So how does Safe List aggregation work?

When a user adds items to thier safe list 2 attributes can get updated in AD depending if its a safe recipient or safe sender.

msExchSafeRecipientsHash – This attribute stores the hash of the Safe Recipients List collection for the user.
msExchSafeSendersHash – This attribute stores the hash of the Safe Senders List collection for the user.

Lets take a look at these properties:
1. Open ADSIEdit
2. domain
3. select a users
4. find the msExchSafeRecipientsHash

We can see the value is “NOT SET”

Lets logon to Brian’s mailbox in OWA

1. Logon to mailbox
2. Select Options
3. Junk

Notice all the sections are grayed out, this is because we need to set the option to enable junk filtering.

Select the radius button “Automatically filter junk email”

Save the settings.

Now Lets add a user to our safe recipients list:

1. Under Manage Safe Recipients List select ADD

2. Input the users email address you want to add, in this case I used John.Smith@madeup.com

Now that the user has done thier part its time for the administrator to actually make this functional.

I am going to run this for just the Brian’s account in the example however you would really want to run this against all users mailboxes

1. Open EMS
2. Update-Safelist Brian.Tirch -type both
** by default this command will run only safe senders if do not use the -type switch and specify both or saferecipients.

now lets check in ADSI to see if anything has changed

Notice the information was not updated, why?

Did you install the anti spam agents in the org and enable content filtering?

To install the anti spam agents run the built in scrip install-antispamagents.ps1
or see my posting on anti spam http://exchange-genie.blogspot.com/2007/12/exchange-2007-anti-spam.html

Now lets check our properties in ADSI

we no longer have an empty value but a hashed value

Since this is not an automatic process an Admin would need to create a schedule task to run nightly to update the users information on a regular basis. The two articles below can assist with scheduling this to run against all users nightly.

Update-Safelist
http://technet.microsoft.com/en-us/library/bb125034(EXCHG.80).aspx

Safe list aggregation
http://technet.microsoft.com/en-us/library/aa998280(EXCHG.80).aspx