A few Office 365 questions

[TwistedHelixis]

Hi, We are a Google school but I did signup for 365 just in case.

 

I haven't set any users up in 356 as there was no point.

 

The office have just sent me this

Office 365 Education

 

Here's your verification code

 

To finish signing up for Office 365 Education, enter the code on the signup page.

 

Because you're signing up with a school email address, your school may control your Office 365 communications and data. Their policies apply to your use of the service.

 

Q1 So does this mean that the office or someone is also able to take over the account?

 

Q2 I have noticed some staff being asked to join MS Teams meetings from 3rd parties and they have been entering their school Google Workplace accounts, does that mean they have somehow merged their accounts. Is there a way to stop them entering their Google creds in to Office?

 

BTW both Gsuite & Office 365 are setup under the same domain - school.area.sch.uk

Edited January 18, 2021 by TwistedHelixis

[willtech]

I think it might be the user has used the Office 365 Sign up page possibly. Could be fake ?

 

Q1 - I would say it is a standard thing if it sees a domain that is already in Office 365 it just warns you it is a managed domain.

 

Q2 - Not sure

Edited January 18, 2021 by willtech

[mavhc]

Do accounts exist in m365?

 

Is the email real or phishing?

 

I don't see an option to sign in to Teams with a google account, only MS and Github

[buzzard]

Did you verify the domain in 365? If so no one can take it without updating the MS TXT code in your DNS record.

[psydii]

Microsoft and Google trust each others authentication services. So if the third part Office 365 Tennant admin has ticked the box, your Google users can sign into the third parties Office365 domain as trusted federated users. This is normal. We have LA/NHS/Uni guests in our teams all the time, some of them from a Google world and some from planet 365, and our users similarly are guests in other's tenants / instances.

 

The only problems can occour if you *hadn't* signed up for an Office365 tenant, and the third part added some of your users as guests... some combination of actions can end up creating a shadow tenant for your domain that is a pain when/if you ever wanted to create your own.

[TwistedHelixis]

Did you verify the domain in 365? If so no one can take it without updating the MS TXT code in your DNS record.

Yes I did do this I have found the DNS change request I made with my LA, but when I login to 365 using my username.onmicrosoft.com it says I still need to add our domain. But I can also login to 365 using [email protected], so now I am really confused.

 

EDIT

So if I login using .onmicrosoft.com it says I need to add our domain, but if I login using my user using our domain I can still login

Edited January 20, 2021 by TwistedHelixis

[TwistedHelixis]

If I go to domain in admin centre it says domain..... = incomplete setup

 

Am I OK to complete this setup using the same domain (school.area.sch.uk) that we are using for our Google Domain?

Edited January 20, 2021 by TwistedHelixis

[TwistedHelixis]

Microsoft and Google trust each others authentication services. So if the third part Office 365 Tennant admin has ticked the box, your Google users can sign into the third parties Office365 domain as trusted federated users. This is normal. We have LA/NHS/Uni guests in our teams all the time, some of them from a Google world and some from planet 365, and our users similarly are guests in other's tenants / instances.

 

The only problems can occour if you *hadn't* signed up for an Office365 tenant, and the third part added some of your users as guests... some combination of actions can end up creating a shadow tenant for your domain that is a pain when/if you ever wanted to create your own.

 

Is this why I have users listed in Azure & 365 that I did not add?

Edited January 20, 2021 by TwistedHelixis

[TwistedHelixis]

Also, when I log in to Azure / 365 using .onmicrosoft.com it only lists this one user under users, but if I login using my school domain it lists other users, is this correct?

[mavhc]

If you log in with your school domain can you see what the associated onmicrosoft domain is? https://portal.office.com/adminportal/home#/Domains

[TwistedHelixis]

If you log in with your school domain can you see what the associated onmicrosoft domain is? https://portal.office.com/adminportal/home#/Domains

 

So the domain name listed there is different from the other onmicrosoft domain I was using, so now I seem to have 3 domain addresses.

1 - [email protected]

2 - [email protected]

3 - schoolnamearea.onmicrosoft.com

[mavhc]

At a guess you've set up a m365 tenant, but the council perhaps has also set one up, without talking to you of course.

 

Switch to using the one that's already set up.

[TwistedHelixis]

I have just tried to login in to (3) - schoolnamearea.onmicrosoft.com but I don't have correct username, but this was the domain listed under the domains page when I login using (1) - [email protected]

 

This is so painful

 

At a guess you've set up a m365 tenant, but the council perhaps has also set one up, without talking to you of course.

 

The school have not been under LA computer services for 12 years now, so I don't think they would have had any reason to create the school an account, unless by accident.

 

Switch to using the one that's already set up.

How would I know which one is setup? The school don't use Office 365 so nothing should really be setup in any of them.

[psydii]

When you log on to your 365 tenant which domain name do you use? That's the one that is working and linked. The other onmicrosoft one is probably not verified - is there another DNS/Global Admin in your organistation?

 

See also: https://www.michev.info/Blog/Post/3173/adding-multiple-onmicrosoft-com-domains-in-the-same-tenant which may help shed some light on what might be going on.

 

Can you post a screen shot of your portal? (redacting the identifying features of the domain name)

Edited January 20, 2021 by psydii

[mavhc]

The one with your users in I guess someone must have added them

[TwistedHelixis]

The one with your users in I guess someone must have added them

 

No that is 100% the one I created and I didn't add them but have emailed a few to ask. Those are the ones that have either tried to enter their school email into MS Office software, or joined third party Team meetings.

 

They must be getting automatically added as a user if they enter their Google email into a MS product.

[TwistedHelixis]

Can you post a screen shot of your portal? (redacting the identifying features of the domain name)

Do you mean the domains page? Not really, as I would need to redact almost the entire address.

 

Ill try to explain

 

When I signed up MS gave me

(A) - [email protected]

 

After proving we own the domain school.area.sch.uk I created a new Domain Admin user

(B) - [email protected]

 

When I login using (A) - [email protected] and open domains it doesn't list any other domain

 

When I login using (B) - [email protected] and open domains it does list the following 2 domains, its just the second is a different domain again.

(B) - school.area.sch.uk

© - SchoolArea.onmicrosoft.com

 

I am also not able to login to © I have tried adding my username@ before the domain, is there a default user I can try?

 

Hope that explains things, and hope someone can shed some light what might be going on.

 

EDIT

Edited January 22, 2021 by TwistedHelixis

[psydii]

urgh. sound like you are in second scenario from my initial reply.

 

If you have a CSP (Microsoft partner reseller who 'owns' you relationship with Microsoft's cloud platforms) call them. If not, you'll need to open a ticket with MS Support via the portal (go into help and just work through the wizard).

Edited January 22, 2021 by psydii

[TwistedHelixis]

One last question while waiting for MS support to call me back, am I OK to assign the same domain name (school.area.sch.uk) to both 365 & G Suite. I assumed it would be OK provided I didn't setup any MX records but now wondering if this is correct?

[psydii]

I'd wait until MS Support cleared it up. YOu may have to be patient as the initial handler might not put you through to quite the right team at first. This problem is relatively niche.

[willtech]

One last question while waiting for MS support to call me back, am I OK to assign the same domain name (school.area.sch.uk) to both 365 & G Suite. I assumed it would be OK provided I didn't setup any MX records but now wondering if this is correct?

 

Yes you can. You point your DNS records to what services you want to do what. e.g. Mail (MX) to Google, Skype for Business to Office 365. It does make things easier for notifications and makes it easy to remember.

 

But I agree with psydii I would wait.

Edited January 22, 2021 by willtech

[TwistedHelixis]

All fixed.

 

So the LA must have accidently setup 365 about 5 years ago and just sat on it. Somehow the tenants got mixed when they were asked recently to add a new TXT record to our DNS systems for the 365 I am setting up.