When we disable user from on-perm Ad how user can log in to outlook and teams do the stuff

Question

Hi Team

How long does it take to full deactivate on azure AD once user deactivated in on-perm AD 1

we are facing an issue in our domain, after deactivating users from the local Ad users can send the mail and do the team's activity so I need proper guidelines to overcome this issue also this is a risk for our organization.

Answer 1

Disabling a user doesn't have immediate effect, even with pure on-premises environments, due to caching on the backend (and sometimes frontend) services. Add to that the fact that it can take up to 30 minutes for the change to sync to Azure AD. If you need to immediately revoke access, use the Revoke-MgUserSignInSession cmdlet and force a password change on the user.

Some additional details can be found in this article.