Dynamic Distribution Group with no Disabled Accounts

Question

Hi&nbsp;I'm trying to build a few Dynamic Distribution Lists in Exchange Online and want to only include Active Users (i.e., users that are marked "Active" in Azure AD). I've tried using the&nbsp;UserAccountControl&nbsp;attribute (-eq 514 or -ne 514 - both are returning the same results, which is strange), but it still includes user accounts that are disabled. This is how my recipient filter looks like:&nbsp;&nbsp; &nbsp; &nbsp; RecipientType -eq 'UserMailbox' -and UserAccountControl -ne 514&nbsp;What's the best way to achieve this in Exchange Online?&nbsp;&nbsp;ThanksTaranjeet Singh&nbsp;&nbsp;

vasilmichev · Answer

Try this:{RecipientType -eq "UserMailbox" -and ExchangeUserAccountControl -ne "AccountDisabled"}

charles_thecyberguy · Answer

unfortunately this doesn't work either.

sajjad · Answer

New-DynamicDistributionGroup -Name "ActiveUsersDDL" -RecipientFilter "((RecipientFilter -like "*") -and (UserAccountControl -band 2) -eq 0)" -RecipientContainer "OU=Users,DC=yourdomain,DC=com"

# Replace with your OU path

ankido · Answer

Hi TaranjeetSM11,Yes, you can create a Dynamic Distribution Group in Exchange Online using PowerShell and exclude disabled accounts.Solution 1: In Exchange Online, use the AccountDisabled attribute in your filter rule. A disabled account in Entra ID will have AccountDisabled -eq $trueNew-DynamicDistributionGroup -Name "ActiveUsersOnly" -RecipientFilter { 
    (RecipientType -eq 'UserMailbox') -and (AccountDisabled -ne $true) 
}Solution2: If AccountDisabled doesn’t work, you can filter based on UserPrincipalName, as disabled users sometimes lack a valid UPN.&nbsp;New-DynamicDistributionGroup -Name "ActiveUsersOnly" -RecipientFilter { 
    (RecipientType -eq 'UserMailbox') -and (UserPrincipalName -like '*@*') 
}&nbsp;If you need any more help, feel free to reach out.

tiberia · Answer

These dont work and throw an error that the filter syntax is invalid.&nbsp;I dont understand Microsoft sometimes.&nbsp;

Forum Discussion

Dynamic Distribution Group with no Disabled Accounts

Share

Resources