0 votes

Hello,

I am trying to do as best as I can researching the best and effective way to manage the properties of Office 365 Exchange Properties with Adaxes (Latest Version) while in an environment using Azure AAD Connect and Microsoft Exchange Online. I do not have an on-prem Exchange Server.

The issue I am facing is that I am not able to edit the exchange properites. Anytime I try manually or with a business rule/scheduled task, I get an error message "Property Require Sender Authentication Enabled cannot be modified in Microsoft 365 because the object is being synchronized from your on-premises organization. In order to be able to modify the property, you need to extend your local Active Directory schema with Exchange attributes." The property name is different depending on what the property is.

I noticed it appears that only AD Distribution Lists are the objects having issues, noting that I can change the MailTip Manually for example, only on users and shared mailbox accounts, but not Distribution Lists. As you can see it failed for the Distribution List: image.png

I have connected my Cloud Tenant using User Authentication, and not as an Application, against a service account with Global Administrator Permissions: image.png

I can see the exchange properties when viewing a Distribution List. I was trying to read up on the requirements in the guide but I cannot find any guides that say I need to set it up one way or the other.

I know other companies use this in the same context, but I am unaware of how exactly they fully intergrate it. Not sure if there is a command or config I missed for adjusting the Distribution Lists.

by (490 points)
edited by
0

Hello,

For troubleshooting purposes, please, do the following:

  • Post here or send us at support@adaxes.com a screenshot of the Multi-server environment dialog. The dialog displays how many Adaxes services you have and what their versions are. For information on how to view it, see https://www.adaxes.com/help/MultiServerEnvironment.
  • Enable Exchange request logging, reproduce the issue, and check the trace file for corresponding errors/warnings. If you are not sure, you can post the errors/warnings here or send us the entire trace file at support@adaxes.com.
0

I only have 1 Instance: image.png

Here is the output of a successful Mailtip Change on a User/Shared Mailbox:

"[12/19/2023 18:31:50] Set-Mailbox -Identity "Identity ID Removed" -MailTip "test" -Force "True"
[12/19/2023 18:31:51] Succeed"

Here is the output of an attempt at changing the Mailtip on a Distribution List:

[12/19/2023 18:32:34] Get-DistributionGroup -Identity "Identity ID Removed"
[12/19/2023 18:32:34] Succeed
[12/19/2023 18:32:34] Set-DistributionGroup -Identity "Identity ID Removed" -MailTip "test"
[12/19/2023 18:32:35] System.Exception: |System.InvalidOperationException|The operation on Identity "#AllEmployees" failed because it's out of the current user's write scope. The action 'Set-DistributionGroup', 'MailTip', can't be performed on the object 'TestDL' because the object is being synchronized from your on-premises organization. This action should be performed on the object in your on-premises organization.
   at #Dh.#Jh.#l.#5w.#VZc(RunspacePool runspacePool, PSCommand psCommand, String[]& warnings)
   at #Dh.#Jh.#l.#5w.Execute(#Gh command)
   at #Dh.#Fsf.Execute(#Gh command)
   at #ik.#hXe.Execute(#Gh command)

1 Answer

0 votes
by (12.4k points)

Hello,

Thank you for the provided details. The behavior is expected and is not related to Adaxes itself. The thing is when you create a distribution group with an email address, the Microsoft Entra Connect (former Azure AD Connect) utility synchronizes it and the group becomes a distribution list in Exchange Online. However, the group is considered as synchronized from on-premises, as such it must be managed in on-premises Active Directory. But if the on-premises Active Directory schema is not extended with Exchange properties, it is not possible to modify the Exchange properties either in Exchange Online or in the on-premises Active Directory. To be able to modify the Exchange properties of synchronized distribution groups, your on-premises Active Directory schema must be extended with Exchange attributes.

Related questions

0 votes
1 answer

Hello, When i'm trying to get exchange information on the adaxes site, it got the following error message: "The input object cannot be bound to any ... Tools installed on adaxaes server - Adaxes User has Exchange Administrator Rigths on the mailserver

asked Sep 10, 2013 by wies.j (20 points)
0 votes
0 answers

Hi all, We have Adaxes running in our environment. We don't have an on-prem Exchange environment, everything is in Exchange online. Our existing distrubution groups all ... how to get the exchange properties back for newly created groups? Kind regards, Eddy

asked Dec 8, 2022 by eddy1985 (20 points)
0 votes
1 answer

How can I allow manager of distribution group to edit just email aliases (proxy addresess) of that group? Not the primary SMTP address.

asked Nov 19, 2019 by KIT (910 points)
0 votes
1 answer

We have just installed Adaxes for testing in our environment which has on-premise AD with Office 365 (no on-prem Exchange). Our use deprovisioning is comprised of two ... wrong, or does Adaxes not operate in a wholly Office 365 environment in this regard?

asked Sep 30, 2020 by jamiew (50 points)
0 votes
1 answer

Good Day I've found what i want and is this Scripts Repository https://www.adaxes.com/script-repository/output-the-last-time-a-distribution-list-received-mail-s122.htm. Is ... in to a Report with the addition to add one more then one Distribution? Thank you

asked May 11, 2022 by Sandberg94 (340 points)
3,411 questions
3,108 answers
7,912 comments
545,860 users