- 21 Jan 2024
- 2 Minutes to read
- Print
- DarkLight
- PDF
WMI - Forward Email Rule
- Updated on 21 Jan 2024
- 2 Minutes to read
- Print
- DarkLight
- PDF
WMI - Forward Email Rule can be configured to do the following for Users that match the results of the selected saved query, and match the Enforcement Action Conditions, if defined, or users selected on the Users page:
- Update the email configuration with a forwarding email address so that messages are forwarded automatically to that address.
For example: This can be used on users who terminate employment and are no longer to receive emails to their company email addresses but to their private email addresses. - Unset forwarding.
For example: This can be used after a period of time, when you want to stop forwarding emails to past employees.
- Not all asset categories are supported for all Enforcement Actions.
- See Actions supported for Activity Logs, Adapters Fetch History, and Asset Investigation modules.
- See Actions supported for Vulnerabilities.
- See Actions supported for Software.
General Settings
- Action name - The name of this Enforcement Action. The system sets a default name. You can change the name.
- Configure Dynamic Values - Toggle on to enter a Dynamic Value statement. See Creating Enforcement Action Dynamic Value Statements to learn more about Dynamic Value statement syntax.
This enforcement action runs on Users only.
To use this action, you must successfully configure a Windows Management Instrumentation (WMI) adapter connection. This enforcement action uses the adapter connection to talk to the Exchange Server on a domain.
Required Fields
These fields must be configured to run the Enforcement Set.
- User Name and Password - The credentials for a user account that has the Required Permissions to fetch assets.
- Exchange server address - The URL address of the Microsoft Exchange (mail) Server 2003 by WMI. Exchange PowerShell must be installed in the exchange server that the Enforcement Action runs on.
- Mailbox Forwarding Action - Select one of the following:
- Set Forwarding Address (default) - When this option is selected, the enforcement action updates the user with the forwarding address entered in the following field that opens:
- Forwarding Address - Enter the forwarding email address.
- Unset Forwarding Address - When this option is selected, the enforcement action erases the forwarding configuration.
- Set Forwarding Address (default) - When this option is selected, the enforcement action updates the user with the forwarding address entered in the following field that opens:
Compute Node - The Axonius node to use when connecting to the specified host. For more details, see Connecting Additional Axonius Nodes.
Additional Fields
These fields are optional.
- DNS servers - (default: empty) - Specify a comma-separated list of DNS servers to be used to resolve the hostnames. If not supplied or if no response has been received from any of the specified DNS servers, the default DNS server is used.
- Use NBNS - (default: disabled) - Enable this option to verify the server's name via NetBios for this connection.
Required Permissions
The Microsoft Exchange (mail) Server 2003 by WMI must have Read-only permissions.
The user credentials used for this enforcement action must have permissions to execute the Set-Mailbox command.You can use PowerShell to find the permissions required to run a cmdlet.
For more details about other Enforcement Actions available, see Action Library.