LDAP Accept Query with exception?

[cryptochrome]

Hi,

is it possible to create LDAP Accept queries that contain exceptions? Something like "accept if email address is valid, except if address is in group XYZ".

We need to reject certain recipients. They are too many to put them in the RAT and we can't use an Incoming Mail Policy with an LDAP group query because the only option there would be a content filter with a bounce action. We must not bounce, we must reject. 

Any ideas?

Thanks!

[Ken Stieers · Accepted solution]

Take the default group query:



(&(memberOf={g})(proxyAddresses=smtp:{a}))





and NOT the group you want.



(&(!(memberOf=CN=NoAccess,OU=Groups,OU=IT,DC=domain,DC=local))(proxyAddresses=smtp:{a}))

[cryptochrome]

Awesome Ken, thank you. That actually worked :)