Applies to: Exchange Server 2007 SP3, Exchange Server 2007 SP2, Exchange Server 2007 SP1
Topic Last Modified: 2006-09-12

Use the Permission Groups tab on the Receive connector properties to select the permission groups that are associated with the Receive connector. A permission group is a predefined set of permissions that is granted to well-known security principals and assigned to a Receive connector. Security principals include users, computers, and security groups. A security principal is identified by a security identifier (SID). The Permission Groups property defines the groups or roles that can submit messages to the Receive connector and the permissions that are assigned to those groups.

The following table lists the available permission groups and identifies the security principals and the permissions that are granted when that permission group is configured for a Receive connector.

Receive connector permission groups

Permission group name Associated security principals (SIDs) Permissions granted

Anonymous users

Anonymous user account
  • Ms-Exch-SMTP-Submit

  • Ms-Exch-SMTP-Accept-Any-Sender

  • Ms-Exch-SMTP-Accept-Authoritative-Domain-Sender

  • Ms-Exch-Accept-Headers-Routing

Exchange users

Authenticated user accounts
  • Ms-Exch-SMTP-Submit

  • Ms-Exch-SMTP-Accept-Any-Recipient

  • Ms-Exch-Bypass-Anti-Spam

  • Ms-Exch-Accept-Headers-Routing

Exchange servers
  • Hub Transport servers

  • Edge Transport servers

  • Exchange Servers security group (Hub Transport server only)

  • Externally Secured servers
  • Ms-Exch-SMTP-Submit

  • Ms-Exch-SMTP-Accept-Any-Sender

  • Ms-Exch-SMTP-Accept-Any-Recipient

  • Ms-Exch-Accept-Authoritative-Domain-Sender

  • Ms-Exch-Bypass-Anti-Spam

  • Ms-Exch-SMTP-Accept-Authentication-Flag

  • Ms-Exch-Bypass-Message-Size-Limit

  • Ms-Exch-Accept-Headers-Routing

  • Ms-Exch-Accept-Exch50

  • Ms-Exch-Accept-Headers-Organization (Note: this permission is not granted to Externally Secured servers.)

  • Ms-Exch-Accept-Headers-Forest (Note: this permission is not granted to Externally Secured servers.)

Legacy Exchange Servers

Exchange Legacy Interop security group
  • Ms-Exch-SMTP-Submit

  • Ms-Exch-SMTP-Accept-Any-Sender

  • Ms-Exch-SMTP-Accept-Any-Recipient

  • Ms-Exch-Accept-Authoritative-Domain-Sender

  • Ms-Exch-Bypass-Anti-Spam

  • Ms-Exch-SMTP-Accept-Authentication-Flag

  • Ms-Exch-Bypass-Message-Size-Limit

  • Ms-Exch-Accept-Headers-Routing

  • Ms-Exch-Accept-Exch50

Partners

Partner Server account
  • Ms-Exch-SMTP-Submit

  • Ms-Exch-Accept-Headers-Routing

For More Information