This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(9.6, 87%, 10%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMP%3C/text%3E%3C/svg%3E)
When our former network admin created our Azure account so that our school district could access Microsoft Office 365, we didn't realize that it was creating an additional onmicrosoft email account till after he left. My question is , Is there a way to keep the email accounts so the students can use it access Microsoft app and services, but hide it from the our users so that no one knows the accounts exist. Mainly the students.
Yes, it is possible to keep the onmicrosoft.com email accounts for students to access Microsoft apps and services while hiding them from users so they are not easily visible.
Create an alias for each user's email account that uses your primary domain (e.g., student@schooldistrict.edu). This way, users can use the primary domain email address for communication while the onmicrosoft.com email address remains hidden.
if you want you can hide the onmicrosoft.com email accounts from the Global Address List (GAL) so that they do not appear in the address book or when users search for contacts. If this is what you are looking for, i can send you PowerShell commands with steps
Yes, it is possible for the users use the primary domain email address (student@schoold.edu) for communication while the onmicrosoft.com email address remains hidden.
Even You can hide the onmicrosoft.com email accounts from the Global Address List (GAL) so that they do not appear in the address book or when users search for contacts.
So our primary was already setup years ago , does that mean the onmicrosoft is already hidden and that I would just need to hide the GAL?
Sorry if these questions seem novice..I just got tasks with this from my director and I am really new to Azure and its setup.
Onmicrosoft address created by system automatically when users created, and it is always there as Aliases for those accounts unless you modify it or delete it which is not a good practice. Since users don't know each other's onmicrosoft and communicate with school address only you don't have to do anything at this point. This is common for all organizations.
Thanks for all the assistance. I just recently took over the cybersecurity side of things being an IT Tech for years, but have never had to deal with the networking or Azure side of things, we always had a separate team for that. Small school district means more people taking newer tasks..lol
You don't need to be concerned about the extra aliases created by default. We primarily use these aliases when migrating data between environments. Instead, I would initially implement MFA with Conditional Access for the most critical accounts if not yet done, and that provides 99% protection against account compromise and cyber-attacks.
Please kindly mark answered if it is helpful
Enrolling MFA would protect you from account targeted cyberattacks at 99% if not yet in place.
if my answer is of any help to you, please click on ACCEPT ANSWER as it could help other members of the Microsoft Q&A community who have similar questions to reference. Thanks for your understanding.
if my answer is of any help to you, please click on ACCEPT ANSWER as it could help other members of the Microsoft Q&A community who have similar questions to reference. Thanks for your understanding.