NOTE: You may disregard this notice if 1) the affected group account mailbox is not currently in use, 2) you already use Full Access Send-As rights to access the group account mailbox, or 3) you already have Duo set up for everyone who needs to access the account.
IT Professionals:
The partial exemption granted to group accounts that have not been enrolled in DUO is set to expire by October 4, 2021, when Modern Auth is required for all Exchange Online accounts. To avoid problems with authenticating to a group account via Outlook, administrators recommend utilizing Full Access Send-As (FASA) permissions on group account mailboxes before this date [1].
An impact list of group account names, grouped by owner, is available [2]. A direct mailing will be sent tomorrow, September 29, to group account owners and the group account email itself making notice of this as well.
FASA permissions allow you to authenticate to a group account by leveraging your personal account credentials and DUO instead of needing the full credentials and DUO enrollment on the group account itself [3].
If you are unfamiliar with how to enable FASA permissions, instructions are available in the KB [4], and the Tier 2 Desktop-Server-Mobility team is available to assist any IT Professional in this process.
–IT Community Partnerships on behalf of Enterprise Microsoft Administration
[1] Full Access Send-As Permission Overview: https://docs.microsoft.com/en-us/exchange/recipients/mailbox-permissions?view=exchserver-2019
[2] Impact List: EXO-DUO Accounts
[3] Use Two-Step Login (Duo) with a group account: https://kb.iu.edu/d/aobp
[4] INTERNAL (itpro, uits): How IT Pros can request full mailbox and send-as permissions to an Exchange mailbox: https://kb.iu.edu/d/bdet