📖 What is Mail-Enabled Security Groups?
Mail-Enabled Security Groups are groups that combine the functionality of a security group for assigning permissions and a distribution group for sending emails. They allow administrators to manage access to resources while maintaining a communication channel.
"Sensei says: If you need to assign permissions to a folder AND send an email to the group, this is the only group type that does both."
📚 Certification: Microsoft 365 Administrator (MS-102)
🔑 What are the Key Concepts of Mail-Enabled Security Groups?
- ▸ These groups can be added to Access Control Lists (ACLs) to grant permissions to files, folders, or SharePoint sites across the tenant.
- ▸ They function as distribution lists, allowing administrators to send a single email to all members without creating a separate communication group.
- ▸ Management is split between the Microsoft Entra admin center for membership and the Exchange admin center for email-specific configuration and delivery settings.
- ▸ Unlike Microsoft 365 Groups, they do not include a shared mailbox, shared calendar, or a dedicated SharePoint site for group collaboration.
- ▸ They are the optimal choice when a specific set of users requires both a common security identity and a way to communicate.
🎯 How does Mail-Enabled Security Groups appear on the MS-102 Exam?
You may be asked to recommend a group type for a project team that requires access to a restricted folder on a file server and needs a shared email address for notifications.
A scenario might describe a requirement to minimize group sprawl by using a single object to manage both security permissions and email distribution for a specific department.
Expect questions where you must distinguish between a Distribution Group and a Mail-Enabled Security Group based on whether the group needs to be assigned to a resource.
❓ Frequently Asked Questions
How do these differ from Microsoft 365 Groups?
M365 Groups provide a full collaborative suite including a shared mailbox, calendar, and Team site. Mail-Enabled Security Groups only provide an email address and the ability to assign security permissions to resources.
Can I convert a standard Security Group into a Mail-Enabled Security Group?
You cannot directly convert a standard security group to a mail-enabled one through the admin center GUI. You must typically create a new mail-enabled group or use specific PowerShell commands to modify the object.