rs_oakford
Iron Contributor
Joined 6 years ago
User Profile
User Widgets
Recent Discussions
Manage Teams guest access
As I understand, Guest access for Microsoft Teams is currently off by default for any given tenant - see https://docs.microsoft.com/en-us/microsoftteams/set-up-guests. However, it's not clear whether a given tenant has Guest access setting set to "Off" instead of "Service default" based on the information and screenshot in https://docs.microsoft.com/en-us/microsoft-365/solutions/collaborate-as-team#teams-guest-access-settings. 1. Is it possible to check whether a given tenant has Guest access disabled (Guest access setting is set to "Off" instead of "Service default") via PowerShell or using an API? As I'm managing hundreds of tenants, I would like to know a way to check this without having to sign into each Teams admin center individually. 2. If I do have to check this manually for each tenant, how do I distinguish in the Teams admin center whether the Guest access setting is set to "Off" instead of "Service default"? I realize I can check Guest access and disable it for individual Teams as shared in https://techcommunity.microsoft.com/t5/microsoft-teams/allow-or-block-guest-users-from-a-specific-team-in-microsoft/m-p/175918 - assuming this is still current. <# Configuration Change in Guest access for Microsoft Teams MC228482 Major update: Announcement started Applied To: All We're making some changes to the default setting for Guests in Microsoft Teams Beginning on February 8th, 2021, we are turning on Guest access in Microsoft Teams by default for any customers who have not configured this setting. This will bring Teams Guest capability into alignment with the rest of the suite, where the setting is already on by default. [Key Points:] • Timing: February 8th, 2021 • Admin control: Admin center UI • Action: Review and set appropriate configuration [How this will affect your organization:] When this change is implemented if you have not already configured Guest access capability in Microsoft Teams, that capability will be enabled in your tenant. With guest access enabled, you can provide access to teams and other resources to people outside your organization while maintaining control over your corporate data. [What you need to do to prepare:] Prior to this change taking effect on February 8th 2021, if you want Guest access to remain disabled for your organization, you will need to confirm that the Guest access setting is set to "Off" instead of "Service default". Instructions for how to configure the Teams guest access settings can be found here: Teams guest access settings [https://docs.microsoft.com/en-us/microsoft-365/solutions/collaborate-as-team#teams-guest-access-settings] #>Updates to https://docs.microsoft.com/en-us/schooldatasync/ section
There doesn't seem to be an option to comment on the docs section https://docs.microsoft.com/en-us/schooldatasync/ as there is for example on https://docs.microsoft.com/en-us/office365/servicedescriptions/office-365-service-descriptions-technet-library. School Data Sync (SDS), https://docs.microsoft.com/en-us/schooldatasync/ (published date 09/30/2017) says: "School Data Sync (SDS) is a free service in Office 365 for Education that reads the school and roster data from a school's Student Information System (SIS). It creates Office 365 Groups for Exchange Online and SharePoint Online, class teams for Microsoft Teams and OneNote Class notebooks, school groups for Intune for Education, and rostering and SSO integration for many other third party applications." And https://docs.microsoft.com/en-us/schooldatasync/frequently-asked-questions (published data 04/15/2018) still say: School Data Sync is a free service in Office 365 Education that reads the rosters from your SIS, and creates classes for Microsoft Teams, Intune for Education, and third party applications. ... SDS allows you to automatically create Class Teams within Teams for Education (There are likely more references to SDS creating Teams that could be found) - perhaps someone could update these references in light of https://docs.microsoft.com/en-us/schooldatasync/whats-new-with-school-data-sync (published date 03/26/2020) and https://docs.microsoft.com/en-us/schooldatasync/improved-class-and-roster-sync-for-teams (published date 04/14/2020) to explain the difference between the ways Teams are provisioned for sync profiles created before and after 3/26/2020?Azure AD Connect service critical alert reported: dn-attributes-failure
[I sent an email to askaadconnecthealth@microsoft.com with the below content a few days ago but haven't heard back so decided to start a conversation here] As per the below synchronization errors email I have been receiving, there are three cloud-only Office 365 users with “Sign in blocked” that were previously synched using Azure AD Connect. The accounts were previously moved out of the sync OU and when they appeared as deleted users in Office 365, were restored to keep their data intact. The AD users have since been deleted and cannot be restored. https://aad.portal.azure.com/#blade/Microsoft_Azure_ADHybridHealth/AadHealthMenuBlade/SyncErros There are no further error details other than the type: dn-attributes-failure There are no other sync errors and Azure AD Connect is showing success on all connector operations. I do not want to delete these accounts from Office 365. Could anyone please advise me to know which steps to take to resolve the issue causing these three accounts to be included in the report for synchronization errors? They are cloud-only and do not need to be synched with AD. Is it necessary to re-create the AD users in the sync OU and set their Office 365 account ImmutableID to sync and match their AD account (source anchor is objectGUID) so they do not get reported as sync errors? ----- From: Microsoft Azure [mailto:azure-noreply@microsoft.com] Sent: 02 September 2019 11:10 Subject: We detected synchronization errors in your directory There are synchronization errors in your directory. Azure AD Connect Sync errors detected You’re receiving this email because we have detected a critical alert on your Azure AD Connect service for errors that occurred while data was while synchronizing between your on- premises active directory and your Azure Active Directory. Title: Sync errors detected on your Azure AD Connect service Last export time: August 13, 2019 15:25 UTC Error count: 3 sync errors Service: [tenant].onmicrosoft.com Tenant: John Hanson School Report: To get more details, see Sync Error Report. To learn how to fix sync errors, see troubleshooting sync errors. If you have any feedback, please post it to the Azure Active Directory Feedback Forums or contact us for any questions. Privacy Statement Microsoft Corporation, One Microsoft Way, Redmond, WA 98052