Forum Discussion

paulow1978's avatar
paulow1978
Copper Contributor
Jan 02, 2020

Struggling with hybrid send as permissions for distribution group

Hi,

 

We are in the middle of moving over to Exchange online from an Exchange 2010 organisation. We have AD connect working ok and office 365 is integrated to a certain degree. Mail flow is working correctly between on premises and online however, we still have email coming in to our org and then being passed to Exchange online plus sending email is coming from online through our org then out to the internet. We have moved over all our users pretty much to online now and repointed their outlook clients. All seemed to be ok however, we have a wierd issue with a distribution group that was created pre the move. This is probably the same issue for all our distribution groups I am am guessing. basically, a user wants send as permissions for the DG. I have added the permissions on our exchange 2010 server through powershell and also checked in the security permissions of the distribution group object in AD. It is there. however, the user cannot send emails on behalf of the distribution group. She has an online mailbox. I forced a sync in AD connect but still no luck. In exchange online, I can see the distribution group but the send as permissions are not in the grant delegation area. I suspect that this is not supported but i dont now how to fix it. If anyone has any insights or ideas please let me know. We have not moved fully to Azure AD so on premises is readwrite and online AD is read only.

 

thanks in advance for any help!

 

Paul

 

Distribution Group
exchange
hybrid

2 Replies

    • paulow1978's avatar
      paulow1978
      Copper Contributor
      Jan 03, 2020

      VasilMichev 

       

      Thanks, I have tried this and it has worked. I added the user on premise to the send as permissions on the AD object security settings of the distribution group. The opened up power shell to set up the online send as permissions by following these instructions:

       

      1. $UserCredential = Get-Credential
        1. When prompted, enter your O365 admin credentials.
      2. $Session = New-PSSession -ConfigurationName Microsoft.Exchange -ConnectionUri https://outlook.office365.com/powershell-liveid/ -Credential $UserCredential -Authentication Basic -AllowRedirection
      3. Import-PSSession $Session -DisableNameChecking
      4. Add-RecipientPermission -Identity "SharedMailbox" -Trustee UserWhoNeedsSendAs -AccessRights SendAs

      I also restarted the information store on the on premises exchange server.

       

      Paul

       

Resources