License & Subscription Issues

How Microsoft 365 Licenses Work with Active Directory Sync

Natalie Taylor Sep 30, 2026 869 views

Question details

The user needs to understand how Microsoft 365 licenses are assigned and how Exchange Online mailboxes are provisioned when synchronizing users from an on-premises Active Directory.

How Microsoft 365 Licenses Work with Active Directory Sync

Product: Microsoft 365
Device & OS: not provided
Scenario: Managing user identities, email addresses, and subscription licenses in a federated Microsoft 365 and on-premises Active Directory environment.
Observed behavior: Synchronizing an Active Directory user creates a cloud user object in Microsoft Entra ID but does not automatically assign a Microsoft 365 license, grant a custom domain email, or provision an Exchange mailbox.

Before you start

Ensure you have Global Administrator or License Administrator privileges in the Microsoft 365 admin center and have correctly set up Microsoft Entra Connect for your on-premises Active Directory.

Solution 1Recommended

Assigning Licenses to Synchronized Users

Since Active Directory sync only creates the user identity in Microsoft Entra ID, you must assign licenses manually or through group-based automation to grant access to Microsoft 365 services.

Licenses in Microsoft 365 are associated with user accounts, not directly tied to Active Directory attributes. Until a license is applied, the synchronized user cannot access cloud services or receive a mailbox.

Synchronize Active Directory

Run Microsoft Entra Connect (or Azure AD Connect) to synchronize your on-premises user objects to the Microsoft Entra ID cloud environment.

Access the Microsoft 365 admin center

Log in to the Microsoft 365 admin center, navigate to 'Users', and select 'Active users' to view the newly synchronized accounts.

Assign licenses manually

Select the synchronized user, go to the 'Licenses and apps' tab, check the appropriate Microsoft 365 subscription, and click 'Save changes'.

Configure group-based licensing (Optional)

For automated assignment, use Microsoft Entra ID to assign a license to a specific security group. Any on-premises user synchronized into that group will automatically inherit the assigned license.

Assigning Licenses to Synchronized Users

Automated Assignment: Group-based licensing requires a specific Microsoft Entra ID P1 or P2 license plan but significantly reduces administrative overhead for large organizations.

Solution 2

Provisioning Exchange Online Mailboxes and Custom Domains

A mailbox is not created by Active Directory sync alone. It requires an active Exchange Online license and properly configured domain settings.

Free Microsoft Office alternative

Equip Your Team with WPS Office as a Cost-Effective Alternative

Managing enterprise Microsoft 365 licenses and Active Directory synchronizations can be complex and expensive. For employees who only need robust word processing, spreadsheets, and presentation software without the heavy overhead of cloud mailboxes and Entra ID sync, WPS Office provides a lightweight, highly compatible, and free alternative.

1. Download the enterprise installer: Visit the official WPS Office website to download the free installation package tailored for offline or standalone deployment.
2. Deploy to workstations: Install the suite directly on user workstations without worrying about cloud sync, complex administrative centers, or subscription bindings.
3. Open and edit Office formats natively: Users can immediately open, edit, and save standard .docx, .xlsx, and .pptx files seamlessly.

Fully compatible with Microsoft Word, Excel, and PowerPoint formats (.docx, .xlsx, .pptx).No complex license provisioning or Active Directory synchronization required for deployment.Lightweight software architecture that runs smoothly on older or budget hardware.Familiar user interface reduces deployment friction and training time for employees.

microsoft office alternative - wps office

Frequently Asked Questions

Does Active Directory sync automatically create a Microsoft 365 mailbox?

No. Active Directory synchronization only creates the user identity object in Microsoft Entra ID. A cloud mailbox is provisioned only after you assign a valid Microsoft 365 license containing Exchange Online to that synchronized user.

Why do my synchronized users have an .onmicrosoft.com email address?

This happens if you have not verified your custom domain in the Microsoft 365 admin center, or if the user's User Principal Name (UPN) suffix in on-premises Active Directory does not match a verified custom domain. Microsoft defaults the address to the initial routing domain.

Can I automate license assignment for synchronized users?

Yes. You can use group-based licensing in Microsoft Entra ID. By assigning a license package to a synchronized security group, any user added to that group in your on-premises Active Directory will automatically receive the license once synced to the cloud.

Are email addresses directly tied to Microsoft 365 licenses?

No. Licenses are associated with the user account identity, not the email address or domain name itself. However, the assigned license dictates whether that user is allowed to have an Exchange Online mailbox associated with their email address.

Login & Account Issues