question

GlennMaxwell-2309 avatar image
0 Votes"
GlennMaxwell-2309 asked emilyhua-msft edited

Rename Mail enabled security group


Hi

i am using exchange 2016 hybrid environment. i have mail enabled security group in exchange onprem. When i try to rename the Display Name of the mail enabled security group i am getting the below error.

error
Members can't remove themselves from security groups. Please set the group to Closed for requests to leave.

office-exchange-server-administrationoffice-exchange-online-itprooffice-exchange-server-mailflowoffice-exchange-hybrid-itpro
· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hi @GlennMaxwell-2309

I am writing to see how everything is going on with this thread. If you still have further concern on this, please feel free to let us know.


If an Answer is helpful, please click "Accept Answer" and upvote it.

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.



0 Votes 0 ·
joyceshen-MSFT avatar image
0 Votes"
joyceshen-MSFT answered

Hi @GlennMaxwell-2309

Is your security group converted from a distribution group? If yes, you could take a reference at the issue introduced here:
Exchange | Members can't remove themselves from security groups....
Please Note: Since the web site is not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy of this information.
213722-image.png

However I tried the opeation in my environment convert my distribution group to a security group, and changed the attribute value wait for AD replication, it doesn't work.
So a workaround here, you could convert this security group to distribution group, then you will be able to perform the change name opertaion, after that, convert it back to SG again.


If an Answer is helpful, please click "Accept Answer" and upvote it.

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.




image.png (119.7 KiB)
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

joyceshen-MSFT avatar image
0 Votes"
joyceshen-MSFT answered

Hi @GlennMaxwell-2309

Where did you perform the operation? Changes need to be made on-premises, then sync to cloud.

 Set-DistributionGroup -Identity "identity" -DisplayName "new name"

And for the error you shared above, Members can't remove themselves from security groups. Please set the group to Closed for requests to leave.

That's related to the parameter -MemberDepartRestriction

The MemberDepartRestriction parameter specifies the restrictions that you put on requests to leave the group. Valid values are:

  • Open: Members can leave the group without approval from one of the group owners. This is the default value for universal distribution groups. You can't use this value on universal security groups.

  • Closed: Members can't remove themselves from the group, and requests to leave the group are rejected automatically. Group membership is controlled by the group owners. This is the default value for universal security groups.

    Set-DistributionGroup -Identity "identity" MemberDepartRestriction Open


If an Answer is helpful, please click "Accept Answer" and upvote it.

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.



5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

GlennMaxwell-2309 avatar image
0 Votes"
GlennMaxwell-2309 answered

i am performing this in exchange onprem as the mail enabled security group is in onprem

Set-DistributionGroup -Identity mailenabledgroup@contoso.com MemberDepartRestriction Open
A positional parameter cannot be found that accepts argument 'MemberDepartRestriction'.
+ CategoryInfo : InvalidArgument: (:) [Set-DistributionGroup], ParameterBindingException
+ FullyQualifiedErrorId : PositionalParameterNotFound,Set-DistributionGroup
+ PSComputerName : onpremexchange@contoso.com

Set-DistributionGroup -Identity mailenabledgroup@contoso.com -DisplayName "NEW DisplayName"

Members can't remove themselves from security groups. Please set the group to Closed for requests to leave.
+ CategoryInfo : NotSpecified: (:) [Set-DistributionGroup], RecipientTaskException
+ FullyQualifiedErrorId : [Server=onpremexchange,RequestId=14a50702-1aee-4183-8378-e1d98758599d,TimeStamp=6/22/2022 3:10:30 AM] [FailureCategory=Cmdlet-RecipientTaskException] D5D7042F,Microsoft.Exchange.Manageme
nt.RecipientTasks.SetDistributionGroup
+ PSComputerName : onpremexchange@contoso.com

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.