通过AAD同步阻止Sign Office 365 SSO用户的最佳方法是什么? [英] whats the best way to block sign office 365 SSO user by AAD sync.

问题描述

您好，

阻止Office 365登录的最佳方法是什么?  由AAD启用SSO的用户同步.

如果我们阻止从Office 365管理门户登录，则它将在下一个同步周期中通过AD启用.

这是首先从Prem AD禁用帐户，然后阻止登录Office 365的唯一方法吗??

Is this the only way to disable account first from on prem AD and then block sign in office 365. ?

谢谢

Atul

推荐答案

The "AccountEnabled" attribute can be set both in the Microsoft Office 365 and the Azure Portal as the "Block Sign In" option. This is ONLY recommended for cloud-only users as the attribute will be overwritten during Azure AD Connect synchronization. Hence you must disable the user on premise AD.

如果您需要在本地Active Directory基础结构中启用用户，并且需要防止登录到云 服务，您需要防止将"accountEnabled"属性同步到Azure AD.参考: 阻止的Office 365登录将被覆盖.看看是否有帮助.

If you require to have enabled users in your local Active Directory infrastructure and you need to prevent logon to cloud services, you need to prevent the "accountEnabled" attribute from being synchronized to Azure AD. Refer: blocked office 365 login is overwritten. See if it helps.

免责声明: 该响应包含对第三方万维网站点的引用. Microsoft为方便您而提供此信息. Microsoft不控制这些站点，也没有测试在这些站点上找到的任何软件或信息；所以， Microsoft无法对在此找到的任何软件或信息的质量，安全性或适用性做出任何陈述.使用Internet上发现的任何软件都存在固有的危险，Microsoft提醒您确保自己 在从Internet上检索任何软件之前，请先完全了解该风险.

Disclaimer: This response contains a reference to a third-party World Wide Web site. Microsoft is providing this information as a convenience to you. Microsoft does not control these sites and has not tested any software or information found on these sites; therefore, Microsoft cannot make any representations regarding the quality, safety, or suitability of any software or information found there. There are inherent dangers in the use of any software found on the Internet, and Microsoft cautions you to make sure that you completely understand the risk before retrieving any software from the Internet. 

- -------------------------------------------------- ----------------------------------

如果是这样答案很有帮助，请单击标记为答案"或进行投票.为了提供有关您的论坛体验的其他反馈， 点击

If this answer was helpful, click "Mark as Answer" or Up-Vote. To provide additional feedback on your forum experience, click here

这篇关于通过AAD同步阻止Sign Office 365 SSO用户的最佳方法是什么?的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！