'Sender Restrictions' for Office 365 Groups

%3CLINGO-SUB%20id%3D%22lingo-sub-286372%22%20slang%3D%22en-US%22%3E'Sender%20Restrictions'%20for%20Office%20365%20Groups%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-286372%22%20slang%3D%22en-US%22%3E%3CP%3EIn%20our%20company%2C%20as%20part%20of%20our%20move%20from%20Exchange%20on-prem%20to%20Exchange%20Online%2C%20we%20are%20considering%20replacing%20our%20current%20Exchange%26nbsp%3BDistribution%20Lists%20with%20Dynamic%20Office%20365%20Groups.%20%26nbsp%3B%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EMany%20of%20these%20top-level%20Exchange%20Distribution%20Lists%20have%20Sender%20Restrictions%20imposed%20in%20order%20to%20limit%20who%20can%20send%20an%20email%20to%20the%20DL%20membership.%20%26nbsp%3B%20For%20example%2C%20only%20certain%20users%20can%20send%20an%20email%20to%20a%20Distribution%20List%20that%20contains%20several%20thousand%20staff.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWe%20are%20unsure%20as%20to%20whether%20Dynamic%20Office%20365%20Groups%20can%20provide%20similar%20functionality.%26nbsp%3B%20From%20what%20I%20have%20read%2C%20any%20members%20of%20a%20Dynamic%20Office%20365%20Group%20have%20the%20ability%20to%20send%20an%20email%20to%20the%20entire%20group%20membership.%26nbsp%3B%20There%20does%20not%20appear%20to%20be%20any%20way%20to%20limit%20this%20ability.%20%26nbsp%3B%26nbsp%3B%20Is%20this%20correct%20%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-286372%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EOffice%20365%20Groups%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-288118%22%20slang%3D%22en-US%22%3ERe%3A%20'Sender%20Restrictions'%20for%20Office%20365%20Groups%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-288118%22%20slang%3D%22en-US%22%3E%3CP%3EBe%20aware%20that%20you%20need%20Azure%20Active%20Directory%20Premium%20P1%20licenses%20for%20every%20user%20included%20in%20a%20dynamic%20Office%20365%20Group.%20Yes%2C%20this%20is%20crazy%2C%20but%20the%20licensing%20people%20in%20Microsoft%20don't%20seem%20to%20understand%20that%20requiring%20licenses%20is%20a%20block%20to%20people%20using%20Groups.%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3ESee%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fwww.petri.com%2Fmicrosoft-clarifies-premium-features-office-365-groups%26nbsp%3B%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fwww.petri.com%2Fmicrosoft-clarifies-premium-features-office-365-groups%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-286483%22%20slang%3D%22en-US%22%3ERe%3A%20'Sender%20Restrictions'%20for%20Office%20365%20Groups%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-286483%22%20slang%3D%22en-US%22%3EThanks%20Vasil.%20Great%20answer.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-286379%22%20slang%3D%22en-US%22%3ERe%3A%20'Sender%20Restrictions'%20for%20Office%20365%20Groups%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-286379%22%20slang%3D%22en-US%22%3E%3CP%3EYou%20can%20use%20the%20Set-UnifiedGroup%20and%20the%20%22standard%22%20parameters%20to%20configure%20sender%20restrictions%3A%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3ERequireSenderAuthenticationEnabled%3C%2FP%3E%0A%3CP%3EAcceptMessagesOnlyFrom%3CBR%20%2F%3EAcceptMessagesOnlyFromDLMembers%3CBR%20%2F%3EAcceptMessagesOnlyFromSendersOrMembers%3C%2FP%3E%0A%3CP%3ERejectMessagesFrom%3CBR%20%2F%3ERejectMessagesFromDLMembers%3CBR%20%2F%3ERejectMessagesFromSendersOrMembers%3C%2FP%3E%3C%2FLINGO-BODY%3E
New Contributor

In our company, as part of our move from Exchange on-prem to Exchange Online, we are considering replacing our current Exchange Distribution Lists with Dynamic Office 365 Groups.   

 

Many of these top-level Exchange Distribution Lists have Sender Restrictions imposed in order to limit who can send an email to the DL membership.   For example, only certain users can send an email to a Distribution List that contains several thousand staff.

 

We are unsure as to whether Dynamic Office 365 Groups can provide similar functionality.  From what I have read, any members of a Dynamic Office 365 Group have the ability to send an email to the entire group membership.  There does not appear to be any way to limit this ability.    Is this correct ?

 

3 Replies

You can use the Set-UnifiedGroup and the "standard" parameters to configure sender restrictions:

 

RequireSenderAuthenticationEnabled

AcceptMessagesOnlyFrom
AcceptMessagesOnlyFromDLMembers
AcceptMessagesOnlyFromSendersOrMembers

RejectMessagesFrom
RejectMessagesFromDLMembers
RejectMessagesFromSendersOrMembers

Thanks Vasil. Great answer.

Be aware that you need Azure Active Directory Premium P1 licenses for every user included in a dynamic Office 365 Group. Yes, this is crazy, but the licensing people in Microsoft don't seem to understand that requiring licenses is a block to people using Groups. 

 

See https://www.petri.com/microsoft-clarifies-premium-features-office-365-groups