Organization administration · Mail settings

Mail settings, with modern authentication by default

Proposed interface concept Not released. A design for discussion, drawn in HTML and CSS; not a screenshot of working software.

Accepted domains and their DNS status, shared mailboxes, mail flow rules and retention. Standard protocols such as IMAP and SMTP stay available for existing clients, through modern authentication; legacy password-only sign-in is shown disabled. Optional MailThreatZero filtering appears as an integration, not a requirement. The figures shown are example data.

View full size Download image (WebP, 1600×1219) Email and calendar

Proposed interface concept Not released · example data · subject to change

Office UnboundAdminSearch users, groups, settings and logs/3MO

NANorthfield AccountingManaged by Ridgeline ITOverviewUsersGroupsDomainsMailStorageService healthSecurityRolesUpdates2MigrationAudit logSettingsBack to apps

AdminMail Mail settingsExample data

Message trace Add domain

OverviewDomainsShared mailboxesMail flowClient accessSpam and threatsRetention

Accepted domains1 domain needs DNS

northfield.examplePrimary · default for new users · 52 addresses MXOKSPFOKDKIMOKDMARCp=quarantine
northfield-cpa.exampleAlias · added 12 Nov · 4 addresses MXOKSPFPendingDKIMPendingDMARCMissing

DNS for northfield-cpa.example last checked 10:42. Add the DKIM key ou1._domainkey and a DMARC record at the domain’s DNS host. Show records

Client access protocolsModern authentication only

Protocol	Port	Status	Sign-in method
IMAPDesktop and phone mail apps	993 · TLS	Enabled	OAuth 2.0App-specific token
SMTP submissionSending from mail apps and devices	465 / 587 · TLS	Enabled	OAuth 2.0App-specific token
CalDAVCalendars in third-party apps	443 · HTTPS	Enabled	OAuth 2.0App-specific token
CardDAVAddress books in third-party apps	443 · HTTPS	Enabled	OAuth 2.0App-specific token
POP3Download-and-delete mail apps	995 · TLS	Disabled	Not offered

Legacy password-only authenticationDisabled · recommended Apps that send only a username and password are refused on IMAP, SMTP, CalDAV and CardDAV. Mail apps sign in with OAuth 2.0 and MFA; older devices use an app-specific token that can be revoked on its own. 14password-only attempts refused in 7 days · 2 devicesView

App-specific tokens9 active · 6 people Token lifetime180 days People can create their own Tokens skip MFAYes · scoped to one protocol

Shared mailboxesAdd

Accounts accounts@Finance group · 12 · Read · Send as4.2 GB
Payroll payroll@3 people · Read · Send on behalf1.6 GB
Front desk frontdesk@Front desk group · 3 · Read · Send as0.9 GB

Spam and threat filteringBuilt-in · on

Spam thresholdStandard Malware scanningOn · attachments and links Quarantine30 days · 23 messages Quarantine digestDaily to each person Allowed / blocked senders12 / 37

MailThreatZeroOptional integrationNot connected

Additional threat filtering in front of your mailboxes. Not required: built-in filtering stays on either way.

Connect…

RetentionEdit

Mail, Finance and Audit & TaxKeep 7 years Mail, everyone elseKeep 3 years Deleted itemsRecoverable 30 days Litigation holdNone active Message size limit35 MB

Mail flow rulesApplied in order, top first5 rules · 4 on

#	Rule	When	Then	State
1	External sender noticeSender outside the organization → Add a banner to the message	Sender outside the organization	Add a banner to the message	On
2	Auto-forwarding to outside addressesInbox rule forwards outside → Block, except approved list · notify admins	Inbox rule forwards outside	Block, except approved list · notify admins	On
3	Payroll copiesSent to payroll@ → Keep a copy in the Payroll archive	Sent to payroll@	Keep a copy in the Payroll archive	On
4	Client disclaimerSent to outside recipients → Append the firm’s disclaimer	Sent to outside recipients	Append the firm’s disclaimer	On
5	Encrypt marked messagesSubject contains [secure] → Send through the secure message portal	Subject contains [secure]	Send through the secure message portal	Testing

OverviewUsersSecurityUpdatesMore

Domains and DNS, client protocols with modern sign-in only, shared mailboxes, mail flow, filtering and retention.

Shape this before it is built

This screen is a proposal. Register interest to follow development and test early releases, or help build it.