Microsoft Tech Community Live:  Microsoft Teams Edition
November 09, 2021, 08:00 AM - 12:00 PM (PST)
SOLVED

Hide generic/unlicensed users from MS Teams

%3CLINGO-SUB%20id%3D%22lingo-sub-334749%22%20slang%3D%22en-US%22%3EHide%20generic%2Funlicensed%20users%20from%20MS%20Teams%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-334749%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20Guys%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI've%20generic%2C%20inactive%20and%20unlicensed%20users%20that%20is%20searchable%20from%20MS%20Teams.%20Unlicensed%20users%20can%20even%20be%20added%20in%20Teams%20in%20MS%20Teams.%20Is%20there%20any%20explanation%20why%20are%20they%20showing%20up%3F%20Is%20there%20a%20way%20to%20prevent%20this%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-334749%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EMicrosoft%20Teams%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EUser%20Interface%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-334779%22%20slang%3D%22en-US%22%3ERe%3A%20Hide%20generic%2Funlicensed%20users%20from%20MS%20Teams%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-334779%22%20slang%3D%22en-US%22%3EAlso%20some%20official%20documentation%3A%3CBR%20%2F%3E%3CBR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fexchange%2Faddress-books%2Faddress-book-policies%2Fcreate-an-address-book-policy%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fexchange%2Faddress-books%2Faddress-book-policies%2Fcreate-an-address-book-policy%3C%2FA%3E%3CBR%20%2F%3E%3CBR%20%2F%3EAdam%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-334778%22%20slang%3D%22en-US%22%3ERe%3A%20Hide%20generic%2Funlicensed%20users%20from%20MS%20Teams%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-334778%22%20slang%3D%22en-US%22%3E%3CP%3EYes%2C%20it%20will%20work%20but%20you%20also%20have%20to%20create%20an%20Address%20Book%20Policy%20and%20assign%20it%20to%20mailboxes%20that%20should%20use%20it%20(I%20guess%20all).%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ESee%20the%20instructions%20here%3A%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fwww.petri.com%2Fusing-exchange-address-book-policies-teams%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fwww.petri.com%2Fusing-exchange-address-book-policies-teams%3C%2FA%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-334777%22%20slang%3D%22en-US%22%3ERe%3A%20Hide%20generic%2Funlicensed%20users%20from%20MS%20Teams%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-334777%22%20slang%3D%22en-US%22%3EHave%20you%20created%20an%20address%20book%20policy%3F%3F%3CBR%20%2F%3E%3CBR%20%2F%3EAlso%20see%20this%20from%20the%20link%20above%3A%3CBR%20%2F%3E%3CBR%20%2F%3E%E2%80%9CAddress%20book%20policies%20provide%20only%20a%20virtual%20separation%20of%20users%20from%20directory%20perspective.%20Users%20can%20still%20initiate%20communications%20with%20others%20by%20providing%20complete%20email%20addresses.%20It%20is%20also%20important%20to%20note%20that%20any%20user%20data%20that%20had%20already%20been%20cached%2C%20prior%20to%20the%20enforcement%20of%20new%20or%20updated%20address%20book%20policies%2C%20will%20remain%20available%20to%20users%20for%20up%20to%2030%20days.%E2%80%9C%3CBR%20%2F%3E%3CBR%20%2F%3EAdam%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-334769%22%20slang%3D%22en-US%22%3ERe%3A%20Hide%20generic%2Funlicensed%20users%20from%20MS%20Teams%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-334769%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20Adam%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI've%20seen%20that%2C%20gone%20to%20Teams%20%26amp%3B%20Skype%20Admin%20Center%20%26gt%3B%20Org-wide%20settings%20%26gt%3B%20Teams%20settings%20%26gt%3B%20under%20Search%2C%20turned%20on%20%22Scope%20directory%20search%20in%20Teams%20using%20an%20Exchange%20address%20book%20policy%22.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThen%2C%20I%20hid%20some%20users%20from%20the%20address%20list%20however%2C%20they%20are%20still%20searchable%3F%20Theoretically%2C%20will%20this%20work%3F%20Thank%20you!%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-334767%22%20slang%3D%22en-US%22%3ERe%3A%20Hide%20generic%2Funlicensed%20users%20from%20MS%20Teams%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-334767%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20Linus%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI've%20seen%20that%2C%20go%20to%20Teas%20%26amp%3B%20Skype%20Admin%20Center%20%26gt%3B%20Org-wide%20settings%20%26gt%3B%20Teams%20settings%20%26gt%3B%20under%20Search%2C%20turned%20on%20%22Scope%20directory%20search%20in%20Teams%20using%20an%20Exchange%20address%20book%20policy%22.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThen%2C%20I%20hid%20some%20users%20from%20the%20address%20list%20however%2C%20they%20are%20still%20searchable%3F%20Theoretically%2C%20will%20this%20work%3F%20Thank%20you!%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-334759%22%20slang%3D%22en-US%22%3ERe%3A%20Hide%20generic%2Funlicensed%20users%20from%20MS%20Teams%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-334759%22%20slang%3D%22en-US%22%3EYeah!%20Teams%20don%E2%80%99t%20utilize%20the%20GAL%20and%20will%20list%20all%20users%20as%20long%20they%20are%20in%20Azure%20AD!%3CBR%20%2F%3E%3CBR%20%2F%3EOnly%20solution%20to%20hide%20accounts%20is%20by%20using%20scoped%20directory%20search!%3CBR%20%2F%3E%3CBR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2FMicrosoftTeams%2Fteams-scoped-directory-search%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2FMicrosoftTeams%2Fteams-scoped-directory-search%3C%2FA%3E%3CBR%20%2F%3E%3CBR%20%2F%3EAdam%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-334756%22%20slang%3D%22en-US%22%3ERe%3A%20Hide%20generic%2Funlicensed%20users%20from%20MS%20Teams%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-334756%22%20slang%3D%22en-US%22%3E%3CP%3EThe%20explanation%20is%20that%20Teams%20searches%20in%20you%20Azure%20Active%20Directory%2C%20so%20all%20user%20that%20are%20located%20there%20will%20be%20searchable.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EYou%20can%20make%20Teams%20use%20your%20Global%20Address%20List%20Policy%20in%20Exchange%2C%20then%20you%20will%20be%20able%20to%20scope%20who%20users%20will%20be%20able%20to%20find%20from%20Teams.%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmicrosoftteams%2Fteams-scoped-directory-search%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmicrosoftteams%2Fteams-scoped-directory-search%3C%2FA%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1340980%22%20slang%3D%22en-US%22%3ERe%3A%20Hide%20generic%2Funlicensed%20users%20from%20MS%20Teams%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1340980%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F9476%22%20target%3D%22_blank%22%3E%40Linus%20Cansby%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ESo%20if%20a%20user%20is%20deleted%20from%20Azure%20AD%2C%20how%20much%20time%20takes%20to%20dissapear%20from%20the%20teams%20user%20search%20bar%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHow%20can%20i%20force%20this%20database%20update%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWhen%20i%20go%20to%20my%20Azure%20Admin%2C%20i%20don't%20see%20the%20user%20anymore.%20But%20when%20i%20go%20to%20teams%2C%20the%20removed%20user%20still%20has%20Away%20status%2C%20and%20it's%20searchable%20from%20the%20bar.%3C%2FP%3E%3C%2FLINGO-BODY%3E
Occasional Contributor

Hi Guys,

 

I've generic, inactive and unlicensed users that is searchable from MS Teams. Unlicensed users can even be added in Teams in MS Teams. Is there any explanation why are they showing up? Is there a way to prevent this?

12 Replies

The explanation is that Teams searches in you Azure Active Directory, so all user that are located there will be searchable.

 

You can make Teams use your Global Address List Policy in Exchange, then you will be able to scope who users will be able to find from Teams.

https://docs.microsoft.com/en-us/microsoftteams/teams-scoped-directory-search

Yeah! Teams don’t utilize the GAL and will list all users as long they are in Azure AD!

Only solution to hide accounts is by using scoped directory search!

https://docs.microsoft.com/en-us/MicrosoftTeams/teams-scoped-directory-search

Adam

Hi Linus,

 

I've seen that, go to Teas & Skype Admin Center > Org-wide settings > Teams settings > under Search, turned on "Scope directory search in Teams using an Exchange address book policy".

 

Then, I hid some users from the address list however, they are still searchable? Theoretically, will this work? Thank you!

Hi Adam,

 

I've seen that, gone to Teams & Skype Admin Center > Org-wide settings > Teams settings > under Search, turned on "Scope directory search in Teams using an Exchange address book policy".

 

Then, I hid some users from the address list however, they are still searchable? Theoretically, will this work? Thank you!

best response confirmed by Chris Webb (MVP)
Solution
Have you created an address book policy??

Also see this from the link above:

“Address book policies provide only a virtual separation of users from directory perspective. Users can still initiate communications with others by providing complete email addresses. It is also important to note that any user data that had already been cached, prior to the enforcement of new or updated address book policies, will remain available to users for up to 30 days.“

Adam

Yes, it will work but you also have to create an Address Book Policy and assign it to mailboxes that should use it (I guess all).

 

See the instructions here:

https://www.petri.com/using-exchange-address-book-policies-teams

@Linus Cansby 

 

So if a user is deleted from Azure AD, how much time takes to dissapear from the teams user search bar?

 

How can i force this database update?

 

When i go to my Azure Admin, i don't see the user anymore. But when i go to teams, the removed user still has Away status, and it's searchable from the bar.

@gonzalomusico I not sure since I haven't tested but I could guess that this note about scoped directory search applies for you.

 

It is also important to note that any user data that had already been cached, prior to the enforcement of new or updated address book policies, will remain available to users for up to 30 days.

https://docs.microsoft.com/en-us/MicrosoftTeams/teams-scoped-directory-search

 

So, up to 30 days. You should test in the Team web (https://teams.microsoft.com) client to see when user is cleared from your address book.

@Linus Cansby 

 

Nop, i don't have teams scoped directory search activated. It's disabled by default, i checked yesterday.

@gonzalomusico But the information about cached contacts is probably the same. So up to 30 days after you remove an user.

@adam deltinger  I have two questions about this solution: 

1- Is this limited to MS Teams or this will be created a general communication boundary (including Exchange)

2- Is this solution only for search by name or should search by email be included as well? (Users can still copy/paste and email and start chatting)

thank you