Forum Discussion
ERROR: The action 'Set-DistributionGroup', 'AcceptMessagesOnlyFromSendersOrMembers', can't be perfor
The fix is to configure this on-premises, as with pretty much any other scenario involving dirsync. Namely, edit the authorig attribute to include the users you need.
Full list of related attributes can be found for example here: https://support.microsoft.com/en-us/help/2618066/how-to-manage-exchange-dynamic-distribution-group-restrictions-and-dis
Use PowerShell:
Set-ADObject "DG" -replace @{authorig="DN of the object you want to grant permissions"}
VasilMichev Thanks!!
This resolved my issue. Once I added one member using PowerShell (running as domain administrator) on my domain controller, I was able to edit it using the regular ADSI edit tool.
The golden rule is to always manage objects in the environment they belong to. In this case, the DL belongs to the on-premises organization, so you must manage it there. If it were a cloud object, you could manage it with the Office 365 tools.
