Unity IP Fax - Restricting Access?

Answered Question
May 1st, 2007
User Badges:

Guys,


I'm looking at implementing T.37 fax (onramp / outbound) where users email their document to the Unity fax service mailbox and this send it out the IOS gateway to PSTN.


I've been asked how it is possible to stop users from accessing this in order to get free fax service, when only specific users are to have this facility.


I can block all SMTP to the router with an ACL, and permit only the Unity / Exchange servers, but how do I stop users from mailing to the Unity IP Fax service?


Thanks in advance,

Chris

Correct Answer by Mark Turpin about 9 years 11 months ago

Well. I would maybe setup a group and add the group as allowed to the user then add and remove people from the group in AD as you see fit. That way you're not always touching the user and its based on membership to the group...


But, that's just one way and I'm not the AD expert so I'm sure there are other, perhaps better ways.

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 4 (1 ratings)
Loading.
Mark Turpin Wed, 05/02/2007 - 06:37
User Badges:

Well sure. Just go out to the user in AD Users & Computers. Go to Exchange General - then to the Delivery Restrictions. Set who you'd like to be able to email to it there.


If you were emailing directly to the gateway, I'm not sure how you'd be able to limit that.

cjhunt Wed, 05/02/2007 - 06:45
User Badges:

Thanks for the reply.


It's encouraging that I can restrict in this way, although can you tell me if I'll have to make a change for each user, or whether it can be a "bulk" setting, or a blanket policy, so I can effectively do: Permit Some, Deny All?


I am not intending to email directly to the gateway, although it is possible - I'll be blocking unwanted SMTP by an ACL, so only the Unity / Exchange servers can talk to the gateway.


Regards,

Chris

Correct Answer
Mark Turpin Thu, 05/03/2007 - 12:17
User Badges:

Well. I would maybe setup a group and add the group as allowed to the user then add and remove people from the group in AD as you see fit. That way you're not always touching the user and its based on membership to the group...


But, that's just one way and I'm not the AD expert so I'm sure there are other, perhaps better ways.

cjhunt Thu, 05/03/2007 - 23:41
User Badges:

Thanks Mark,


Seems like I can do what is required - my customer can probably work the AD sufficiently to do this.


Thanks for the advice

Actions

This Discussion