Forum Discussion
Is there a way to disable users from creating office 365 groups?
open a Powershell session to Exchange online
export the settings of the default owamailbox policy
Get-OwaMailboxPolicy -identity default | Export-Csv C:\policy.csv
then create a new-owamailboxpolicy with the same settings as default
https://technet.microsoft.com/en-us/library/dd351067(v=exchg.160).aspx
after that edit the policy
Set-OwaMailboxPolicy -GroupCreationEnabled $false -Identity OwaMailboxPolicy:NewPolicy
And finally assign the policy to the user
Set-CASMailbox -Identity user@domain.com -OwaMailboxPolicy:NewPolicy
you could add everyone except for the one user to the security group that is authorized to create the Office Groups
Dean_Gross wrote:
you could add everyone except for the one user to the security group that is authorized to create the Office Groups
That is what article is saying. But assume a scenario where there are 1000 users. If I want to restrict 10 users then process will be tedious. So if there is a way to set the property for user not to create group then that will be good.
- https://portal.azure.com/#view/Microsoft_AAD_IAM/GroupsManagementMenuBlade/~/General
if the screenshot doesn't appear. I think this is what your looking for located in azure AD instead of office365, i was wondering the same thing, i haven't tested it put it appears to be the setting
Same answer I have included in the question. But I am checking at user level not at group level.
I got the answer. Thanks for your time.
- I think the answer to your question is Yes.
If you follow the article and add All Users to the "Allowed Group", then you can remove users with just one clic. Sorry,
I have asked is there option at user level to configure. But none of the response has straight answer Yes or no. Finally I understand that seems there is no way.
But as per office article, we can disable group creation at globally. Then create new group and give permission only to that group to create new group. Add the required users to whom I want to give permissions for group creation.
Please correct me if I am wrong
- please give an update if the solution fits your needs
Following the article's naming, and for adding all users to the security group:
$GroupId = (Get-MsolGroup -SearchString "AllowedtoCreateGroups").Objectid.Guid Get-MsolUser -All | Where-Object { $_.isLicensed -eq "TRUE" } | ForEach { Add-MsolGroupMember -GroupObjectId $GroupId -GroupMemberType User -GroupMemberObjectId $_.ObjectId }I filtered on all licensed users, but you can add filtering on other properties as well.
Yes, it's clear. So follow the instructions on the article for disabling Office 365 group creation tenant wide, and then creating a Group which will be allowed to create O365 groups. After that open the Security Group and clic the X on the user you don't want to allow O365 group creation.
I think i haven't conveyed the thing properly seems. I don't want to delete the user from group. I want to un-check/set the property for a user to not create a group either from UI (admin center) or PowerShell.
Edit the group in Administration -> Groups and just clic the X on the user you want to remove
Yes, got you. But we need to run powershell every time. I am thinking if there is a way like un-check property of the user not to create group then it will be much more easier. So exploring the possible ways
- it's not that tedious. You can just do it on Office 365 administration or with powershell
https://docs.microsoft.com/en-us/powershell/module/msonline/remove-msolgroupmember?view=azureadps-1.0
