I'm using Exchange Server 2003 on a Windows Server 2003 which is also a domain controller. If a client connects through SMTP using his AD username and password, he can send email from any email address, and not just the email addresses listed in said user's AD account.

Is it possible to prevent this from happening, by rejecting an email submitted to SMTP if the connection is authenticated with an AD account and the from address is absent from that account?

  • 1
    Configure the client Outlook to use RPC over HTTP instead of POP/SMTP. – joeqwerty Nov 27 '13 at 15:03

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.