Aug 22 2019 10:50 PM
Hello Team,
Hope everyone is doing well. I had one questions for this wonderful community, Hope I will get more inputs from all of you.
We're looking to restrict login hours for a person in Microsoft Teams, Don't want to allow him to access Teams after working hours or defined time period. Currently we don't want to use conditional access to allow use of only office network and block all external access. As Users need to be connect through different networks for work access.
Please provide me your inputs to achieve this, Any help would be greatly appreciated.
Thanks,
Jitesh
Aug 22 2019 11:01 PM - edited Aug 22 2019 11:04 PM
Aug 22 2019 11:25 PM
Aug 23 2019 12:21 AM
SolutionThe only way to restrict logon hours is when authentication happens on-premises, so you need either PTA or AD FS. But that will of course apply to all apps, not just Teams. An alternative is to schedule a PowerShell script that periodically disables/reenables the account and revokes tokens. Again, applies to all apps.
CA doesn't offer time-based controls, but it's the only solution that can target just the Teams app.
Aug 23 2019 12:29 AM - edited Aug 23 2019 12:32 AM
Vasil, The main idea is to block login on teams after office hours. so suppose if I block the login hours from AD then how will it synced with the Teams App in this case the users will still be able to use the team app on their mobile phone. Please suggest
Aug 23 2019 12:34 AM
Aug 23 2019 06:53 AM
Jan 29 2021 06:14 PM
There are two ways to do this:
- Using AD Connect with Pass-through (https://youtu.be/cdgxmx4bpgg)
- Script (https://youtu.be/JErcqyflEdI) this video helps to configure
Aug 23 2019 12:21 AM
SolutionThe only way to restrict logon hours is when authentication happens on-premises, so you need either PTA or AD FS. But that will of course apply to all apps, not just Teams. An alternative is to schedule a PowerShell script that periodically disables/reenables the account and revokes tokens. Again, applies to all apps.
CA doesn't offer time-based controls, but it's the only solution that can target just the Teams app.