---
sourceDocument: Australia Platform security
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/de-DE/platform-security

 Release :

    - australia

ft:locale :

    - de-DE

ft:publication_title :

    - Australia Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Disable creating users from incoming emails \[Updated in Securty Center 1.3\]

# Disable creating users from incoming emails \[Updated in Securty Center 1.3\] {#ariaid-title1}

* Freigeben Version: Australia
* 
* Aktualisiert 12. März 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 Minute Lesedauer

Use the glide.user.trusted_domain property to specify the comma-separated list of trusted domains used in the creation of users from incoming emails.
An administrator can set an email property to automatically create users from incoming emails. If set this property to the insecure value, the instance will automatically create users from incoming email. Each user created will
have the same hard coded default password which makes bypassing authentication through brute force easier.

## More information {#sc-restrict-emails-by-domain__section_more_information}

{#sc-restrict-emails-by-domain__table_ajc_b43_3kb__entry__2}

| Attribute | Description |
|-|-|
| Property name | glide.pop3readerjob.create_caller |
| Configuration type | System Properties (/sys_properties_list.do) |
| Category | [Authentication](https://servicenow-prod.fluidtopics.net/faHnGPrE5YkSR8Xq~3OW5g "The authentication category covers the main elements of modern authentication to confirm an entity and its claims are authentic and correct, resistant to impersonation and prevent interception of passwords.") |
| Recommended value | false |
| Default value | false |
| Security risk rating | 5.4 |
| Functional impact | Once this property is configured, the instance only accepts emails from trusted domains. If you do not include the domain in the trusted list, there is an impact to guest users because accounts are created automatically. |
| Security risk | (Moderate) If the property is not enabled, an attacker might use an email spoofing/spamming campaign to send multiple emails resulting in the creation of more unnecessary guest users. |
| References | [Inbound mail configuration](https://www.servicenow.com/docs/access?context=r_InboundMailConfiguration&version=australia&pubname=australia-platform-administration&ft:locale=en-US) |
[ ]

{#sc-restrict-emails-by-domain__table_ajc_b43_3kb}

To learn more about adding or creating a system
property, see [Add a system property](https://www.servicenow.com/docs/access?context=t_AddAPropertyUsingSysPropsList&version=australia&pubname=australia-platform-administration&ft:locale=en-US).