Selected year groups to allow send and receive external emails

[chekmate1984]

Hi all

 

I have request to allow 9-11 to send emails within internal and external but 7 and 8 just internal only. I have year groups differentiated via OU than security groups. Within Office 365 portal can i set this up with OU or do i need to manually select users? or is there easy way to do this that i have not thought off? as in portal i see all users in one big list?

[Steve21]

Assuming you have a year group option setup it'd be easier to do a transport rule under admin in 365, and basically make it reject any sent to external users from year group 7-8 etc, then it'll auto apply to anyone in those groups)

 

(Wasn't sure if you meant by OU than security groups that it's one then the other, or like rather than)

 

But it'd be quicker and easier to add a new group to those users in the OU even if it's just for this purpose like "block external email" and still apply a rule to that

 

Steve

Edited September 7, 2018 by Steve21

[chekmate1984]

If i add group to the AD OU for year y students for example like Year 7 group.

 

How can i implement that within office 365 exchange portal? would that still be under mail flow - rules or somewhere else? As within mail flow rules i was not able to find anywhere where i can implement the security group to block external mails?

[Steve21]

Yep still under the transport rules etc so you'd add one that says something like (paraphrasing as not on pc)

 

For members of "security group"

If "mail send to external recipient"

Reject with reason "external mail disabled"

 

Etc

 

Steve

[TechMonkey]

We do this but have the emails come to the IT department for approval. It can be annoying when there is a mass attempt to sign up for something, especially when a teacher who has been told multiple times that this will happen gets them all to sign up. But it does mean we have safeguarding over who is trying to contact them.

[chekmate1984]

So manage to get time to do this yesterday.

 

Created a Universal distribution group in AD - Added the releveant groups to it

 

In office 365 created a new rule

 

- The recipent is located - Outside the organisation and the sender is member off (the distribution group i created in AD)

 

Do the following - delete the message without notifying anyone

 

After the above, i have been testing by sending email to a test student via my gmail account and test student can send emails and receive externally.

 

So seems like this is not working, any ideas?

[chekmate1984]

one thing i noticed was in members of that distribution list, i am unable to locate the AD security groups, could this be the reason? my security groups seems are not automativally synced. I had to go in Attribute of the distribution list to make it sync to Office 365 not sure if its same for this