Exploring Transport Rules in Exchange Server 2013

This article is based on the Exchange 2013 Preview release and is subject to change when Exchange 2013 reaches RTM. Do not attempt to install Exchange 2013 Preview in a production environment.

Transport rules have been a feature of Exchange Server since the 2007 version and have been included in Exchange Server 2013 with a number of improvements.

New Features in Exchange 2013 Transport Rules

Microsoft has published a list of changes and improvements to transport rules on this TechNet page.

Support for data loss prevention policies is one of the major new features in Exchange Server 2013, and this integrates with transport rules.

Exchange 2013 also has a number of new predicates (conditions) and actions for transport rules. A few of the highlights are:

  • Ability to take action on messages that have been sent from specific IP address ranges
  • Ability to take action on messages that have attachments with specific extensions, or that contain executable content
  • Ability to stop subsequent rules from processing a message (this will make the order of rules important for some environments)
  • Ability to generate incident reports to an email address at varying severity levels
  • Transport rule information is now included in message tracking logs
  • Rule monitoring to detect and alert on rules that are delaying email delivery

Managing Transport Rules

Transport rules in Exchange Server 2013 can be managed in two ways. The first is by using the Exchange Management Shell cmdlets:

[PS] C:\>get-command -Noun *TransportRule*

CommandType     Name
-----------     ----
Function        Disable-TransportRule
Function        Enable-TransportRule
Function        Export-TransportRuleCollection
Function        Get-TransportRule
Function        Get-TransportRuleAction
Function        Get-TransportRulePredicate
Function        Import-TransportRuleCollection
Function        New-TransportRule
Function        Remove-TransportRule
Function        Set-TransportRule

The second is by using the Exchange Administration Center, in the Mail Flow section under Rules.

Managing Transport Rules in the Exchange Admin Center

Creating New Transport Rules

The New Rule wizard behaves in an interesting way in Exchange Server 2013. If you simply click the + button the New Rule wizard begins and exposes a limited subset of the available conditions and actions in the drop down lists.

Creating a new transport rule in Exchange Server 2013

However, there is also a More options link in the wizard start screen.

Exposing more options for transport rules

Clicking that link expands the options available in the wizard to a much more granular set, as well as the ability to set multiple conditions and actions.

Fine-grain controls for transport rules in Exchange Server 2013

Creating New Transport Rules Based on Templates

In addition to the New Rule wizard behavior shown above you can also create a new rule based on a template of sorts. By clicking the little arrow next to the + icon a menu of common rule types is presented to get you started.

Transport rule templates

For example, choosing the “Apply signature or disclaimers” option from the list the new rule starts with the “Append a disclaimer to the message” action already selected.

Transport rule to append a disclaimer to a message

Other templates present different subsets of actions depending on the general purpose that the rule is for. However in all cases it appears you can still click More options to get access to all of the conditions and actions if needed.

Time-Based Transport Rules

Another useful capability of  Exchange 2013 transport rules is the ability to set specific dates for the rule to be activated and deactivated.

This could be useful for businesses that need to align their disclaimers with specific events such as a marketing campaign, a holiday period, or corporate merger/acquisition.

Transport Rules Audit Mode

Exchange 2013 transport rules also have an audit mode so that they can be tested without impacting message delivery. In the New Rule wizard these options are visible as the two “Test rule…” modes.

Exchange 2013 transport rule test/audit modes

Although they are referred to as “Test” in the Exchange Admin Center the modes are referred to as “Audit” in the New-TransportRule cmdlet parameters.

So in effect a rule can be placed in one of three modes:

  • Enforce – the rule is active and all the actions you have specified will be taken
  • Audit (Test rule with notifications disabled) – the rule is active, and the actions are logged to the message tracking logs, but not actually enforced on the message
  • Audit and Notify (Test rule with notifications enabled) – same as Audit mode except any “Notify…” actions on the rule are taken


As you can see a number of improvements have been made to transport rules in Exchange Server 2013 that add more power and flexibility to this feature, which will no doubt help many organizations who rely on transport rules today or who have specific needs that aren’t quite met by the transport rules functionality in previous versions of Exchange.


  1. geezbill says

    Paul, I’m interested in this auditing. What type of reports can be pulled to give details on the transport rules that have been processed? Would like to know what emails went through what rules at what times etc. Also, is this possible for 2010?

  2. jehad khalil says

    I was installed exchange 2013 in stead of 2003 few days ago from that time Iam facing problem with the read receipt

    one is generated from the server and the other upon client request for read report the means anyone send us email he received tow read messages for the email the first is onbehalf the receipt and the other upon the sender request for examaple

    from: musheer sheikhali ; on behalf of; musheer sheikhali

    from: musheer sheikhali ;

    these are 2 read receipt for the same email

  3. Sambabs says

    Hi Paul, I am desperate to change the attachment size limit in Exchange 2013. I haven’t found any good step by step instructions, please help. thanks.

  4. hari says

    Hi paul,

    is it possible to create rule for, allowed only outgoing mails not need incoming mails for particular user.
    please suggest.


  5. Ajishlal says

    Hi Paul,

    I would like to ask you, how to create a transport rule for rejecting email for distribution group and expect keywords in subject line.
    could you please tell me how we can add multiple keywords in above filtering and how to do this shell script

  6. Reynaldo Ruiz Flores says

    I cannot use append for a disclaimer. Why? Always back to prepend. Is related to licensing of Exchange 2013 I’m using Standard Server versión & Cals. Do I need Standard Server & Enterprise Cals?

  7. DT says

    How do you add logo into the disclaimer? I want to create a standard organization signature but with logo, not just text base. Does it allow you to achieve that?

  8. RM says

    Will transport rules be applied for mails originating from iPhone devices that are linked to the exchange account? We have a rule that will prevent mail from being sent outside the domain. Works on the Outlook client but not from the iPhone iOS. Thanks for any insight.

  9. Ronald says

    I read one of your article for exchange 2010 ,
    someone said that there is a delay of 4 hrs before the rules kick in and the solution was to restart transport services for immediate action. Does it hold true for exchange 2013. Also if have a rule already setup to allow only a certain group to send emails to a particular email address and then I add a user to that group, does it take 4 hrs for that as well?

  10. Deepakraj says

    Hi Paul, Thanks for the article.
    I have a question. Can we forward all emails to administrator which contain “bcc” ? I know we can do in Ex2007/2010 but I am not able to do for Ex2013. Could you advise me on this? much appreciate your feedback. Thanks

  11. Afaq says

    Hi Pual,

    how can i block the attachment on emails to sender and receiver on an specific groups. and can block the external emails unable to send and receive out side the domain or organization. Thanks

Leave a Reply

Your email address will not be published. Required fields are marked *