Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I am brand new to exchange server 2010 and want to set up some transport rules. (using ) domain extension as an example. (I also put this on superuser forum a week ago but no help so far)

• E-Mail will with keyword “PROTECT:” in subject message must be sent to E-Mail Addresses. CC,BCC sent to E-Mail Addresses.

• E-Mail from will only be allowed to be received by certain personnel, I have a list Tom Dick and Harry no one else other than these are allowed.

• Remote devices will not be allowed to download attachments for mail with keyword “PROTECT:” in subject E-Mails. They will be using Outlook Web App(OWA) or Outlook Anywhere

Are all three rules possible? or would I need to use message classification?

Could someone please help with Powershell cmdlet

New-TransportRule -Name "PROTECT_TO_PLC" –  ?????

New-TransportRule -Name "PLC_TO_AUTHLIST" –  ?????

New-TransportRule -Name "PROTECT_NOT_TO_RD" –  ?????
share|improve this question
Hub Transport rules don't affect OMA <-> Client Access, so #3 is out. The others should be possible, but you may have to use classifications. There's no way to say if message is NOT for {people}, at least not directly. You can set policies for OMA devices, including encryption requirements; that may solve #3 for you (it doesn't keep select e-mails off the device, but can keep the devices secure) – Chris S Feb 27 '12 at 14:58
So to clarify you would suggest a white list (group) for people that can receive a message. – icecurtain Feb 27 '12 at 15:20
If you read your first one closely, it doesn't make sense. – Bret Fisher Feb 28 '12 at 2:24
up vote 0 down vote accepted

1st One (didn't test):

New-TransportRule -Name "FW_PROTECT" -SubjectContainsWords "PROTECT:" -CopyTo "" -BlindCopyTo "" -Enabled $true

2nd One (didn't test):

New-TransportRule -Name "PLC_TO_AUTHLIST" -FromAddressContainsWords "" -RejectMessageReasonText "You can't send this message." -RejectMessageEnhancedStatusCode: "5.7.1" -ExceptIfSentToMemberOf: "" -Enabled $true

The ExceptIfSentToMemberOf is a distribution list of people that are allowed to receive the email.

3rd One is not possible IMO.

share|improve this answer
E-Mail will with keyword “PROTECT:” in subject message must be sent only to E-Mail Addresses. Even if the the addresses are in the CC,BCC addresses fields. So the to email address must end in nothing else. – icecurtain Mar 2 '12 at 9:54
So these messages originate from the same Exchange server, and you want these messages to reject to any address? – Bret Fisher Mar 2 '12 at 15:24
The exchange server is not, but if a user send a message from the within the exchange server with the word PROTECT: in the subject message then it must send it to a PLC.Uk address. – icecurtain Mar 2 '12 at 15:48
OK, I added the first rule. Let me know if this doesn't fully answer your question. – Bret Fisher Mar 4 '12 at 23:29

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.