Hiding users from Global Address List (GAL)

Anonymous
2021-12-22T16:55:22+00:00

Hi, I've been working to remove former employees from my GAL and really have been struggling to find a solution that works. I have tried many different ways including: “msExchHideFromAddressLists” in AD, making sure the account has a mailNickname and email set in the attribute editor. I have tried using the PowerShell CMD "Set-ADUser 'user' -Replace @{msExchHideFromAddressLists=$true}" and it takes the command but it does not seem to sync. I have even tried to hide the user from the Exchange Admin Center and I get the attached error message. There are no errors in the DirSync section. I'm out of ideas. Thank you for your help.

Microsoft 365 and Office | Install, redeem, activate | For business | Other

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments
Answer accepted by question author
Anonymous
2021-12-23T02:02:20+00:00

Hello Joey,

First the error you provided above is expected when you tried to make changes to the users who were synced from local AD, as the changes need to be done from AD then sync to Microsoft 365 Azure AD/Exchange Online.

Since you have set up the attribute "msExchHiddenFromAddressLists" in local AD, my understanding is you still have active on-premises Exchange server in your local environment, please clarify if I misunderstand your scenario, thanks. Generally if the AD account (******@contoso.com) has this attribute set to True, with mailnickname set to User, and mail attribute was set to ******@contoso.com, the msExchHiddenFromAddressList should also be synced to Azure AD side, please double check the attributes above in your local AD.

Also, as far as I know if you are using AAD Connect Sync, the attribute "msExchHiddenFromAddressList" was not synced by default, and we need to enable "Exchange Hybrid" in the AAD Connect Sync to make this attribute synced to Cloud side, please double check if you enabled "Exchange Hybrid" in your AAD Connect if you are using. if so, in this case please open the Synchronization Service Manager from your AAD Connect Sync server > Metaverse Search > Connectors > double check both connectors ( on-premises AD and Azure AD ) > check if you could find the attribute "mxExchHiddenFromAddressLists" with true there. For your reference

If you could find this attribute in both connectors from your server manager, in this time, please connect to Exchange Online PowerShell and run Get-Recipient ******@domain.com | FL *HiddenFromAddressListsEnabled* to see the result

Please feel free to let me know if you got any further updates, thanks.

Best Regards,

Oliver

Was this answer helpful?

5 people found this answer helpful.
0 comments

15 additional answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Anonymous
    2022-01-03T17:35:57+00:00

    Hi Oliver,

    Happy New Year.

    I seem to be having trouble locating this page on my AAD Connect

    I apologize, but do you mind walking me through where I can locate this section? Thank you.

    Was this answer helpful?

    0 comments
  2. Anonymous
    2021-12-28T02:39:16+00:00

    Hello Joey,

    If you need any further help, welcome to share with me, thanks.

    Best Regards,

    Oliver

    Was this answer helpful?

    0 comments
  3. Anonymous
    2021-12-24T01:59:15+00:00

    Hello Joey,

    Thanks for your updates with patience.

    According to your description " It does not appear we have any agents downloaded in AAD Connect." may I double confirm if this means you didn't have AAD Connect Sync installed in your environment? Generally, if you have on-premises Exchange server (Exchange 2010 or above), and with the first time to install the Microsoft AAD Connect in your local AD ( DC), you would be able to enable " Exchange Hybrid" feature in the AAD Connect Sync. For your reference

    Please double check your current configurations on the AAD Connect Sync, and see if it was enabled or not, thanks.

    Welcome to share with me if you got any further updates, thanks.

    Best Regards,

    Oliver

    Was this answer helpful?

    0 comments
  4. Anonymous
    2021-12-23T19:31:36+00:00

    Hi Oliver,

    Thank you for responding.

    I do have on-premises Exchange server in my local environment. It does not appear we have any agents downloaded in AAD Connect. Do I need to have a corresponding agent downloaded in order to locate and enable "Exchange Hybrid"?

    Thanks!

    Joey

    Was this answer helpful?

    0 comments