Hello, I am wondering if anyone knows - is it possible to control specific Exchange sharing policy via membership in Active directory security group? I would like to control access to BookingsWithMe feature via group in AD, but I am not sure if that is possible. Many thanks for your advice, Tomas

Not directly, as sharing policies can be assigned to mailbox objects only. But you can expand the group membership and uses it as "targets" for the policy. As long as the group is synchronized to Azure AD and is of type that Exchange Online recognizes (distribution group or mail-enabled security group), you should be able to do so.

Can I assign Exchange sharing policy via AD group?

Accepted answer

Vasil Michev 100.2K Reputation points MVP

2023-03-06T06:31:44.7333333+00:00

Not directly, as sharing policies can be assigned to mailbox objects only. But you can expand the group membership and uses it as "targets" for the policy. As long as the group is synchronized to Azure AD and is of type that Exchange Online recognizes (distribution group or mail-enabled security group), you should be able to do so.
Please sign in to rate this answer.
T Crha 386 Reputation points

2023-03-06T09:42:18.9633333+00:00

Hello Vasil, thank you for your answer - can you please elaborate a bit more on how to do what you suggested? Where do I expand the group membership, somewhere in Exchange or within AD?
Can you please give an example?

Many thanks,

Tomas

Vasil Michev 100.2K Reputation points MVP

2023-03-06T12:44:58.0966667+00:00

If the group is synchronized from AD to Exchange Online, you can do something like this:

Get-DistributionGroupMember groupname | % { Set-Mailbox $_.PrimarySmtpAddress -SharingPolicy "Default Sharing Policy" }

where the current membership of the group is selected and for each member, the Set-Mailbox cmdlet is run to stamp the sharing policy.

Crha Tomáš 0 Reputation points

2023-03-06T14:05:19.1866667+00:00

Aha, I see, thank you very much!

BR,

Tomas
Sign in to comment

Share via

Can I assign Exchange sharing policy via AD group?

0 additional answers