Using mail enabled security groups for access to a shared mailbox

Bakker, Ron 0

I've been searching for a solution, but until now couldn't find one.

We are using an Exchange 2019 environment which include users and shared mailboxes.

Due to the fact that we would like to use IAM software we would like to have access to a shared mailbox for users using mail enable security groups.

When we add a user directly to a shared mailbox, automapping is enabled and users can see the shared mailbox in their Outlook.

As soon as we only use mail enabled security groups, automapping isn't working and users have to add the mailbox manually to their Outlook profile.

The question is, is there a way that we can set automapping with security groups (what isn't working right now) or is there a possibility that we can use a script that can automatically add the shared mailbox to Outlook based on membership of a security group?

Anonymous

2025-02-05T06:06:58.2966667+00:00

Hello, @Bakker, Ron,

Just wanted to check if the answer shared below helped. If it helped, then would request you to please "Accept the answer" as it would be helpful to others in the community as well.

Best Wishes,

Alex Zhang
Bakker, Ron 0 Reputation points

2025-02-06T08:48:40.8666667+00:00

Hi Alex, we are investigating if this helps us.
Shame that Automapping isn't supported by MS yet, while more and more companies are using IAM tools for their users and using security groups makes usermanagement a whole lot of easier.
I'l get back to this as soon as we have tested your solution to let you know the results.
Anonymous

2025-02-06T08:54:42.7733333+00:00

Hello, @Bakker, Ron,

Thank you for your reply and wait for your next update.

Should you need more help on this, you can feel free to post back.

Best Wishes,

Alex Zhang

6 answers

Vasil Michev 128.3K Reputation points MVP Volunteer Moderator

2025-01-31T08:57:37.9+00:00
No, automapping is only supported when you add the permissions directly, not via group. There have been some improvements on this for the new Outlook client, but that one has no support for on-premises Exchange currently.

You can certainly script the process to add permissions based on group membership, if automapping is a must. Something like this should work:
```
Get-DistributionGroupMember ******@domain.com | ? {$.RecipientTypeDetails -eq "UserMailbox"} | % { Add-MailboxPermission ******@domain.com -User $($.PrimarySmtpAddress) -AccessRights FullAccess }
```
Was this answer helpful?
Bakker, Ron 0 Reputation points

2025-01-31T09:19:15.9366667+00:00

I understand that automapping isn't supported via groups (yet but should be i think due tot RBAC but ok) but i can see this is a wanted item amongst a lot of engineers that this option would be available for automapping for mail enabled security groups.

So the question was if anyone found a solution to make this work with groups not using automapping but automatically added to Outlook due to that group membership set on an Exchange shared mailbox

Deleted

This comment has been deleted due to a violation of our Code of Conduct. The comment was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Using mail enabled security groups for access to a shared mailbox

6 answers

Your answer