SOLVED

Remove Teams License

%3CLINGO-SUB%20id%3D%22lingo-sub-1800016%22%20slang%3D%22en-US%22%3ERemove%20Teams%20License%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1800016%22%20slang%3D%22en-US%22%3E%3CP%3EWe%20have%20a%20Microsoft%20365%20Business%20Premium%20tenant%2C%20and%20we%20would%20like%20to%20block%20%3CEM%3Eall%3C%2FEM%3E%20access%20to%20Teams%20for%20one%20or%20more%20employees.%20I'm%20testing%20this%20with%20a%20user%20account%20that%20has%20had%20Teams%20access%3B%20the%20employee%20has%20left%20the%20company%20and%20I%20changed%20that%20account%20password.%26nbsp%3B%3CBR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmicrosoftteams%2Fuser-access%22%20target%3D%22_self%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3EAccording%20to%20MS%3C%2FA%3E%2C%20%22%3CSPAN%3EYou%20can%20disable%20or%20enable%20Teams%20for%20a%20user%20by%20removing%20or%20assigning%20a%20license%20at%20any%20time.%22.%20Definitely%20after%20removing%20that%20license%20the%20app%20gets%20removed%20from%20the%20online%20Office%20%22dashboard%22%20but%20if%20I%20login%20to%20a%20locally%20installed%20Teams%20client%20app%20as%20that%20user%2C%20the%20account%20still%20has%20normal%20Teams%20access.%26nbsp%3B%20%3F%3F%3CBR%20%2F%3EIs%20this%20a%20bug%20or%20is%20it%20just%20a%20matter%20of%20it%20taking%20a%20period%20(of%20hours%2C%20days%2C%20etc)%20for%20the%20Teams%20service%20to%20pickup%20the%20change%3F%20It's%20been%2024hrs%20so%20far.%3CBR%20%2F%3E%3CBR%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1800016%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3ELicensing%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EMicrosoft%20Teams%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1800083%22%20slang%3D%22en-US%22%3ERe%3A%20Remove%20Teams%20License%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1800083%22%20slang%3D%22en-US%22%3E%3CP%3EJust%20wait%20a%20while.%20In%20addition%2C%20you%20can%20disable%20the%20user%20in%20Azure%20AD%2FMicrosoft%20365%20Admin%20center.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1800136%22%20slang%3D%22en-US%22%3ERe%3A%20Remove%20Teams%20License%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1800136%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F588819%22%20target%3D%22_blank%22%3E%40kvaden357%3C%2FA%3E%26nbsp%3B%26nbsp%3BYou%20can%20reset%20the%20user's%20password%20and%20force%20a%20sign%20out%20-%20the%20article%20I%20link%20to%20below%20goes%20over%20all%20of%20the%20options%20for%20securely%20removing%20someone's%20access.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EUse%20Sign%20Out%20Now%3A%26nbsp%3B%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmicrosoft-365%2Fadmin%2Fadd-users%2Fremove-former-employee%3Fview%3Do365-worldwide%23sign-out-now%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmicrosoft-365%2Fadmin%2Fadd-users%2Fremove-former-employee%3Fview%3Do365-worldwide%23sign-out-now%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EMore%20info%3A%26nbsp%3B%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmicrosoft-365%2Fadmin%2Fadd-users%2Fremove-former-employee%3Fview%3Do365-worldwide%23block-a-former-employees-access-to-microsoft-365-data%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmicrosoft-365%2Fadmin%2Fadd-users%2Fremove-former-employee%3Fview%3Do365-worldwide%23block-a-former-employees-access-to-microsoft-365-data%3C%2FA%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1800170%22%20slang%3D%22en-US%22%3ERe%3A%20Remove%20Teams%20License%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1800170%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F588819%22%20target%3D%22_blank%22%3E%40kvaden357%3C%2FA%3E%26nbsp%3Bbut%20to%20echo%20what%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F58%22%20target%3D%22_blank%22%3E%40Vasil%20Michev%3C%2FA%3E%26nbsp%3B%20said%2C%20if%20you%20are%20just%20wanting%20to%20restrict%20access%20to%20Teams%20it%20does%20take%20a%20while%20for%20the%20license%20changes%20to%20propagate.%26nbsp%3B%20Lately%2C%20we%20had%20one%20where%20the%20license%20didn't%20fully%20propagate%20for%20about%2048%20hours.%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
Contributor

We have a Microsoft 365 Business Premium tenant, and we would like to block all access to Teams for one or more employees. I'm testing this with a user account that has had Teams access; the employee has left the company and I changed that account password. 
According to MS, "You can disable or enable Teams for a user by removing or assigning a license at any time.". Definitely after removing that license the app gets removed from the online Office "dashboard" but if I login to a locally installed Teams client app as that user, the account still has normal Teams access.  ??
Is this a bug or is it just a matter of it taking a period (of hours, days, etc) for the Teams service to pickup the change? It's been 24hrs so far.

7 Replies
Highlighted

Just wait a while. In addition, you can disable the user in Azure AD/Microsoft 365 Admin center.

Highlighted

@kvaden357  You can reset the user's password and force a sign out - the article I link to below goes over all of the options for securely removing someone's access.

 

Use Sign Out Now:  https://docs.microsoft.com/en-us/microsoft-365/admin/add-users/remove-former-employee?view=o365-worl...

 

More info:  https://docs.microsoft.com/en-us/microsoft-365/admin/add-users/remove-former-employee?view=o365-worl...

Highlighted
Best Response confirmed by kvaden357 (Contributor)
Solution

@kvaden357 but to echo what @Vasil Michev  said, if you are just wanting to restrict access to Teams it does take a while for the license changes to propagate.  Lately, we had one where the license didn't fully propagate for about 48 hours.

Highlighted
Thanks, but the user(s) need to remain enabled; we just don't want them in Teams.
Highlighted
>..had one where the license didn't fully propagate for about 48 hours
Ok...I'll give it another couple days. Frankly I wondered if that was the case, as recently I renamed a user & changed email address and Teams was majorly lag'n behind updating compared to the other included MS services. Took the entire weekend plus a bit longer. Sigh...
Highlighted

@kvaden357 Yeah, I think lately the delays are because their infrastructure is under such a heavy load right now with the pandemic...but we were scratching our heads trying to troubleshoot the licensing issue for a while - turned out every time we were resetting the license we just made it worse, lol.  Prior the pandemic 48 hours would be unthinkable for propagation.  Hopefully it eases up as they add resources.

Highlighted
Thanks Ethan. I checked this morning, finally took effect, so somewhere between 30-36hrs. Less than expected, more than desired. As you say, hopefully this improves but for now I still see a lot of what I call "fade" (fade in, fade out) in overall MS service performance. Checking their "Service Health" page this morning; degradation reports for Exchange, OneDrive, and SharePoint. :(