Unlicensed User without Office Plan with PowerBI license - active-directory

I work for a company where we started to share the PowerBI license for users without the Office plan. They started asking us to give them access to the Outlook to be in touch with newsletters and other reports from PowerBI. Our organization is not allowing to supply an Office license to PowerBI users.
I have a few questions :
Is there a chance to forward emails to their private mailboxes without converting them to SharedMailbox?
if I add a PowerBI license with Office plan and convert it to shared the PowerBI will be disabled on that account? If not is it possible to take it off or do I need to convert it to the regular mailbox to take it off?
I know about Mail Flow rules, are they safe to use? They are global rules either way.
I am excluding here a Contact user with one reason PowerBI license cannot be added to a Contact user.
Thanks for any suggestions

Found an answer,
Create AD account synch it with O365 move it to correct OU,
go to the user created earlier -> Attribute Editor -> Attribute: targetAddress add: SMTP:youraddress#something.com
Wait to synch and test. All emails should be redirected to the target address without having the license.

Related

"The specified folder could not be found in the store" when getting room appointments

I'm trying to use MeetEasier application to show availability of all our bookable rooms. It works for some rooms in another office of our organisation. For my office it does not work. First I thought it was because all rooms were not yet moved off premises to Office365, but now when they all are in Office365 I still get the same error: "The specified folder could not be found in the store" (errorfoldernotfound). Since it works great for some rooms where my user has not been specifically granted access to (those in other offices) I believe that the problem has to do with the rights/configuration of the rooms and not my user. What are your thoughts? What can I ask our IT guys to try? (I don't have access or knowledge of AD etc)
In my experience, this is usually a permissions issue. For O365 your access id should have impersonation access to all rooms, as opposed to delegation (all access) rights. Your IT folks should be able to confirm this. Not familiar with MeetEasier, but presumably they have an option to select impersonation?

Active Directory on-prem Manager

I need to implement an Active Directory(on-prem) manager in which user can do all tasks like add user, delete user, assign license and assign groups etc. User has username, password and domain controller name, so he just login to my app and manage everything. Actually arranging client properties physically is to a great wastage of time and particularly one should have intense knowledge of native tools and PowerShell.
So i am new to these technologies, can anyone please let me know the whole idea behind this. Already services are up like (https://www.manageengine.com/products/ad-manager/active-directory-management.html)
Is there any reason you want to stay on-premises? If you are willing to sync to the cloud Azure AD is great for user self-management. https://learn.microsoft.com/en-us/azure/active-directory/fundamentals/active-directory-whatis
https://learn.microsoft.com/en-us/azure/active-directory/users-groups-roles/groups-self-service-management
Quest also has an on-premises software with something similar to what you are looking for. https://www.quest.com/products/active-administrator/

Not able to add new user in VSTS

I am added to project collection administrator group in VSTS. Still not able to add a new user. I am added using my official email ID i.e. Microsoft work account.
Its says
Guest users are not allowed to perform this action.
I saw the reason on this link
I believe the primary reason for this error is because when a co-admin
with Microsoft account is added to a subscription, it gets added into
the subscription AD as Guest user type.
but since it is very old thread i like to know if there is an easy way to get myself ability to add new user or basically manage VSTS on behalf of client. I hate requesting client to add a new user in team. Also he is not tech savvy so I would like suggest him a simple solution (running Powershell might be annoying for him).
You are inviting users from outside directory. The user will be able to access the account and its resources, so you need the enough permission to add new user to the AD, but you are the Guest user, so it throws Guest Users are not allowed to perform this action.
You need to contact to the corresponding user (e.g. AD admin) to add users to AD or grant the enough role and permission to you to add user to AD.
No easy way to do this, because it is related to security.

Best practice to link AD LDS user with AD user

We have an application that uses AD LDS (ADAM) which contains a extended user class ( custom attributes, specific to our application).
One of our clients wants our users linked to their domain users (AD).
When they create a user in their system, a user on our side has to be created. When they delete a user on their system, the corresponding user should be deleted on our side. The same with basic properties (name, email, ...).
The application specific attributes will be modified by our tool.
What is the best or most reliable way to keep those users in sync? The client does not allow us to modify their schema.
I was thinking myself to create a webservice to add/ delete / modify a user on our side which kan be called from within their system. But Maybe there are better solutions.
Thanks.
Personaly I will use ADAMSync for that. You can a kind of 'how do I' in Synchronize ADAM (or LDS) with Active Directory Domain Services.
ADAMSync.exe and ADShemaAnalyser.exe are part of the binary installed with ADAM.
In the case you are affectively using ADAM, be careful to install the ADAM SP1.
You can use the free Identity Integration Feature Pack from MS to sync selected attributes between AD and AD-LDS. You can download it here http://www.microsoft.com/download/en/details.aspx?id=11149
I'm not sure if it supports server 2008. It may be included in server 2008 as a role now.

New MS CRM contact already has an Active Directory account. How do I pull from AD?

I have some clients that I'd like to put into Microsoft CRM (3.0 Dynamics). These people are already in a small Active Directory group for access to a couple of internal applications.
Is there a way to add these people to CRM and pull/push the contact data from Active Directory, so I'm not creating a second repository of information that conflict?
Unfortunately there's no out-of-the-box way to dot his. You'd have to write a custom app in order to query AD and pull in the data. Unless you're looking at over 100 customers you probably won't make up the time it would take you to manually input this data.

Resources