Description. Problem: Scan to process is not completed when Microsoft Exchange Server 2007 is used as mail server.

Transcription

1 Description This document describes the procedure necessary for performing a Scan to when Microsoft Exchange Server 2007 is used. This procedure is necessary because new Security Features were added in the Microsoft Exchange Server 2007 as standard. Problem: Scan to process is not completed when Microsoft Exchange Server 2007 is used as mail server. Cause: Access for the MFP Microsoft Exchange Server 2007 is not set up correctly. Solution: Perform the settings below reported to set up the Scan to on the Microsoft Exchange Server 2007 Procedure: CAUTION: The following instructions to create an Anonymous SMTP Receive Connector are NOT to be attempted by a Technician. They are provided only for use by an EXPERIENCED Microsoft Exchange Server Administrator, as failure to follow these instructions in any way may have a detrimental effect on flow in Exchange Server The instructions provided have been tested numerous times and are known to work. Open the Exchange 2007 Exchange Management Console. Expand Server Configuration, and then click on the Hub Transport server role. Select the Server in the top pane that you want to add an Anonymous SMTP Receiver Connector to, and then click the Receive Connectors tab in the bottom pane. On the right-hand-side click New Receive Connector. In the New SMTP Receive Connector wizard that appears, type a name for the New Receive Connector and make sure that the Intended Use Combo box shows Custom as the selection, then click Next. 1

2 2

3 In the Local Network Settings pane of the wizard, under Use these local IP Address to Receive mail:, you can leave the default setting of All Available IPv4 Addresses, but is not recommended in the name of security. Specify the IP Address of the Exchange Server you will be configuring the Anonymous SMTP Receive Connector for here, and at the bottom provide the FQDN for that same server. Click Next when ready to proceed. 3

4 In the Remote Network Settings pane of the wizard, you can leave the base IP Range listed in the Local Network Settings window, but it is VERY HIGLY RECOMMENDED THAT YOU DO NOT, as ANY node that can reach the Subnet with the Exchange Server 2007 housing this Receive Connector will be able to relay Anonymously (including but not limited to any malware that may take root in a given company s internal networks). Instead, specify Specific IP Addresses for the nodes you want to allow to Anonymously relay through Exchange. In this case, you will specify the specific individual IP Address or Addresses of Develop Ineo MFP that will be using Scan-to-SMTP functionality. Click Next when ready to proceed. 4

5 The last window of the New SMTP Receive Connector wizard will show a Configuration Summary of the settings you have specified. If they appear to be correct, click New and the wizard will finish creating the new connector. Click Finish to complete creation of the new connector, which you will then configure. 5

6 Select the New Receive Connector that you have created from Receive Connector pane, then choose Properties on the right hand side to open the Properties dialog box of that connector. 6

7 Make sure that the Authentication tab has NO settings checked 7

8 On the Permission Groups tab, make sure that ONLY Anonymous users is checked. 8

9 Once the above steps are completed and verified, Click Apply, and then OK. Open the Exchange Management Shell and type the following commandlet-set into the shell. Note: DO NOT Cut and Paste the command-set directly, as there is a specific piece of information that has to be filled in for which the command-set shown below only has a name placeholder. Get-ReceiveConnector Receive Connector Name Add-ADPermission User NT AUTHORITY\ANONYMOUS LOGON -ExtendedRights MS-Exch-SMTP-Accept-AnyRecipient Once you have typed in the commandlets correctly as shown above (being sure to input that actual Receive Connector Name that you gave your Anonymous SMTP Connector its creation), press Enter. 9

10 The Receive Connector you have created should now be ready to accept Anonymous SMTP connections from the IP Addresses you specified in the Remote Network Settings page of the wizard (You can add/alter accepted IP Addresses in the Network Tab of the properties window of the new Receive Connector.)