When changing from Distribution to Security, what is the impact or consequence?

Question

What is the impact or consequences when changing the group type from Distribution to Security group?

From:

Into:

Is the inbound email flow still working or stopped due to the AD group changes from On-premise AD DS?

I cannot select the AD Distribution group despite the Azure AD connect working in synching the objects to my Azure AD / Entra ID.

URL: https://admin.microsoft.com/#/rbac/directory/:/rbac/directory/9b895d92-2cd3-44c7-9d02-a6ac2d5ea5c3/details/assigned

Answer 1

@Anonymous

The main impact should be that the group is no longer available for email distribution. As far as I am aware though, the inbound flow shouldn't be affected.

In Azure AD Connect, all three group types/scopes (Universal, Global, and Domain Local) can be synchronized, but there are limitations around the domain local and global scopes.

If you use group writeback, for instance, all groups are written back with the group scope of universal.

Where are you unable to select the distribution group? In order to synchronize the distribution group, you need to make sure that the following attributes are filled out: mail, displayName

If those are not filled, you may have issues with the synchronization.

If these are already set, please provide more details about where you are unable to select the group and provide additional screenshots, and I'll happily help troubleshoot.