I need to give a security group relay permissions

[ouzojd]

I would like to set up a security group and give them permissions to relay mail on port 25 through the Exchange 2003 SP2 box.

The SMTP connector points to our external facing Mail Gateway running MailMarshal (this will only allow specific IPs to relay not AD security groups).

I would like to do this because one of our departments purchased an addon for an application that sends email to our customers using SMTP not MAPI and I dont want to give their workstations Static IPs because I would be forever changing them when they move pc etc.

I have looked under the properties of the Default SMTP Virtual Server properties, Access, Relay and can see a button captioned Users... but it is disabled, does anyone know if this is how I would do it and if so how do I enable this button?

Thanks

 

[WhoKilledKenny]

To enable the option, you just clear the check box for "Allow all computers which successfully authenticate to relay, regardless of the list above."

There are a number of ways to set this, but if you currently have no computers set-up to relay, the safest move is to choose the "Allow except the list below" radio button. Then uncheck the "Allow All..." box.

Jesse Hamrick

http://www.powershellpro.com

 

[ouzojd]

Thansk, I'll give it a go

 

[ouzojd]

Thanks Jesse, can I impose on you again. If I untick that box, will that stop other users sending email externally from outlook? I assume it wouldnt because my understanding (which I've probably made up a lot of myself) is that outlook will communicate with Exchange using Mapi so the users PC itself wouldnt require access to the SMTP connector?

Sorry, not the best understanding of Exchange - I might go get the MS Blue book after this.

Thanks.

 

[MarkArnold]

Nothing you do on that part of the SMTP interface will affect your Outlook users (assuming they're using MAPI rather than a POP/SMTP) ability to send mail outbound.

All we would advise is that you be careful and make sure that you get an smtp relay test done to ensure that you haven't over-opened yourself up. Do a quick google and you'll find enough engines out there to test your smtp for you.