Distribution list delegation not working, only for specific OU users

Aginash Mannarath 116 Reputation points
2025-01-08T11:50:06.38+00:00

I have created a restriction for a distribution group for group-A, using powershell for group-B

the group-B have two users user-A in OU-A and user-B in OU-B,

restriction is only applying for user in OU-A, i even swap the users but still same OU-B user can send the mail to the group-A even it have restriction.

Active Directory
Active Directory
A set of directory-based technologies included in Windows Server.
6,821 questions
Exchange Server Management
Exchange Server Management
Exchange Server: A family of Microsoft client/server messaging and collaboration software.Management: The act or process of organizing, handling, directing or controlling something.
7,774 questions
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. Jake Zhang-MSFT 8,400 Reputation points Microsoft Vendor
    2025-01-09T05:39:39.59+00:00

    Hi @Aginash Mannarath ,

    Welcome to the Microsoft Q&A platform!

    Based on your description, you are experiencing an issue where restrictions are being applied inconsistently between users in different OUs. There are a few steps you can take to troubleshoot and resolve this issue:

    1. Make sure that restrictions are set correctly for the distribution group. You can check the current settings using:
    Get-DistributionGroup -Identity "group-A" | Select-Object -ExpandProperty AcceptMessagesOnlyFrom
    
    1. Confirm that users in both OUs have the correct properties and permissions. Sometimes, differences in user properties can cause problems.
    2. When adding users to the restrictions list, make sure that all existing and new users are included. For example:
    $group = Get-DistributionGroup "group-A"
    $currentUsers = $group.AcceptMessagesOnlyFrom
    $newUsers = @("user-A", "user-B")
    Set-DistributionGroup -Identity "group-A" -AcceptMessagesOnlyFrom ($currentUsers + $newUsers)
    
    1. If you are in a multi-domain environment, there may be replication delays. Make sure the changes have been propagated to all domain controllers.
    2. Sometimes, organizational unit policies can override or conflict with distribution group settings. Verify that there are no conflicting policies.

    If these steps do not resolve the issue, you may need to review detailed logs or consult your Exchange administrator to ensure that there are no underlying issues with directory synchronization or permissions.


    Please feel free to contact me for any updates. And if this helps, don't forget to mark it as an answer.

    Best,

    Jake Zhang


Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.