Link to home
Start Free TrialLog in
Avatar of Alasdairb
Alasdairb

asked on

How can I restrict who sends messages to my journaling mailbox?

Hello,

I am new to Exchange 2013 and have enabled journaling. It appears to be working but I have spent several hours trying to work out how to implement message delivery restrictions so that only the Exchange System itself can send emails to the journal mailbox. I know it is not possible to do this in EMC but I cannot find the Command Shell command to do this.

Any help would be greatly appreciated.

Thank you

Alasdair Barclay
Avatar of Michael Best
Michael Best
Flag of Japan image

Have you hidden the journal mailbox?
If you hide it then it shouldn't be necessary to stop people from sending to it.
Give the mailbox a local only address and then it cannot happen in error in most cases.

I have implemented journaling 100s of times for clients throughout my career, I have never seen anyone send an email to it directly.

Simon.
Avatar of Alasdairb
Alasdairb

ASKER

My journaling mailbox currently has the two email addresses generated by email address policy
sjournaling@mydomain.com (default)
and
sjournaling@mydomain.local

Can I remove the mydomain.com address without breaking anything? Of course this would make it a little safer as no external senders could route to a *.local domain.

I have hidden it from the address book.

I found somewhere that in Exchange 2010 you could do this command to achieve the lockdown, do you agree with this, and if so is it still valid for 2013?

Set-Mailbox "Standard Journaling" -AcceptMessagesOnlyFromSendersOrMembers "Microsoft Exchange" -RequireSenderAuthenticationEnabled $true

Thanks

Alasdair
ASKER CERTIFIED SOLUTION
Avatar of Simon Butler (Sembee)
Simon Butler (Sembee)
Flag of United Kingdom of Great Britain and Northern Ireland image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Thanks Simon. If it's good enough for you it's good enough for me.

I'll remove the external email address.

Alasdair