Forum Discussion

Denise Child's avatar
Denise Child
Iron Contributor
Apr 20, 2017

Enable Office 365 Group creation for All Users

How do we allow All Users to create Office 365 Groups after changing it to just our Global Admins?   Unable to find information on how to reverse this setting. I am using an MFA account with Azure...
Office 365 Groups
Denise Child's avatar
Denise Child
Iron Contributor
Apr 21, 2017

Hi Vasil,

 

I am using AzureADPreview 2.0

 

Not sure what commands to substitute for the last line or if this is written differently.

I do want to keep the existing settings but open it up to everyone again.

 

If I substitute the commands that you wrote with the below, the first two lines work.

I'm stuck on what the third line should be or if it should be written differently.

 

$temp  = Get-AzureADDirectorySetting | ? {$_.TemplateId -eq "62375ab9-6b52-47ed-826b-58e47e0e304b"}
$temp["EnableGroupCreation"] = $True

 

I thought it would be: New-AzureADSetting...

but with the $temp commands I'm missing a $setting variable or something else.

 

I found some help from the below link, but what I have tried is not working.

http://drewmadelung.com/managing-office-365-group-using-azure-ad-powershell-v2/

 

Thanks,

Denise

 

  • Denise Child's avatar
    Denise Child
    Iron Contributor
    Apr 21, 2017

    These commands appear to work but do not do anything.

    EnableGroupCreation Value still shows False

     

    #Check for settings
    Get-AzureADDirectorySetting -All $True | Format-Table Id, DisplayName
    Get-AzureADDirectorySetting -All $True | where-object {$_.DisplayName -eq "Group.Unified"} | ForEach-Object Values

     

    #Enable again and preserve the current settings

    $temp  = Get-AzureADDirectorySetting | ? {$_.TemplateId -eq "62375ab9-6b52-47ed-826b-58e47e0e304b"}
    $temp["EnableGroupCreation"] = $True
    $setting = Get-AzureADDirectorySetting –Id []

    Set-AzureADDirectorySetting -Id [] -DirectorySetting $setting

     

    #left ID blank in this post []

     

    Am I still missing something?

    • VasilMichev's avatar
      VasilMichev
      MVP
      Apr 21, 2017

      You seem to be using differnt variables. You're setting the EnableGroupCreation to True on the $temp one, then using the $setting. Just copy/paste the example from that article, should work fine. My example was for the MSOL module after all :)

      • Denise Child's avatar
        Denise Child
        Iron Contributor
        Apr 21, 2017

        Got it. Thank you so much!

         

        #Enable again and preserve the current settings
        $template  = Get-AzureADDirectorySetting | ? {$_.TemplateId -eq "62375ab9-6b52-47ed-826b-58e47e0e304b"}
        $setting = Get-AzureADDirectorySetting –Id []
        $setting["EnableGroupCreation"] = "true"
        Set-AzureADDirectorySetting -Id [] -DirectorySetting $setting

         

        #Check settings again
        Get-AzureADDirectorySetting -All $True | where-object {$_.DisplayName -eq "Group.Unified"} | ForEach-Object Values

         

        Denise