User Profile
RajexMSFT
Copper Contributor
Joined 5 years ago
User Widgets
Recent Discussions
OneDrive for business data retention post license deactivation
My client doesn't want his users to use OneDrive for business. They want to use Sharepoint on-premise. Unfortunately few of the users have enabled Onedrive as it was a part of Microsoft 365 Apps for Enterprise (formerly pro-plus) license bundle/pack. As part of the remediation. 1. The Officeonline and Onedriveforbusiness services have been disabled in the M365 license option and reassigned to the users. 2.The existing personal sites lockstate is set to no access. Q: Some of the users had data in the onedrive sites. How long the data will be retained ? Will OD4B data deletion get triggered in this case ?630Views0likes0CommentsDisabling Synchronization Rule - Out to AD – User NGCKey in AzureAD Connect.
I have an on-premise deployment of Windows Hello for business [Certificate Trust] using ADFS 4.0 DRS. I also have an O365 Apps for Enterprise (Pro-plus) subscription. The identities (users only) are synced from on-premise to Azure AD. Only 8 attributes (Required for O365 Pro-plus is synced), [App Filtering in used] accountEnabled cn displayName objectSID pwdLastSet samAccountName sourceAnchor usageLocation userPrincipalName No device/group write-back is enabled, no other O365 applications are used. I am seeing plenty of errors like ones mentioned in blog below (Q4) in Synchronization Service, where the service is trying to overwrite/remove the msds-keycredentialLink attribute [Populated to due WH4B provisoning] for insufficient permissions. https://techcommunity.microsoft.com/t5/azure-active-directory-identity/azure-ad-mailbag-windows-hello-for-business/ba-p/445349 They should be triggered by the synchronization rules listed below . IN from AAD - User NGCKey (to DeviceKey in mv) Out to AD – User NGCKey (from DeviceKey in mv to msds-keycredentialLink in AD) My questions, 1. Why does it need to writeback the NGCkey ? 2. Why the errors still persists even if the below rules are disabled ?
Groups
Recent Blog Articles
No content to show