If you have an AD synced distribution group and want to only allow senders from your organization, the
msExchRequireAuthToSendTo attribute must be set to
TRUE in the Attribute Editor. If you try changing that in the Exchange Online console, an error will appear.
