Jeff Guillet<\/a><\/p>\nhttps:\/\/gallery.technet.microsoft.com\/Turn-Exchange-Anonymous-5bed81a4<\/p>\n
<\/p>\n
<\/p>\n
[ps]
\n <# .SYNOPSIS Allows Exchange Admins to toggle anonymous external relay settings on frontend Receive Connectors. Author\/Copyright: Jeff Guillet, MCSM|MVP – All rights reserved Email\/Blog\/Twitter: jeff@expta.com | www.expta.com | @expta THIS CODE IS MADE AVAILABLE AS IS, WITHOUT WARRANTY OF ANY KIND. THE ENTIRE RISK OF THE USE OR THE RESULTS FROM THE USE OF THIS CODE REMAINS WITH THE USER. .NOTES Version 1.0, January 6, 2016 Revision History ——————————————————————— 1.0 Initial release .DESCRIPTION Allows Exchange Admins to toggle anonymous external relay permissions on frontend Receive Connectors. Receive Connectors listed in yellow allow anonymous external relay. This script must be run from the Exchange Management Shell. .LINK http:\/\/www.expta.com\/2016\/01\/turn-exchange-anonymous-relay-on-or-off.html .EXAMPLE PS C:\\>Toggle-ExternalRelayReceiveConnectors.ps1 <\/p>\n
The script will list all Receive Connectors in the organization. Connectors listed in Yellow allow anonymous emails to any recipient. Connectors listed in White only allow emails to recipients within the organization. <\/p>\n
Select the number of the Receive Connector to toggle or ‘X’ to quit.
\n#> <\/p>\n
# Get collection of Frontend Transport Receive Connectors
\n$RCColl = Get-ReceiveConnector | Sort-Object -Property Identity | where {$_.TransportRole -eq "FrontendTransport"} | Select Id <\/p>\n
# Create an array of the connectors
\n$RCArray = @()
\nforeach ($rc in $RCColl) {
\n $RCArray += $rc
\n} <\/p>\n
$RCCount = $RCArray.Count <\/p>\n
do {
\n Write-Host
\n Write-Host "Toggle External Relay" -ForegroundColor White
\n Write-Host <\/p>\n
# List all each FE Receive Connectors
\n for ($i = 1; $i -le $RCCount; $i++) {
\n # Check to see if Anonymous\/ms-Exch-SMTP-Accept-Any-Recipient is already set
\n if (Get-ReceiveConnector $RCArray[$i – 1].Id | Get-ADPermission -User "NT Authority\\Anonymous Logon" | where {$_.ExtendedRights -like "ms-Exch-SMTP-Accept-Any-Recipient"}) {
\n $color = "Yellow"
\n }
\n else {
\n $color = "White"
\n }
\n Write-Host ("{0,3} – {1}" -f $i, $RCArray[$i – 1].Id) -ForegroundColor $color
\n } <\/p>\n
Write-Host " X – Exit" -ForegroundColor Red
\n Write-Host <\/p>\n
do {
\n $choice = Read-Host "Which Receive Connector to toggle"
\n $ok = $false
\n if ($choice -eq "x" -or $choice -eq "X") { Exit }
\n $ErrorActionPreference = "SilentlyContinue"
\n $choice = [int]$choice
\n if ($choice -gt 0 -and $choice -le $RCCount) { $ok = $true }
\n if ( -not $ok) { Write-Host "* Invalid selection *" -ForegroundColor Red }
\n } until ( $ok ) <\/p>\n
# Toggle Anonymous\/ms-Exch-SMTP-Accept-Any-Recipient on or off
\n Write-Host "Processing:" $RCArray[$choice – 1].Id -ForegroundColor Green
\n if (Get-ReceiveConnector $RCArray[$choice – 1].Id | Get-ADPermission -User "NT Authority\\Anonymous Logon" | where {$_.ExtendedRights -like "ms-Exch-SMTP-Accept-Any-Recipient"}) {
\n Write-Host "Turning external relay OFF" -ForegroundColor White
\n Get-ReceiveConnector $RCArray[$choice – 1].Id | Remove-ADPermission \u2013User "NT Authority\\Anonymous Logon" \u2013ExtendedRights ms-Exch-SMTP-Accept-Any-Recipient -Confirm:$False
\n }
\n else {
\n Write-Host "Turning external relay ON" -ForegroundColor Yellow
\n Get-ReceiveConnector $RCArray[$choice – 1].Id | Add-ADPermission \u2013User "NT Authority\\Anonymous Logon" \u2013ExtendedRights ms-Exch-SMTP-Accept-Any-Recipient #,ms-Exch-Bypass-Anti-Spam
\n }
\n} until ( $quit )
\n [\/ps]<\/p>\n","protected":false},"excerpt":{"rendered":"
This EMS script for Exchange 2007-2016 allows Exchange Administrators to toggle anonymous external relay permissions on front-end Receive Connectors. Connectors listed in Yellow allow anonymous SMTP emails to any internal or external recipients. Connectors listed in White only Toggle-ExternalRelayReceiveConnectors [ps] C:\\_tmp>.\\Toggle-ExternalRelayReceiveConnectors.ps1 Toggle External Relay 1 – SRV-EXCH2\\Client Frontend EXSERVER1 2 – SRV-EXCH2\\Default Frontend EXSERVER1 3 […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"close","ping_status":"close","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[33,21,161],"tags":[],"class_list":["post-2165","post","type-post","status-publish","format-standard","hentry","category-code-snippets","category-exchange","category-powershell","author-admin"],"_links":{"self":[{"href":"http:\/\/galhano.com\/blog\/index.php?rest_route=\/wp\/v2\/posts\/2165","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/galhano.com\/blog\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/galhano.com\/blog\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/galhano.com\/blog\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/galhano.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=2165"}],"version-history":[{"count":7,"href":"http:\/\/galhano.com\/blog\/index.php?rest_route=\/wp\/v2\/posts\/2165\/revisions"}],"predecessor-version":[{"id":2173,"href":"http:\/\/galhano.com\/blog\/index.php?rest_route=\/wp\/v2\/posts\/2165\/revisions\/2173"}],"wp:attachment":[{"href":"http:\/\/galhano.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=2165"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/galhano.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=2165"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/galhano.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=2165"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}