Deny Users the ability to send external email 1

[pgaliardo]

We have certain users that should only be allowed to email within our organization. We set up a group in Active Directory "No Internet Mail" and we set them up with bogus smtp addresses. This used to work fine in Exchange 2000. However, in Exchange 2007, they still can't receive external mail (because of the bogus SMTP address), but it seems they can still send to the outside world. I am assuming I need to deny the security group access to the default SMTP Send Connector. Can someone point me in the direction to accomplish this? Or if you have better suggestions as to how this should be implemented in Exchange 2007, I would appreciate it.

Thanks.

 

[SimonAndersen]

Hi Pgaliardo

What you could do is to create a new Transport rule from Organizational Configuration --> Hub Transport.

From here, you can select the two conditions named "From <people>" and the "Sent to users <Outside> the organization". In the condition "From <people>" you could then add the users that should not be allowed to sent mails to outside the organization.

In actions, you should then mark "Silently drop the message" or whatever applies best to your situation, you could go with "Redirect message" or other stuff as well, for monitoring.

 

[pgaliardo]

Thanks Simon - That works!