Solved

Office 365 lost license

Posted on 2016-10-19
7
843 Views
Last Modified: 2016-10-21
We have migrated all of our users to Office 365. In the last week, I've had two (One an E3 user and one an E1) who have been unable to log into their account.  When I checked, both of them were unlicensed. They have been using this fine for at least a couple of weeks, so I know that the licensing was OK at some point. We put their licensing back and they are OK now. They have not been deleted or had their accounts disabled.
0
Comment
Question by:jhyiesla
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 3
7 Comments
 
LVL 42

Accepted Solution

by:
Vasil Michev (MVP) earned 500 total points
ID: 41850010
Not sure what exactly the question is here? If you want to find out what happened with the licenses, check the Azure AD audit logs under the Security and Compliance Center: https://support.office.com/en-us/article/Search-the-audit-log-in-the-Office-365-Security-Compliance-Center-0d4d0f35-390b-4518-800e-0c7ec95e946c?ui=en-US&rs=en-US&ad=US
0
 
LVL 28

Author Comment

by:jhyiesla
ID: 41850028
I'll check the logs, but the question is, why would someone lose a license if it appears that we've not done anything here to cause that.
0
 
LVL 42

Expert Comment

by:Vasil Michev (MVP)
ID: 41850055
I've been working with O365 for over 5 years now, never had a license disappear without a user action. I've occasionally run into other similar cases and most of the time it's either a rogue admin, a user mistake or some forgotten script that did it. There have been few "unexplained" ones, and we even discussed those on some calls with Microsoft folks, but they were never confirmed.

You can always open a case with MS and have them investigate the issue.
0
Office 365 Training for IT Pros

Learn how to provision tenants, synchronize on-premise Active Directory, implement Single Sign-On, customize Office deployment, and protect your organization with eDiscovery and DLP policies.  Only from Platform Scholar.

 
LVL 28

Author Comment

by:jhyiesla
ID: 41850067
I ran the log file search for the users in question. I don't see anything in the logs that would indicate that anything happened to them. All I see is multiple entries for ForeignRealmIndexLogonInitialAuthUsingADFSFederatedToken

If this happens again, I'll call MS.
0
 
LVL 42

Expert Comment

by:Vasil Michev (MVP)
ID: 41850440
The events you should be looking for in this case are under the "User administration activities" section, more specifically the "changed user licenses" one.
0
 
LVL 28

Author Comment

by:jhyiesla
ID: 41850593
What I had chosen was all activities.  But I did as you suggested above and changed it to the specific thing for changed user licenses. I looked for the last week and found nothing... which is weird I guess as I did re-license the users during this time frame. I even expanded the search to the first of the month...nothing.
0
 
LVL 28

Author Closing Comment

by:jhyiesla
ID: 41853834
While the solution seemed like it would be useful, it really didn't resolve my problem. It's not recurred and I'm closing this question.
0

Featured Post

Windows Server 2016: All you need to know

Learn about Hyper-V features that increase functionality and usability of Microsoft Windows Server 2016. Also, throughout this eBook, you’ll find some basic PowerShell examples that will help you leverage the scripts in your environments!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Find out what the Office 365 disclaimer function is, why you would use it and its limited ability to create Office 365 signatures.
As cyber crime continues to grow in both numbers and sophistication, a troubling trend of optimization has emerged over the last year.
In a previous video Micro Tutorial here at Experts Exchange (http://www.experts-exchange.com/videos/1358/How-to-get-a-free-trial-of-Office-365-with-the-Office-2016-desktop-applications.html), I explained how to get a free, one-month trial of Office …
A company’s greatest vulnerability is their email. CEO fraud, ransomware and spear phishing attacks are the no1 threat to a company’s security. Cybercrime is responsible for the largest loss of money to companies today with losses projected to r…

623 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question