I wanted to enable mail address spoofing check on my receive connector. So I used:
Get-ReceiveConnector 'default frontend SRV-EX' | Remove-ADPermission -User 'NT AUTHORITY\ANONYMOUS LOGON' -ExtendedRights Ms-Exch-SMTP-Accept-Any-Sender
It write to me error: cannot remove ace on object because it is not present. But when I check extended right Ms-Exch-SMTP-Accept-Any-Sender permission is missing on connector.
After that I trying to use telnet and send message (f.e. MAIL FROM: asdasd@sdafsdf.com) and this message is successfully delivered to my mailbox. Then I check extended rights on connector again and see Ms-Exch-SMTP-Accept-Any-Sender permission appeared there.
How can I totally remove it? What cause this behaviour?