Disable SMTP E-mail Relay to External Recipients for Authenticated Users

Hello,

I want to configure a receive connector on Exchange 2013 to be used for sending e-mail using SMTP with authentication, but I don't want the connector to be used to send e-mail to external recipients (only to domain users addresses). How can I do this?

The reason i want to do this is to have a receive connector that allows external relay and one receive connector that doesn't allow external relay. This way, I can configure who can send e-mail to external recipients, based on the IP address of the client. But I want to use basic authentication for both connectors.

I used the below shell command to remove the "accept any recipient" permission for all Authenticated Users:
Get-ReceiveConnector "Receive_Connector_Name" | Remove-ADPermission -user "NT AUTHORITY\Authenticated users" -ExtendedRights "ms-Exch-SMTP-Accept-Any-Recipient"

However, I noticed that as soon as I execute the above command, the permission group "Exchange Users" is automatically removed from the connector and therefore authentication cannot be used anymore.

How can I configure this?

Thanks,
HarrrisAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Will SzymkowskiSenior Solution ArchitectCommented:
In the EAC have you tried to create a new Internal Receive Connector referencing the Interal Subnet of your network. Do not create a corresponding Front End Transport Rule and it will not leave the domain.

Will.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Exchange

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.