SOLVED

Hide generic/unlicensed users from MS Teams

%3CLINGO-SUB%20id%3D%22lingo-sub-334749%22%20slang%3D%22en-US%22%3EHide%20generic%2Funlicensed%20users%20from%20MS%20Teams%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-334749%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20Guys%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI've%20generic%2C%20inactive%20and%20unlicensed%20users%20that%20is%20searchable%20from%20MS%20Teams.%20Unlicensed%20users%20can%20even%20be%20added%20in%20Teams%20in%20MS%20Teams.%20Is%20there%20any%20explanation%20why%20are%20they%20showing%20up%3F%20Is%20there%20a%20way%20to%20prevent%20this%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-334749%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EMicrosoft%20Teams%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EUser%20Interface%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-334779%22%20slang%3D%22en-US%22%3ERe%3A%20Hide%20generic%2Funlicensed%20users%20from%20MS%20Teams%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-334779%22%20slang%3D%22en-US%22%3EAlso%20some%20official%20documentation%3A%3CBR%20%2F%3E%3CBR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fexchange%2Faddress-books%2Faddress-book-policies%2Fcreate-an-address-book-policy%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fexchange%2Faddress-books%2Faddress-book-policies%2Fcreate-an-address-book-policy%3C%2FA%3E%3CBR%20%2F%3E%3CBR%20%2F%3EAdam%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-334778%22%20slang%3D%22en-US%22%3ERe%3A%20Hide%20generic%2Funlicensed%20users%20from%20MS%20Teams%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-334778%22%20slang%3D%22en-US%22%3E%3CP%3EYes%2C%20it%20will%20work%20but%20you%20also%20have%20to%20create%20an%20Address%20Book%20Policy%20and%20assign%20it%20to%20mailboxes%20that%20should%20use%20it%20(I%20guess%20all).%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ESee%20the%20instructions%20here%3A%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fwww.petri.com%2Fusing-exchange-address-book-policies-teams%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fwww.petri.com%2Fusing-exchange-address-book-policies-teams%3C%2FA%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-334777%22%20slang%3D%22en-US%22%3ERe%3A%20Hide%20generic%2Funlicensed%20users%20from%20MS%20Teams%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-334777%22%20slang%3D%22en-US%22%3EHave%20you%20created%20an%20address%20book%20policy%3F%3F%3CBR%20%2F%3E%3CBR%20%2F%3EAlso%20see%20this%20from%20the%20link%20above%3A%3CBR%20%2F%3E%3CBR%20%2F%3E%E2%80%9CAddress%20book%20policies%20provide%20only%20a%20virtual%20separation%20of%20users%20from%20directory%20perspective.%20Users%20can%20still%20initiate%20communications%20with%20others%20by%20providing%20complete%20email%20addresses.%20It%20is%20also%20important%20to%20note%20that%20any%20user%20data%20that%20had%20already%20been%20cached%2C%20prior%20to%20the%20enforcement%20of%20new%20or%20updated%20address%20book%20policies%2C%20will%20remain%20available%20to%20users%20for%20up%20to%2030%20days.%E2%80%9C%3CBR%20%2F%3E%3CBR%20%2F%3EAdam%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-334769%22%20slang%3D%22en-US%22%3ERe%3A%20Hide%20generic%2Funlicensed%20users%20from%20MS%20Teams%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-334769%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20Adam%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI've%20seen%20that%2C%20gone%20to%20Teams%20%26amp%3B%20Skype%20Admin%20Center%20%26gt%3B%20Org-wide%20settings%20%26gt%3B%20Teams%20settings%20%26gt%3B%20under%20Search%2C%20turned%20on%20%22Scope%20directory%20search%20in%20Teams%20using%20an%20Exchange%20address%20book%20policy%22.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThen%2C%20I%20hid%20some%20users%20from%20the%20address%20list%20however%2C%20they%20are%20still%20searchable%3F%20Theoretically%2C%20will%20this%20work%3F%20Thank%20you!%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-334767%22%20slang%3D%22en-US%22%3ERe%3A%20Hide%20generic%2Funlicensed%20users%20from%20MS%20Teams%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-334767%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20Linus%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI've%20seen%20that%2C%20go%20to%20Teas%20%26amp%3B%20Skype%20Admin%20Center%20%26gt%3B%20Org-wide%20settings%20%26gt%3B%20Teams%20settings%20%26gt%3B%20under%20Search%2C%20turned%20on%20%22Scope%20directory%20search%20in%20Teams%20using%20an%20Exchange%20address%20book%20policy%22.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThen%2C%20I%20hid%20some%20users%20from%20the%20address%20list%20however%2C%20they%20are%20still%20searchable%3F%20Theoretically%2C%20will%20this%20work%3F%20Thank%20you!%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-334759%22%20slang%3D%22en-US%22%3ERe%3A%20Hide%20generic%2Funlicensed%20users%20from%20MS%20Teams%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-334759%22%20slang%3D%22en-US%22%3EYeah!%20Teams%20don%E2%80%99t%20utilize%20the%20GAL%20and%20will%20list%20all%20users%20as%20long%20they%20are%20in%20Azure%20AD!%3CBR%20%2F%3E%3CBR%20%2F%3EOnly%20solution%20to%20hide%20accounts%20is%20by%20using%20scoped%20directory%20search!%3CBR%20%2F%3E%3CBR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2FMicrosoftTeams%2Fteams-scoped-directory-search%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2FMicrosoftTeams%2Fteams-scoped-directory-search%3C%2FA%3E%3CBR%20%2F%3E%3CBR%20%2F%3EAdam%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-334756%22%20slang%3D%22en-US%22%3ERe%3A%20Hide%20generic%2Funlicensed%20users%20from%20MS%20Teams%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-334756%22%20slang%3D%22en-US%22%3E%3CP%3EThe%20explanation%20is%20that%20Teams%20searches%20in%20you%20Azure%20Active%20Directory%2C%20so%20all%20user%20that%20are%20located%20there%20will%20be%20searchable.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EYou%20can%20make%20Teams%20use%20your%20Global%20Address%20List%20Policy%20in%20Exchange%2C%20then%20you%20will%20be%20able%20to%20scope%20who%20users%20will%20be%20able%20to%20find%20from%20Teams.%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmicrosoftteams%2Fteams-scoped-directory-search%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmicrosoftteams%2Fteams-scoped-directory-search%3C%2FA%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1340980%22%20slang%3D%22en-US%22%3ERe%3A%20Hide%20generic%2Funlicensed%20users%20from%20MS%20Teams%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1340980%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F9476%22%20target%3D%22_blank%22%3E%40Linus%20Cansby%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ESo%20if%20a%20user%20is%20deleted%20from%20Azure%20AD%2C%20how%20much%20time%20takes%20to%20dissapear%20from%20the%20teams%20user%20search%20bar%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHow%20can%20i%20force%20this%20database%20update%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWhen%20i%20go%20to%20my%20Azure%20Admin%2C%20i%20don't%20see%20the%20user%20anymore.%20But%20when%20i%20go%20to%20teams%2C%20the%20removed%20user%20still%20has%20Away%20status%2C%20and%20it's%20searchable%20from%20the%20bar.%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
Occasional Contributor

Hi Guys,

 

I've generic, inactive and unlicensed users that is searchable from MS Teams. Unlicensed users can even be added in Teams in MS Teams. Is there any explanation why are they showing up? Is there a way to prevent this?

11 Replies
Highlighted

The explanation is that Teams searches in you Azure Active Directory, so all user that are located there will be searchable.

 

You can make Teams use your Global Address List Policy in Exchange, then you will be able to scope who users will be able to find from Teams.

https://docs.microsoft.com/en-us/microsoftteams/teams-scoped-directory-search

Highlighted
Yeah! Teams don’t utilize the GAL and will list all users as long they are in Azure AD!

Only solution to hide accounts is by using scoped directory search!

https://docs.microsoft.com/en-us/MicrosoftTeams/teams-scoped-directory-search

Adam
Highlighted

Hi Linus,

 

I've seen that, go to Teas & Skype Admin Center > Org-wide settings > Teams settings > under Search, turned on "Scope directory search in Teams using an Exchange address book policy".

 

Then, I hid some users from the address list however, they are still searchable? Theoretically, will this work? Thank you!

Highlighted

Hi Adam,

 

I've seen that, gone to Teams & Skype Admin Center > Org-wide settings > Teams settings > under Search, turned on "Scope directory search in Teams using an Exchange address book policy".

 

Then, I hid some users from the address list however, they are still searchable? Theoretically, will this work? Thank you!

Highlighted
Solution
Have you created an address book policy??

Also see this from the link above:

“Address book policies provide only a virtual separation of users from directory perspective. Users can still initiate communications with others by providing complete email addresses. It is also important to note that any user data that had already been cached, prior to the enforcement of new or updated address book policies, will remain available to users for up to 30 days.“

Adam
Highlighted

Yes, it will work but you also have to create an Address Book Policy and assign it to mailboxes that should use it (I guess all).

 

See the instructions here:

https://www.petri.com/using-exchange-address-book-policies-teams

Highlighted
Highlighted

@Linus Cansby 

 

So if a user is deleted from Azure AD, how much time takes to dissapear from the teams user search bar?

 

How can i force this database update?

 

When i go to my Azure Admin, i don't see the user anymore. But when i go to teams, the removed user still has Away status, and it's searchable from the bar.

Highlighted

@gonzalomusico I not sure since I haven't tested but I could guess that this note about scoped directory search applies for you.

 

It is also important to note that any user data that had already been cached, prior to the enforcement of new or updated address book policies, will remain available to users for up to 30 days.

https://docs.microsoft.com/en-us/MicrosoftTeams/teams-scoped-directory-search

 

So, up to 30 days. You should test in the Team web (https://teams.microsoft.com) client to see when user is cleared from your address book.

Highlighted

@Linus Cansby 

 

Nop, i don't have teams scoped directory search activated. It's disabled by default, i checked yesterday.

Highlighted

@gonzalomusico But the information about cached contacts is probably the same. So up to 30 days after you remove an user.