
Part II: Working with Server Roles
206
Next, you use the Remove-ReceiveConnector cmdlet to bulk remove the connectors created, as shown
in Figure 7 - 12 .
Figure 7-12
Setting Relay Restrictions and Submit Permissions
After creating the Receive Connector, you can control how messages flow through the connector. In
Exchange Server 2000/2003, you could configure relay restrictions to determine if messages could be
relayed to users not in the Exchange organization. You could also configure permissions to determine
who could submit a message to the SMTP virtual server. The same can be accomplished in Exchange
Server 2007 when you specify permission groups for the connector. In Figure 7 - 11 you saw the
permission groups assigned to each type of Receive Connector created. There are specific permissions
associated with these permission groups. For example, the
ms-Exch-SMTP-Accept-Any-Recipient
permission allows the session to relay messages through the connector. To view the permissions, use the
Get-ADPermission cmdlet in conjunction with the Get-ReceiveConnector cmdlet, as shown in
Figure 7 - 13 . Such granular changes can be made directly to Active Directory or by using the
Add/Remove-ADPermission cmdlet. On the other hand, the Set-ReceiveConnector cmdlet can be
used to add/remove permission groups.
For example, you may have created a Receive Connector with a Partner domain. ...