Forum Discussion
ERROR: The action 'Set-DistributionGroup', 'AcceptMessagesOnlyFromSendersOrMembers', can't be perfor
error in setting sending restriction to distribution group
The action 'Set-DistributionGroup', 'AcceptMessagesOnlyFromSendersOrMembers', can't be performed on the object 'ContosoALL' because the object is being synchronized from your on-premises organization. This action should be performed on the object in your on-premises organization.”
we prevoisly have Exchange 2010 onprem and migrated all users to Office 365, have AAD connect.
Any known fix?
Thanks
12 Replies
The fix is to configure this on-premises, as with pretty much any other scenario involving dirsync. Namely, edit the authorig attribute to include the users you need.
Full list of related attributes can be found for example here: https://support.microsoft.com/en-us/help/2618066/how-to-manage-exchange-dynamic-distribution-group-restrictions-and-dis
Use PowerShell:
Set-ADObject "DG" -replace @{authorig="DN of the object you want to grant permissions"}
The golden rule is to always manage objects in the environment they belong to. In this case, the DL belongs to the on-premises organization, so you must manage it there. If it were a cloud object, you could manage it with the Office 365 tools.
Mmm...extrange and interested on learning what is happening here....tagging VasilMichev
