We have hybrid environment setup. All of our user mailboxes have been migrated successfully to O365. We are now planning to migrate distribution groups, security groups, and mail-enabled security groups to O365. After reading some articles online it seems to be not possible to migrated them as we do with mailboxes. Can someone point me to official way to perform migration of each type of these groups? Also, once migrated, will their members remain same as on-prem AD?

@Kamalpreet Singh For the hybrid environment, we can synchronize distribution groups and mail-enabled security groups to the cloud with AAD. In this case, however, these groups need to be managed from on-premises. Additionally, on-premises security groups must be mail-enabled before being synced to Exchange Online. For your reference: On-premises security groups are not synced to Exchange Online in a hybrid deployment . If you want to manage these groups from O365, we have to re-create distribution groups and security groups in the cloud manually. Then add the membership, x500 addresses, and remove the on-premises groups. You can check these blogs for more details: Migrate Distribution Groups from Exchange On-Premise to Exchange Online , Migrating Distribution Groups to Office 365 . Please Note: Since the web site is not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy of this information. If the response is helpful, please click " Accept Answer " and upvote it. Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

This link is very Help Full: https://www.catapultsystems.com/blogs/migrate-distribution-groups-from-exchange-on-premise-to-exchange-online/

Migrating Distribution and Security Groups to O365

Accepted answer

Lydia Zhou - MSFT 2,376 Reputation points Microsoft Employee

2020-11-17T04:43:37.82+00:00

@Kamalpreet Singh

For the hybrid environment, we can synchronize distribution groups and mail-enabled security groups to the cloud with AAD. In this case, however, these groups need to be managed from on-premises. Additionally, on-premises security groups must be mail-enabled before being synced to Exchange Online. For your reference: On-premises security groups are not synced to Exchange Online in a hybrid deployment.

If you want to manage these groups from O365, we have to re-create distribution groups and security groups in the cloud manually. Then add the membership, x500 addresses, and remove the on-premises groups. You can check these blogs for more details:
Migrate Distribution Groups from Exchange On-Premise to Exchange Online,
Migrating Distribution Groups to Office 365.
Please Note: Since the web site is not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy of this information.

If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.
Please sign in to rate this answer.

2 people found this answer helpful.
Lydia Zhou - MSFT 2,376 Reputation points Microsoft Employee

2020-11-19T08:52:45.02+00:00

@Kamalpreet Singh

Just checking in to see if above information was helpful.
If you have any questions or need further help on this issue, please feel free to post back.

If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Lydia Zhou - MSFT 2,376 Reputation points Microsoft Employee

2020-11-23T09:09:04.717+00:00

@Kamalpreet Singh

Any updates so far?
If you have solved your problem, could you share with us? If the issue has been resolved, you can accept the helpful reply. This may be useful to other community members.

If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Kamalpreet Singh 31 Reputation points

2020-11-26T23:00:59.007+00:00

How about security groups which are used in NTFS permissions or on-prem SharePoint permissions?
If we remove and recreate them on Exchange Online, how would their permissions work with on-prem resources?

Lydia Zhou - MSFT 2,376 Reputation points Microsoft Employee

2020-11-27T09:37:04.867+00:00

Actually, there are some terminology differences between Active Directory and Exchange. For Exchange, the mail-enabled security group is also a type of distribution groups. The security groups you mentioned should be created from AAD, and they are not visible from Exchange side.
Since we mainly focus on issues about Exchange, you could get more professional suggestions from AAD support side. You could check or post a new thread with "azure-active-directory" tag. Sorry for any inconvenience.

If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

HEAL 1 Reputation point

2022-09-16T11:44:43.373+00:00

Thanks

HEAL 1 Reputation point

2022-09-16T11:46:09.35+00:00

Helpful

https://www.catapultsystems.com/blogs/migrate-distribution-groups-from-exchange-on-premise-to-exchange-online/
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

Migrating Distribution and Security Groups to O365

1 additional answer

Your answer