.png?sv=2022-11-02&ss=b&srt=o&spr=https&st=2024-05-18T08%3A49%3A32Z&se=2024-05-18T08%3A59%3A32Z&sp=r&sig=puomZG5ld31RjwDdboJTo4qStGb1gSiD18kJOBG9MFc%3D){kind=logo}
WMI - Forward Email Rule
- 21 Jan 2024
- 3 Minutes to read
- Print
- DarkLight
- PDF
WMI - Forward Email Rule
- Updated on 21 Jan 2024
- 3 Minutes to read
- Print
- DarkLight
- PDF
Article Summary
Share feedback
Thanks for sharing your feedback!
WMI - Forward Email Rule can be configured to do the following for Users that match the results of the selected saved query, and match the Enforcement Action Conditions, if defined, or users selected on the Users page:
- Update the email configuration with a forwarding email address so that messages are forwarded automatically to that address.
For example: This can be used on users who terminate employment and are no longer to receive emails to their company email addresses but to their private email addresses. - Unset forwarding.
For example: This can be used after a period of time, when you want to stop forwarding emails to past employees.
See Creating Enforcement Sets to learn more about adding Enforcement Actions to Enforcement Sets.
General Settings
- Enforcement Set name (required) - The name of the Enforcement Set. A default value is added by Axonius. You can change the name according to your needs.
- Add description - Click to add a description of the Enforcement Set. It is recommended to describe what the Enforcement Set does.
- Run action on assets matching following query (required) - Select an asset category and a query. The Enforcement Action will be run on the assets that match the query parameters.
- A query only returns results for the asset type it was created for.
- Not all asset categories are supported for all Enforcement Actions.
- See Actions supported for Activity Logs, Adapters Fetch History, and Asset Investigation modules.
- See Actions supported for Vulnerabilities.
- See Actions supported for Software.
- Action name (required) - The name of the Main action. A default value is added by Axonius. You can change the name according to your needs.
- Configure Dynamic Values - Toggle on to enter a Dynamic Value statement. See Creating Enforcement Action Dynamic Value Statements to learn more about Dynamic Value statement syntax.
Note:
This enforcement action runs on Users only.
Note:
To use this action, you must successfully configure a Windows Management Instrumentation (WMI) adapter connection. This enforcement action uses the adapter connection to talk to the Exchange Server on a domain.
Required Fields
These fields must be configured to run the Enforcement Set.
- User Name and Password - The credentials for a user account that has the Required Permissions to fetch assets.
- Exchange server address - The URL address of the Microsoft Exchange (mail) Server 2003 by WMI. Exchange PowerShell must be installed in the exchange server that the Enforcement Action runs on.
- Mailbox Forwarding Action - Select one of the following:
- Set Forwarding Address (default) - When this option is selected, the enforcement action updates the user with the forwarding address entered in the following field that opens:
- Forwarding Address - Enter the forwarding email address.
- Unset Forwarding Address - When this option is selected, the enforcement action erases the forwarding configuration.
- Set Forwarding Address (default) - When this option is selected, the enforcement action updates the user with the forwarding address entered in the following field that opens:
Compute Node - The Axonius node to use when connecting to the specified host. For more details, see Connecting Additional Axonius Nodes.
Additional Fields
These fields are optional.
- DNS servers - (default: empty) - Specify a comma-separated list of DNS servers to be used to resolve the hostnames. If not supplied or if no response has been received from any of the specified DNS servers, the default DNS server is used.
- Use NBNS - (default: disabled) - Enable this option to verify the server's name via NetBios for this connection.
Required Permissions
The Microsoft Exchange (mail) Server 2003 by WMI must have Read-only permissions.
The user credentials used for this enforcement action must have permissions to execute the Set-Mailbox command.You can use PowerShell to find the permissions required to run a cmdlet.
For more details about other Enforcement Actions available, see Action Library.
Was this article helpful?