How to prevent user normal get all user in office365 ?

%3CLINGO-SUB%20id%3D%22lingo-sub-454740%22%20slang%3D%22en-US%22%3EHow%20to%20prevent%20user%20normal%20get%20all%20user%20in%20office365%20%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-454740%22%20slang%3D%22en-US%22%3E%3CP%3EHello%3C%2FP%3E%3CP%3E%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3BI%20see%20in%20office365%20if%20one%20user%20don't%20need%20assign%20license%20or%20normal%20user%20not%20administrator%20then%20they%20can%20use%20this%20user%20connect%20to%20office365%20by%20powershell%20and%20get%20all%20infomation%20user%20to%20csv%20.How%20to%20prevent%20that%26nbsp%3B%3C%2FP%3E%3CP%3EBest%20Regards%3C%2FP%3E%3CP%3EThanks%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-454740%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EMicrosoft%20365%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-457004%22%20slang%3D%22en-US%22%3ERe%3A%20How%20to%20prevent%20user%20normal%20get%20all%20user%20in%20office365%20%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-457004%22%20slang%3D%22en-US%22%3E%3CP%3EHi%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F234118%22%20target%3D%22_blank%22%3E%40Tien%20Ngo%20Thanh%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EDisable%20access%20to%20Powershell%20for%20the%20user(s)%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fpowershell%2Fexchange%2Fexchange-online%2Fdisable-access-to-exchange-online-powershell%3Fview%3Dexchange-ps%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fpowershell%2Fexchange%2Fexchange-online%2Fdisable-access-to-exchange-online-powershell%3Fview%3Dexchange-ps%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHope%20that%20answers%20your%20question!%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EBest%2C%20Chris%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-457006%22%20slang%3D%22en-US%22%3ERe%3A%20How%20to%20prevent%20user%20normal%20get%20all%20user%20in%20office365%20%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-457006%22%20slang%3D%22en-US%22%3E%3CP%3EYou%20can%20toggle%20the%20-%3CFONT%20style%3D%22background-color%3A%20%23ffffff%3B%20box-sizing%3A%20border-box%3B%20color%3A%20%23333333%3B%20font-family%3A%20%26amp%3Bquot%3B%20segoeui%26amp%3Bquot%3B%2C%26amp%3Bquot%3Blato%26amp%3Bquot%3B%2C%26amp%3Bquot%3Bhelvetica%20neue%26amp%3Bquot%3B%2Chelvetica%2Carial%2Csans-serif%3B%20font-size%3A%2016px%3B%20font-style%3A%20normal%3B%20font-variant%3A%20normal%3B%20font-weight%3A%20300%3B%20letter-spacing%3A%20normal%3B%20orphans%3A%202%3B%20text-align%3A%20left%3B%20text-decoration%3A%20none%3B%20text-indent%3A%200px%3B%20text-transform%3A%20none%3B%20-webkit-text-stroke-width%3A%200px%3B%20white-space%3A%20normal%3B%20word-spacing%3A%200px%3B%22%3EUsersPermissionToReadOtherUsersEnabled%3C%2FFONT%3E%20setting%3A%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CFONT%20style%3D%22background-color%3A%20%23ffffff%3B%22%3ESet-MsolCompanySettings%20-UsersPermissionToReadOtherUsersEnabled%3C%2FFONT%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-457893%22%20slang%3D%22en-US%22%3ERe%3A%20How%20to%20prevent%20user%20normal%20get%20all%20user%20in%20office365%20%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-457893%22%20slang%3D%22en-US%22%3E%3CP%3EHi%3C%2FP%3E%3CP%3Eif%20I%20set%20this%20command%20(%3CSPAN%3ESet-MsolCompanySettings%20-UsersPermissionToReadOtherUsersEnabled)%26nbsp%3B%3C%2FSPAN%3Ethen%20it%20has%20an%20effect%20to%20all%20function%20on%20web%20office365%20%3F%20as%20user%20can%20view%20profile%20and%20org%20chart...on%20outlook%20and%20web%20%3F%26nbsp%3B%3C%2FP%3E%3CP%3EAnd%20If%20only%20disable%20powershell%20then%20all%20fuction%20on%20web%20normal%20%2C%20is%20it%20only%20deny%20user%20conenct%20by%20powershell%20%3F%3C%2FP%3E%3CP%3EThanks%20your%20help%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-458661%22%20slang%3D%22en-US%22%3ERe%3A%20How%20to%20prevent%20user%20normal%20get%20all%20user%20in%20office365%20%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-458661%22%20slang%3D%22en-US%22%3E%3CP%3EIt's%20only%20for%20PowerShell.%20There's%20no%20way%20to%20prevent%20users%20from%20seeing%20details%20in%20the%20GAL.%20Unless%20you%20hide%20the%20corresponding%20people%20in%20the%20GAL%2C%20or%20configure%20GAL%20segregation%2C%20both%20of%20which%20will%20impact%20collaboration.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-458680%22%20slang%3D%22en-US%22%3ERe%3A%20How%20to%20prevent%20user%20normal%20get%20all%20user%20in%20office365%20%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-458680%22%20slang%3D%22en-US%22%3EHi%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F234118%22%20target%3D%22_blank%22%3E%40Tien%20Ngo%20Thanh%3C%2FA%3E%2C%3CBR%20%2F%3E%3CBR%20%2F%3EAs%20I%20wrote%20above%2C%20disable%20access%20to%20Powershell%20should%20achieve%20what%20you%20need%20without%20impact%20on%20service.%3CBR%20%2F%3E%3CBR%20%2F%3EBest%2C%20Chris%3C%2FLINGO-BODY%3E
Highlighted
Regular Contributor

Hello

     I see in office365 if one user don't need assign license or normal user not administrator then they can use this user connect to office365 by powershell and get all infomation user to csv .How to prevent that 

Best Regards

Thanks

5 Replies
Highlighted

Hi @Tien Ngo Thanh 

 

Disable access to Powershell for the user(s)

 

https://docs.microsoft.com/en-us/powershell/exchange/exchange-online/disable-access-to-exchange-onli...

 

Hope that answers your question!

 

Best, Chris

Highlighted

You can toggle the -UsersPermissionToReadOtherUsersEnabled setting:

 

Set-MsolCompanySettings -UsersPermissionToReadOtherUsersEnabled

Highlighted

Hi

if I set this command (Set-MsolCompanySettings -UsersPermissionToReadOtherUsersEnabled) then it has an effect to all function on web office365 ? as user can view profile and org chart...on outlook and web ? 

And If only disable powershell then all fuction on web normal , is it only deny user conenct by powershell ?

Thanks your help

Highlighted

It's only for PowerShell. There's no way to prevent users from seeing details in the GAL. Unless you hide the corresponding people in the GAL, or configure GAL segregation, both of which will impact collaboration.

Highlighted
Hi @Tien Ngo Thanh,

As I wrote above, disable access to Powershell should achieve what you need without impact on service.

Best, Chris