Exchange 2000 Server - Configure SMTP Outbound Security

Configuring Message Routing

Configure SMTP Outbound Security

You can configure the SMTP connector to provide the authentication credentials required by the remote domain. There are two types of authentication available: Basic (clear text) and Integrated Windows authentication. With Basic authentication, the account name and password of the server to which you are connecting is transmitted in clear text. The Integrated Windows authentication option requires a Windows account name. You can also disable authentication, which is the default option.

The outbound security you select on the SMTP connector overrides the SMTP virtual server authentication setting on the Access tab. The following table describes several configuration examples

SMTP Connector Transmissions	Authentication Option
Messages are commonly sent to multiple addresses.	Disable authentication for the SMTP connector. If attempts to deliver messages to an address fail because of authentication requirements, add a remote domain for the address. Then enable authentication for the domain at the same level required by the server.
Messages are commonly sent to one address, which requires authentication.	Determine what level of authentication is required to connect and enable authentication for the SMTP connector using the same level of authentication. If you then want to send messages to other addresses, set up remote domains and set different authentication options. If you use this option, it is likely that the account name used is the one that identifies the computer set up as the smart host.

To configure SMTP outbound security:

Start System Manager
On the Start menu, point to Programs, point to Microsoft Exchange, and then click System Manager.
Navigate to Connectors.
If you do not have routing groups defined:
System Manager
1. Administrative Groups
2. <Administrative Group>
3. Connectors
If you do have routing groups defined:

System Manager
1. Administrative Groups
2. <Administrative Group>
3. Routing Groups
4. <Routing Group>
5. Connectors
Right-click an SMTP connector, click Properties, and then click the Advanced tab.
Click Outbound Security.
To disable authentication for outgoing messages, select Anonymous access. This is the default.
To set basic authentication for outgoing messages, select Basic authentication, and then click Modify. In the Outbound Security Connection Credentials dialog box, in User, type the user name of the account of the computer to which you're connecting. In Password, type the password of the account. In Confirm password, re-enter the password.
To set Windows system security for outgoing messages, select Integrated Windows authentication, and then click Modify. In the Outbound Connection Credentials dialog box, in Account, type the Windows account name to which you're connecting, or click Browse and select the Windows account name from the list. In Password, type the password of the account. In Confirm password, re-enter the password.
To enable Transport Layer Security (TLS) encryption for a remote domain, select TLS encryption. TLS is a privacy protocol that uses a smart card or certificate. This requires smart card or certificate authentication on the remote computer. For more information, see your Windows 2000 documentation.

Note If the remote domain does not support TLS encryption, all messages are returned with a non-delivery report (NDR).