Forum Discussion
Blocking users from SPO
Unfortunately, removing their license will not keep them from accessing SahrePoint online if someone adds them to a site. it used to work that way, but MS took out the license check about two years ago. I am not aware of any way to lock users out of SharePoint and still allow them access to other Office 365 features other than finding and removing all permissions in SharePoint that would give them access.
Thanks Paul, that was going to be my next suggestion. A lot depends on how people have been given access to the Intranet. If it's a larger group such as Domain Users, then you could create a new group that doesn't include these users and swing the Intranet permissions over.
Kind of a sledge hammer/nut scenario.
I suppose you could block sign-in on the user, but I think that would stop the office client working.
- They've been given access both through a group - everyone except external users for global sites and individually for team sites. We've talked about creating a new group that doesn't include these individuals but that only solves half our problem.
Unfortunately, removing their SharePoint permissions is the only way to block them without blocking login to ALL Office 365 features. In an on-premises environment you could create a user Policy setting at the Web App level to deny them access, but that's not an option in a tenated environment like Office 365.
It might be worth taking a look at something like Metalogix ControlPoint to manage the permissions changes instead then. It would be able to scan the tenant and remove permissions for nominated users.
Not a cheap option though.
