0

We have our AD synced to Office 365 and I want to control who can send to a particular synced distribution group (usually done through Exchange Admin Centre, Delivery Management) which I believe is done through the AuthOrig and dlMemSubmitPerms attributes.

I can add users & groups that are from our AD but I don't know how to add an external email address (added as a contact in Exchange) or an address that is cloud only, if it's possible at all.

If it is, what is the format to use as it doesn't accept email addresses.

Thanks.

Crimsonfox
  • 341
  • 1
  • 2
  • 16

2 Answers2

0

It is not feasible to add external email address directly to allow sender list of the DL. We also could confirm this via Set-DistributionGroup https://docs.microsoft.com/en-us/powershell/module/exchange/users-and-groups/set-distributiongroup?view=exchange-ps

The AcceptMessagesOnlyFrom parameter specifies who is allowed to send messages to this recipient. Messages from other senders are rejected. Valid values for this parameter are individual senders in your organization (mailboxes, mail users, and mail contacts). You can use any value that uniquely identifies the sender.

So you need to create mail contacts for the external users. For your reference: Bulk Create Exchange Contacts via PowerShell https://gallery.technet.microsoft.com/office/Bulk-Create-Exchange-d5dbb9e0

Jayce
  • 769
  • 4
  • 5
  • I should have clarified that the external email address has already been added as a contact. When you say any value that identifies the sender, UserPrincipalName is unique for cloud users and that is not an acceptable entry in the AuthOrigi attribute. – Crimsonfox Apr 24 '20 at 07:31
0

If you create the mail contact in Exchange on-premises server, it can be added to the DL which is also created in Exchange on-premises server. You could add it both in EAC or ADUC, in ADUC, please remember to select “Contacts”: enter image description here

If you create it directly in Office 365, it isn’t be synced into local AD, so we cannot find it in local AD, and we cannot add it to the DL.

Jayce
  • 769
  • 4
  • 5
  • Dang, I was hoping it would accept something that's outside of AD and would recognise it once it's synced to O365. I think I'll just have to revist the setup for this one. Thanks. – Crimsonfox Apr 28 '20 at 08:33