MS POST study materials
MS POST study resources

MS POST: Manage organizational settings and resources

MS POST · Work through your exam, one topic at a time.

All guide sections

Manage organizational settings and resources

Domain 1 - Manage organizational settings and resources

This domain tests tenant- and organization-level configuration rather than individual mailbox tasks: accepted domains, remote domains, address lists, role-based access control (RBAC), retention, and organizational sharing. Expect questions that ask which setting controls a behavior and which scope or policy wins.

Core rules

  • An accepted domain is authoritative (Exchange delivers to local recipients and generates NDRs for unknown addresses), internal relay (forwards unknown recipients to another system), or external relay (routes to an external SMTP host). Authoritative is the normal cloud state; internal relay is common during coexistence.
  • Remote domains control message formatting and automatic replies/forwarding for external domains. The default remote domain applies unless a more specific domain entry matches.
  • Address book policies (ABPs) segment the GAL, offline address book, room list, and address lists for assigned users. They do not hide mailboxes from SMTP routing.
  • RBAC combines management roles, role groups, and scopes. A role assignment without a write scope applies organization-wide; use recipient filters or OU scopes to limit administrators.

Worked example

Contoso has contoso.com authoritative and fabrikam.com internal relay because fabrikam.com mailboxes still live on-premises. Users must not send automatic replies to fabrikam.com recipients. Create a remote domain for fabrikam.com, set AutoReplyEnabled to False, and leave the default remote domain unchanged. Reasoning: the specific remote domain overrides the default; accepted domain type governs inbound routing, not outbound auto-reply behavior. Verify with message trace and a test OOF.

Traps

  • Changing an accepted domain to authoritative before mailboxes exist causes NDRs instead of relay.
  • Removing the default remote domain is not possible; create specific entries.
  • ABP assignment requires the ABP and mailbox to be in the same scope; otherwise Outlook may ignore it.