Mail enable a security group

[Shadow_Walker]

Ok this is driving me insane. I need to create a security group which is mail enabled so i can distribute a calendar to staff. Anyone know the best steps to take in AD and in office 365?

[Steve21]

Change Security group in AD to universal, add email address, force/wait for sync to 365

 

Steve

[Shadow_Walker]

Change Security group in AD to universal, add email address, force/wait for sync to 365

 

Steve

 

Already tried that but it is still not showing in office 365 admin console even after forcing a sync

[Steve21]

That's all you should need to do. What's your sync say about it when it's sync'ing it across? It should just show up as a Mail-enabled security group

 

I assume you're not filtering out groups or anything in your sync dependant on your OU layout?

 

If on your DC you run:

 

 get-adgroup -identity "groupname" | fl 

 

Does it show it as changed scope?

 

Steve

Edited November 27, 2017 by Steve21

[stevec_]

Make sure you have groups enabled to sync in your AD connector.

Right-click on your domain connector and choose Properties then under Object Types you can choose what will be synced and what won't be.

[Shadow_Walker]

That's all you should need to do. What's your sync say about it when it's sync'ing it across? It should just show up as a Mail-enabled security group

 

I assume you're not filtering out groups or anything in your sync dependant on your OU layout?

 

If on your DC you run:

 

 get-adgroup -identity "groupname" | fl 

 

Does it show it as changed scope?

 

Steve

 

it has picked up the older security groups and we are a MAT and other have synced it is just this one has not. Where in the reports can i check?

 

Is that a powershell script?

[Steve21]

Yep that's powershell.

 

If you do something like just change one letter/add a space in the name of the group, then force a sync it should show under the latest delta sync as an "update" which you can double click etc to get more info.

 

If it's not showing up sounds like it's filtered out or you aren't sync'ing that OU etc

 

Steve

[Shadow_Walker]

Yep that's powershell.

 

If you do something like just change one letter/add a space in the name of the group, then force a sync it should show under the latest delta sync as an "update" which you can double click etc to get more info.

 

If it's not showing up sounds like it's filtered out or you aren't sync'ing that OU etc

 

Steve

 

Ok it is showing up in office 365 now. Issue now is i gave myself that security group but when i share a calendar with that group i get nothing???

[Steve21]

How are you sharing it? If you set full permissions on it it should automatically appear in outlook etc (assuming you're using the desktop one), If you did mini permissions they'd have to add it manually (again desktop outlook).

 

Or did you do a share share and were expecting an email to arrive to click on etc?

 

Steve

[Shadow_Walker]

How are you sharing it? If you set full permissions on it it should automatically appear in outlook etc (assuming you're using the desktop one), If you did mini permissions they'd have to add it manually (again desktop outlook).

 

Or did you do a share share and were expecting an email to arrive to click on etc?

 

Steve

Ok this was my setup.

 

Created an ad account called calendar and then gave it office 365 licenses. Go to office 365 and go to calendar and press share and then typed in the security group that i created.

[Shadow_Walker]

Anyone got any ideas?

[Steve21]

When you did the share, did you do it via email invite or permissions etc?

 

If I remember right permission wise doesn't add it to their account automatically (unless full permissions), they'd need to manually add it if editor etc.

 

If it's via email did they receive any emails to accept? Or is that what they're missing?

 

Steve