SOLVED

Disabling AD synced users

%3CLINGO-SUB%20id%3D%22lingo-sub-2428994%22%20slang%3D%22en-US%22%3EDisabling%20AD%20synced%20users%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2428994%22%20slang%3D%22en-US%22%3E%3CP%3EHello%20all%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI'm%20looking%20for%20a%20'best%20practice'%20for%20processing%20users%20who%20have%20left%20an%20organisation%20where%20their%20Office%20365%20tenant%20is%20AD%20synced%20using%20AD%20Connect.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThe%20issue%20we%20find%20is%20that%20when%20we%20disable%20an%20AD%20user%20account%20the%20user%20is%20deleted%20within%20Office%20365.%20We%20would%20like%20the%20user%20to%20remain%20in%20Office%20365%2C%20allowing%20us%20to%20convert%20the%20mailbox%20to%20be%20shared%20%26amp%3B%20remove%20it's%20license.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks%20for%20any%20help!%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAsh%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-2428994%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EIdentity%20Management%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EOffice%20365%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2429577%22%20slang%3D%22en-US%22%3ERe%3A%20Disabling%20AD%20synced%20users%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2429577%22%20slang%3D%22en-US%22%3EDisabling%20the%20AD%20account%20doesnt%20remove%20the%20O365%20one%2C%20deleting%20it%20or%20moving%20it%20out%20of%20the%20scope%20of%20the%20sync%20process%20does%20that.%20In%20other%20words%20you%20need%20to%20adjust%20the%20AD%20part%20of%20your%20workflow.%3C%2FLINGO-BODY%3E
Contributor

Hello all,

 

I'm looking for a 'best practice' for processing users who have left an organisation where their Office 365 tenant is AD synced using AD Connect.

 

The issue we find is that when we disable an AD user account the user is deleted within Office 365. We would like the user to remain in Office 365, allowing us to convert the mailbox to be shared & remove it's license.

 

Thanks for any help!

 

Ash

 

2 Replies
Disabling the AD account doesnt remove the O365 one, deleting it or moving it out of the scope of the sync process does that. In other words you need to adjust the AD part of your workflow.
best response confirmed by telecaster (Contributor)
Solution

Hi @telecaster,

 

The best way to accomplish your objective is to follow this article.

 

Remove a former employee - Overview - Microsoft 365 admin | Microsoft Docs

 

Best Regards,
Nuno Árias Silva
MVP Office Apps and Services
https://www.nuno-silva.net