J
J
Jordan_H2021-01-20 16:37:01
PowerShell
Jordan_H, 2021-01-20 16:37:01

How can I define the hierarchy attribute in an AD distribution group so that it is True in Exchange-Online?

1. A distribution group is created in AD
2. Via Azure it flies to exchange-online
3. How to determine the hierarchy attribute in the AD group, which will be displayed in the Outlook hierarchical address book from exchange-online?

If you define hierarchical to an AD group, then there is no such parameter:
Set-adGroup -Identity "dgroup-test" -IsHierarchicalGroup $true
Set-ADGroup : Cannot find a parameter matching parameter name "IsHierarchicalGroup".

If we define the hierarchy in this group synchronized in exchange-online (posh is connected to the cloud exchange-online), then it is said that such an attribute must be changed initially in the AD group:
Set-Group -Identity "dgroup-test" -IsHierarchicalGroup $true
Cannot perform 'Set-Group', 'IsHierarchicalGroup' action on object 'dgroup-test' because the object is being synchronized with the current local organization. This action must be performed on an object in the on-premises organization.

Answer the question

In order to leave comments, you need to log in

1 answer(s)
R
Roman Bezrukov, 2021-04-07
@Jordan_H

in AD, the IsHierarchicalGroup parameter corresponds to the msOrg-IsOrganizational attribute
Possible steps (it is not necessary to complete all, but some steps can already be taken):
1. check the version of Azure AD Connect and, if necessary, update to the latest one (the current one seems to be 1.5. 45.0);
2. take the Exchange Server distribution kit and run the installer only for the schema extension (command - Setup.exe /PrepareSchema /IAcceptExchangeServerLicenseTerms) on the local CD, wait for the local AD replication with the cloud to complete and check the msOrg-IsOrganizational attribute you need everywhere;
3. Through Set-ADGroup, you can manually set this attribute to true/false:
3.1. Get-ADGroup -Properties msOrg-IsOrganizational | Set-ADGroup -Replace @{'msOrg-IsOrganizational'=$True/$False} - set attribute value to TRUE or FALSE;
3.2. Get-ADGroup -Properties msOrg-IsOrganizational | Set-ADGroup -Clear 'msOrg-IsOrganizational' - reset attribute value to "<not set>" ("")

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question