I will tell you the way i have done this on my Exchange 2010, hoping it will also work for your Exchange 2013.
You absolutely need Powershell (Exchange Management Shell) to create the DDL :
New-DynamicDistributionGroup -Name "group1_DDL" -RecipientFilter {MemberOfGroup -eq "CN=Group1,OU=myOU,DC=domain,DC=local"} -RecipientContainer "OU=Users,OU=Account,DC=domain,DC=local"
Main points here are :
- You need to use the OPATH filter attribute
MemberOfGroup
:
For this value you need to put the full DN of your AD Group.
- You need to specify the
RecipientContainer
parameter :
This is the full DN where your AD users are stored.
Some explanations :
- You need to use OPATH Filters for the
RecipientFilter
so that you can use the MemberOfGroup
attribute. The standard memberOf
attribute exposed by Exchange will not work because you need a calculated back-link property from AD :
MemberOfGroup filtering requires that you supply the full AD
distinguished name of the group you're trying to filter against. This
is an AD limitation, and it happens because you're really filtering
this calculated back-link property from AD, not the simple concept of
"memberOf" that we expose in Exchange.
- OPATH Filters are supported for the
RecipientFilter
parameter :
https://technet.microsoft.com/en-us/library/bb125127(v=exchg.150).aspx
RecipientFilter : The RecipientFilter parameter filters the mail-enabled
recipients used to build the dynamic distribution group. [...] The
RecipientFilter parameter uses OPath syntax to query Active Directory
and filter recipients.
http://exchangepedia.com/blog/2007/02/memberof-attribute-can-now-be-used-in.html :
Unlike LDAP filters, the actual attribute name - memberOf is not used
in OPATH filters. The filterable property name for OPATH filters is
MemberOfGroup.
- By default (means not specified), the
RecipientContainer
will be
the standard Users DN : CN=Users,DC=domain,DC=local
. So when
Exchange performs its query to determine membership, it can only see
members that are in this OU.
This is the reason why you need to specify the OU where your AD Users are actually stored.
Finally, here is the link to the ressource that makes me able to make this work, and from i get most of the reference above :
https://exchangemaster.wordpress.com/tag/recipientcontainer