As Exchange Online continues its multi-year directory modernization, we are evaluating the future of several long-standing identifier properties: ObjectGuid (most would recognize this property as Gui...
Updated Sep 02, 2026
Version 3.0
Blog Post
1 MIN READ
Tell us how you use ObjectGuid, SamAccountName, and DistinguishedName in Exchange Online
Looking for alternatives for DistinguishedName DNs:
MemberOf in EXO, currently the only option is using DN. Also RBAC and Scoping is only possible via this.
Get-DistributionGroup -Filter "Members -eq '$DN'"
New-ManagementScope -Name $ScopeName -RecipientRestrictionFilter "MemberOfGroup -eq '$DN'"
floatkMicrosoft
Hi Satyajit321! Thanks for your input, this is exactly the kind of scenario we're trying to understand. Finding an alternative to DistinguishedName in filters that rely on group membership is one of the main reasons we launched this survey.
We understand this is a critical scenario for many admins, impacting RBAC management scopes, dynamic distribution groups, and other features.
If you have a few minutes, the survey has a section specifically on DistinguishedName that asks where these filters are defined and what you'd expect to use instead. Your input there would go directly into the evaluation.
Thank you!