Home

Turn off ability to create teams

%3CLINGO-SUB%20id%3D%22lingo-sub-261118%22%20slang%3D%22en-US%22%3ETurn%20off%20ability%20to%20create%20teams%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-261118%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20all%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CDIV%20class%3D%22uvIdeaDescription%20typeset%22%3E%3CDIV%20class%3D%22typeset%22%3E%3CP%3EFrom%20a%20safeguarding%20and%20child%20protection%20point%20of%20view%2C%20in%20a%20school%20environment%2C%20it%20is%20not%20appropriate%20to%20allow%20students%20or%20staff%20to%20create%20new%20teams.%20Can%20the%20ability%20to%20disable%20team%20creation%20please%20be%20added%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EUnfortunately%20the%20powershell%20options%20to%20disable%20teams%2FO365%20groups%20requires%20you%20to%20have%20Azure%20AD%20Premium%2C%20which%20many%20peopl%20including%20ourselves%20do%20not%20have.%20The%20UI%20option%20in%20Azure%20AD%20to%20stop%20users%20creating%20security%2FO365%20groups%2C%20even%20when%20set%20to%20No%2C%20does%20not%20work.%3C%2FP%3E%3CP%3EStudents%20are%20still%20able%20to%20create%20Teams%2C%20and%20the%20fear%20is%20that%20this%20could%20be%20used%20for%20bullying%20purposes.%20Our%20senior%20child%20protection%20officer%20will%20not%20allow%20Teams%20to%20be%20sued%20until%20the%20ability%20to%20stop%20users%20from%20creating%20Teams%20is%20turned%20off.%20Only%20admins%20should%20be%20able%20to%20create%20Teams%2FO365%20groups.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EFeel%20free%20to%20add%20weight%20to%20uservoice%20-%20%3CA%20href%3D%22https%3A%2F%2Fmicrosoftteams.uservoice.com%2Fforums%2F555103-public%2Fsuggestions%2F35505892-disable-team-creation%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fmicrosoftteams.uservoice.com%2Fforums%2F555103-public%2Fsuggestions%2F35505892-disable-team-creation%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks.%3C%2FP%3E%3C%2FDIV%3E%3C%2FDIV%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-261118%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3Eteam%20creation%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-264238%22%20slang%3D%22en-US%22%3ERe%3A%20Turn%20off%20ability%20to%20create%20teams%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-264238%22%20slang%3D%22en-US%22%3EYeah%2C%20I%20just%20learned%20about%20that%20this%20week.%20Just%20the%20admins%20that%20can%20create%20Teams%20that%20are%20in%20this%20%22restricted%20group%22%20need%20a%20license%20to%20be%20compliant.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-261821%22%20slang%3D%22en-US%22%3ERE%3A%20Turn%20off%20ability%20to%20create%20teams%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-261821%22%20slang%3D%22en-US%22%3EHi%2C%20I%20can%20briefly%20share%2C%20how%20we%20do%20it%20(we%20have%20an%20organization%20where%20after%20final%20migration%20approx.%20155.000%20users%20are%20active%2C%20so%20we%20govern%20Teams).%20We%20have%20created%20a%20group%20in%20Azure.%20This%20group%20was%20given%20the%20right%20to%20create%20groups.%20The%20creation%20itself%20however%20is%20done%20via%20our%20SW%20Portal%2C%20people%20fill%20out%20a%20short%20request%20form%2C%20we%20approve%20or%20decline%20and%20then%20a%20team%20in%20the%20backgroud%20utilizes%20Graph%20API%20for%20the%20creation%2C%20however%20Teams%20Part%20on%20top%20of%20Group%20still%20is%20done%20manually%20(until%20the%20API%20is%20GA%2C%20so%20soon%20this%20manual%20part%20will%20vanish).%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-261814%22%20slang%3D%22en-US%22%3ERe%3A%20Turn%20off%20ability%20to%20create%20teams%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-261814%22%20slang%3D%22en-US%22%3E%3CP%3EFrom%20what%20I%20understand%20you%20can%20easily%20create%20the%20group%20creation%20restriction%20policy%20without%20being%20assigned%20the%20appropriate%20Azure%20AD%20Premium%20licences%2C%20but%20that%20doesn't%20necessarily%20mean%20it's%20not%20a%20requirement%20to%20be%20compliant%3F%3CBR%20%2F%3E%3CBR%20%2F%3E%22%3CSPAN%3EDoing%20the%20steps%20in%20this%20article%20requires%20a%20subscription%20to%20Azure%20Active%20Directory%20(Azure%20AD)%20Premium.%26nbsp%3B%3C%2FSPAN%3EThe%20administrator%20who%20configures%20the%20settings%2C%20and%20the%20members%20of%20the%20affected%20groups%2C%20must%20have%20Azure%20AD%20Premium%26nbsp%3Blicenses%20assigned%20to%20them%3CSTRONG%3E%22%3C%2FSTRONG%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSTRONG%3E%3CA%20href%3D%22https%3A%2F%2Fsupport.office.com%2Fen-us%2Farticle%2Fmanage-who-can-create-office-365-groups-4c46c8cb-17d0-44b5-9776-005fced8e618%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fsupport.office.com%2Fen-us%2Farticle%2Fmanage-who-can-create-office-365-groups-4c46c8cb-17d0-44b5-9776-005fced8e618%3C%2FA%3E%3C%2FSTRONG%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-261615%22%20slang%3D%22en-US%22%3ERe%3A%20Turn%20off%20ability%20to%20create%20teams%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-261615%22%20slang%3D%22en-US%22%3EThanks%20Scott.%20I%20tried%20it%20and%20it%20worked.%20Many%20thanks.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-261452%22%20slang%3D%22en-US%22%3ERe%3A%20Turn%20off%20ability%20to%20create%20teams%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-261452%22%20slang%3D%22en-US%22%3E%3CP%3EScott%20and%20Christopher%20thanks%20for%20your%20help.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIm%20just%20wondering%20which%20is%20the%20better%20option%20or%20what%20the%20difference%20is%20between%20them%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWe%20have%20an%20on%20premises%20Exchange%2C%20we%20use%20365%20for%20SharePoint%2C%20Teams%2C%20etc.%20only.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-261451%22%20slang%3D%22en-US%22%3ERe%3A%20Turn%20off%20ability%20to%20create%20teams%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-261451%22%20slang%3D%22en-US%22%3EThanks%20for%20the%20comments%20guys%2C%20really%20appreciate%20it.%3CBR%20%2F%3E%3CBR%20%2F%3EThomas%2C%20whilst%20I%20agree%20in%20principle%2C%20educating%20the%20kids%20to%20behave%20is%20the%20way%20forward.%20But%20our%20concern%20is%20not%20really%20kids%20messing%20about%20and%20creating%20random%20groups%2C%20its%20teams%20that%20are%20created%20for%20the%20purpose%20of%20bullying.%20We%20take%20a%20zero%20tolerance%20approach%20on%20bullying%20and%20abuse%20and%20it%20would%20be%20seen%20as%20very%20bad%20if%20we%20were%20the%20ones%20facilitating%20this%20abuse.%20Also%2C%20it%20becomes%20very%20time%20intensive%20trawling%20through%20many%20groups%2C%20trying%20to%20ascertain%20which%20is%20genuine%20and%20which%20isnt.%3CBR%20%2F%3E%3CBR%20%2F%3E%3CBR%20%2F%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-261244%22%20slang%3D%22en-US%22%3ERe%3A%20Turn%20off%20ability%20to%20create%20teams%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-261244%22%20slang%3D%22en-US%22%3E%3CP%3EWe%20do%20not%20recommend%20to%20disable%20people%20from%20creating%20Teams%20as%20it%20takes%20away%20a%20lot%20of%20the%20value%20that%20Teams%20provide.%20Instead%20we%20would%20recommend%20to%20double%20down%20of%20user%20education%20--%20and%20make%20users%20aware%20that%20the%20admin%20can%20see%20who%20created%20certain%20Team%20in%20case%20their%20is%20an%20inappropriate%20Team%20being%20created.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EMore%20information%3A%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmicrosoftteams%2Fplan-teams-governance-edu%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmicrosoftteams%2Fplan-teams-governance-edu%3C%2FA%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-261214%22%20slang%3D%22en-US%22%3ERe%3A%20Turn%20off%20ability%20to%20create%20teams%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-261214%22%20slang%3D%22en-US%22%3E%3CP%3EAdding%20group%20creation%20restriction%20does%20require%20Azure%20AD%20Premium%20for%20anyone%20included%20in%20the%20group%20you%20assign%20to%20be%20able%20to%20create%20groups%20%2F%20teams%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fblogs.technet.microsoft.com%2Fundocumentedfeatures%2F2017%2F04%2F29%2Fdisable-office-365-groups-creation-redux%2F%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fblogs.technet.microsoft.com%2Fundocumentedfeatures%2F2017%2F04%2F29%2Fdisable-office-365-groups-creation-redux%2F%3C%2FA%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-261210%22%20slang%3D%22en-US%22%3ERe%3A%20Turn%20off%20ability%20to%20create%20teams%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-261210%22%20slang%3D%22en-US%22%3E%3CP%3EWe%20also%20have%20had%20a%20A1%20plan%20with%20Azure%20Basic%20which%20should%20be%20included.%20It%20is%20difficult%20to%20setup%20the%20process%20but%20it%20should%20be%20supported%20to%20disable%20this%20feature.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EDisable%20Teams%3A%26nbsp%3B%3CA%20href%3D%22http%3A%2F%2Fmacslui.blogspot.com%2F2017%2F11%2Fdisable-self-service-teams-creation.html%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttp%3A%2F%2Fmacslui.blogspot.com%2F2017%2F11%2Fdisable-self-service-teams-creation.html%3C%2FA%3E%3C%2FP%3E%3CP%3EManage%20365%20Groups%3A%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fsupport.office.com%2Fen-us%2Farticle%2FManage-who-can-create-Office-365-Groups-4c46c8cb-17d0-44b5-9776-005fced8e618%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fsupport.office.com%2Fen-us%2Farticle%2FManage-who-can-create-Office-365-Groups-4c46c8cb-17d0-44b5-9776-005fced8e618%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIn%20addition%20persons%20can%20create%20Distribution%20List%20if%20that%20feature%20is%20available%20to%20users%20if%20you%20have%20not%20secure%20it.%3C%2FP%3E%3CP%3E%3CA%20href%3D%22http%3A%2F%2Fmsweany.blogspot.com%2F2014%2F06%2Foffice365-remove-users-create-dist-list.html%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttp%3A%2F%2Fmsweany.blogspot.com%2F2014%2F06%2Foffice365-remove-users-create-dist-list.html%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E
Ayaz Younis
Contributor

Hi all,

 

From a safeguarding and child protection point of view, in a school environment, it is not appropriate to allow students or staff to create new teams. Can the ability to disable team creation please be added?

 

Unfortunately the powershell options to disable teams/O365 groups requires you to have Azure AD Premium, which many peopl including ourselves do not have. The UI option in Azure AD to stop users creating security/O365 groups, even when set to No, does not work.

Students are still able to create Teams, and the fear is that this could be used for bullying purposes. Our senior child protection officer will not allow Teams to be sued until the ability to stop users from creating Teams is turned off. Only admins should be able to create Teams/O365 groups.

 

Feel free to add weight to uservoice - https://microsoftteams.uservoice.com/forums/555103-public/suggestions/35505892-disable-team-creation

 

Thanks.

9 Replies

We also have had a A1 plan with Azure Basic which should be included. It is difficult to setup the process but it should be supported to disable this feature.

 

Disable Teams: http://macslui.blogspot.com/2017/11/disable-self-service-teams-creation.html

Manage 365 Groups: https://support.office.com/en-us/article/Manage-who-can-create-Office-365-Groups-4c46c8cb-17d0-44b5-...

 

In addition persons can create Distribution List if that feature is available to users if you have not secure it.

http://msweany.blogspot.com/2014/06/office365-remove-users-create-dist-list.html

 

Adding group creation restriction does require Azure AD Premium for anyone included in the group you assign to be able to create groups / teams 

 

https://blogs.technet.microsoft.com/undocumentedfeatures/2017/04/29/disable-office-365-groups-creati...

We do not recommend to disable people from creating Teams as it takes away a lot of the value that Teams provide. Instead we would recommend to double down of user education -- and make users aware that the admin can see who created certain Team in case their is an inappropriate Team being created.

 

More information: https://docs.microsoft.com/en-us/microsoftteams/plan-teams-governance-edu

Thanks for the comments guys, really appreciate it.

Thomas, whilst I agree in principle, educating the kids to behave is the way forward. But our concern is not really kids messing about and creating random groups, its teams that are created for the purpose of bullying. We take a zero tolerance approach on bullying and abuse and it would be seen as very bad if we were the ones facilitating this abuse. Also, it becomes very time intensive trawling through many groups, trying to ascertain which is genuine and which isnt.


Scott and Christopher thanks for your help.

 

Im just wondering which is the better option or what the difference is between them?

 

We have an on premises Exchange, we use 365 for SharePoint, Teams, etc. only.

Thanks Scott. I tried it and it worked. Many thanks.

From what I understand you can easily create the group creation restriction policy without being assigned the appropriate Azure AD Premium licences, but that doesn't necessarily mean it's not a requirement to be compliant?

"Doing the steps in this article requires a subscription to Azure Active Directory (Azure AD) Premium. The administrator who configures the settings, and the members of the affected groups, must have Azure AD Premium licenses assigned to them"

 

https://support.office.com/en-us/article/manage-who-can-create-office-365-groups-4c46c8cb-17d0-44b5-...

Hi, I can briefly share, how we do it (we have an organization where after final migration approx. 155.000 users are active, so we govern Teams). We have created a group in Azure. This group was given the right to create groups. The creation itself however is done via our SW Portal, people fill out a short request form, we approve or decline and then a team in the backgroud utilizes Graph API for the creation, however Teams Part on top of Group still is done manually (until the API is GA, so soon this manual part will vanish).
Yeah, I just learned about that this week. Just the admins that can create Teams that are in this "restricted group" need a license to be compliant.
Related Conversations
Tabs and Dark Mode
cjc2112 in Discussions on
22 Replies
Stable version of Edge insider browser
HotCakeX in Discussions on
35 Replies
flashing a white screen while open new tab
cntvertex in Discussions on
13 Replies
How to Prevent Teams from Auto-Launch
chenrylee in Microsoft Teams on
28 Replies