In April 2022, we released an update to Exchange Server 2019 Management Tools that enables organizations that use Azure AD Connect and sync their Active Directory to manage Exchange recipients withou...
Published Mar 21, 2024
Version 1.0
Blog Post
PeterForster That is so often the case. In fact, the customer I first set this up for basically took away all of the options... all of them. They were previous on Lotus Notes/Domino and we migrated them to Exchange Online. The Domino servers were going to be kept around until all of the custom apps they ran were mitigated. When that happened, they came back to us to ask for assistance with mail relay. I suggested installing six (6) Exchange server (their applications send a lot of messages, many business critical and customer-facing). They said that it was fine but insisted on using "Split Permissions"; I work with a lot of folks that have a ton of experience with Exchange and we even spoke with Microsoft... the consensus was, "run for the hills." So, I proposed Linux with Postfix and they were reluctant. As far as "enterprise grade" solutions, the options were really, Exchange, Linux with Postfix, or some appliances; they didn't like any of them, but with my Ansible role, I made it to where they could manage it all with a playbook.
In terms of marking it as internal, we rely on certificates to identify that valid traffic. So, the connector can safely be marked as internal because only the servers with the valid certificates will match to that connector.