Share via

Configure outgoing email for a SharePoint Server farm

  • Article

APPLIES TO: yes-img-132013 yes-img-162016 yes-img-192019 yes-img-seSubscription Edition no-img-sopSharePoint in Microsoft 365

Note

The SMTP authentication feature is only available in SharePoint Server 2019.

Note

The TLS connection encryption feature is only available in SharePoint Server 2016 or later.

This article describes how to configure outgoing email for a farm or for a specific web application for SharePoint Server. This article also describes how to install and configure the SMTP service that you must use to enable outgoing email.

After you have installed SharePoint Server and completed the initial configuration of your server farm, you can configure outgoing email. Doing so enables users to create alerts to track such site items as lists, libraries, and documents. In addition, site administrators can receive administrative messages about site administrator issues, such as the information that site owners have exceeded their specified storage space. For more information, see Plan outgoing email for a SharePoint Server farm.

To configure outgoing email for a specific web application, first configure the default outgoing email for all web applications in the farm. If you configure the outgoing email for a specific web application, that configuration will override the default configuration for all web applications in the farm.

You can also configure outgoing email for a specific web application by using Microsoft PowerShell. For more information, see the "Configure the settings for a specific web application" section in SharePoint Server 2016 outgoing email configuration settings.

Before you begin

Before you begin this operation, review the following information about prerequisites:

  • Your computer is running SharePoint Server 2019, SharePoint Server 2016, SharePoint Server 2013, or SharePoint Foundation 2013.

  • One or more servers in the server farm are running the Simple Mail Transfer Protocol (SMTP) service and have a valid SMTP server address. Alternatively, you must know the name of a server outside the farm that is running the SMTP service.

Install and configure the SMTP service

Before you can enable outgoing email, you must determine which SMTP server to use. This SMTP server must be configured to allow anonymous SMTP email submissions. The SMTP server can be a server in the farm or outside the farm.

Note

If your organization does not allow anonymous SMTP email messages to be sent by using Exchange Server, you can use a local SMTP server in the SharePoint farm that accepts anonymous email messages. The local SMTP server automatically authenticates the messages and then forwards them to the computer that's running Exchange Server.

Install the SMTP service

To install the SMTP service, use the Add Features Wizard in Server Manager. The wizard creates a default SMTP configuration. You can customize this default SMTP configuration to meet the requirements of your organization.

If you've already installed the SMTP service on a server, skip to Configure the SMTP service.

To install the SMTP service

  1. Verify that the user account that is performing this procedure is a member of the Administrators group on the application server.

  2. Open Server Manager, click Manage, and select Add Roles and Features.

  3. Click Next until the Select features page appears, select SMTP Server, click Add Features, and then click Next.

  4. On the Confirm Installation Selections page, click Install.

  5. On the Installation Results page, check that the installation finished successfully, and then click Close.

Configure the SMTP service

After you install the SMTP service, you configure it to send email messages from servers in the farm.

You can decide to send relayed email messages to all servers except those that you specifically exclude. Alternatively, you can block messages to all servers except those that you specifically include. You can include servers individually or in groups by subnet or domain.

If you enable anonymous access and relayed email messages, you increase the possibility that the SMTP server will be used to relay unsolicited commercial email messages (spam). It is important to limit this possibility by carefully configuring mail servers to help protect against spam. One way that you can do this is by limiting relayed email messages to a list of specific servers or to a domain, and by preventing relayed email messages from all other servers.

Note

To manage the SMTP service on Windows Server 2008, Windows Server 2012 R2 and Windows Server 2016, you must use Internet Information Services (IIS) 6.0 Manager. Ensure that you install IIS 6.0 Management tools in Server Manager.

To install IIS 6.0 Management tools

  1. Verify that you have the following administrative credentials:

    • You must be a member of the Administrators group on the front-end web server.

  2. Open Server Manager, click Manage, and select Add Roles and Features.

  3. Click Next until the Select server roles page appears, select Management Tools and IIS 6 Management compatibility, and then click Install.

  4. In Application Server section, click Add Role Services.

  5. On the Select Role Services page, select Management Tools and IIS 6 Management compatibility, and then click Install.

To configure the SMTP service

  1. Verify that the user account that is performing this procedure is a member of the Administrators group on the application server.

  2. Open Server Manager, click Tools, and select click Internet Information Services (IIS) 6.0 Manager.

  3. In IIS Manager, expand the server name that contains the SMTP server that you want to configure.

  4. Right-click the SMTP virtual server that you want to configure, and then click Start, and then right-click the server again and click Properties.

  5. On the Access tab, in the Access control area, click Authentication.

  6. In the Authentication dialog, verify that Anonymous access is selected, and click OK.

  7. On the Access tab, in the Relay restrictions area, click Relay.

  8. To enable relayed email messages to any server, click All except the list below.

  9. To accept relayed email messages from one or more specific servers, follow these steps:

    • Click Only the list below.

    • Click Add, and then add servers one at a time by IP address, or in groups by using a subnet or domain.

    • Click OK three times to close the Computer, Relay Restrictions, and Properties dialogs.

Ensure that the SMTP service is running and set to start automatically. To do this, use the following procedure.

To set the SMTP service to start automatically

  1. Open Server Manager, click Tools, and then click Services.

  2. In Services, right-click Simple Mail Transfer Protocol (SMTP), and then select Properties.

  3. In the Simple Mail Transfer Protocol (SMTP) Properties dialog, on the General tab, in the Startup type list, select Automatic, and then click OK.

Set the application credential key on each server in the farm

Note

You only need to set the application credential key on your servers if you're using the SMTP authentication feature on SharePoint Server 2019.

If you will authenticate to the SMTP server before sending email, you must first set an application credential key on each SharePoint server in the farm before providing the credentials. The application credential key is a separate password that is used to encrypt and decrypt the SMTP password. The application credential key must be identical on all SharePoint servers in the farm.

To set the application credential key on each server in the farm

  1. Launch the SharePoint Management Shell from the Start menu of a SharePoint server in the farm.

  2. Run the following PowerShell commands, where <application credential key> is the password to be used to encrypt and decrypt the SMTP password:

    $key = ConvertTo-SecureString -String "<application credential key>" -AsPlainText -Force
Set-SPApplicationCredentialKey -Password $key

  3. Repeat the PowerShell commands on each additional SharePoint server in the farm, using the same application credential key on each server.

Configure outgoing email for a farm

You can configure outgoing email for a farm by using the SharePoint Central Administration website. Use the following procedures to configure outgoing email. After you complete the procedures, users can track changes and updates to individual site collections. In addition, site administrators can, for example, receive notices when users request access to a site.

To configure outgoing email for a farm by using Central Administration

Select the version to follow the steps.

  1. Verify that the user account that is performing this procedure is a member of the Farm Administrators group on the server that is running Central Administration.

  2. In Central Administration, click System Settings.

  3. On the System Settings page, in the E-Mail and Text Messages (SMS) section, click Configure outgoing e-mail settings.

  4. On the Outgoing E-Mail Settings page, in the Mail Settings section, type the SMTP server name for outgoing email (for example, mail.example.com) in the Outbound SMTP server box.

  5. In the Outbound SMTP server port box, type the port number of your SMTP server. If no port number is specified, SharePoint will default to using port 25.

  6. In the From address box, type the email address as you want it to be displayed to email recipients.

  7. In the Reply-to address box, type the email address to which you want email recipients to reply.

  8. In the Character set list, select the character set that is appropriate for your language.

  9. In the SMTP server authentication section, select the Anonymous radio button if your SMTP server doesn't require authentication. Otherwise, select the Authenticated radio button if your SMTP server requires authentication.

    • If you selected the Authenticated radio button, provide the user name in the User name box and the password in the Password box.

    Note

    If you're using a Windows account to authenticate to the SMTP server, you can specify the user name using either the Universal Principal Name (UPN) format ([email protected]) or the NT4 login format (DOMAIN\user). If you're using a non-Windows account to authenticate to the SMTP server, contact your email administrator to determine the correct user name format.

  10. In the Use TLS connection encryption box, select the Yes radio button to require SharePoint to establish an encrypted connection to the SMTP server before sending email. Otherwise, select the No radio button.

    Note

    The SMTP server must be configured with a valid TLS certificate (matching the SMTP server name entered above) that is trusted by the SharePoint server in order for email to be sent via TLS.

  11. In SharePoint Server Subscription Edition, you have the option to use client certificate authentication if you set Use TLS connection encryption to Yes. To enable client certificate authentication, set Use client certificate authentication to Yes and select the required client certificate in the Client certificate drop-down list. To disable client certificate authentication, select the No radio button.

  12. Click OK.

To configure outgoing email for a farm by using Microsoft PowerShell

Follow these versions to specify credentials for SMTP authentication.

  1. Open the SharePoint Management Shell.

  2. Run the following PowerShell commands to get the SharePoint Central Administration web application and then configure the outgoing email settings for that web application. The settings stored in that web application will apply to the entire farm.

    $CentralAdmin = Get-SPWebApplication -IncludeCentralAdministration | ? { $_.IsAdministrationWebApplication -eq $true }

$SmtpServer = "mail.example.com"
$SmtpServerPort = 587
$FromAddress = "[email protected]"
$ReplyToAddress = "[email protected]"
$Credentials = Get-Credential
$smtpcert = Get-SPCertificate -Identity "SMTP Cert"

Set-SPWebApplication -Identity $CentralAdmin -SMTPServer $SmtpServer -SMTPServerPort $SmtpServerPort -OutgoingEmailAddress $FromAddress -ReplyToEmailAddress $ReplyToAddress -SMTPCredentials $Credentials -Certificate $smtpcert

    Note

    To specify credentials for SMTP authentication, use the Get-Credential cmdlet and pass it as the value for the -SMTPCredentials parameter. To specify that SharePoint should connect to the SMTP server anonymously, pass $null as the value for the -SMTPCredentials parameter. If you don't specify the -SMTPCredentials parameter, it will preserve the existing authentication settings.

    Note

    SharePoint Server Subscription Edition adds an optional -Certificate parameter to the cmdlet that lets user specify which client certificate should be used. To specify that SharePoint shouldn't use client certificate authentication, pass $null as the value for the -Certificate parameter.

Configure outgoing email for a specific web application

You can configure outgoing email for a specific web application by using the Central Administration website. Use the following procedures to configure outgoing email.

Note

If you configure the outgoing email for a specific web application, that configuration will override the default configuration for all web applications in the farm.

To configure outgoing email for a specific web application by using Central Administration

Select the version to follow the steps.

  1. Verify that the user account that is performing this procedure is a member of the Farm Administrators group on the server that is running the SharePoint Central Administration website.

  2. In Central Administration, in the Application Management section, click Manage web applications.

  3. On the Web Applications Management page, select a web application, and then in the General Settings group on the ribbon, click Outgoing E-mail.

  4. On the Web Application Outgoing E-Mail Settings page, in the Mail Settings section, type the name of the SMTP server for outgoing email (for example, mail.fabrikam.com) in the Outbound SMTP server box.

  5. In the Outbound SMTP server port box, type the port number of your SMTP server. If no port number is specified, SharePoint will default to using port 25.

  6. In the From address box, type the email address as you want it to be displayed to email recipients.

  7. In the Reply-to address box, type the email address (for example, a help desk alias) to which you want email recipients to reply.

  8. In the Character set list, click the character set that is appropriate for your language.

  9. In the SMTP server authentication section, select the Anonymous radio button if your SMTP server doesn't require authentication. Otherwise, select the Authenticated radio button if your SMTP server requires authentication.

    • If you selected the Authenticated radio button, provide the user name in the User name box and the password in the Password box.

    Note

    If you're using a Windows account to authenticate to the SMTP server, you can specify the user name using either the Universal Principal Name (UPN) format ([email protected]) or the NT4 login format (DOMAIN\user). If you're using a non-Windows account to authenticate to the SMTP server, contact your email administrator to determine the correct user name format.

  10. In the Use TLS connection encryption section, select the Yes radio button to require SharePoint to establish an encrypted connection to the SMTP server before sending email. Otherwise, select the No radio button.

  11. In SharePoint Server Subscription Edition, you have the option to use client certificate authentication if you set Use TLS connection encryption to Yes. To enable client certificate authentication, set Use client certificate authentication to Yes and select the required client certificate in the Client certificate drop-down list. To disable client certificate authentication, select the No radio button.

  12. Click OK.

To configure outgoing email for a specific web application by using Microsoft PowerShell

Follow these versions to specify credentials for SMTP authentication.

  1. Open the SharePoint Management Shell.

  2. Run the following PowerShell commands to get the web application and then configure the outgoing email settings for that web application.

    $WebApp = Get-SPWebApplication -Identity &lt;web application URL&gt;

$SmtpServer = "mail.example.com"
$SmtpServerPort = 587
$FromAddress = "[email protected]"
$ReplyToAddress = "[email protected]"
$Credentials = Get-Credential
$smtpcert = Get-SPCertificate -Identity "SMTP Cert"

Set-SPWebApplication -Identity $CentralAdmin -SMTPServer $SmtpServer -SMTPServerPort $SmtpServerPort -OutgoingEmailAddress $FromAddress -ReplyToEmailAddress $ReplyToAddress -SMTPCredentials $Credentials -Certificate $smtpcert

    Note

    To specify credentials for SMTP authentication, use the Get-Credential cmdlet and pass it as the value for the -SMTPCredentials parameter. To specify that SharePoint should connect to the SMTP server anonymously, pass $null as the value for the -SMTPCredentials parameter. If you don't specify the -SMTPCredentials parameter, it will preserve the existing authentication settings.

    Note

    After you've set up SMTP authentication in your farm, you can test to see if it's authenticating. For more information, see Is SMTP Auth Really Working?.

    Note

    SharePoint Server Subscription Edition adds an optional -Certificate parameter to the cmdlet that lets user specify which client certificate should be used. To specify that SharePoint shouldn't use client certificate authentication, pass $null as the value for the -Certificate parameter.

See also

Concepts

Plan outgoing email for a SharePoint Server farm