We have a particular security group set up in Active Directory. Is there a way to restrict exchange shared mailboxes, and dynamic groups to only people that are not in that active directory security group?

Also, maybe a way to remove people that are already in there that we have to remove short of manually going through all users? (which is over 1000)

Thanks

Bill

• Moved by Jason Johnston [MSFT]Microsoft employee 17 hours 1 minutes ago Not a development question.

This forum is for Exchange development. Your question seems more suited to the Exchange admin forum on TechNet. I'll move it over for you.

You can simply restric other DL's or Single Users from sending to a specific Distribution Group. You can script this via powershell as well if you have do this for a lot of DL's or Users.

Example.

Get-DistributionGrou -identity group1 | set-DistributionGroup -RejectMessagesFromDLMembers Group2 -RejectMessagesFrom user2

Will.

• Edited by Will Szymkowski- 16 hours 39 minutes ago

Hi,

According to your description, you dont want the users in that security group have the permission on the shared mailbox, and you dont want the dynamic groups contains the users in the security group, right?

If yes, this script will remove all permissions on the shared mailbox for the users in security group.

$UserMailbox = Get-DistributionGroupMember Security1
foreach ($Mailbox in $UserMailbox){
Remove-MailboxPermission shared -User $Mailbox.Identity
}

About dynamic group, it depends on how you configure the RecipientFilter of dynamic group.

Bes