Owners of an on-premises distribution group synced to O365 can't manage the distribution group in Exchange Online


When an on-premises distribution group is synced to a Microsoft 365 organization through Active Directory synchronization, migrated users who are owners of the distribution group can't manage it in Microsoft Exchange Online. For example, a user may receive an error message that resembles the following:

The action '<cmdlet>', '<property>', can't be performed on the object '<name>' because the object is being synchronized from your on-premises organization. This action should be performed on the object in your on-premises organization.**


Distribution groups that are created in Microsoft 365 through directory synchronization must be managed in the on-premises environment. Distribution group owners must manage the group by using on-premises tools for Exchange Server such as the following:

  • Exchange Admin Center
  • Exchange Management Console
  • Exchange Management Shell

After changes are made to the group in the on-premises environment, the changes are synced to Microsoft 365 the next time that directory synchronization runs. Or, to see the changes immediately, you can force directory synchronization. For more info about how to force directory synchronization, go to the following Microsoft website:

Force directory synchronization

We strongly recommend that you use native Exchange tools to manage distribution groups and mail-enabled security groups in your on-premises environment. For more info, go to the following Microsoft websites:


For more info about troubleshooting managing distribution groups in Microsoft 365, see "You don't have sufficient permissions" error when you try to remove or make a change to a distribution group.

Still need help? Go to Microsoft Community.