.
—Serdar Yegulalp, tip author

Do you have comments on this tip? Let us know.

Related information from SearchExchange.com:

Please let others know how useful this tip is via the rating scale below. Do you have a useful Exchange Server or Microsoft Outlook tip, timesaver or workaround to share? Submit it to our tip contest and you could win a prize.

Rate this Tip To rate tips, you must be a member of SearchExchange.com. Register now to start rating these tips. Log in if you are already a member. Digg This!     StumbleUpon     Del.icio.us    RELATED CONTENT Exchange Security Tips Use the OWA Admin tool to 'segment' Outlook Web Access 2003 features Why are .PST files a security threat to Exchange Server mailboxes? OWA won't load after applying Exchange 2007 SP1 security patch Minimize remote and mobile Outlook Web Access (OWA) security risks Grant or deny permissions to access a user's Exchange 2007 mailbox Create a global Safe Senders List in Exchange 2007 to filter spam Migrating antispam settings from Exchange 2003 to Exchange 2007 Deploying ISA Server as a firewall for Exchange Server mobile devices How to customize OWA authentication logon in Exchange Server 2003 Exchange 2007 out-of-office (OOF) feature adds usability and security Exchange Server Administration Tips Microsoft Exchange Server backup method pros and cons Migrating .PST files to an Exchange Server information store Virtualizing Exchange Server 2007 with Microsoft's Hyper-V Configure SMTP connection limits in Exchange Server 2003 and SBS Five Microsoft Exchange Server backup worst practices How to export Global Address List data to Microsoft Office Access Create a group policy to prevent .PST file storage in Exchange 2007 Synchronizing the Windows Mobile emulator with Exchange Server 2007 Considerations for virtualizing an Exchange Server environment Why are .PST files a security threat to Exchange Server mailboxes? Microsoft Exchange Server User Settings Expand Microsoft Outlook email rules with the Auto-Mate add-on tool Exchange 2007 out-of-office (OOF) feature adds usability and security Managing Microsoft Outlook search folder functionality Back up and restore Microsoft Outlook settings Managing Microsoft Outlook's AutoComplete option Can an admin create out-of-office messages from ESM or AD? Change language settings for out-of-office messages Let users update their own AD information with the Active Directory Update tool How to use Microsoft Outlook 2007's Quick Parts feature Troubleshooting a corrupt Microsoft Outlook profile after a Windows Vista upgrade RELATED RESOURCES 2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems Search Bitpipe.com for the latest white papers and business webcasts Whatis.com, the online computer dictionary DISCLAIMER: Our Tips Exchange is a forum for you to share technical advice and expertise with your peers and to learn from other enterprise IT professionals. TechTarget provides the infrastructure to facilitate this sharing of information. However, we cannot guarantee the accuracy or validity of the material submitted. You agree that your use of the Ask The Expert services and your reliance on any questions, answers, information or other materials received through this Web site is at your own risk.