Forum Discussion

WhamboMPS's avatar
WhamboMPS
Copper Contributor
Nov 19, 2023

LainRobertson,

 

Thank you so much for your detailed reply. What you are describing makes sense and I liked your idea of bucketing all users to be whitelisted into their own purpose-built Group and then using the AcceptMessagesOnlyFromDLMembers parameter to enable the members of that Group to message other Groups. I tried to find the appropriate settings in the EAC but had no luck. But that's OK: I'm game to try to do it in PowerShell (I have successfully executed other commands in PS, I'm just verrrryyyyy slow!)

 

So, riddle me this. Assume that I want all enabled accounts, both Member and Guest, to be able to send messages to a specific Group. I think I could achieve this by doing the following:

 

  • Create a https://entra.microsoft.com/#view/Microsoft_AAD_IAM/GroupsManagementMenuBlade/~/AllGroups/menuId/AllGroups titled All Active Users. It would have a Dynamic Membership Rule of:

 

(user.accountEnabled -eq TRUE)

 

  • Execute the following PowerShell command:

 

Set-DistributionGroup -Identity "GroupNameToModify" -AcceptMessagesOnlyFromDLMembers "All Active Users"​

 

  • Lather, rinse, and repeat the second step for each Group I wish to do this for by modifying the -Identity value.

 

Does this smell right to you? If so, give me two hours and I'm sure I can pull it off! 😉

 

Thanks,

 

Ted (the world's least efficient PowerShell user)

LainRobertson's avatar
LainRobertson
Silver Contributor
Nov 19, 2023

WhamboMPS 

 

With respect to the cell in your tables where "External users not registered on the tenant = No" for sending to groups, if you have a need for such external senders to be able to do so, you can.

 

If you create a new contact based on that external sender's e-mail address in Exchange Online, then you can use that contact object in the whitelist to allow the external sender to leverage your distribution list.

 

I use this approach when vendors needs to be able to send directly to well-defined groups of users.

 

 

Contacts can also be included as members of Exchange distribution lists, meaning you can still leverage the control group, if you choose to do so.

 

Cheers,

Lain

Resources