Hi, I have a forest with a parent and two child domains, and I'm trying to make a dynamic distribution group that only contains users who live in the parent domain. I want to avoid using custom attributes if I can. When I set up the group, and set the scope to the parent domain, it includes all users in the forest, instead of limiting to those in the parent domain. I can't seem to find any filterable properties that will help me with this. Ideally, what I want to do is set up a group which will contain members of the parent domain AND one of the child domains, but I'll settle for just having only the parent domain for now..

using -RecipientContainer as in the example below, you can specify the domain name New-DynamicDistributionGroup -Name "Marketing Group" -Alias "Marketing_Group" -IncludedRecipients "MailboxUsers,MailContacts" -OrganizationalUnit "contoso.com/Users" -ConditionalDepartment "Marketing","Sales" -RecipientContainer "contoso.com"

Sorry, I wasn't clear. When I said I set the scope of the dynamic group to the parent domain, I meant the RecipientContainer. So, with -RecipientContainer "contoso.com", all users of contoso.com, as well as child1.contoso.com and child2.contoso.com become part of that group

try using the RecipientContainer and specify your domain only which you want to include, i.e your child domain http://technet.microsoft.com/en-us/library/bb125127.aspxSukh

I am trying to get only users in the parent domain, I want to leave all child domain users out of this group. Before posting this, I did try using a child domain for the ReceipientContainer, and that did work as expected (only users in the child domain were included in the group). The problem is that by specifying the parent domain as the RecipientContainer, it is including all users from the parent and child domains

Ok, now that it is clear what you want to do. You have to do this in two step process Set the Recipient Scope to only parent domain and then run New-dynamicdistributiongroup cmdlet. To understand how to set Recipient scope see http://technet.microsoft.com/en-us/library/aa996861.aspx http://technet.microsoft.com/en-us/library/dd298063.aspx

1. Post your syntax. 2. Try New-DynamicDistributionGroup -Name "Marketing Group" -Alias "Marketing_Group" -IncludedRecipients "MailboxUsers" -OrganizationalUnit "contoso.com/Users" -RecipientContainer "your parent domain" 3. Also see this. - http://www.eggheadcafe.com/microsoft/Exchange-Admin/32873956/dynamic-groups-ignoring-recipientcontainer.aspxSukh

1. Syntax is: New-DynamicDistributionGroup testRoot -organizationalunit "ou=distribution,ou=groups,dc=contoso,dc=com" -recipientfilter {(RecipientType -eq 'UserMailbox')} -recipientcontainer "contoso.com" 2. Your syntax produces the same results as mine 3. This brings up something interesting: Right now I have 2 dynamic groups, testRoot and testChild. Both created with the same syntax as above, except testChild uses child.contoso.com as the RecipientContainer. When I preview testRoot in EMC, it has recipients in all domains. When I preview testChild in EMC, it only has recipients in the child domain (as expected). However, this syntax to view the groups in the shell (http://technet.microsoft.com/en-us/library/bb232019.aspx): $MarketingDepartment = Get-DynamicDistributionGroup -Identity "Marketing Department" Get-Recipient -RecipientPreviewFilter $MarketingDepartment.RecipientFilter produces a list of only users in the parent domain, for BOTH of the distribution lists. What do I trust here? EMC or the shell? According to the shell, testRoot is working fine and testChild is not; according to EMC, testChild is working fine and testRoot is not. I can't really just go and test this as I'd be sending test messages to potentially every user in the organization. LMurthy, I will take a look at those articles either tonight or tomorrow. Thanks.

1. Create some some test users in both domain and D'sL and reproduce the above and test. 2. Send emails and see result.Sukh

Hi, You could create the dynamic distribution group via EMC as the following setups. 1. Expand to “recipient configuration”àDistribution GroupàClick “New Dynamic Distribution Group” a. Input the Name and Alias b. using the default Exchange organization Click next 2. Set the RecipientContainer as “contoso.com” and include “all recipient types”, then click Next 3. Conditions I think all the recipients should in different “State or Province”, You could use this condition to filter the member of the dynamic distribution group. 4. Click next to finish the process. Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.