Forum Discussion
Rudi77
May 13, 2020Copper Contributor
disabled on premise AD Account - Consequences for M365 Mailbox\OneDrive data
Hi All We're about to go through the migration process for on premise mailboxes and home drives to M365 Exchange online and OneDrive. We have on premise AD which will remain in place which is synch...
- May 13, 2020
OK, if you disable an AD user which is synced to O365, the O365 user will then be blocked from signing in too.
If you sync an AD account to O365, then move the AD account to an OU which is not synced, the O365 account will be deleted on the next scheduled sync pass. The result of this is that the O365 account will be moved from the Active Users folder to the Deleted Users folder. It will remain recoverable for 30 days, then it will be permanently purged and not recoverable.
So no, neither of these are options for you i'm afraid.
If you sync the disabled users OU, then the O365 user will not be deleted at the next sync, but would of course still be blocked from signing in.
PeterRising
May 13, 2020MVP
OK, if you disable an AD user which is synced to O365, the O365 user will then be blocked from signing in too.
If you sync an AD account to O365, then move the AD account to an OU which is not synced, the O365 account will be deleted on the next scheduled sync pass. The result of this is that the O365 account will be moved from the Active Users folder to the Deleted Users folder. It will remain recoverable for 30 days, then it will be permanently purged and not recoverable.
So no, neither of these are options for you i'm afraid.
If you sync the disabled users OU, then the O365 user will not be deleted at the next sync, but would of course still be blocked from signing in.
SystemEngineer
May 23, 2022Steel Contributor
Will the license be returned back to the pool when the user is in the soft-deleted / inactive state?
- Raymond_666May 23, 2022Copper ContributorI think not.
However, if you license users through a dynamic group, you can add "AccountEnabled" as a requirement.