Hello! Today we have the "automatic reply" function disabled on our default domain. However, we have some mailboxes that needs to be able to create an auto reply with some standard text like we have received your email etc. Is there a way to enable this for some users without enabling auto reply on our default domain? Or is it safe to active auto reply for all users? I have always been told that it's a security best practice to disable it on the default domain and control it on a per domain basis (which is impossible for the mailboxes above since we don't know the senders)

So one thing you can do is allow auto-replies to the internet ( yes, bad idea!), then create a hub transport rule that drops all messages of message type "Automatic Reply" except from a group ( and that group being a group containing those mailboxes that are allowed) Alternatively, create a hub transport rule that sends are rejection message that you design when sent to those mailboxes. From a user standpoint, the rejection message is not as pretty though, but that would help prevent a mail loop.

Thanks Andy! I will give the first option a try. One question though, how to distinguish a regular e-mail from an auto reply when configuring the rule?

Thanks Andy! I will give the first option a try. One question though, how to distinguish a regular e-mail from an auto reply when configuring the rule? Check the MessageType option when creating the rule (when the message type is...) and from the pulldown menu set to Automatic Reply.