Comments on: Exchange 2010 – relaying to external email addresses

By: Brian

Brian — Thu, 15 Dec 2011 16:01:43 +0000

Thank you!!! Been messing with this for days. This issue was my exact problem and this fixed it!

By: Thorsten

Thorsten — Tue, 11 Oct 2011 14:04:28 +0000

If you installed your systems in german language, the command will fail.
Use the following command instead:

Get-ReceiveConnector “” | Add-ADPermission -User “NT-AUTORITÄT\ANONYMOUS-ANMELDUNG” -ExtendedRights “ms-Exch-SMTP-Accept-Any-Recipient”

By: Stephen

Stephen — Tue, 26 Jul 2011 17:35:18 +0000

According to Microsoft you can only do 1 way or the other. Here is a simple solution using DNS for MX Record resolution that will allow 1 Send Connector to Send Mail to Everyone including Intra-Org email.

Get your exchange server back to a single SendConnector that is set with the basic internet settings:

DNSRoutingEnabled $True, SMTP:*;1, 0.0.0.0

Once you have that, you need to change the transport server configuration to include your internal and external DNS Server IP Addresses:

Set-TransportServer –Identity ‘TransportServerName’ -InternalDNSServers ‘ServerOneIP’,’ServerTwoIP’
Set-TransportServer –Identity ‘TransportServerName’ -ExternalDNSServers ‘ServerOneIP’,’ServerTwoIP’

Once you have changed the Transport Server, change the Send Connector to use External DNS

Set-SendConnector –Identity SendConnectorName –UseExternalDNSServersEnabled $True

Now try to send mail to internal and external user in the same message. This is working on our system now.

By: Flux

Flux — Fri, 15 Jul 2011 06:29:38 +0000

@Bal, you control it using the IP-addresses in the connectors settings.

By: Bal

Bal — Wed, 01 Jun 2011 23:43:51 +0000

worked for me as well. Thanks for your help.

How can we verify which rights anonymous users hold before executing this command ?

By: mvalk

mvalk — Thu, 07 Apr 2011 18:49:23 +0000

Hi Greg,

Authentication tab:

TLS is checked (and not enable domain security) and exchange server authentication
Check your network tab.. if there isn’t any rule preventing the server to connect (option: receive mail from remote servers that have these IP addresses)

By: Greg Carvlin

Greg Carvlin — Thu, 07 Apr 2011 18:33:05 +0000

I’m trying to do the same, what did you set for the Authentication tab? the rest of the steps i’ve done

By: KJ

KJ — Wed, 25 Aug 2010 23:27:57 +0000

Thanks! This fixed my issue aswell-

By: Adrian Hutchinson

Adrian Hutchinson — Tue, 22 Jun 2010 15:56:03 +0000

Fantastic! I’ve been trying for two days to work out why our 2010 server wouldn’t relay externally, when all the settings looked correct.

A two minute fix after reading this.

Thanks