exchange 2003 pupils email each other

[Gardinho]

Hi Guys,

 

We have an issue at our place. The pupils have exchange 2003 email accounts and have started to use it to chat with friends, rather than do their work. I need them to be able to email staff, but not each other.

 

Have you had any experience of this? What do you do to stop them?

 

Many thanks

[TechMonkey]

We currently set the unauthOrig AD key to the students OU node plus have set msExchQueryBaseDN key to the staff node to redirect their OWA address book to show only teachign staff. You need to use an Active Directory tool, such as ADModify, to do this as, one, you wouldn't want to do this by hand to every one and two, the keys don't show up in the normal console view. As ever though, if you use ADModify be careful!!

[Gardinho]

That sounds pretty complicated! Do you have a guide?

[chrisbrown]

That sounds pretty complicated! Do you have a guide?

 

This is a fairly dangerous thing to do. With Exchange 2010 you could do this quite easily. Simply create a group of "staff" and a group of "students" then on every student set the "Accept messages from only senders in the following list: "staff".

 

I know you're running 2003, but for the sake of anyone who may google this and be running 2010, the command would go something like follows:

 

Get-DistributionGroupMember "Students" | Set-Mailbox -AcceptMessagesOnlyFromSendersOrMembers "Staff" -RequireSenderAuthenticationEnabled $true

 

This gets all users in the "Students" distribution list, then sets to accept only from members of the "staff" distribution list (NB: will also stop them receiving from outside addresses).

[clareq]

We were told students need to e-mail work to each other in ICT, so we have set a transport rule so that students can only e-mail another student if they cc in a member of staff. We only apply this rule to those who abuse the system, but it seems to work.

[chrisbrown]

We were told students need to e-mail work to each other in ICT, so we have set a transport rule so that students can only e-mail another student if they cc in a member of staff. We only apply this rule to those who abuse the system, but it seems to work.

 

Very cool, I like it. I'm in the middle of an Ex2010 deployment to consolidate our Ex2003 (Staff) and postfix/courier (student) mail systems. Will likely have to implement something similar. Don't want students spamming other students etc.

[sonofsanta]

This is a fairly dangerous thing to do. With Exchange 2010 you could do this quite easily. Simply create a group of "staff" and a group of "students" then on every student set the "Accept messages from only senders in the following list: "staff".

 

I know you're running 2003, but for the sake of anyone who may google this and be running 2010, the command would go something like follows:

 

Get-DistributionGroupMember "Students" | Set-Mailbox -AcceptMessagesOnlyFromSendersOrMembers "Staff" -RequireSenderAuthenticationEnabled $true

 

This gets all users in the "Students" distribution list, then sets to accept only from members of the "staff" distribution list (NB: will also stop them receiving from outside addresses).

 

Is it definitely only 2010 or is this in 2007 as well, do you know?

[TechMonkey]

Don't have a guide but I shall see if I can whip one up in a spare mo.

The procedure isn't dangerous if you check what you are doing and don't just click stuff willy nilly. The alternative of going through every student individually changing the setting is ridiculous! We have run the process at least 3 times so far, plus testing runs and not had any problems.