mail enabled security group

Glenn Maxwell 13,141 Reputation points
2023-06-06T14:43:01.1666667+00:00

Hi All

I am using exchange 2016 Hybrid environment. i have a mail enabled security group in onprem. i have added two AD security groups to this mail enabled security group. when i send email to mail enabled security group, user who are members of AD group residing in mail enabled security group are not getting emails. is this expected behavior.

Exchange Online
Exchange Online
A cloud-based service included in Microsoft 365, delivering scalable messaging and collaboration features with simplified management and automatic updates.
Exchange | Exchange Server | Management
Exchange | Exchange Server | Management
The administration and maintenance of Microsoft Exchange Server to ensure secure, reliable, and efficient email and collaboration services across an organization.
Exchange | Hybrid management
Exchange | Hybrid management
The administration of a hybrid deployment that connects on-premises Exchange Server with Exchange Online, enabling seamless integration and centralized control.
0 comments No comments
{count} votes

Answer accepted by question author
  1. Vasil Michev 123.5K Reputation points MVP Volunteer Moderator
    2023-06-06T15:16:59.29+00:00

    Security groups are not valid mail recipients, so yes, that's expected behavior.

    0 comments No comments

1 additional answer

Sort by: Most helpful
  1. Yuki Sun-MSFT 41,451 Reputation points Moderator
    2023-06-07T03:14:32.6666667+00:00

    Hi @Glenn Maxwell ,

    when i send email to mail enabled security group, user who are members of AD group residing in mail enabled security group are not getting emails. is this expected behavior.

    Yes, it's the expected behavior.

    As mentioned in this official article, security groups are mainly designed for assigning permissions to shared resources, if you want the group members to receive mails sent to the group, you'll need to create the security group as an email entity, in other words, a mail-enabled security group.

    In current situation, if you want it to work, you can consider mail enabling the two AD security groups using the steps below:

    1. Go to ADUC (Active Directory Users and Computers), convert the AD security groups to Universal (it's probably a Global at present).
      User's image
    2. Run the command below in Exchange Management Shell to mail enabled the groups:
    Enable-DistributionGroup -Identity <ADGroupIdentity>
    

    User's image


    If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

    0 comments No comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.