Restricting access to Exchange Distribution list

Nikumba · 10 Oct 2014 at 10:49

We have a distribution list in Exchange 2010 for the IT Support team, however other people in the business are using it to send in support requests, which we do not want as we have a dedicated email for that.

I know I can restrict the access to send to the distribution list via the EMS however this will then stop our external IT support companies from emailing the same group.

Anyone know the best way to set it so only IT Support users can email IT Support distribution group and also receive email from external users?

Cheers

Kimbie

GDL · 10 Oct 2014 at 11:19

Add a contact for your externals, add them to a group. Block access to the dizzy list except for the group?

Nikumba · 10 Oct 2014 at 12:14

GDL said:
Add a contact for your externals, add them to a group. Block access to the dizzy list except for the group?

If we do that, then when we send to IT Support our external supplies will also get the email

JonRushton · 10 Oct 2014 at 16:58

You could create a hidden group with all users apart from the IT guys (and make it part of your workflow to add new users to this group) and then explicitly deny that group from being able to send to the IT Group.

RyanF · 10 Oct 2014 at 21:46

The way we do it is by adding external users as a user contact and then simply blocking access to the distribution list to everyone and adding exceptions for each individual user that you want to be able to send to the list. By adding the external company email address as an Exchange Contact (NOT a user) you are able to select them like a standard user.

I'll upload some screenshots from our web portal in a bit, haven't got access to my PC atm.

Ploppy2k3 · 11 Oct 2014 at 12:59

+1 for Ryan's solution. its sounds like there is more admin work but its trivial amounts once set up

RyanF · 11 Oct 2014 at 15:11

That's the way we do it where I work, you can use distribution / security groups in that list as opposed to individual names if you wanted to set up some sort of way to automate the process for adding / removing people from the group.

Ours is a hosted solution so I can't provide SSes of what it'd look like in Exchange AD but it shouldn't be too different, we're on 2013.

HungryHippos · 11 Oct 2014 at 22:20

Transport Rule may well be able to handle this as well.

You could have a rule for if sender is internal, and not a member of the DL itself, then to reject it. That would still allow external emails through as well.