Identifying groups with RequireSenderAuthenticationEnabled $FALSE

RM 21 Reputation points

Hi All,

New to the Forums and not great with PowerShell scripts - can you advise the PowerShell command for searching all Distribution and security groups with the parameter RequireSenderAuthenticationEnabled $FALSE so I can identify any groups allowing unauthenticated senders to email to it?


Active Directory
Active Directory
A set of directory-based technologies included in Windows Server.
4,359 questions
Exchange Server Management
Exchange Server Management
Exchange Server: A family of Microsoft client/server messaging and collaboration software.Management: The act or process of organizing, handling, directing or controlling something.
6,533 questions
Windows Server PowerShell
Windows Server PowerShell
Windows Server: A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.PowerShell: A family of Microsoft task automation and configuration management frameworks consisting of a command-line shell and associated scripting language.
4,907 questions
0 comments No comments
{count} votes

Accepted answer
  1. Thameur-BOURBITA 16,591 Reputation points


    #Regaring cloud groups:
    Get-UnifiedGroup | Where-Object {$_.RequireSenderAuthenticationEnabled -eq $false}
    #Regarding the distribution list
    Get-DistributionGroup -filter * | Where-Object {$_.RequireSenderAuthenticationEnabled -eq $false}

    Please don't forget to mark helpful reply as answer

2 additional answers

Sort by: Most helpful
  1. Limitless Technology 37,786 Reputation points

    Hello @RM

    The best solution for me is Get-DistributionGroup -ResultSize unlimited | Export-Csv c:\1.csv and use Excel to filter data.

    or you can run this cmd

    Get-DistributionGroup | FT Name, RequireSenderAuthenticationEnabled


    --If the reply is helpful, please Upvote and Accept as answer--

    0 comments No comments

  2. KyleXu-MSFT 25,866 Reputation points


    You can use command below to check them:

    For Distribution group:

    Get-DistributionGroup | where{$_.GroupType -eq "Universal" -and $_.RequireSenderAuthenticationEnabled -eq $false}  

    For Security Group:

    Get-DistributionGroup | where{$_.GroupType -like "*SecurityEnabled" -and $_.RequireSenderAuthenticationEnabled -eq $false}  

    If you are using Exchange on-premises, you need to run above commands in EMS(Exchange Management Shell)

    If you are using Exchange online, you need to connect to Exchange online with PowerShell, then run above commands in it.

    If the response is helpful, please click "Accept Answer" and upvote it.
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

    0 comments No comments