WMI - Forward Email Rule
  • 21 Jan 2024
  • 3 Minutes to read
  • Dark
    Light
  • PDF

WMI - Forward Email Rule

  • Dark
    Light
  • PDF

Article Summary

WMI - Forward Email Rule can be configured to do the following for Users that match the results of the selected saved query, and match the Enforcement Action Conditions, if defined, or users selected on the Users page:

  • Update the email configuration with a forwarding email address so that messages are forwarded automatically to that address.
    For example: This can be used on users who terminate employment and are no longer to receive emails to their company email addresses but to their private email addresses.
  • Unset forwarding.
    For example: This can be used after a period of time, when you want to stop forwarding emails to past employees.

See Creating Enforcement Sets to learn more about adding Enforcement Actions to Enforcement Sets.

General Settings

  • Enforcement Set name (required) - The name of the Enforcement Set. A default value is added by Axonius. You can change the name according to your needs.
  • Add description - Click to add a description of the Enforcement Set. It is recommended to describe what the Enforcement Set does.
  • Run action on assets matching following query (required) - Select an asset category and a query. The Enforcement Action will be run on the assets that match the query parameters.
  • Action name (required) - The name of the Main action. A default value is added by Axonius. You can change the name according to your needs.
  • Configure Dynamic Values - Toggle on to enter a Dynamic Value statement. See Creating Enforcement Action Dynamic Value Statements to learn more about Dynamic Value statement syntax.

Note:

This enforcement action runs on Users only.

Note:

To use this action, you must successfully configure a Windows Management Instrumentation (WMI) adapter connection. This enforcement action uses the adapter connection to talk to the Exchange Server on a domain.

Required Fields

These fields must be configured to run the Enforcement Set.

  • User Name and Password - The credentials for a user account that has the Required Permissions to fetch assets.
  • Exchange server address - The URL address of the Microsoft Exchange (mail) Server 2003 by WMI. Exchange PowerShell must be installed in the exchange server that the Enforcement Action runs on.
  • Mailbox Forwarding Action - Select one of the following:
    • Set Forwarding Address (default) - When this option is selected, the enforcement action updates the user with the forwarding address entered in the following field that opens:
      • Forwarding Address - Enter the forwarding email address.
    • Unset Forwarding Address - When this option is selected, the enforcement action erases the forwarding configuration.
  • Instance Name - The Axonius node to use when connecting to the specified host. For more details, see Connecting Additional Axonius Nodes.


Additional Fields

These fields are optional.

  • DNS servers - (default: empty) - Specify a comma-separated list of DNS servers to be used to resolve the hostnames. If not supplied or if no response has been received from any of the specified DNS servers, the default DNS server is used.
  • Use NBNS - (default: disabled) - Enable this option to verify the server's name via NetBios for this connection.

Required Permissions

The Microsoft Exchange (mail) Server 2003 by WMI must have Read-only permissions.
The user credentials used for this enforcement action must have permissions to execute the Set-Mailbox command.You can use PowerShell to find the permissions required to run a cmdlet.

For more details about other Enforcement Actions available, see Action Library.



Was this article helpful?

Changing your password will log you out immediately. Use the new password to log back in.
First name must have atleast 2 characters. Numbers and special characters are not allowed.
Last name must have atleast 1 characters. Numbers and special characters are not allowed.
Enter a valid email
Enter a valid password
Your profile has been successfully updated.