Preventing authorized users from sending SPAM in Exchange 2007

Posted on 2008-11-17
Last Modified: 2013-11-30
The company I work for is a high school. Currently we have only been giving e-mail addresses to Faculty and Staff, but today I've been asked if Students can also start having an exchange mailbox. Our students are VERY savy and if there is a way for them to exploit something it will only be a matter of time before they figure it out :)

My first concern is them sending out SPAM mail. Our Exchange server is setup that outgoing mail can only be sent via authorized ( AD credential ) users, but students will be authorized users. Whats the best way for me to keep something like this from happening?
Question by:fgarufijr
    LVL 9

    Accepted Solution

    in exchange you can limit the number of recipients that a message can have.
    using this you can limit the effectivness of spam.

    you can use an outsourced solution to relay your outgoing email thru. is one option.  it would also help with inbound spam if you were so interested.

    i would also suggest a strict policy that a student can loose their email acess of abuse is detected.
    LVL 3

    Assisted Solution

    In Exchange Management Console, under Organization Configuration, Hub Transport node, under the General tab of Transport setting properties, you can specify the maximum number of recipients. Set it to as low as possible - however, some students may have group project where some number of people are involved.

    I think the best option is to rely on a third party program, as great as Exchange 2007 is, better management can be achieved using third party programs. I'd suggest MailMarshal for Exchange, its free to try.

    Author Comment

    It would seem MailMarshal is only for Exchange 2k and 2k3. I cant find anywhere on their site where it says it supports 2k7. But I appreciate the information...

    I'm thinking that limiting the amount of mail allowed to send out per hour might work best, instead of having to come up to speed on another 3rd party program. If it does get out of control I can always look into something then.

    I'm still up for suggestions though :)
    LVL 3

    Expert Comment

    MailMarshal 5.3.1 is released today which have Exchange 2007 support. Good luck - its really powerful

    Featured Post

    Do You Know the 4 Main Threat Actor Types?

    Do you know the main threat actor types? Most attackers fall into one of four categories, each with their own favored tactics, techniques, and procedures.

    Join & Write a Comment

    Easy CSR creation in Exchange 2007,2010 and 2013
    Not sure what the best email signature size is? Are you worried about email signature image size? Follow this best practice guide.
    In this video we show how to create a Resource Mailbox in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: Navigate to the Recipients >> Resources tab.: "Recipients" is our default selection …
    In this video we show how to create a mailbox database in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Servers >> Data…

    755 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    22 Experts available now in Live!

    Get 1:1 Help Now