Rename Mail enabled security group

Question

Hi

i am using exchange 2016 hybrid environment. i have mail enabled security group in exchange onprem. When i try to rename the Display Name of the mail enabled security group i am getting the below error.

error
Members can't remove themselves from security groups. Please set the group to Closed for requests to leave.

Answer 1

Hi @Glenn Maxwell

Is your security group converted from a distribution group? If yes, you could take a reference at the issue introduced here:
Exchange | Members can't remove themselves from security groups....
Please Note: Since the web site is not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy of this information.

However I tried the opeation in my environment convert my distribution group to a security group, and changed the attribute value wait for AD replication, it doesn't work.
So a workaround here, you could convert this security group to distribution group, then you will be able to perform the change name opertaion, after that, convert it back to SG again.

---

If an Answer is helpful, please click "Accept Answer" and upvote it.

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

Hi @Glenn Maxwell

Where did you perform the operation? Changes need to be made on-premises, then sync to cloud.

Set-DistributionGroup -Identity "identity" -DisplayName "new name"  

And for the error you shared above, Members can't remove themselves from security groups. Please set the group to Closed for requests to leave.

That's related to the parameter -MemberDepartRestriction

The MemberDepartRestriction parameter specifies the restrictions that you put on requests to leave the group. Valid values are:

• Open: Members can leave the group without approval from one of the group owners. This is the default value for universal distribution groups. You can't use this value on universal security groups.
• Closed: Members can't remove themselves from the group, and requests to leave the group are rejected automatically. Group membership is controlled by the group owners. This is the default value for universal security groups. Set-DistributionGroup -Identity "identity" MemberDepartRestriction Open

  ---

If an Answer is helpful, please click "Accept Answer" and upvote it.

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 3

i am performing this in exchange onprem as the mail enabled security group is in onprem

Set-DistributionGroup -Identity mailenabledgroup@Company portal .com MemberDepartRestriction Open
A positional parameter cannot be found that accepts argument 'MemberDepartRestriction'.
+ CategoryInfo : InvalidArgument: (:) [Set-DistributionGroup], ParameterBindingException
+ FullyQualifiedErrorId : PositionalParameterNotFound,Set-DistributionGroup
+ PSComputerName : onpremexchange@Company portal .com

Set-DistributionGroup -Identity mailenabledgroup@Company portal .com -DisplayName "NEW DisplayName"

Members can't remove themselves from security groups. Please set the group to Closed for requests to leave.
+ CategoryInfo : NotSpecified: (:) [Set-DistributionGroup], RecipientTaskException
+ FullyQualifiedErrorId : [Server=onpremexchange,RequestId=14a50702-1aee-4183-8378-e1d98758599d,TimeStamp=6/22/2022 3:10:30 AM] [FailureCategory=Cmdlet-RecipientTaskException] D5D7042F,Microsoft.Exchange.Manageme
nt.RecipientTasks.SetDistributionGroup
+ PSComputerName : onpremexchange@Company portal .com