Article ID: 2417592 - View products that this article applies to.
When an on-premises distribution group is synced to a Microsoft Office 365 organization through Active Directory synchronization, migrated users who are owners of the distribution group can't manage it in Microsoft Exchange Online. For example, a user may receive an error message that resembles the following:
The action '<cmdlet>', '<property>', can't be performed on the object '<name>' because the object is being synchronized from your on-premises organization. This action should be performed on the object in your on-premises organization
Distribution groups that are created in Office 365 through directory synchronization must be managed in the on-premises environment. Distribution group owners must manage the group by using on-premises tools for Exchange Server such as the following:
Force directory synchronizationWe strongly recommend that you use native Exchange tools to manage distribution groups and mail-enabled security groups in your on-premises environment. For more info, go to the following Microsoft websites:
Currently, directory synchronization syncs the managedBy attribute of the distribution group. In this situation, the global address list (GAL) correctly displays the distribution group owner. However, this owner can't manage the distribution group because the access control list (ACL) for the group doesn't grant permissions to the owner.
Additional tools for managing distribution groupsThere are additional on-premises tools that can be used to modify group membership.
For more info about troubleshooting managing distribution groups in Office 365, see the following Microsoft Knowledge Base article:
(https://support.microsoft.com/kb/2731947/ )"You don't have sufficient permissions" error when you try to remove or make a change to a distribution group in Office 365
Still need help? Go to the Office 365 Community
Article ID: 2417592 - Last Review: October 4, 2014 - Revision: 26.0