How to Change the Primary Domain of a Synced Exchange Distribution List
Question details
The user needs to change the primary domain name for an Exchange Online distribution list that is connected to an on-premises environment.

- Product
- Exchange Online
- Device & OS
- not provided
- Scenario
- Attempting to update the primary domain email address of a distribution list in the Exchange admin center.
- Observed behavior
- The primary domain cannot be edited directly in the Exchange admin center because the group is synchronized from an on-premises Active Directory.
Ensure you have Domain Administrator privileges for your on-premises Active Directory and that you have access to your directory synchronization tool (such as Microsoft Entra Connect).
Modify the proxyAddresses Attribute in Active Directory
Since the distribution list is synced from on-premises Active Directory, you must use Active Directory Users and Computers (ADUC) to update the proxyAddresses attribute.
When an Exchange Online environment is synchronized with an on-premises Active Directory, the on-premises AD is considered the source of authority. This means administrative tasks, such as changing primary domain addresses, must be executed on the local server and subsequently synced to the cloud.
Log in to your domain controller or management server. Open 'Active Directory Users and Computers' (ADUC). Go to the 'View' menu and ensure 'Advanced Features' is checked, as this is required to see the Attribute Editor.
Navigate to the Organizational Unit (OU) containing your synchronized distribution list. Right-click on the group and select 'Properties'.
In the Properties window, click on the 'Attribute Editor' tab. Scroll down the list of attributes, select 'proxyAddresses', and click 'Edit'.
To set the new primary domain, type the new email address prefixed with an uppercase SMTP (for example, SMTP:user@newdomain.com). The uppercase SMTP dictates the primary address, whereas lowercase smtp is used for secondary aliases. Click 'Add', then click 'OK' to save.
Run your Active Directory synchronization tool (e.g., forcing a delta sync via PowerShell using Start-ADSyncSyncCycle -PolicyType Delta) to push the changes immediately to Exchange Online.

Need a Lightweight Office Alternative for Your Team?
While resolving Exchange admin issues requires dedicated Microsoft server tools, your everyday document editing doesn't require a heavy, expensive subscription. WPS Office provides a lightweight, highly compatible, and free alternative for all your word processing, spreadsheet, and presentation needs.

Frequently Asked Questions
Why is the domain field grayed out in the Exchange admin center?
If your organization uses Active Directory synchronization, the on-premises directory acts as the master authority for user and group objects. Office 365 locks these fields in the cloud to prevent conflicts, meaning all attribute changes must be made locally.
What happens if I use a lowercase 'smtp' for the new domain?
Adding an address with a lowercase 'smtp:' prefix (e.g., smtp:user@newdomain.com) assigns that address as a secondary proxy address or alias. The distribution list will be able to receive emails sent to that address, but its primary outbound address will remain unchanged.
How long does it take for the new primary domain to show up in Exchange Online?
By default, the Microsoft Entra Connect sync cycle runs every 30 minutes. Once the cycle completes, it may take a few additional minutes for Exchange Online to process the update and display the changes in the admin center.
Can I use an on-premises Exchange server to update this instead?
Yes. If you maintain an on-premises Exchange server for hybrid management purposes, it is actually recommended to use the on-premises Exchange Admin Center or Exchange Management Shell to update the primary domain address rather than editing raw AD attributes.




