Forum Discussion
RequireSenderAuthenticationEnabled - Distribution Groups - Exchange 2016
- Jul 12, 2023
- Can I use eDiscovery (on Exchange 2016 or something else) to check all recieveng messages or logs for a longer period?
If admin audit logging is enabled, yes. But since it was not at that time, you can't since it will only log future events.
- What was the default vaule on Exchange Server 2010 regarding "Require that all senders are authenticated")?
IIRC, default is unspecified, which corresponds to $true. Has been like that since Ex2007, same is true for Exchange Online.
- Is it possible that for some reason those settings automatically changed? Or is it more possible that the default settings for external emails was not changed when the distribution groups were created?
No, there is no policy for that. It requires configuration, either by hand, by some process. Your EXO setting is managed (synced) by AD Connect (msExchRequireAuthToSendTo).
- I tried checking event logs, tried with Powershell (Get-DistributionGroup | Where{$_.WhenChanged -gt ((Get-Date).AddMonths(-24))} and Audit log. I can´t find anything regarding changes in the mentiond setting on Exchange 2010 or Exchange 2016.
This happens always when you turn audit logging only on when it was needed before.
Now your savior might be AD Connect; if it was synced from on-premises after it was changed, AD Connect might provide details on the data it has on the object, or you can look through its logs. Cmdlets like the following might help you parse and filter instead of going through the UI 🙂
Export-ADsyncObject -DistinguishedName 'CN=GroupX,OU=Groups,DC=Contoso,DC=com' -ConnectorName 'ad.contoso.com'
- For cloud groups: `Get-UnifiedGroup | Where-Object {$_.RequireSenderAuthenticationEnabled -eq $false}`
- For distribution lists: `Get-DistributionGroup -filter * | Where-Object {$_.RequireSenderAuthenticationEnabled -eq $false}`¹
You can also export the results to a CSV file for easier filtering by running this command: `Get-DistributionGroup -ResultSize unlimited | Export-Csv c:\\1.csv`
- LeonPavesicJul 11, 2023Silver Contributor
Hi H2O,
thanks for your answer, but it doesn't answer my question. I already have that.
I am trying to find out when was the setting RequireSenderAuthenticationEnabled for each distribution group on Exchange Server 2016 changed.
Kindest regards
Leon- H2OJul 11, 2023Iron ContributorApologize. Good Luck