I created an internal only receive connector using only the anonymous permission this worked but resolution did not. I found to get resolution I need to enable externally secured this required exchange server permission. it will now resolve but is no longer internal only. when I look at ad permission for anonymous send to any recipient is not checked.
What do I need to set to have internal only receive connector that will resolve internal names?