A Google admin asks a 365 admin question.... Block all users

[Jaan]

Hi Guys,

 

We use GSuite here, but have just confirmed ownership of our domain via the 365 admin center (Long story)

 

We've noticed that a number of users have signed up to o365 using their school provided Google account address.

 

Totally new to this so forgive the question.....I know i can block sign-in for individual users.... only 3 or 4 to be far... but how do i stop this from happening in the future.... We should be using G Suite not 365 cheers

 

Sorry for the o365 newbie question!

[Jaan]

Update:

 

I've just tried to "sign up" using a school Gmail account and it doesn't let me..... no idea how users have managed to add their school owned email

[howartp]

Discovered last week that a good number of ours have done this also.

 

We do have the relevant licenses for it, so there's actually nothing wrong with them doing so - but they've dowloaded O365 for their desktops, laptops, mac's and friends - and then left the school at 18 with free copies of Office.

 

I'm guessing IF we had sync setup, it would disable users when they leave school - but we don't.

[Jaan]

Discovered last week that a good number of ours have done this also.

 

We do have the relevant licenses for it, so there's actually nothing wrong with them doing so - but they've dowloaded O365 for their desktops, laptops, mac's and friends - and then left the school at 18 with free copies of Office.

 

I'm guessing IF we had sync setup, it would disable users when they leave school - but we don't.

 

Our issue is that we don't want them to use O365 as we are heavily Google based.

 

We also want to control whats being sent where.

[JRowley]

I think this is what you're looking for, specifically the "Disable automatic tenant join".

 

https://support.office.com/en-us/article/office-365-education-self-sign-up-technical-faq-7fb1b2f9-94c2-4cbb-b01e-a6eca34261d6#bkmk_preventjoins

 

But I can't confirm right now, hopefully someone else can.

[NicholasEsping]

Users were able to use their own email because there was no ownership of the domain for the office 365 tenant. Once you verified ownership that would have stop users from being able to provision their own accounts.

[Jaan]

That makes sense. Cheers

[Jaan]

OK i performed a "scream test"..... i have screamers....

 

So we do have a license for staff to use o365, but staff should be using Google Apps. Can i disable outlook and onedrive so our users can't store anything in the O365 platform, but continue to use O365 at home?

 

cheers

[Rob_D]

Under the licencing pane (Admin Center>active users>select a user> licencing) you should be able to go in and turn on/off specific parts of the licence (or specific products). If you're using the A1 (like us) then "sharepoint" and "exchange" should turn off onedrive and outlook respectively.

Other licences should have similar options.

[flyinghaggis]

We've encountered this issue as well with staff signing up for Office 365 (we use Google Apps) so have disabled users from signing up with school email accounts.

 

One unfortunate side effect of this is that several other schools and companies we deal with use Office365 and this has prevented our users from accessing documents shared to them. We've also had the opposite where companies we've shared Google Apps documents with couldn't access them as their Office365 based and their IT dept has disabled Google sign-ups!

 

Perhaps we're being overly draconian but, like the OP, we really don't want our staff to actively start using Office365 and for the school to end up responsible for managing, supporting and funding both an Office365 and Google Apps environment for our teachers?

 

What's everyone else's thoughts? If you're using Office365/Google Apps in your school do you generally disable user sign-ups for the other platform?

Edited March 11, 2019 by flyinghaggis

[Jaan]

We have no issue with users using O365 as part of the HUP, however we can't have them using the email and onedrive.

[flyinghaggis]

We have no issue with users using O365 as part of the HUP, however we can't have them using the email and onedrive.

 

That was pretty much our thoughts about it as well. We don't want staff starting to use email, Onedrive, Sharepoint, etc. Most wouldn't bother but I know a few staff/departments who've used it at previous schools before and would likely start migrating across if they could create accounts!

Edited March 12, 2019 by flyinghaggis

[mavhc]

You can use your work email to create a MS account as either a home or a work account. If it's home then there's nothing much you can do, except remind people not to store work data on non approved systems. If it's a work account then just disable the apps and they can use the account for auth and to read those pointless single channel "encrypted" emails