25,178 questions
This is by Design.
AAD UsageLocation is forward synced to ExO CountryOrRegion.
Or change CountryOrRegion from ExO.
Updating a user's Country or Region in Azure AD does not update the property in Exchange online
Nikki Chapple
1
Reputation point MVP
Updating a user's Country or Region field in Azure AD does not update the Country or Region field in Exchange online.
If I update the user's Country or region in Azure AD Admin center, Microsoft 365 Admin Center or by Graph PowerShell Update-MgUser the Country or region field is not upated in Exhcange Online.
However if i update the user's Country or region in Exchange Online admin center or via EXO PowerShell Set-user the Country nd region is updated in Azure AD. See resluts below
The issue is that the user is now showing as in two different countries. The impact is that the Country or Region of User can be used in as a property in dynmaic memberships for Azure AD groups and also Purview Adaptive scopes. So you can get incorrect
Anyone else encounted this problem or is this a bug?
Microsoft Security | Microsoft Entra | Microsoft Entra ID
4 answers
Sort by: Most helpful
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(48, 53%, 14%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMS%3C/text%3E%3C/svg%3E)
Mandar Shahane 5 Reputation points Microsoft Employee2023-08-15T00:14:05.01+00:00 -
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(32, 96%, 13%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJM%3C/text%3E%3C/svg%3E)
Jordan Millama 1,386 Reputation points2023-01-07T18:51:37.453+00:00 You could utilize PowerShell to change a User's Country or Region with, Set-User and -CountryOrRegion, set-user
Please accept as an answer if this was helpful.
-
Nikki Chapple 1 Reputation point MVP
2023-01-07T21:34:59.417+00:00 @Jordan Millama that was one of test scenarios that I shown Updating using EXO Powrrshell set-user works OK. The issue i have is that updating in Azure AD is not reflecting in Exchange online. I am trying to establish is this is a bug.
This scenario occurs in several test tenants I and my colleagues have.
Sign in to comment -
-
risolis 8,741 Reputation points2023-01-07T19:11:50.96+00:00 Hello @Nikki Chapple
Thank you for sharing this concern on this community space.
I am thinking of the following relevant points to check for this case scenario as shown down below:
1-Did you check this from this web page https://admin.microsoft.com/Adminportal/Home#/homepage ?
2-Is this a hybrid environment or cloud-only environment?
3-Have you read the following article which might fit into your case scenario https://learn.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-sync-feature-preferreddatalocation ?
Let me know if that was useful but if not, I can keep assisting you further.
Looking forward to your feedback,
Cheers,
Please "Accept the answer" if the information helped you. This will help us and others in the community as well.
-
Nikki Chapple 1 Reputation point MVP
2023-01-07T21:35:25.163+00:00 in response to your suggestions
- Yes I have checked from the Microsoft 365 Admin Portal as shown in the test scenarios image I had attached. The Microsoft 365 Admin portal reflects the sae setting as the Azure AD Admin Center.
- This is a cloud only environment I am using for testing.
- N/A as cloud only
-
risolis 8,741 Reputation points
2023-01-07T21:59:32.82+00:00 Many thanks for your quick answer.
Please try this out and let me know:
https://practical365.com/a-new-tool-to-manage-exchange-related-attributes-without-exchange-server/
Looking forward to hear back from you.
Regards!
Sign in to comment -
-
risolis 8,741 Reputation points
2023-01-08T01:24:22.633+00:00 Hello @Nikki Chapple
Many thanks for your response.
I would like to recognize the fact that you are an MVP with enough feedback about it and I do appreciate the change to let me assist you since I am a volunteer trying to become an MVP one day : )
Now going back to your primary concern, I have double-checked the whole info for your case scenario which makes sense a lot since I experienced something similar but by using MS Teams (Phone assignment task).
For instance, for me the Azure AD is the authority attribute when comes about Cloud-Only environment since so, if an object attribute is configured on the Azure AD it takes precedence or is the tie-braker when replicating object attributes to O365/M365
Having said that, I was wondering if when you were trying to do all this testing.... If You deleted them (Country or Region attribute) and then you were updating them so, you got those outputs shown before or you just added them without deleting it.
Furthermore, I was thinking of the Azure AD license type used for this testing scenario as well as that there is an updated portal for Exchange admin portal.
Finally, you knew this better than me, but the object attribute replication process takes up some minutes to be reflected or shown properly either on the PS terminal or the admin portal.
Looking forward to your response.
Regards!