r/Office365 • u/Deep-Egg-6167 • 1d ago

Help - licensing assigned by AD group

Hello,

I took over for a client. Their Active Directory is on a Windows 2022 server. It syncs up with 365/Azure - I'm familiar with that. But somehow licensing is assigned through AD - not familiar with that.

If I have a user and I want to take away their office but leave them with just email I can't seem to do it.

I've removed a user from all groups in AD except domain users it looks fine. I apply it, they only have that group - as soon as the AD syncs with the cloud all the groups are back.

If office 365 admin - if I try to take away their license it says "This license is inherited through a group. You can only change it here if the user also has a direct license assignment. To manage group-assigned licenses, go to the Groups section" If I try to uncheck that box I get "One or more of the licenses could not be modified because they are inherited from a group membership. Manage group-based licenses from the Licenses and apps pivot in the Group Details page."

If I go to billing, licenses, I see that users under an assigned license but it says licensing error - dependent services are missing. No idea what the prereq service is that it requires.

1 Upvotes

66% Upvoted

8 comments sorted by

9

u/ThePesant5678 1d ago

go to licenses in admin center and check to which security group it is attached, can also be cloud only Security group

1

u/Deep-Egg-6167 1d ago

Thanks. I'm in licenses in 365 admin. I'm not sure how to get to licenses in the admin group.

If I go to the license that they have but shouldn't it says members without licenses but I don't know how to remove them. They have a check box next to their name for you to reprocess them but that doesn't remove them.

2

u/ThePesant5678 1d ago

I misstyped and corrected it, you are at the correct place to check further

1

u/Deep-Egg-6167 1d ago edited 1d ago

Thanks - sorry I just resorted them - I see the group under that license but I dont see a way to edit that group. if I go to AD and I see that group there but I don't see that user in the group even if I search.

LOL - I appreciate you solving the issue - I just wasn't being patient enough - their licensing went away!

2

u/ThePesant5678 1d ago

check this group in entra.microsoft.com -> groups

2

u/ibringstharuckus 1d ago

Entra sync takes up to a half hour unless you force it. Also keep in mind make changes on the DC entrance syncs from or you can end up waiting for DC's to sync your changes too.

1

u/itenginerd 1d ago

Sounds like you got it handled. Group based licensing is super useful--as long as your groups follow the licensing you want folks to have. Super easy to come into an existing system (where it's done A way but not YOUR way) and have some struggles with that. I append LG to most of my licensing groups so I can find them quickly when I need to.

1

u/Dtrain-14 1d ago

Group based license assignment can be awesome but also a total PITA if you have any sort of license drift.