Fastest way to disable Teams login/account

Question

Hi,
Whats the fastest way to disable a users Teams login ? for example...if someone was to be dismissed with immediate effect what would the best way be to disable their Teams login such that they could NOT access/post etc... ?
ive read (1) that the process to disable can take upto 60mins to propagate during which time a disgruntled employee maybe able to abuse Teams...so is there a quicker way ?

Answer 1

Hi,

Using powershell run the following command:

Revoke-AzureADUserAllRefreshToken -ObjectId "a1d91a49-70c6-4d1d-a80a-b74c820a9a33"

Replace the object ID with the ID of the user

Thanks

Answer 2

Hi @Simon Grumbt Admin

As LeeFitches mentioned, the fastest method should be Sign this user out of all ‎Office 365‎ sessions via Microsoft 365 admin center.
And to restrict further sign-in attempts, you may need to select block sign-in for these users. (it may take 24 hours to take effect and a workaround is to reset their password)

For more information please refer to this link: Step 1 - Prevent a former employee from logging in and block access to Microsoft 365 services

However, a problem would be that it would also affect other Office 365 service, for example Exchange Online.

If you would like to disable Teams for these users, you may consider removing Teams license for them.
While please note that it may also take about 24 hours to take effect.

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.