Hi everyone,

I have the following issue in our Exchange 2013 with Domain controller 2012 environment.

If i configure the receive connector (Default FrontEnd servername) to accept Exchange server permission group (or every group except Exchange users ), so no user in  active directory Should not be able use smtp,Imap in outlook.

this is true.

but when add a user in domain admins group or enetrprise admins group, that user can connect to smtp exchange with outlook and send e-mail without problem.but permission in  receive connector (Default FrontEnd)  to accept Exchange users permission group not set.

How is this possible

• Edited by offline update malware inspection TMG Friday, June 26, 2015 8:14 AM

Hello,

What else authentication methods do you select. Exchange Server authentication is to authenticate by using an Exchange authentication mechanism, such as TLS direct trust or Kerberos through TLS.

Thanks,

Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com

Hello

If i don't select any authentication methods still domain admins group and enterprise admin groups can be authenticate via outlook and smtp.

The main problem is domain admins group and enterprise admins group have different permission and more than a normal user in receive connector(smtp 25) of exchange server.