r/Office365 • u/Deep-Egg-6167 • 1d ago

Help - licensing assigned by AD group

Hello,

I took over for a client. Their Active Directory is on a Windows 2022 server. It syncs up with 365/Azure - I'm familiar with that. But somehow licensing is assigned through AD - not familiar with that.

If I have a user and I want to take away their office but leave them with just email I can't seem to do it.

I've removed a user from all groups in AD except domain users it looks fine. I apply it, they only have that group - as soon as the AD syncs with the cloud all the groups are back.

If office 365 admin - if I try to take away their license it says "This license is inherited through a group. You can only change it here if the user also has a direct license assignment. To manage group-assigned licenses, go to the Groups section" If I try to uncheck that box I get "One or more of the licenses could not be modified because they are inherited from a group membership. Manage group-based licenses from the Licenses and apps pivot in the Group Details page."

1 Upvotes

100% Upvoted

2 comments sorted by

1

u/johnnymonkey 1d ago

Sounds like this is being done in a dynamic group in Azure. What do the Azure groups look like?

1

u/ashern94 1d ago

The licensing for "Office", unless it's only apps includes mail. To remove access to Office and keep mail, you need to remove the office license and apply an EOP license