Exclude "Sign in Blocked" user from dynamic distributiom list

[TimRoering]

Hi all,

I am trying to exclude a user that has the sign in blocked from the dynamic distrution list.

I already tried adding a custom attribute to exclude the user but it didn't work.

Can someone help me figure this out?

[#2]

There's no built-in attribute you can filter on, AccountDisabled/ExchangeUserAccountControl are not supported. Custom attributes should work just fine though, the problem is keeping them in sync with the BlockCredentials value.

If you don't necessarily need this to be an Exchange group, use a an Azure AD group with dynamic membership. Here's an example filter:

(user.accountEnabled -eq true)