How do we set "Only senders in the organization" in office 365 from active directory attribute ?

DM Kosala Randika Paranathala 76 Reputation points
2020-11-05T14:03:04.227+00:00

37668-distribution-group-delivery-senders-inside-organiz.png

Exchange Online
Exchange Online
A Microsoft email and calendaring hosted service.
6,178 questions
{count} votes

3 answers

Sort by: Most helpful
  1. KyleXu-MSFT 26,396 Reputation points
    2020-11-06T02:17:06.247+00:00

    @DM Kosala Randika Paranathala

    This attribute is synced by AAD Connect by default, don't change this attribute from AD account directly, I would suggest you modify this attribute from Exchange on-premises(EAC or EMS), then sync this modify to local AD account, then sync to AAD.

    • When "msExchRequireAuthToSendTo" == True, the setting on group will be "Only Senders inside my organization"
    • When "msExchRequireAuthToSendTo" == False, the setting on group will be "Senders inside and outside of my organization"

    We check whether is this attribute synced by steps below:

    1. Open Synchronization Service tool, then check as picture below:
      37786-qa-kyle-1106100454.png
    2. We can know this attribute is synced by "Group Exchange" rule, then we can check this rule in Synchronization Rules Editor:
      37787-qa-kyle-1106100040.png
      If this attribute still doesn't sync in your organization, you could confirm with AAD Connect team.

    If the response is helpful, please click "Accept Answer" and upvote it.
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

    4 people found this answer helpful.

  2. Vasil Michev 119.6K Reputation points MVP Volunteer Moderator
    2020-11-05T14:11:22.747+00:00

    Use the "msExchRequireAuthToSendTo" attribute. You obviously need to have the Exchange AD schema extensions.

    2 people found this answer helpful.

  3. Pavel Marinov 5 Reputation points
    2024-11-07T13:56:42.3466667+00:00

    I have a very similar case, however in the cloud my group's attribute is set on false, I change the On-prem group object to false as well, and when I run the AdSync Delta the on-prem get's rewritten to True.... I have no custom rules what so ever and the only rule I have is an inbound one to the internal domain, that says update, which should, as far as I understand, take the cloud attribute and sync it to the on-prem group.

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.