How can I change an Alert notification for an Azure DC to go to a different distribution group?

Hello, since you have already checked the Sync errors section, you should try the AD DS Health section within the Microsoft Entra Connect Health portal to see if the notification recipients are configured under the Service Settings for your domain controllers.

If the alert is security-related, you could find the configuration in the Microsoft Defender portal at security.microsoft.com by looking under Settings and then Identities.

You should also verify if there are any Alert Rules in the Azure Portal within Azure Monitor that trigger emails based on Log Analytics queries from your domain controller heartbeats. If none of these areas contain the distribution group, please let me know if you are using a third-party monitoring tool,...etc

Alert emails for domain controllers monitored by Microsoft Entra Connect Health and Microsoft Entra Domain Services are configured in specific places, not in Azure Notification Hubs.

To change which distribution group (or recipients) get DC-related health alerts, check the following locations:

1. Microsoft Entra Connect Health – Sync / AD DS alerts
   For alerts coming from Microsoft Entra Connect Health (Sync or AD DS):
   1. In the Microsoft Entra admin center, search for Microsoft Entra Connect Health.
   2. For sync-related alerts, select Sync errors → Notification Settings.
      • Turn email notifications ON if needed.
      • Remove the old distribution group from Additional Email Recipients.
      • Add the new distribution group address.
      • Save the changes.
   3. For AD DS alerts (domain controllers), open Microsoft Entra Connect Health for AD DS → the Alerts blade.
      • In this blade, email notifications for alerts can be enabled and configured.
      • Update the notification recipients there to point to the new distribution group and remove the old one.
2. Microsoft Entra Domain Services – managed domain alerts
   If the alerts are for a managed domain (Microsoft Entra Domain Services, not on-prem DCs):
   1. Sign in to the Microsoft Entra admin center as a Global Administrator.
   2. Go to Microsoft Entra Domain Services → select the managed domain.
   3. Select Notification settings.
   4. In the additional recipients table:
      • Remove the old distribution group.
      • Add the new distribution group (or a distribution list that then fans out to more recipients).
   5. Save the changes.
      Note: These settings apply to the entire managed domain, not just a single user.
3. Microsoft Entra Health monitoring alerts (preview)
   If DC-related sign-in or conditional access alerts are configured via the new Health monitoring experience:
   1. In the Microsoft Entra admin center, go to Entra ID → Monitoring & health → Health → Health monitoring.
   2. Select the scenario (for example, sign-in–related alerts) that corresponds to the alerts in question.
   3. Under Group alert notifications, select Edit.
   4. Change the selected group to the new distribution group (only one group can be selected).
   5. Save the configuration.

If the original distribution group is not visible in Sync errors notification settings, it may be configured either:

• In the AD DS Connect Health alerts blade (for on-prem DC monitoring), or
• In Microsoft Entra Domain Services → Notification settings (for managed domain DC alerts), or
• In the Health monitoring scenario group configuration.

Update or remove the old group in whichever of these locations currently has it configured.

References:

• Microsoft Entra Connect Health operations
• Using Microsoft Entra Connect Health with AD DS
• Configure email notifications for issues in Microsoft Entra Domain Services
• How to configure notifications for Microsoft Entra Health monitoring alerts (preview)