ReceiveConnector - ADPermission
Hello,
I use Exchange 2007 and I followed the below procedure to prevent spams from my own domain:
http://exchangepedia.com/2008/09/how-to-prevent-annoying-spam-from-your-own-domain.html
I obtain the below result when running the shell command:
Get-ReceiveConnector “My Internet ReceiveConnector” | Get-ADPermission -user “NT AUTHORITY\Anonymous Logon” | where {$_.ExtendedRights -like “ms-exch-smtp-accept-authoritative-domain-sender”}
User : AUTORITE NT\ANONYMOUS LOGON
Identity : EDGE01\Default internal receive connector EDGE01
Deny : False
AccessRights : {ExtendedRight}
ExtendedRights : {ms-Exch-SMTP-Accept-Authoritative-Domain-Sender}
IsInherited : False
Properties :
ChildObjectTypes :
InheritedObjectType :
InheritanceType : All
I would like to know if there is any way to know if ANONYMOUS User in my company are in used.
And if a rool back is possible after I Remove-ADPermission by running that command:
Get-ReceiveConnector “My Internet ReceiveConnector” | Get-ADPermission -user “NT AUTHORITY\Anonymous Logon” | where {$_.ExtendedRights -like “ms-exch-smtp-accept-authoritative-domain-sender”} | Add-ADPermission
Thanks,
Graig
October 6th, 2010 6:29am
Hi,
Of course, you can get that permission back after running the above command.
To check whether the Anonymous Users are used in the company, you can check the IP address in the Protocol Logging on the Receive Connector.
Thanks
AllenAllen Song
Free Windows Admin Tool Kit Click here and download it now
October 11th, 2010 10:59pm