NOTE: You may disregard this notice if 1) the affected group account mailbox is not currently in use, 2) you already use Full Access Send-As rights to access the group account mailbox, or 3) you already have DUO set up for everyone who needs to access the account.
IT Professionals:
The partial exemption granted to group accounts that have not been enrolled in DUO has been extended through October 31. To avoid problems with authenticating to a group account via Outlook, administrators recommend utilizing Full Access Send-As (FASA) permissions on group account mailboxes before this date [1].
An impact list of group account names, grouped by owner, is available along with one broken down by the owner’s department [2]. We are working to update these impact lists to include further information to help IT Pros decern which accounts need attention.
FASA permissions allow you to authenticate to a group account by leveraging your personal account credentials and DUO instead of needing the full credentials and DUO enrollment on the group account itself [3].
If you are unfamiliar with how to enable FASA permissions, instructions are available in the KB [4], and the Tier 2 Desktop-Server-Mobility team is available to assist any IT Professional in this process.
–IT Community Partnerships on behalf of Enterprise Microsoft Administration
[1] Full Access Send-As Permission Overview: https://docs.microsoft.com/en-us/exchange/recipients/mailbox-permissions?view=exchserver-2019
[2] Impact List: EXO-DUO Accounts
[3] Use Two-Step Login (Duo) with a group account: https://kb.iu.edu/d/aobp
[4] Request Full Access Send-As permissions for an Exchange Online departmental/group account mailbox: https://kb.iu.edu/d/bdet