How to Convert a Distribution List to a Mail-Enabled Security Group in Exchange Online
Question details
The user wants to change an existing distribution list into a mail-enabled security group to manage both email distribution and resource permissions.

- Product
- Exchange Online
- Device & OS
- not provided
- Scenario
- Administrators need to assign access permissions (like SharePoint or folder access) to an existing group of users who are currently in a standard distribution list.
- Observed behavior
- Exchange Online does not offer a direct feature or command to convert an existing standard distribution list into a mail-enabled security group.
Ensure you have Exchange Administrator or Global Administrator privileges in your Microsoft 365 tenant to create and manage security groups.
Nest the Distribution List Inside a New Mail-Enabled Security Group
Since direct conversion is impossible, you can create a new mail-enabled security group and add the existing distribution list to it as a member to preserve its structure.
This workaround ensures you do not have to manually re-add all users. The mail-enabled security group provides the necessary access permissions, while the nested distribution list handles the underlying user membership.
Navigate to the Microsoft 365 admin portal and open the Exchange Admin Center using your administrator credentials.
Go to 'Recipients' > 'Groups' and select 'Mail-enabled security'. Click 'Add a group', then follow the setup wizard to configure the new group's name and email address.
Once the new group is created, click on it to open its properties. Navigate to the 'Members' tab, click 'View all and manage members', and search for your existing distribution list to add it.
Use the newly created mail-enabled security group to assign the necessary access rights across your Microsoft 365 resources (e.g., SharePoint sites, shared mailboxes).

Boost Your Productivity with WPS Office as a Lightweight Alternative
While resolving complex Exchange Online and Microsoft 365 administration issues, you might be looking for a simpler, faster way to handle your daily documents. WPS Office is a highly compatible, free alternative that meets all your Word, Excel, and PowerPoint needs without the heavy subscription costs.
- 1. Download WPS Office: Visit the official WPS website and download the free installation package for your operating system.
- 2. Install the Suite: Run the installer and follow the quick setup wizard to install WPS Office on your device.
- 3. Open Your Documents: Launch WPS Office and directly open any existing Microsoft Office documents, spreadsheets, or presentations to start working seamlessly.

Frequently Asked Questions
Can I use PowerShell to directly convert a distribution group to a security group?
No. Exchange Online PowerShell does not provide a cmdlet or parameter to change the group type from a distribution list to a mail-enabled security group. The group must be recreated or nested.
Will members of the nested distribution list inherit the security group's permissions?
Yes. When you add a distribution list as a member of a mail-enabled security group, all individual users inside that distribution list will inherit the permissions granted to the security group.
Do I need to change the email address of the original distribution list?
No, the original distribution list keeps its existing email address. You will assign a new, distinct email address to the newly created mail-enabled security group used as the parent wrapper.




