Question
You have a Microsoft Exchange organization that uses an SMTP address space of contoso.com.
Several users use their contoso.com email address for self-service sign-up to Azure Active Directory (Azure AD).
You gain global administrator privileges to the Azure AD tenant that contains the self-signed users.
You need to prevent the users from creating user accounts in the contoso.com Azure AD tenant for self-service sign-up to Microsoft 365 services.
Which PowerShell cmdlet should you run?
- A. Set-MsolCompanySettings Correct
- B. Set-MsolDomainFederationSettings
- C. Update-MsolFederatedDomain
- D. Set-MsolDomain
Explanation
Self-service sign-up is a tenant-wide setting. In the MSOnline module it is controlled by Set-MsolCompanySettings -AllowEmailVerifiedUsers $false (and -AllowAdHocSubscriptions), which stops email-verified users from joining the tenant; today the same settings are allowEmailVerifiedUsersToJoinOrganization and allowedToSignUpEmailBasedSubscriptions in Update-MgPolicyAuthorizationPolicy. Set-MsolDomainFederationSettings and Update-MsolFederatedDomain manage federation for a domain, and Set-MsolDomain changes domain properties such as authentication type, so none of them controls self-service sign-up.
