Exchange Connection Problems

How to Prevent Exchange Mailbox Owners from Changing Forwarding Settings

Chanuka Geekiyanage Oct 1, 2026 868 views

Question details

An Exchange administrator wants to configure email forwarding while hiding the destination address from the mailbox owner, ensuring the user cannot view or disable the forwarding settings.

How to Prevent Exchange Mailbox Owners from Changing Forwarding Settings

Product: Microsoft Exchange
Device & OS: not provided
Scenario: Setting up enforced administrative email forwarding that users cannot see or override.
Observed behavior: By default, mailbox owners can view the forwarding address in their mailbox settings and have the ability to manually disable the forwarding configuration.

Before you start

Ensure you have the necessary administrative privileges in Exchange Admin Center or Exchange Online PowerShell to manage mailboxes and configure mail flow rules.

Solution 1Recommended

Use Exchange Mail Flow Rules (Transport Rules)

The most effective way to enforce forwarding without user visibility or control is to use administrative mail flow rules instead of mailbox-level forwarding.

By default, Exchange allows mailbox owners to manage their own forwarding settings. To completely hide the forwarding destination and prevent users from changing it, administrators should avoid mailbox-level forwarding entirely and rely on server-side Mail Flow rules.

Access Exchange Admin Center

Navigate to Mail Flow Rules

Go to the 'Mail flow' menu on the left sidebar and select 'Rules'.

Create a New Forwarding Rule

Click the '+' icon to create a new rule. In the 'Apply this rule if' dropdown, select 'The sender is' or 'The recipient is' and choose the target mailbox.

Set the Action

In the 'Do the following' dropdown, select 'Bcc the message to' or 'Redirect the message to', and input the hidden destination address.

Save and Enable

Save the rule and ensure it is checked as 'Enabled'. The user will no longer see this forwarding action in their personal mailbox settings.

Use Exchange Mail Flow Rules (Transport Rules)

Enforced Forwarding: Mail flow rules are processed at the server level, making them entirely invisible to the end user and immune to their personal mailbox configurations.

Solution 2

Clear Existing Mailbox Forwarding via PowerShell

If you previously set up mailbox-level forwarding, you must remove it so the user can no longer view or interact with the old address.

Free Microsoft Office alternative

Enhance Your Productivity with WPS Office

While resolving server administration and Exchange configuration issues requires specialized Microsoft tools, you can easily handle all your daily document, spreadsheet, and presentation tasks with WPS Office. It provides a lightweight, entirely free, and highly compatible alternative to Microsoft Office.

Seamlessly open, edit, and save Microsoft Word, Excel, and PowerPoint formatsLightweight application that runs smoothly on almost any hardwareCompletely free to use with a familiar, user-friendly interfaceCross-platform synchronization across Windows, Mac, Linux, iOS, and Android

microsoft office alternative - wps office

Frequently Asked Questions

Can mailbox owners see mail flow rules in Outlook?

No, mail flow rules are managed at the server level by administrators. End users cannot view, edit, or disable them from their Outlook or Outlook on the web settings.

Why can users change their forwarding settings by default?

Exchange defaults are designed for user convenience, allowing mailbox owners to manage their own out-of-office and forwarding rules. To enforce administrative policies, administrators must use server-side transport rules.

Do I need to use PowerShell to configure enforced forwarding?

Not necessarily. While you can use PowerShell to clear existing mailbox-level forwarding, you can easily set up the enforcing mail flow rules using the graphical interface in the Exchange Admin Center (EAC).

Outlook & Email Problems