'%3e%3cpath%20d='M8%200C12.4183%200%2016%203.58172%2016%208C16%2012.4183%2012.4183%2016%208%2016C3.58172%2016%200%2012.4183%200%208C0%203.58172%203.58172%200%208%200ZM11.6162%204.38379C11.2257%203.99337%2010.5927%203.99338%2010.2021%204.38379L8%206.58594L5.79785%204.38379C5.40732%203.99334%204.77429%203.99329%204.38379%204.38379C3.99331%204.77429%203.99335%205.40733%204.38379%205.79785L6.58594%208L4.38379%2010.2021C3.99348%2010.5927%203.99341%2011.2257%204.38379%2011.6162C4.77426%2012.0066%205.40734%2012.0065%205.79785%2011.6162L8%209.41406L10.2021%2011.6162C10.5927%2012.0066%2011.2257%2012.0067%2011.6162%2011.6162C12.0067%2011.2257%2012.0066%2010.5927%2011.6162%2010.2021L9.41406%208L11.6162%205.79785C12.0066%205.40735%2012.0066%204.77429%2011.6162%204.38379Z'%20fill='%23080E17'%20fill-opacity='0.46'/%3e%3c/g%3e%3cdefs%3e%3cclipPath%20id='clip0_3761_713'%3e%3crect%20width='16'%20height='16'%20fill='white'/%3e%3c/clipPath%3e%3c/defs%3e%3c/svg%3e)
How to Hide a Shared Mailbox from the Global Address List in Hybrid Exchange
Question details
The user needs to hide a shared mailbox from the Global Address List (GAL) but is experiencing issues where the mailbox remains visible despite on-premises configurations.
- Product
- Microsoft Exchange
- Device & OS
- not provided
- Scenario
- Attempting to hide a shared mailbox from the GAL by setting the on-premises Active Directory attribute in a hybrid Exchange setup.
- Observed behavior
- The shared mailbox remains visible in the GAL even after the msExchHideFromAddressLists attribute is set to True in the on-premises Active Directory.
Ensure you have the necessary administrative credentials for both the on-premises Active Directory and Exchange Online, and verify that Azure AD Connect is running without major directory synchronization errors.
Verify Directory Synchronization and Exchange Online Attributes
Use this solution to ensure that the on-premises AD attribute changes are correctly syncing to Microsoft 365 and reflecting in Exchange Online.
In a Hybrid Exchange environment, the on-premises Active Directory is the authoritative source. Therefore, GAL visibility must be managed on-premises and synchronized to Exchange Online via Azure AD Connect.
Open 'Active Directory Users and Computers' with Advanced Features enabled. Locate the shared mailbox, go to the 'Attribute Editor' tab, and confirm that the 'msExchHideFromAddressLists' attribute is set to True.
Open PowerShell on your Azure AD Connect server and run 'Start-ADSyncSyncCycle -PolicyType Delta' to force an immediate synchronization to Microsoft 365.
Connect to Exchange Online PowerShell and run the command: 'Get-Mailbox <MailboxIdentity> | Format-List'. Check the output to confirm that 'HiddenFromAddressListsEnabled' is marked as True.
If the attribute does not update, review the Azure AD Connect synchronization logs for errors, and check the Microsoft 365 audit logs to see if subsequent operations overwrote the mailbox changes.
Manage Your Work More Efficiently with WPS Office
While resolving backend Microsoft Exchange synchronization issues requires technical troubleshooting, managing your daily documents shouldn't be complicated. WPS Office provides a lightweight, highly compatible alternative to Microsoft Office for your productivity needs.
- 1. Download the Installer: Visit the official WPS Office website to download the free version suited for your operating system (Windows, Mac, or Linux).
- 2. Install WPS Office: Run the downloaded installer file and follow the straightforward on-screen instructions to set up the software.
- 3. Open Your Documents: Launch WPS Office and instantly open your existing Microsoft Office files (.docx, .xlsx, .pptx) without losing any formatting.
Frequently Asked Questions
Why can't I hide the shared mailbox directly in the Exchange admin center?
In a Hybrid Exchange environment where the mailbox is synchronized from an on-premises Active Directory, the on-premises AD remains the authoritative source. You cannot modify synced attributes directly in the Microsoft 365 Exchange admin center.
What should I do if the msExchHideFromAddressLists attribute does not sync?
First, verify that the 'mailNickname' attribute is populated in the on-premises Active Directory, as Azure AD Connect requires this attribute to successfully sync the 'msExchHideFromAddressLists' property.
How can I verify if the Offline Address Book (OAB) has been updated?
You can force a manual download of the OAB in the Outlook desktop client by navigating to the Send/Receive tab, clicking Send/Receive Groups, and selecting 'Download Address Book'. If the mailbox is still visible, the OAB generation on the server may not have completed yet.
