Preventing Untrusted Users from Triggering Inbound Actions

[wdookie]

I am looking to prevent untrusted user from triggering inbound actions to create tickets.   I have followed:

Inbound Email Actions - ServiceNow Wiki

but still no luck.

Properties have been set appropriately:

Trusted domains when creating new users from incoming email (Ignore email from untrusted domains unless from an existing user; use * for all domains) set to mycompany.com

System Property set to false:

Guest User disabled and locked out:

But once a send an inbound email from a non-trusted domain account, sure enough I see the Incident created, with the Caller set as Guest!

On Helsinki right now, is there anything that I am misssing????

[andrew_irwin]

I believe I noticed yesterday that you had locked out the guest account, however have you also removed the active flag from the guest account?

[wdookie]

Hi Andrew,

Yes the guest account is inactive as well:

and same result, it creates a Guest ticket on an inbound email.

[wdookie · Accepted solution]

Well folks,

Thanks for all the help on this.   To close the loop on this topic, after speaking with support, this is a known issue within Helsinki.   It will be resolved in the next release, Istanbul.  

Thanks again for the assistance and troubleshoot, I appreciate your time!

Wayne