MT.1083 - Ensure Delicensing Resiliency is enabled

Contributed by Lukas GoslingAll contributors →

Overview

Important: This test is only available if your tenant has at least 5000 non-trial Exchange Online licenses.

Delicensing Resiliency SHOULD be enabled to maintain access to mailboxes when licenses are removed.

Remediation action

Enable Delicensing Resiliency by running the following PowerShell command in Exchange Online:

Set-OrganizationConfig -DelayedDelicensingEnabled:$true

Optional: Configure User Notifications

You can also configure notifications to inform administrators and end users about delicensing events:

# Enable tenant admin notifications for delicensing events
Set-OrganizationConfig -TenantAdminNotificationForDelayedDelicensingEnabled:$true

# Enable end user mail notifications for delicensing events
Set-OrganizationConfig -EndUserMailNotificationForDelayedDelicensingEnabled:$true

Note: These notification settings help ensure stakeholders are informed when licensing changes occur that could affect mailbox access.

Related links

• Delayed Delicensing in Exchange Online
• Set-OrganizationConfig

Test Metadata

Field	Value
Test ID	MT.1083
Severity	Low
Suite	Maester
Product	Exchange Online
Feature	Mailboxes
Area	Infrastructure hardening
Resource type	Tenant
User impact	Low
Implementation cost	Low
MITRE ATT&CK	None
PowerShell test	Test-MtExoDelicensingResiliency
Services	ExchangeOnline, Graph

Source

• Test: tests/maester/exchange/Test.MT.1083.ps1
• Documentation: tests/maester/exchange/Test.MT.1083.md