Re: Receive Connectors - permissions/authentication in a single EXCH2007 environment



Andy,

please see in-line....


"Andy David {MVP}" <adavid@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:s2njp31iou4tova15fmjiu9qronrr2i87j@xxxxxxxxxx
On Thu, 24 Jan 2008 17:42:02 -0500, "Cary W. Shultz"
<cshultz@xxxxxxxxxxxxxxxxxxxxxxxxxx> wrote:

Good afternoon!

Quick question. I have a single Exchange 2007 (not yet SP1)
server-environment. On the receive connectors I have the following
permissions groups and authentication methods:

Default <servername>

Permissions Groups - anonymous

Nope. That should not be checked.
Users, Servers and Legacy Exchange Servers is the default.

Okay, what I did not specifically mention is that this server is the
Internet-facing Transport Server. So, I guess that I would have to have
'anonymous' to be able to receive e-mail from the outside world.

I was also going over the permission groups yesterday and it seems like both
Legacy Exchange Servers and Exchange Servers have, amongst others, the
ms-Exch-SMTP-Accept-Any-Recipient permission . Wouldn't that make this
Exchange Server an open relay? Me thinks me don't get something that should
be pretty basic. Me thinks head too thick sometimes. ;-)

Now, clearly you get all this stuff far better than I do....

Do I need all four check boxes checked? Given that this is the only
Exchange Server in the Org and that it is the Internet-facing Exchange
Server (read: Transport Server)?


Thanks,

Cary



Authentication - TLS checkbox, but not the one underneath that
Basic Authentication and the one underneath that
Exchange Server Authentication
Integrated Windows Authentication



Client <servername>

Permissions Group - Exchange Users

Authentication - same as other, only no Exchange Server Authentication

Correct.



Is this correct?

Thanks,

Cary



.



Relevant Pages

  • RE: Unable to authenticate via SMTP to SBS2003
    ... an authentication issue is encountered. ... In Outlook Express, open the Properties window of the mail account and then ... How to Configure a POP3 Client Computer to Use Exchange as the SMTP Server ...
    (microsoft.public.windows.server.sbs)
  • Re: SBS2k3 and activesync over the air
    ... Did you apply Exchange SP2 on your Small ... Business Server? ... Open IIS from the Server Management ... Click Edit under Authentication and ...
    (microsoft.public.windows.server.sbs)
  • Re: Need Help ActiveSync 4.2 + exchange 2003 sp2 on SBS 2003 premium sp1
    ... Here's a list of the errors that are known for Exchange ActiveSync - ... To enable Integrated Windows Authentication on the Exchange virtual ... Re-enable Kerberos on the Exchange server by following the ...
    (microsoft.public.pocketpc.activesync)
  • Re: Exchange Disaster Recovery Server
    ... The backup server is setup also in the lab so I ... >>> The Microsoft Exchange Server computer is not available. ... >>> Microsoft Exchange Server Information Store ...
    (microsoft.public.exchange2000.admin)
  • Re: Client application cannot connect to server
    ... When I move to an actual device, i.e.,MotorolaQ, every aspect of the application work except for connecting to the server. ... Microsoft Exchange Server 2003 SP2 ... ISA Server as an advanced firewall in a workgroup in perimeter network ... Set up FBA or Basic authentication for Exchange ActiveSync, ...
    (microsoft.public.windowsce.app.development)