We have Exchange 2013 based hosted exchange platform, tenants are segregated via ABP with custom attribute1 as a filter. users, distribution groups etc. are properly segregated as expected.
when a user login to owa\ecp and navigate to Options->Groups, they can see the distribution groups it is member of and the distribution group for whom he is defined as manager, with in the same tenants. All good as expected.
but now when you click on join button, it open up a windows which exposes all the security groups and distribution groups from all the tenants on this platform. it clearly says the
ABP is not taking care of segregation at this level and expose ALL Groups Address list to all the tenants bypassing the ABP segregation. Is their any hack exist for this issue?