Distribution Group

Exchange-style distribution lists and dynamic distribution lists. Open DLs accepting external mail are a phishing relay risk.

Part of the Exchange inventory.

Scan settings

Default scanning interval	Allowed scanning intervals	Data removal during incremental scan
Monthly	Daily, Weekly, Bi-Weekly, Monthly, Never, Initial	Yes

Properties

Property	Type	Description	Automation placeholder
Accepts External Mail	Boolean	Convenience flag: NOT(RequireSenderAuthenticationEnabled).	{{DistributionGroup.AcceptsExternalMail}}
Initially Scanned	DateTime	Shows when this object was initially found in a scan.	{{DistributionGroup.CreatedTime}}
Group Name	String		{{DistributionGroup.DisplayName}}
Group Id	String		{{DistributionGroup.GroupId}}
Group Type	String	Distribution, Security, MailUniversalDistributionGroup, MailUniversalSecurityGroup, RoomList, etc.	{{DistributionGroup.GroupType}}
Has Owners	Boolean	True when ManagedBy contains at least one user.	{{DistributionGroup.HasOwners}}
Hidden From Address Lists	Boolean		{{DistributionGroup.HiddenFromAddressListsEnabled}}
Is Dynamic	Boolean		{{DistributionGroup.IsDynamic}}
Last scan update	DateTime	Shows when this object was last updated in a scan. If an object is found during a scan but no property has been changed this date will not change.	{{DistributionGroup.LastModifiedTime}}
Managed By	String[]	Owners listed on the group. Empty list = ungoverned.	{{DistributionGroup.ManagedBy}}
Member Count	Int32		{{DistributionGroup.MemberCount}}
Member Depart Restriction	String	Allowed values: Closed, Open.	{{DistributionGroup.MemberDepartRestriction}}
Member Join Restriction	String	Allowed values: ApprovalRequired, Closed, Open.	{{DistributionGroup.MemberJoinRestriction}}
Primary SMTP Address	String		{{DistributionGroup.PrimarySmtpAddress}}
Recipient Filter	String	OPATH filter for dynamic DLs.	{{DistributionGroup.RecipientFilter}}
Requires Sender Authentication	Boolean	When false, anyone (including external senders) can send to this DL.	{{DistributionGroup.RequireSenderAuthenticationEnabled}}
Risk Score	Int32	Stores risk score	{{DistributionGroup.RiskScore}}
Risk Score Update	DateTime	Stores risk score update	{{DistributionGroup.RiskScoreLastUpdate}}
Risk Score Value	String	Stores risk score value like Low_Low	{{DistributionGroup.RiskScoreValue}}

Relations

This object does currently not have any relations.

Segments

Segment	Description
DLs accepting external mail	Distribution groups that accept messages from external senders.
Dynamic distribution groups	Distribution groups with membership determined by a recipient filter.
DLs hidden from GAL	Distribution groups hidden from the global address list.
DLs without owners	Distribution groups that have no assigned owners.

Actions

This object does currently not have any actions.

Policies that check this object

Policy	Severity	Description
Distribution group accepts external mail	Medium	Detects distribution lists that allow external senders to deliver messages.