Office 365 - Students creating groups

[mrbios]

Hi,

 

I've got my user role permissions set so that they shouldn't be able to do this, and i've confirmed that all students are set to the restricted role assignment permissions, but students are somehow creating Office 365 groups.....and some of them have predictably charming names :/

 

How do i stop them being able to do this?

[AngryITGuy]

I believe the settings are in the Default Role Assignment Policy.

 

You need to make sure the MyDistributionGroups check box and the MyDistributionGroupMembership check box are untucked to stop users creating groups.

[mrbios]

I believe the settings are in the Default Role Assignment Policy.

 

You need to make sure the MyDistributionGroups check box and the MyDistributionGroupMembership check box are untucked to stop users creating groups.

 

Hmm I've already got staff and students on their own groups (Salamander is a wonderful thing ) and those settings unticked. When i manually check an account that has created a group they're set to the correct group too.

[NicholasEsping]

I would use powershell to make sure group creation is still disabled. If its enabled disable it and see if they can still create groups.

$creds = Get-Credential

 

$Session = New-PSSession -ConfigurationName Microsoft.Exchange `

-ConnectionUri https://outlook.office365.com/powershell-liveid/ `

-Credential $creds -Authentication Basic -AllowRedirection

 

Import-PSSession $Session

 

Get-OwaMailboxPolicy "Student Mailbox Policy" | selectGroupCreationEnabled

Set-OwaMailboxPolicy –Identity “Student Mailbox Policy” –GroupCreationEnabled $false

[snagrat]

The settings you mention you have set are for disabling the creation of Distribution group, not Office 365 groups.

 

Office 365 groups has to be done by Powershell.

[mrbios]

Awesome, thank you, will get on this on Monday

[NicholasEsping]

I was just at a conference and found out the method I stated in my previous reply is a little outdated and students will still be able to create groups that way. The new method involves creating a security group and allowing that group to create office 365 groups. There are some pretty good instructions on how to do this here: https://support.office.com/en-us/article/Manage-Office-365-Group-Creation-4c46c8cb-17d0-44b5-9776-005fced8e618

[timbo343]

I got stung by students creating groups and edited the one of the default policies. It was a fairly quick change.