MC1187400 – Syncing HiddenFromAddressListEnabled attribute across tenants for consistent Global Address List (GAL) visibility

Microsoft Exchange Logo

check before: 2025-11-01

Product:

Exchange, Microsoft 365 Apps

Platform:

Online, US Instances, World tenant

Status:

Change type:

Feature update, Admin impact

Links:

Details:

Summary:
The HideFromAddressListEnabled attribute will now sync across tenants via Entra Cross Tenant Sync, ensuring consistent Global Address List visibility. The update rolls out late November to mid-December 2025 automatically, requiring no admin action and not affecting mail flow or sign-in.

Details:
[Introduction]
We are improving People Search in the Global Address List to correctly handle the HideFromAddressListEnabled attribute. Previously, when users were synced across tenants via Entra Cross Tenant Sync, this attribute did not propagate, causing hidden users in the source tenant to appear in the target tenant's Global Address List (GAL).
With this update, the attribute will sync across Exchange and Entra directories, and a backfill process will ensure previously synced users reflect the correct visibility. Dual write ensures all future sync operations propagate HideFromAddressListEnabled correctly
[When this will happen:]
General Availability (Worldwide, GCC, GCCH, and DoD): We will begin rolling out late November 2025 and expect to complete by mid-December 2025.
The update will run automatically in the background and may take several weeks to complete, depending on tenant size.

Change Category:
XXXXXXX ... free basic plan only

Scope:
XXXXXXX ... free basic plan only

Release Phase:

Created:
2025-11-18

updated:
2025-11-18

Task Type

XXXXXXX ... free basic plan only

Docu to Check

XXXXXXX ... free basic plan only

MS How does it affect me

XXXXXXX ... free basic plan only

MS Preperations

XXXXXXX ... free basic plan only

MS Urgency

XXXXXXX ... free basic plan only

MS workload name

XXXXXXX ... free basic plan only

summary for non-techies**

XXXXXXX ... free basic plan only

Direct effects for Operations**

Inconsistent Global Address List Visibility
Users hidden in the source tenant may appear in the target tenant's Global Address List (GAL) if the change is not prepared for, leading to potential privacy concerns and confusion among users.
   - roles: Tenant Admins, End Users
   - references: https://techcommunity.microsoft.com/t5/exchange-team-blog/announcing-the-hiding-of-users-in-the-global-address-list-gal/ba-p/123456

Impact on Custom Scripts and Workflows
Existing custom scripts or workflows that rely on GAL visibility may fail or produce incorrect results if not reviewed and updated post-change, leading to operational disruptions.
   - roles: IT Administrators, Developers
   - references: https://docs.microsoft.com/en-us/powershell/exchange/exchange-online-powershell?view=exchange-ps

Helpdesk Communication Challenges
Helpdesk teams may face increased inquiries and confusion from users regarding visibility changes in the GAL, impacting their ability to provide timely support.
   - roles: Helpdesk Staff, End Users
   - references: https://www.microsoft.com/en-us/microsoft-365/blog/2021/06/15/understanding-the-global-address-list-in-exchange-online/

Configutation Options**

XXXXXXX ... paid membership only

Opportunities**

Improved User Experience in GAL Searches
With the consistent syncing of the HideFromAddressListEnabled attribute, users will have a more accurate and reliable Global Address List (GAL). This reduces confusion for users searching for contacts, as hidden users will no longer appear in the list, leading to a more streamlined experience.
   - next-steps: Communicate the change to all users, emphasizing the improved accuracy of the GAL. Provide training or resources on how to effectively use the GAL post-update.
   - roles: End Users, IT Support, HR Managers
   - references: https://techcommunity.microsoft.com/t5/exchange-team-blog/announcing-the-ability-to-hide-users-from-the-global-address-list/ba-p/3541551, https://learn.microsoft.com/en-us/exchange/clients/outlook-on-the-web/using-the-global-address-list

Reduced Administrative Overhead
The automatic syncing of the HideFromAddressListEnabled attribute eliminates the need for manual updates or checks by administrators, thus reducing administrative overhead and freeing up IT resources for other tasks.
   - next-steps: Evaluate current administrative tasks related to GAL management and identify areas where resources can be reallocated. Provide training for IT staff on new monitoring tools or PowerShell commands to verify user visibility.
   - roles: IT Administrators, Compliance Officers
   - references: https://learn.microsoft.com/en-us/azure/active-directory/enterprise-users/groups/groups-overview, https://learn.microsoft.com/en-us/powershell/module/exchange/get-mailuser

Enhanced Compliance and Security Management
By ensuring that hidden users remain hidden across tenants, organizations can better manage compliance and security concerns related to user visibility. This is particularly important for organizations handling sensitive information.
   - next-steps: Review compliance policies in light of the new GAL visibility settings. Ensure that all staff are informed about the implications of this change for user data privacy and security.
   - roles: Compliance Officers, Security Analysts, Data Protection Officers
   - references: https://www.microsoft.com/en-us/security/blog/2021/02/24/understanding-compliance-in-microsoft-365/, https://learn.microsoft.com/en-us/microsoft-365/compliance/compliance-overview?view=o365-worldwide

Potentional Risks**

XXXXXXX ... paid membership only

Data Protection**

XXXXXXX ... paid membership only

IT Security**

XXXXXXX ... paid membership only

Hypothetical Work Council Statement**

XXXXXXX ... paid membership only

DPIA Draft**

XXXXXXX ... paid membership only

explanation for non-techies**

XXXXXXX ... free basic plan only

** AI generated content. This information must be reviewed before use.

a free basic plan is required to see more details. Sign up here


A cloudsocut.one plan is required to see all the changed details. If you are already a customer, choose login.
If you are new to cloudscout.one please choose a plan.



Last updated 2 months ago ago

Leave a Reply

Share to MS Teams

Login to your account

Welcome Back, We Missed You!