Forum Discussion

Copper Contributor

Apr 14, 2020

Distribution Group Restrictions

I have an all staff account DDG that was created for sending to all users in my organization. It was restricted to certain users and has worked flawless for years. Recently I noticed that the DDG is ...

exchange

PeterRising

MVP

Apr 14, 2020

Shivam_balroop It would seem unlikely that this could occur without an admin specifically changing the setting. Do you have access to Audit logs in the Security and Compliance Center? Try running an audit log search to see if anyone has updated the group. If you have Azure AD Premium P2, you can also check audit activity under Identity Governance.

Hope this helps.

Peter

Shivam_balroop

Copper Contributor

Apr 14, 2020

PeterRising

Thanks for your input. However, no changes were made on the settings. I checked the logs myself.

PeterRising
MVP
Apr 14, 2020
Shivam_balroop So just to be clear, does the group still show as restricted when you check the settings, but is acting as not restricted when in use?
- Shivam_balroop
  Copper Contributor
  Apr 14, 2020
  PeterRising
  
  That is correct in the ECP the DDG is locked to specific user who are authorized to send to it. However, when tested outside of those authorized users, apparently anyone can send.
  - PeterRising
    MVP
    Apr 14, 2020
    Shivam_balroop Guessing that you have Azure AD Premium P1 licensing?
    
    Also, have you checked the settings via PowerShell by using Get-UnifiedGroup -Identity "Groupname" | Format-List
    
    Should show who messages are accepted from in the output
PeterRising
MVP
Apr 14, 2020
Shivam_balroop Hmm, interesting. Hard to see how that could happen.