As part of our Corporate E-mail Policy we restrict people people from creating an agent or rule to forward mail to another address. This policy is only on paper, therefore we have not physically removed the option. It is just part of the policy they sign when they get an e-mail account.
Since we all know that if you don’t actually remove the ability to do something, some will do it even if they know they shouldn’t. So I am looking for a way to see who has created agents and/or rules to forward e-mail upon receipt. I am also wondering if anyone has any ideas on how we can actually remove the right, without modifying the ACL? All of our users have Manager Access to their own mail file.
Any help that you may have is appreciated.
Subject: Forwarding Agent/Rule
Hi Donald,
I had a similar situation at a company I worked for. I changed the design of the mail template by removing the forward option and then rolled out the new template to the user base. This stopped most people. The users still had manager access though so in theory they could write their own code to forward mail to another address. You would need to drop their ACL access down to stop them changing the design which depending on your environment could lead to more problems than the solution is worth.
Hope this helps.
Michael Millar.
Subject: RE: Forwarding Agent/Rule
Yes, you can do it by script.
I do it with a little application.
It can be run on a specific files, specific folders or specific mail servers. You just have to select
The db is fully dynamic, no hard-coded server name, you have a configuration document.
From a scan document, you must select the files, folders or servers that you want to scan. You can run it in a manual mode or a schedule one (If you have trusted servers)
After the agent is run, you have multiples views that will identify for you the dbs that have rules (enabled or not)
Here’s a little screen shot. It’s in french but you get the idea.
JYR