InterpretedUserType | Possible Description |
---|---|
AADConnectDisabledOnlineActiveDirectoryDisabledUser | |
AADConnectDisabledOnlineActiveDirectoryDisabledUserPendingDeletionFromAD | |
AADConnectDisabledOnlineSfBUserWithTeamsLicensePendingDeletionFromAD | |
AADConnectDisabledOnlineTeamsUserPendingDeletionFromAD | |
AADConnectDisabledOnlineTeamsUser | |
AADConnectDisabledOnlineUserNotLicensedForServicePendingDeletionFromAD | |
AADConnectDisabledOnlineUserNotLicensedForService | |
DirSyncEnabledOnlineActiveDirectoryDisabledUserInPDL | |
DirSyncEnabledOnlineActiveDirectoryDisabledUserNotInPDL | |
DirSyncEnabledOnlineActiveDirectoryDisabledUserPendingAttributeRemovalFromAD | |
DirSyncEnabledOnlineActiveDirectoryDisabledUser | |
DirSyncEnabledOnlineSfBUserWithTeamsLicense | |
DirSyncEnabledOnlineSfBUserWithTeamsLicenseInPDL | |
DirSyncEnabledOnlineSfBUserWithTeamsLicenseWithMCOValidationError | |
DirSyncEnabledOnlineActiveDirectoryDisabledUserPendingAttributeRemovalFromAD | Synced user with object disabled in local Active Directory, awaiting removal of all parameters. (object was deleted) AADConnect.. - Directory Synchronisation is employed with Azure AD Connect ..Enabled.. - Object is Enabled for Synchronisation ..Online.. - Authoritative Object is in 365, for example User located in Skype Online or Teams ..ActiveDirectoryDisabled.. - Object Disabled in Active Directory ..User.. - User Object: Query with AzureAdUser, CsOnlineUser, etc. ..PendingAttributeRemovalFromAD - Temporary State until all Parameters have been removed (Object was deleted) |
DirSyncEnabledOnlineTeamsOnlyUserNotLicensedForServiceInPDLPendingAttributeRemovalFromAD | |
DirSyncEnabledOnlineSfBUser | |
DirSyncEnabledOnlineTeamsOnlyUser | |
DirSyncEnabledOnlineTeamsOnlyUserInPDL | |
DirSyncEnabledOnlineTeamsOnlyUserNotLicensedForService | |
DirSyncEnabledOnlineTeamsOnlyUserNotLicensedForServicePendingAttributeRemovalFromAD | |
DirSyncEnabledOnlineTeamsUserNeedsProvisioningToAD | |
DirSyncEnabledOnlineTeamsUserNotInPDL | |
DirSyncEnabledOnlineTeamsUserWithMCOValidationError | |
DirSyncEnabledOnlineTeamsUser | |
DirSyncEnabledOnlineUserNotLicensedForServiceNeedsProvisioningToAD | |
DirSyncEnabledOnlineUserNotLicensedForServiceNotInPDL | |
DirSyncEnabledOnlineUserNotLicensedForServicePendingAttributeRemovalFromAD | |
DirSyncEnabledOnlineUserNotLicensedForService | |
AADConnectEnabledSfBUserWithTeamsLicenseNeedsProvisioningToAD | |
DirSyncDisabledDisabledUser | User account disabled in SfB online and disabled in local AD, has a sipAddress attribute online, RegistrarPool has a value. |
DirSyncDisabledNoService | User account disabled in SfB online and does not have a sipAddress attribute online, RegistrarPool empty, OnPremHostingProvider shows sipfed.online.lync.com. |
DirSyncDisabledSfBUser | User account disabled in SfB online and has a sipAddress attribute online, also, has a RegistrarPool value and OnPremHostingProvider is empty. |
DirSyncDisabledUser | User account disabled in SfB online and disabled in local AD, does not have a RegistrarPool value. |
DirSyncNoService | To this day, I still do not know exactly what that means. |
DirSyncSfBUserNeedsProvisioning | This appears to be a temporal state before DirSyncSfBUser |
DirSyncSfBUser | Enabled in SfB Online, has a SipAddress and has a RegistrarPool, this is the best value we can get. |
EnabledUserWithNoService | Active users without any license |
EnabledUserWithTeamsLicense | Active users with Teams license |
HybridOnlineActiveDirectoryDisabledUser | |
HybridOnlineActiveDirectoryDisabledUserInPDL | |
HybridOnlineActiveDirectoryDisabledUserInPDLPendingAttributeRemovalFromAD | |
HybridOnlineActiveDirectoryDisabledUserNotInPDL | |
HybridOnlineActiveDirectoryDisabledUserPendingAttributeRemovalFromAD | |
HybridOnlineDisabledUserNeedsProvisioning | User account disabled in SfB online, hasn't a SipAddress attribute online and OnPremHostingProvider is not empty. |
HybridOnlineDisabledUserWithDeletedLicenses | It's like HybridOnlineDisabledUser but, it seems that license is not assigned. |
HybridOnlineDisabledUser | User account disabled in SfB online, has a SipAddress attribute online and OnPremHostingProvider is not empty. |
HybridOnlineEnabledUserWithSfBAndTeamsLicense | User account was created in local AD, DirSynced and uses SfB online and Teams, it has also both SfB and Teams license assigned. |
HybridOnlineSfBUserWithDeletedLicenses | Same as HybridOnlineSfBUser but judging by the name, it seems that license is not present. |
HybridOnlineSfBUserWithTeamsLicense | |
HybridOnlineTeamsOnlyUser | |
HybridOnlineTeamsOnlyUserNeedsProvisioningToAD | |
HybridOnlineTeamsOnlyUserInPDL | |
HybridOnlineTeamsOnlyUserNotLicensedForService | |
HybridOnlineTeamsOnlyUserNotLicensedForServiceNotInPDL | |
HybridOnlineTeamsOnlyUserNotLicensedForServicePendingAttributeRemovalFromAD | |
HybridOnlineSfBUser | User account enabled and DirSynched, has a SipAddress and a OnPremHostingProvider and RegistrarPool. |
HybridOnpremActiveDirectoryDisabledUser | |
HybridOnpremActiveDirectoryDisabledUserWithMCOValidationError | |
HybridOnpremDisabledUser | User account disabled in SfB OnPrem, OnPremHostingProvider has "SRV:" value and RegistrarPool is empty. |
HybridOnpremSfBUserFailedPublishingToAAD | |
HybridOnpremSfBUserWithMCOValidationError | |
HybridOnpremSfBUserWithTeamsLicense | |
HybridOnpremSfBUserWithTeamsLicenseWithMCOValidationError | |
HybridOnpremSfBUser | According to Johan Delimon's Blog, the account is created at Customer AD, DirSynched and uses SfB OnPrem, we can judge this by the presence of OnPremHostingProvider. |
HybridOnpremTeamsOnlyUser | |
HybridOnpremTeamsUserWithMCOValidationError | |
HybridOnpremUserNotLicensedForService | |
PureOnlineActiveDirectoryDisabledUserPendingAttributeRemovalFromAD | |
PureOnlineActiveDirectoryDisabledUser | |
PureOnlineApplicationInstance | |
PureOnlineApplicationInstancePendingDeletionFromAD | |
PureOnlineEnabledUserWithNoService | |
PureOnlineEnabledUserWithSfBAndTeamsLicense | |
PureOnlineEnabledUserWithTeamsLicense | |
PureOnlineNoServiceWithDeletedLicenses | User account created in Office 365, has no local AD account, so is not DirSynched, has no SfB license. |
PureOnlineNoService | I still do not know exactly what that means. |
PureOnlineSfBUserWithTeamsLicense | |
PureOnlineSfBUser | User account created in Office 365, has no local AD account, so is not DirSynched, and uses SfB Online. |
PureOnlineTeamsOnlyUserFailedProvisioningToBVD | Enterprise Voice is enabled, and a number is added to the user. The number needs to synchronise into Microsoft's Business Voice Directory (BVD). When calls are received to Microsoft SBC's, the BVD is checked to determine which user the call should be routed to. |
PureOnlineTeamsOnlyUserNeedsProvisioningToAD | |
PureOnlineTeamsOnlyUserNotLicensedForService | |
PureOnlineTeamsOnlyUserNotLicensedForServiceWithMCOValidationError | |
PureOnlineTeamsOnlyUser | |
PureOnlineTeamsOnlyUserPendingDeletionFromAD | |
PureOnlineTeamsUser | |
PureOnlineUserNotLicensedForServiceFailedPublishingToAAD | |
PureOnlineUserNotLicensedForServicePendingAttributeRemovalFromAD | |
PureOnlineUserNotLicensedForService |
The InterpretedUserType value is composed of four other possible values, following you will find these collected values and its possible meaning:
UserType | Possible Description |
---|---|
NoService | User does not meet any of the other UserTypes criteria; These are generally unlicensed users |
SfBUser | User has an enabled SfB Online base license |
TeamsUser | User has an Enabled Teams Online license and no Enabled SfB Online base license (Note: Don't be confused about this; we still require SfB Online License) |
FreemiumUser | User is assigned a Teams Online Freemium license or an SfB Online Freemium license |
DisabledUser | User is not an Application Endpoint, and the AD object is Disabled in UserAccountControl regardless of Online license state |
AppEndpoint | User is an Application Endpoint |
UserSubType | Possible Description |
---|---|
PureOnline | User is not configured for AAD Connect |
HybridOnPrem | User is enabled for AAD Connect, the user is syncing on-prem SfB AD attributes and the user’s on-prem msRTCSIP-DeploymentLocator attribute is “SRV:”; does not indicate or take into consideration the status of ShareSipAddressSpace |
HybridOnline | User is enabled for AAD Connect, the user is syncing on-prem SfB AD attributes and the user’s on-prem msRTCSIP-DeploymentLocator attribute is an Online hosting provider, usually “http://sipfed.online.lync.com” ; does not indicate or take into consideration the status of ShareSipAddressSpace |
DirSyncDisabled | User is explicitly disabled for AAD Connect; considered the same as PureOnline |
DirSync | User is enabled for AAD Connect but the user is not syncing on-prem SfB AD attributes, specifically the msRTCSIP-DeploymentLocator attribute |
UserState | Possible Description |
---|---|
WithMCOValidationError | User failed provisioning with a tenant admin correctable error. The user’s MCOValidationError property will contain details of the error and how to correct it. |
FailedProvisioning | User failed provisioning and will be retried in the next retry interval. |
FailedBvdProvisioning | User failed provisioning and will be retried in the next retry interval. |
NeedsProvisioning | User is waiting for provisioning to start. |
WithDeletedLicenses | User’s LicenseRemovalTimeStamp is set. |
PendingXForestMove | User has a XForestMovePolicy set. |
UserMncState | Possible Description |
---|---|
NotInPDL | User has a Preferred Data Location set but is not assigned an SfB Online registrar pool in the current AD Forest. Caveat: User could be in their PDL but not provisioned yet. |
InPDL | User has a Preferred Data Location set and is assigned an SfB Online registrar pool in the current AD Forest |
I tried my hand at dissecting the individual particles - also blogging about it - Input is welcome to raise confidence level.
If there already is documentation on this, happy to check it out - Also saved as Gist.