'%3e%3cpath%20d='M8%200C12.4183%200%2016%203.58172%2016%208C16%2012.4183%2012.4183%2016%208%2016C3.58172%2016%200%2012.4183%200%208C0%203.58172%203.58172%200%208%200ZM11.6162%204.38379C11.2257%203.99337%2010.5927%203.99338%2010.2021%204.38379L8%206.58594L5.79785%204.38379C5.40732%203.99334%204.77429%203.99329%204.38379%204.38379C3.99331%204.77429%203.99335%205.40733%204.38379%205.79785L6.58594%208L4.38379%2010.2021C3.99348%2010.5927%203.99341%2011.2257%204.38379%2011.6162C4.77426%2012.0066%205.40734%2012.0065%205.79785%2011.6162L8%209.41406L10.2021%2011.6162C10.5927%2012.0066%2011.2257%2012.0067%2011.6162%2011.6162C12.0067%2011.2257%2012.0066%2010.5927%2011.6162%2010.2021L9.41406%208L11.6162%205.79785C12.0066%205.40735%2012.0066%204.77429%2011.6162%204.38379Z'%20fill='%23080E17'%20fill-opacity='0.46'/%3e%3c/g%3e%3cdefs%3e%3cclipPath%20id='clip0_3761_713'%3e%3crect%20width='16'%20height='16'%20fill='white'/%3e%3c/clipPath%3e%3c/defs%3e%3c/svg%3e)
How to Sync Active Directory Users to Azure Without Creating Mailboxes
Question details
The user wants to synchronize generic on-premises Active Directory accounts to Azure and Microsoft 365 without generating Exchange Online mailboxes.
- Product
- Microsoft Azure Active Directory
- Device & OS
- not provided
- Scenario
- Setting up shared generic accounts for school computers in an educational IT environment.
- Observed behavior
- The goal is to maintain synced accounts in Azure AD purely for identity management, avoiding unwanted mailbox creation.
Ensure you have the necessary global or user administrator privileges in your Microsoft 365 admin center and Azure portal before modifying synchronization rules or user licenses.
Synchronize Users Without Assigning Exchange Online Licenses
Prevent mailbox creation during AD synchronization by ensuring no Exchange Online licenses are assigned to the generic user accounts.
A synchronized user can exist in Azure Active Directory entirely without a license. By default, Azure does not create a mailbox for a synchronized user unless an Exchange Online license is explicitly assigned or a specific remote mailbox configuration is applied.
Use Microsoft Entra Connect (formerly Azure AD Connect) to synchronize your generic on-premises Active Directory accounts to Azure AD.
Log in to the Microsoft 365 Admin Center or Azure Portal, navigate to 'Users', and then 'Active Users' to confirm the accounts have successfully synced.
Ensure that no Microsoft 365 licenses containing 'Exchange Online' are assigned to these generic users. If you must assign a license suite (like Microsoft 365 A3), uncheck the 'Exchange Online' app under the Apps section of the license settings.
Deploy WPS Office on Shared Computers
For generic accounts on shared school or enterprise computers, you do not need expensive Microsoft 365 licenses. Deploy WPS Office as a lightweight, highly compatible alternative to open and edit Word, Excel, and PowerPoint files for free.
- 1. Download the Installer: Get the official WPS Office installation package from the main website.
- 2. Install on Shared Devices: Deploy the software across your shared school computers for all generic users.
- 3. Open Office Documents: Users can seamlessly open, edit, and save standard Office files without requiring an individual Microsoft 365 license.
Frequently Asked Questions
Can I assign a Microsoft 365 license without creating a mailbox?
Yes. You can assign a Microsoft 365 license suite to a user but manually uncheck the 'Exchange Online' application in the Microsoft 365 Admin Center under the user's Licenses and Apps settings.
What happens if a generic user needs email access later?
If an account later requires email access, simply assign an Exchange Online license to the user in the Microsoft 365 Admin Center, and Azure will automatically provision the mailbox.
Do synced Azure AD accounts require a license to exist?
No. A synchronized user can exist in Azure Active Directory purely for authentication and identity management on shared machines without consuming any product licenses.
