Home

Teams policies not applicable to on-premise users?

%3CLINGO-SUB%20id%3D%22lingo-sub-754358%22%20slang%3D%22en-US%22%3ERe%3A%20Teams%20policies%20not%20applicable%20to%20on-premise%20users%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-754358%22%20slang%3D%22en-US%22%3ENo%2C%20its%20not%20normal!%20Everyone%20licenses%20for%20teams%20should%20be%20visible%20unders%20teams%20users!%20When%20did%20they%20get%20synced%3F%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-754379%22%20slang%3D%22en-US%22%3ERe%3A%20Teams%20policies%20not%20applicable%20to%20on-premise%20users%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-754379%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F72542%22%20target%3D%22_blank%22%3E%40adam%20deltinger%3C%2FA%3E%2C%20AD%20sync%20has%20been%20working%20fine%2C%20the%20sync%20from%20on%20prem%20to%20AzureAD%20is%20executed%20every%2030%20minutes%20and%20I%20couldn't%20find%20anything%20wrong%20with%20it.%20All%20other%20O365%20services%20seem%20to%20work%20fine.%3C%2FP%3E%3CP%3EHowever%2C%20I%20have%20a%20strong%20hunch%20what%20could%20be%20related%20to%20this%20issue.%3CBR%20%2F%3EA%20couple%20of%20weeks%20ago%20our%20Skype%20on%20prem%20team%20had%20issues%20with%20federation%20with%20external%20Skype%20for%20Business%20Online%20users%20(presence%20states%20and%20such).%20So%20they%20disabled%20the%20'CSOnlineSipDomain'%20like%20explained%20here%3A%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fpowershell%2Fmodule%2Fskype%2Fdisable-csonlinesipdomain%3Fview%3Dskype-ps%22%20target%3D%22_self%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3EDisable-CsOnlineSipDomain.%3C%2FA%3E%3CBR%20%2F%3EI%20believe%20what%20that%20did%2C%20at%20least%20I%20saw%20when%20the%20Sfb%20Online%20admin%20center%20was%20still%20around%2C%20was%20that%20it%20removed%20all%20registered%26nbsp%3BSfb%20Online%20users.%20So%20since%20Teams%20and%26nbsp%3BSfb%20Online%20Admin%20Centers%20are%20now%20one%2C%20perhaps%20this%20is%20why%20I'm%20not%20seeing%20our%20on%20prem%20users%20here%20anymore.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20will%20also%20file%20a%20ticket%20with%20the%20MS%20support.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-754346%22%20slang%3D%22en-US%22%3ETeams%20policies%20not%20applicable%20to%20on-premise%20users%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-754346%22%20slang%3D%22en-US%22%3E%3CP%3EHi%2C%3C%2FP%3E%3CP%3EI%20was%20wondering%20if%20it's%20standard%20behavior%20that%20users%20synched%20from%20local%20AD%20to%20AzureAD%20are%20not%20surfaced%20in%20the%20Teams%20Admin%20Center%20-%26gt%3B%20Users.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EFor%20us%2C%20only%20users%20created%20online%20and%20that%20have%20an%26nbsp%3B%40onmicrosoft.com%20email%20address%20are%20shown%20here.%3C%2FP%3E%3CP%3EWe%20would%20like%20to%20be%20able%20to%20apply%20Teams%20policies%20to%20individual%20users%20but%20are%20unable%20to%20do%20so%20because%20of%20this.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ESince%20I%20cannot%20assign%20a%20policy%20to%20an%20on-prem%20user%20I%20tried%20to%20check%20if%20changing%20a%20setting%20in%20the%20global%20out%20of%20the%20box%20policy%20has%20any%20effect%20-%20it%20does%20not%20seem%20so.%20For%20example%2C%20I%20deactivated%20the%20ability%20for%20users%20to%20delete%20messages.%20For%20an%20.onmicrosoft.com%20user%20it%20did%20take%20effect%20but%20not%20for%20an%20on-prem%20user.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIs%20this%20all%20normal%3F%3C%2FP%3E%3CP%3EThanks%20for%20confirming.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-754346%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3Epolicies%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ETeams%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E
Highlighted
Frequent Contributor

Hi,

I was wondering if it's standard behavior that users synched from local AD to AzureAD are not surfaced in the Teams Admin Center -> Users.

 

For us, only users created online and that have an @onmicrosoft.com email address are shown here.

We would like to be able to apply Teams policies to individual users but are unable to do so because of this.

 

Since I cannot assign a policy to an on-prem user I tried to check if changing a setting in the global out of the box policy has any effect - it does not seem so. For example, I deactivated the ability for users to delete messages. For an .onmicrosoft.com user it did take effect but not for an on-prem user.

 

Is this all normal?

Thanks for confirming.

2 Replies
No, its not normal! Everyone licenses for teams should be visible unders teams users! When did they get synced?

@adam deltinger, AD sync has been working fine, the sync from on prem to AzureAD is executed every 30 minutes and I couldn't find anything wrong with it. All other O365 services seem to work fine.

However, I have a strong hunch what could be related to this issue.
A couple of weeks ago our Skype on prem team had issues with federation with external Skype for Business Online users (presence states and such). So they disabled the 'CSOnlineSipDomain' like explained here: Disable-CsOnlineSipDomain.
I believe what that did, at least I saw when the Sfb Online admin center was still around, was that it removed all registered Sfb Online users. So since Teams and Sfb Online Admin Centers are now one, perhaps this is why I'm not seeing our on prem users here anymore.

 

I will also file a ticket with the MS support.

 

Thanks.