Preventing Self-Service Sign-Up for Microsoft 365 Services
Question
You have a Microsoft Exchange organization that uses an SMTP address space of contoso.com.
Several users use their contoso.com email address for self-service sign-up to Azure Active Directory (Azure AD)
You gain global administrator privileges to the Azure AD tenant that contains the self-signed users.
You need to prevent the users from creating user accounts in the contoso.com Azure AD tenant for self-service sign-up to Microsoft 365 services.
Which PowerShell cmdlet should you run?
Answers
Explanations
Click on the arrows to vote for the correct answer
A. B. C. D.A.
https://docs.microsoft.com/en-us/azure/active-directory/enterprise-users/directory-self-service-signupThe correct answer is A. Set-MsolCompanySettings.
Explanation: When a user signs up for a Microsoft 365 service such as Exchange Online, SharePoint Online, or Microsoft Teams, a new user account is created in the Azure AD tenant associated with the user's email domain. This process is known as self-service sign-up. However, in some cases, you may want to restrict self-service sign-up to prevent users from creating accounts in your organization's tenant.
To prevent users from creating user accounts in the contoso.com Azure AD tenant for self-service sign-up to Microsoft 365 services, you can use the Set-MsolCompanySettings cmdlet in PowerShell. This cmdlet allows you to configure various settings for your Azure AD tenant, including self-service sign-up settings.
To prevent self-service sign-up for contoso.com users, you can run the following command:
sqlSet-MsolCompanySettings -AllowEmailVerifiedUsers $false This command disables self-service sign-up for users who have email addresses in domains that have been verified by the organization. In this case, contoso.com is a verified domain in the Azure AD tenant, so users with contoso.com email addresses will no longer be able to create new accounts in the tenant.
Option B. Set-MsolDomainFederationSettings cmdlet is used to configure federation settings for a domain in Azure AD, such as setting up single sign-on (SSO) with a third-party identity provider.
Option C. Update-MsolfederatedDomain cmdlet is used to update federation settings for a domain that is federated with Azure AD.
Option D. Set-MsolDomain cmdlet is used to configure settings for a domain in Azure AD, such as adding or removing a domain, or configuring domain authentication settings. However, this cmdlet does not provide any settings related to self-service sign-up.
