Problem with inheriting policy by Security/Distribution group for Teams

%3CLINGO-SUB%20id%3D%22lingo-sub-1831860%22%20slang%3D%22en-US%22%3EProblem%20with%20inheriting%20policy%20by%20Security%2FDistribution%20group%20for%20Teams%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1831860%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20Folks!%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20was%20create%20a%20custom%20TeamsMeetingPolicy%20and%20assigned%20it%20to%20a%20security%20group.%20Everything%20finished%20with%20success%20except%20one%20thing%2C%20this%20policy%20isn't%20effective%20for%20this%20particular%20security%20group%20members.%26nbsp%3B%3C%2FP%3E%3CP%3ENo%20one%20of%20users%20in%20this%20group%20dosen't%20have%20DIRECT%20TeamsMeetingPolicy%20assigned.%20The%20group%20isn't%20nested%20in%20other%20group.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EPowershell%20cmdlt%26nbsp%3BGet-CsGroupPolicyAssignment%20-PolicyType%20teamsmeetingpolicy%20shows%20me%20that%20policy%20is%20assigned%20to%20the%20group.%3C%2FP%3E%3CP%3EPowershell%20cmdlt%26nbsp%3BGet-CsUserPolicyAssignment%20-Identity%20xxxx%40xxx.xx%20-PolicyType%20TeamsMeetingPolicy%20shows%20nothing%2C%20from%20GUI%20when%20I%20check%20policies%20on%20user%20profile%20everything%20is%20set%20to%20%22Global%20(org-wide%20default)%22%3CBR%20%2F%3E%3CBR%20%2F%3EAnyone%20had%20similar%20problem%20and%20knows%20solution%20%3F%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1831860%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAdministrator%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EMicrosoft%20Teams%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1832010%22%20slang%3D%22en-US%22%3ERe%3A%20Problem%20with%20inheriting%20policy%20by%20Security%2FDistribution%20group%20for%20Teams%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1832010%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F850208%22%20target%3D%22_blank%22%3E%40Matich3ck%3C%2FA%3E%26nbsp%3BHi%2C%20when%20did%20you%20assign%20the%20policy%3F%20It%20can%20easily%20take%2048%20hours%20for%20a%20large%20group%20and%2For%20org.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAdding%20for%20reference%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmicrosoftteams%2Fassign-policies%23assign-a-policy-to-a-group%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmicrosoftteams%2Fassign-policies%23assign-a-policy-to-a-group%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1832039%22%20slang%3D%22en-US%22%3ERe%3A%20Problem%20with%20inheriting%20policy%20by%20Security%2FDistribution%20group%20for%20Teams%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1832039%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F551905%22%20target%3D%22_blank%22%3E%40bec064%3C%2FA%3ESure%20I%20know%20about%20that.%20Correct%20me%20if%20I'm%20wrong%2C%20time%20delay%20affecting%20effectivity%20of%20policy%20but%20powershell%20cmdlet%20Get-CsGroupPolicyAssignment%20-Identity%20should%20shows%20policy%20assigned%20to%20user%20instantly%20even%20if%20it%20not%20effective%20yet.%26nbsp%3B%3C%2FP%3E%3CP%3EI%20try%20it%20with%20Sec%20Group%20with%20only%20two%20users.%20I%20did%20it%2016h%20ago.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1832380%22%20slang%3D%22en-US%22%3ERe%3A%20Problem%20with%20inheriting%20policy%20by%20Security%2FDistribution%20group%20for%20Teams%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1832380%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F850208%22%20target%3D%22_blank%22%3E%40Matich3ck%3C%2FA%3E%26nbsp%3BNot%20sure%20about%20that%20to%20be%20honest.%20As%20you're%20using%20a%20group%20to%20assign%20the%20policy%2C%20and%20it%20takes%20quite%20some%20time%20for%20it%20to%20process%2C%20if%20you%20then%20try%20to%20get%20the%20assigned%20group%20policy%20for%20an%20individual%20in%20that%20group%20before%20that%20process%20is%20completed%20it%20shouldn't%20be%20able%20to%20present%20it%20for%20you.%20But%20I%20could%20be%20wrong.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20would%20wait%20until%20tomorrow%2C%20or%20ask%20Microsoft%20by%20opening%20a%20support%20request%20if%20you%20need%20to%20know%20right%20now.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E*edit*%20It's%20even%20mentioned%20in%20the%20link%20I%20attached.%26nbsp%3B%3CEM%3EWhen%20you%20assign%20the%20policy%2C%20it's%20immediately%20assigned%20to%20the%20group.%20However%2C%20note%20that%20the%20propagation%20of%20the%20policy%20assignment%20to%20members%20of%20the%20group%20is%20performed%20as%20a%20background%20operation%20and%20may%20take%20some%20time%2C%20depending%20on%20the%20size%20of%20the%20group.%3C%2FEM%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ELet%20me%20know%20how%20it%20goes!%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
Occasional Contributor

Hi Folks!,

 

I was create a custom TeamsMeetingPolicy and assigned it to a security group. Everything finished with success except one thing, this policy isn't effective for this particular security group members. 

No one of users in this group dosen't have DIRECT TeamsMeetingPolicy assigned. The group isn't nested in other group. 

 

Powershell cmdlt Get-CsGroupPolicyAssignment -PolicyType teamsmeetingpolicy shows me that policy is assigned to the group.

Powershell cmdlt Get-CsUserPolicyAssignment -Identity xxxx@xxx.xx -PolicyType TeamsMeetingPolicy shows nothing, from GUI when I check policies on user profile everything is set to "Global (org-wide default)"

Anyone had similar problem and knows solution ? 

 

6 Replies
Highlighted

@Matich3ck Hi, when did you assign the policy? It can easily take 48 hours for a large group and/or org.

 

Adding for reference https://docs.microsoft.com/en-us/microsoftteams/assign-policies#assign-a-policy-to-a-group 

Highlighted

@bec064Sure I know about that. Correct me if I'm wrong, time delay affecting effectivity of policy but powershell cmdlet Get-CsGroupPolicyAssignment -Identity should shows policy assigned to user instantly even if it not effective yet. 

I try it with Sec Group with only two users. I did it 16h ago.

Highlighted

@Matich3ck Not sure about that to be honest. As you're using a group to assign the policy, and it takes quite some time for it to process, if you then try to get the assigned group policy for an individual in that group before that process is completed it shouldn't be able to present it for you. But I could be wrong.

 

I would wait until tomorrow, or ask Microsoft by opening a support request if you need to know right now.

 

*edit* It's even mentioned in the link I attached. When you assign the policy, it's immediately assigned to the group. However, note that the propagation of the policy assignment to members of the group is performed as a background operation and may take some time, depending on the size of the group.

 

Let me know how it goes!

Highlighted

@bec064 It was definitley problems on Microsoft side. From today's morning I can assign policies to groups and it's working instantly (even in 255 members group)

Highlighted

@Matich3ck Hi, that's great! You mean you can instantly use Get-CsGroupPolicyAssignment -Identity to see the assigned group policy? No delay?

 

Thanks for letting me know!

Highlighted

@bec064Yeap, New-CsGroupPolicyAssignment in powershell maybe 1 or 2 minutes later I performed Get-CsGroupPolicyAssignment -Identity and got result where I can find policy inherited from group