Forum Discussion

LeonPavesic's avatar
LeonPavesic
Silver Contributor
Jul 11, 2023
Solved

RequireSenderAuthenticationEnabled - Distribution Groups - Exchange 2016

Hello, we have some Distribution groups on Exchange Server 2016 (Hybrid).   We noticed that some of our (most) distribution are not recieving external emails. We found out that the s...
  • mderooij's avatar
    mderooij
    Jul 12, 2023

    - Can I use eDiscovery (on Exchange 2016 or something else) to check all recieveng messages or logs for a longer period?

    If admin audit logging is enabled, yes. But since it was not at that time, you can't since it will only log future events.

     

    - What was the default vaule on Exchange Server 2010 regarding "Require that all senders are authenticated")?

    IIRC, default is unspecified, which corresponds to $true. Has been like that since Ex2007, same is true for Exchange Online.

     

    - Is it possible that for some reason those settings automatically changed? Or is it more possible that the default settings for external emails was not changed when the distribution groups were created?

    No, there is no policy for that. It requires configuration, either by hand, by some process. Your EXO setting is managed (synced) by AD Connect (msExchRequireAuthToSendTo).

     

    - I tried checking event logs, tried with Powershell (Get-DistributionGroup | Where{$_.WhenChanged -gt ((Get-Date).AddMonths(-24))} and Audit log. I can´t find anything regarding changes in the mentiond setting on Exchange 2010 or Exchange 2016.

    This happens always when you turn audit logging only on when it was needed before.

    Now your savior might be AD Connect; if it was synced from on-premises after it was changed, AD Connect might provide details on the data it has on the object, or you can look through its logs. Cmdlets like the following might help you parse and filter instead of going through the UI 🙂
    Export-ADsyncObject -DistinguishedName 'CN=GroupX,OU=Groups,DC=Contoso,DC=com' -ConnectorName 'ad.contoso.com'

     

Resources