Forum Discussion

Copper Contributor

Aug 24, 2018

How to prevent Exchange online user to access Sharepoint?

I have users with 'Exchange Online Plan 2' license in my tenant. I think they will be available to use email only but they can access to public sharepoint in my tenant. How to prevent Exchange O...

microsoft 365

sharepoint

Rnishat0786

Iron Contributor

Sep 07, 2018

Hi there

Technically this is not possible.

I tried assigning E3 license to a new user and disabling SharePoint Online Plan 2 and got the below error -

To assign a license that contains Office Online, you must also assign one of the following service plans: SharePoint Online (Plan 2).

Got the same error when I tried to disable SharePoint Online Plan 1 for an active user who has an E1 license.

So quite sure same goes for Exchange Online Plan 2

Thanks

Robin Nishad
-----------------
Technical Consultant

Tony Woodruff
MCT
Sep 08, 2018
The only way you'd be able to properly enforce this is with something like Conditional Access.

If you've got Azure AD Premium Plan 1 Licenses for all of your users, then you'd have some coverage for that.
jcgonzalezmartin
MVP
Sep 08, 2018
Well, the problem you are facing here is that SPO does not really enforce if a user added to a SPO site has a valid license or not....you just can add it, so only way to prevent your users to acess SPO is to be sure no one is adding them to your sites
- MyBoolean
  Copper Contributor
  Jun 03, 2019
  Experienced this as well. as long as the user has permissions to the site whether he has license or not then he can access the sharepoint site. Even open/create Office Online Documents