XgenPlusXgenPlusHelp Center

Set your domain policies

To change your domain's policies, open the admin console, go to Manage Domain(s), expand your domain and click Policy. The page has one box for each policy area, namely limits, unknown users, migration, password, third party authentication and service expiry. Change what you need and click Save once at the bottom.

For: Domain admin, Server adminWebSecurityAdmin

How to set your domain policies

Where: Admin console › Manage Domain(s) › your domain › Policy

  1. Open Manage Domain(s) in the sidebar and expand your domain.
  2. Click Policy.
  3. Open or minimise each box with the small arrow in its title bar, and change the settings you need.
  4. Click Save at the bottom of the page.

What is on the page

The Policy page is a single form. Each box has its own help page.

Box What it controls Help page
LIMITS FOR your domain Blocking users after failed logins, blocking logins for a set time, and blocking senders who send too much spam. Block repeated failed logins
USER DOES NOT EXIST What happens to mail sent to an address that has no mailbox in your domain. Handle mail for unknown users
Migration The old mail server details and auto-migrate switch used with the automatic add-user option. Handle mail for unknown users
PASSWORD POLICY Required character types, minimum length and forced password changes. Set the password policy
Third Party Authentication Checking passwords against AD, LDAP or an HTTP API. Sign users in with AD, LDAP or an HTTP API
Service(s) Expiration / Deactivation Policy Alert and reminder mails before a service expires, and blocking after expiry. Warn users before a service expires
Retention Policy Shows how long domain, user and mail data is kept (Retain For, in days, months or years). The Mail value is how long deleted mail stays recoverable by users, 7 days by default. Read-only for domain administrators. None

Example

Rohit looks after acme.in. In one visit to Policy he turns on a password rule that needs a capital letter and a number, blocks a user after five failed logins for 30 minutes, and clicks Save once to keep both changes.

Good to know

  • The policies apply to the domain you opened, not to other domains.
  • Switches show Yes or No. A number box beside a switch is only active while the switch is Yes.
  • If a value is not valid, a message appears and nothing is saved. Fix the box it names and click Save again.
  • A server administrator can open the same page and change the retention periods. In the Retention Policy box the server administrator sets Retain For under Domain, User and Mail. Setting Mail longer lengthens how long users can recover deleted mail.
  • A longer recovery period is also available through the Mail Rescue Plus Pack.

Common questions

Do I have to save each box separately?

No. All boxes are one form. Save at the bottom stores every box together, so scroll down and click it once after your changes.

Why can I not change the Retention Policy box?

The retention periods are read-only for a domain administrator. You can see the value, for example how long deleted mail stays recoverable (7 days by default), but only the server administrator can change it.

Was this page helpful? Updated 2026-10-28