Home

Teams policies not applicable to on-premise users?

%3CLINGO-SUB%20id%3D%22lingo-sub-754358%22%20slang%3D%22en-US%22%3ERe%3A%20Teams%20policies%20not%20applicable%20to%20on-premise%20users%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-754358%22%20slang%3D%22en-US%22%3ENo%2C%20its%20not%20normal!%20Everyone%20licenses%20for%20teams%20should%20be%20visible%20unders%20teams%20users!%20When%20did%20they%20get%20synced%3F%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-754379%22%20slang%3D%22en-US%22%3ERe%3A%20Teams%20policies%20not%20applicable%20to%20on-premise%20users%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-754379%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F72542%22%20target%3D%22_blank%22%3E%40adam%20deltinger%3C%2FA%3E%2C%20AD%20sync%20has%20been%20working%20fine%2C%20the%20sync%20from%20on%20prem%20to%20AzureAD%20is%20executed%20every%2030%20minutes%20and%20I%20couldn't%20find%20anything%20wrong%20with%20it.%20All%20other%20O365%20services%20seem%20to%20work%20fine.%3C%2FP%3E%3CP%3EHowever%2C%20I%20have%20a%20strong%20hunch%20what%20could%20be%20related%20to%20this%20issue.%3CBR%20%2F%3EA%20couple%20of%20weeks%20ago%20our%20Skype%20on%20prem%20team%20had%20issues%20with%20federation%20with%20external%20Skype%20for%20Business%20Online%20users%20(presence%20states%20and%20such).%20So%20they%20disabled%20the%20'CSOnlineSipDomain'%20like%20explained%20here%3A%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fpowershell%2Fmodule%2Fskype%2Fdisable-csonlinesipdomain%3Fview%3Dskype-ps%22%20target%3D%22_self%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3EDisable-CsOnlineSipDomain.%3C%2FA%3E%3CBR%20%2F%3EI%20believe%20what%20that%20did%2C%20at%20least%20I%20saw%20when%20the%20Sfb%20Online%20admin%20center%20was%20still%20around%2C%20was%20that%20it%20removed%20all%20registered%26nbsp%3BSfb%20Online%20users.%20So%20since%20Teams%20and%26nbsp%3BSfb%20Online%20Admin%20Centers%20are%20now%20one%2C%20perhaps%20this%20is%20why%20I'm%20not%20seeing%20our%20on%20prem%20users%20here%20anymore.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20will%20also%20file%20a%20ticket%20with%20the%20MS%20support.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-754346%22%20slang%3D%22en-US%22%3ETeams%20policies%20not%20applicable%20to%20on-premise%20users%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-754346%22%20slang%3D%22en-US%22%3E%3CP%3EHi%2C%3C%2FP%3E%3CP%3EI%20was%20wondering%20if%20it's%20standard%20behavior%20that%20users%20synched%20from%20local%20AD%20to%20AzureAD%20are%20not%20surfaced%20in%20the%20Teams%20Admin%20Center%20-%26gt%3B%20Users.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EFor%20us%2C%20only%20users%20created%20online%20and%20that%20have%20an%26nbsp%3B%40onmicrosoft.com%20email%20address%20are%20shown%20here.%3C%2FP%3E%3CP%3EWe%20would%20like%20to%20be%20able%20to%20apply%20Teams%20policies%20to%20individual%20users%20but%20are%20unable%20to%20do%20so%20because%20of%20this.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ESince%20I%20cannot%20assign%20a%20policy%20to%20an%20on-prem%20user%20I%20tried%20to%20check%20if%20changing%20a%20setting%20in%20the%20global%20out%20of%20the%20box%20policy%20has%20any%20effect%20-%20it%20does%20not%20seem%20so.%20For%20example%2C%20I%20deactivated%20the%20ability%20for%20users%20to%20delete%20messages.%20For%20an%20.onmicrosoft.com%20user%20it%20did%20take%20effect%20but%20not%20for%20an%20on-prem%20user.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIs%20this%20all%20normal%3F%3C%2FP%3E%3CP%3EThanks%20for%20confirming.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-754346%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3Epolicies%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ETeams%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E
Highlighted
Florian Hein
Regular Contributor

Hi,

I was wondering if it's standard behavior that users synched from local AD to AzureAD are not surfaced in the Teams Admin Center -> Users.

 

For us, only users created online and that have an @onmicrosoft.com email address are shown here.

We would like to be able to apply Teams policies to individual users but are unable to do so because of this.

 

Since I cannot assign a policy to an on-prem user I tried to check if changing a setting in the global out of the box policy has any effect - it does not seem so. For example, I deactivated the ability for users to delete messages. For an .onmicrosoft.com user it did take effect but not for an on-prem user.

 

Is this all normal?

Thanks for confirming.

2 Replies
No, its not normal! Everyone licenses for teams should be visible unders teams users! When did they get synced?

@adam deltinger, AD sync has been working fine, the sync from on prem to AzureAD is executed every 30 minutes and I couldn't find anything wrong with it. All other O365 services seem to work fine.

However, I have a strong hunch what could be related to this issue.
A couple of weeks ago our Skype on prem team had issues with federation with external Skype for Business Online users (presence states and such). So they disabled the 'CSOnlineSipDomain' like explained here: Disable-CsOnlineSipDomain.
I believe what that did, at least I saw when the Sfb Online admin center was still around, was that it removed all registered Sfb Online users. So since Teams and Sfb Online Admin Centers are now one, perhaps this is why I'm not seeing our on prem users here anymore.

 

I will also file a ticket with the MS support.

 

Thanks.

Related Conversations
Tabs and Dark Mode
cjc2112 in Discussions on
48 Replies
Extentions Synchronization
Deleted in Discussions on
3 Replies
Stable version of Edge insider browser
HotCakeX in Discussions on
35 Replies
How to Prevent Teams from Auto-Launch
chenrylee in Microsoft Teams on
30 Replies
flashing a white screen while open new tab
Deleted in Discussions on
14 Replies
Security Community Webinars
Valon_Kolica in Security, Privacy & Compliance on
13 Replies