Microsoft Teams Messaging Policies

[nathan]

We've just created our student accounts and we are now just testing the use of Teams, we would like to do things such as remove the private chat feature. This is achievable by using a messaging policy.

 

Trouble is, we can only enter individual users into that policy - not something we want to do with so many students. Our students are already in a security group, but we can't add this via the GUI. We can do this via powershell but apparently it breaks as soon as the group membership changes as per a post on their uservoice site > https://microsoftteams.uservoice.com/forums/555103-public/suggestions/36752605-assign-messaging-policy-to-groups

 

Does anyone have any solutions?

[TechMonkey]

I used this code:

 

#Register test gallery. Only needs to be done once

Register-PSRepository -SourceLocation https://www.poshtestgallery.com/api/v2 -Name PsTestGallery -InstallationPolicy Trusted

#Remove current teams module

Uninstall-Module MicrosoftTeams -AllVersions

#Install preview module

Install-Module MicrosoftTeams -Repository PSTestGallery

#Connect Teams module

Connect-MicrosoftTeams

#Connect Azure AD module

Connect-AzureAD

$group = Get-AzureADGroup -SearchString "GROUPNAME"

$members = Get-AzureADGroupMember -ObjectId $group.ObjectId -All $true | Where-Object {$_.ObjectType -eq "User"}

New-CsBatchPolicyAssignmentOperation -PolicyType TeamsMessagingPolicy -PolicyName "POLICYNAME" -Identity $members.UserPrincipalName -OperationName "RANDOMDESCRIPNAME"

 

All caps words are to for you to change and you can change the PolicyType from TeamsMessagingPolicy to the policy you need from the following list:

CallingLineIdentity, OnlineVoiceRoutingPolicy, TeamsAppSetupPolicy, TeamsAppPermissionPolicy, TeamsCallingPolicy, TeamsCallParkPolicy, TeamsChannelsPolicy, TeamsEducationAssignmentsAppPolicy, TeamsEmergencyCallingPolicy, TeamsMeetingBroadcastPolicy, TeamsEmergencyCallRoutingPolicy, TeamsMeetingPolicy, TeamsMessagingPolicy, TeamsUpdateManagementPolicy, TeamsUpgradePolicy, TeamsVerticalPackagePolicy, TeamsVideoInteropServicePolicy, TenantDialPlan

[gbtb]

We have assigned a policy to our users by just filtering to the users we wanted in Teams Admin users section (we did this as all students usernames begin with a number so we could filter on each number) then selecting all and changing the messaging policy applied. It did miss a few out however i checked by filtering to users who did not have the policy applied i had selected.

[nathan]

We have assigned a policy to our users by just filtering to the users we wanted in Teams Admin users section (we did this as all students usernames begin with a number so we could filter on each number) then selecting all and changing the messaging policy applied. It did miss a few out however i checked by filtering to users who did not have the policy applied i had selected.

 

It would be great if we could filter by license type

[gbtb]

It would be great if we could filter by license type

 

It would make life much easier, i currently cant see a way to apply this to new users automatically either so will have to continually check for users who do not have the right policies applied.

 

Before the Teams admin center you used to be able to set your settings in Office 365 per license type which made life much easier.

[TechMonkey]

It would be great if we could filter by license type

 

You can, if I think you mean what I think you mean.

 

On the Users page click the funnel. Then there is an option for Policy, choose your logic, then choose the policy.

[nathan]

You can, if I think you mean what I think you mean.

 

On the Users page click the funnel. Then there is an option for Policy, choose your logic, then choose the policy.

 

Is this the Users page in the Teams area?

 

I can't see an option to filter by license type

Edited March 18, 2020 by nathan

[TechMonkey]

Yep. Attached a pic of the steps.

You do have to pick the policy type you want to look at.

[Driftingashore]

So, question to anyone that has an answer: can your students invite others to meetings? Even if I have them set as attendees, they can join a meeting, and use the invite option in participants panel to immediately call someone. This is even more of a problem because if a class is scheduled days in advance, students can join it through the calendar, then invite their friends, with no supervision.. which makes me banning voice calls for them kinda useless..

 

Also, if the teacher leaves a meeting, it seems they have no way to end it..

[psydii]

We had trouble with that powershell script. The batch job never starts for us.

 

We were on a call with MS Support for another teams related matter and the engineer saw me working on it and (after encouraging me to ask more questions) sent over an alternative.

 

Instead of new-batch.... do a variation of this:

 

$members | ForEach-Object { Grant-CsTeamsChannelsPolicy -PolicyName "Marketing Teams Policy" -Identity $_.UserPrincipalName}

 

You need the AzureAD, Skype For Business, and the Teams modules to be imported.

The Grant-CSTeams command changes based on the policy type you are setting - you can use autocomplete to map them out.

You do need to use smaller groups - dropping in "all students" generally fails out some percentage through the job.

[psydii]

Is this the Users page in the Teams area?

 

I can't see an option to filter by license type

 

$student = Get-AzureADUser -All $true | Where-Object (($_.assignedLicenses).SkuId -contains "18250162-5d87-4436-a834-d795c15c80f3")

 

 

Where the GUID is the licence type.

[psydii]

So, question to anyone that has an answer: can your students invite others to meetings? Even if I have them set as attendees, they can join a meeting, and use the invite option in participants panel to immediately call someone. This is even more of a problem because if a class is scheduled days in advance, students can join it through the calendar, then invite their friends, with no supervision.. which makes me banning voice calls for them kinda useless..

 

Also, if the teacher leaves a meeting, it seems they have no way to end it..

 

Solving this is one of the most common feature requests as education establishments are onboarding to Teams. Microsoft are working on a delivering as many as they can in the Late March-Early April timeframe.

[hellgate24]

Have had to do this yesterday, followed the steps here. Replication took a while to apply the policy (I wonder why haha) but that aside worked a treat.

[nathan]

Yep. Attached a pic of the steps.

You do have to pick the policy type you want to look at.

[ATTACH=CONFIG]57266[/ATTACH]

 

I'm sure i'm following or we are getting crossed wires.

 

I'm wanting to alter the messaging policy of users based on their Office 365 license type, i.e all accounts licensed as a student

[TechMonkey]

Ah, sorry. I thought you wanted to see all people who had a Teams Global license, or see who had Teams Student licenses.

 

Apologies for the confusion.

[nathan]

$student = Get-AzureADUser -All $true | Where-Object (($_.assignedLicenses).SkuId -contains "18250162-5d87-4436-a834-d795c15c80f3")

 

 

Where the GUID is the licence type.

 

Are you able to offer the full script, i've not delved much into powershell in the last couple of years. Also which license is the guid? I have Office 365 A1 Plus for students

[hellgate24]

I'm sure i'm following or we are getting crossed wires.

 

I'm wanting to alter the messaging policy of users based on their Office 365 license type, i.e all accounts licensed as a student

 

Hi Nathan,

 

See the link in my my post further up, I had to do the exact same thing, wanted to apply a “blocked chat” messaging policy to all accounts with the student license type. Has to be done in powershell, but worked a treat.

[nathan]

Hi Nathan,

 

See the link in my my post further up, I had to do the exact same thing, wanted to apply a “blocked chat” messaging policy to all accounts with the student license type. Has to be done in powershell, but worked a treat.

 

Apologies, i missed it.

 

The webpage linked to another microsoft article that i used.

 

...Now to write up some house rules for Teams..... not that they will take notice.

[tapb]

You can also assign Teams policies to users based on Attribute using PowerShell

[ticktock]

We are just looking at Teams in school and I'm looking to block private chat. I've created a new messaging policy for students in the Teams Admin console with chat turned off. I've then applied this to a test user to see if the chat icon disappears from the left hand side. Unfortunately it doesn't, I was wondering if I'm missing something really obvious. I've done much googling and they all off the same solution so it must be me!

[forkies]

We are just looking at Teams in school and I'm looking to block private chat. I've created a new messaging policy for students in the Teams Admin console with chat turned off. I've then applied this to a test user to see if the chat icon disappears from the left hand side. Unfortunately it doesn't, I was wondering if I'm missing something really obvious. I've done much googling and they all off the same solution so it must be me!

 

How long have you left it since applying the policy? I have found it takes a while!

[ticktock]

Yesterday but can't just remember what time. I'll give it more time. Many thanks.

[forkies]

Yesterday but can't just remember what time. I'll give it more time. Many thanks.

 

Also just checking, have you turned the chat app off in "Teams apps" then "Setup policies" and assigned that policy to a user (so chat is completely removed) or have you turned of "Chat" in "Messaging policies" and assigned that policy to the user? If so I think that is designed to disable chat from everywhere in teams from the user, even in individual teams and meetings. It would remove the chat message icon for a user on another user card but without the chat app being removed under Teams apps setup policies I think chat would still appear just not be usable. I haven't tested that though.

[Driftingashore]

Also just checking, have you turned the chat app off in "Teams apps" then "Setup policies" and assigned that policy to a user (so chat is completely removed) or have you turned of "Chat" in "Messaging policies" and assigned that policy to the user? If so I think that is designed to disable chat from everywhere in teams from the user, even in individual teams and meetings. It would remove the chat message icon for a user on another user card but without the chat app being removed under Teams apps setup policies I think chat would still appear just not be usable.

 

I think the setup policy only controls the left hand menu of pinned apps, so removing chat from that doesn't prevent access to chat, only makes it so chat doesn't appear as a pinned option, but would still be accessible through the ellipses. For us, disabling chat in the "Messaging policies" has hidden chat from the pinned menu items (it doesn't appear in the ellipses either), so renders the section inaccessible, but doesn't prevent chat in meetings or posting to the posts section in channels. There's an option to "Remove users from group chats" which may prevent chat in meetings, but we haven't enabled that so not 100% sure.

Edited March 29, 2020 by Driftingashore

[ticktock]

I've created a new messaging policy with chat turned off. I've then applied the policy to the test student and nothing has happened yet (must be over 24 hours now). Can I double check that this would not remove the chat icon but would disable chat?