troubleshooting Question

I need a better way to control email delivery restrictions for limited employee accounts

Avatar of Michael Campellone
Michael CampelloneFlag for United States of America asked on
Microsoft OfficeExchange
9 Comments2 Solutions85 ViewsLast Modified:
At our bank, we have two domains; one is hosted through Office 365 and we utilize Exchange Online as part of the package.  However, on our other domain, we have an on-premises Exchange Server 2010 running on Server 2008 Standard.  This server will be retired by the new year, and the domain/Exchange accounts will then also be migrated to 365.  In the meantime, however, I have a confusing/cumbersome configuration question, and my query is only concerning the old on-premises Exchange 2010 server.

As part of our job requirements and under stringent compliance rules (being a bank that handles large cash transactions), we have a good amount of the workforce that has email, but is *ONLY ALLOWED* to receive email from all internal users on our domain, and a specific list of external domains (for health insurance emails, payroll and benefits companies, outside card processors etc.)  - and aside from all internal users, and this specific list of external email addresses, they are not allowed to receive any other email.  This is not by my design, but is relegated by requirements set forth by the board of directors at this bank.  I am not happy lol...

This affects a large number of mailboxes.  When I select the typical "all senders must be authenticated", this allows all internal email naturally, however no external addresses of any kind.  I should also mention, that I created an Exchange mail contact entry for each of these external senders.  Even then, those external emails never show up.

So far, the only way I have managed to get this to work, is under each of the mailboxes, I set up delivery restrictions by selecting "only senders in the following list", and then in the provided selection box, I select all of the email entries, as well as the external mail contact entries.  This does work, but the list is extensive (several hundred), and is somewhat problematic whenever we add new email addresses, etc.

There has to be an easier way?  Again - I only need a stopgap fix to last until the end of the year.  But I have tried "thinking outside the box" in a variety of scenarios and tried different methods, only to have to come back to this cumbersome, slow method.  More than anything, I am looking for a more "efficient" way of handling this strange setup...

Any ideas/input are greatly appreciated - thank you!
timgreen7077Exchange Engineer
Join our community to see this answer!
Unlock 2 Answers and 9 Comments.
Start Free Trial
Learn from the best

Network and collaborate with thousands of CTOs, CISOs, and IT Pros rooting for you and your success.

Andrew Hancock - VMware vExpert
See if this solution works for you by signing up for a 7 day free trial.
Unlock 2 Answers and 9 Comments.
Try for 7 days

”The time we save is the biggest benefit of E-E to our team. What could take multiple guys 2 hours or more each to find is accessed in around 15 minutes on Experts Exchange.

-Mike Kapnisakis, Warner Bros