Forum Discussion

Lefty's avatar
Lefty
Copper Contributor
Feb 18, 2025

Multi Tenant Organization - one shared user not showing up in Global Address List

I set up a multitenant organization with two tenants.
Overall it seems right, users can find each other and chat fairly seamlessly on teams, and shared users appear on the opposite global address list.
However, one user is an exception.
They appear on their home tenant's Global Address list, but not on the other tenant's (all other shared users appear to). They are members on the other tenant (as are the rest of the shared users), and are not set as hidden on a global address list anywhere I can see. I can't see anything different about them in any way. They were neither the first nor the last to be shared, and I have tried unsharing then sharing them again.
They can however be found on teams by typing their name.
Probably not related, but I will point out that the one other thing I have not managed to get working is a "chat" link on people's outlook directory listings. None of the shared users have one, despite being chatable with on teams.
Any idea where I might look for the culprit?

  • Lefty's avatar
    Lefty
    Copper Contributor

    I thought I'd found a correlation, then I found an exception ☚ī¸

  • Lefty's avatar
    Lefty
    Copper Contributor

    To add to my previous post, I have discovered two things.

    1) There is more than one user that this has happened with (I had only previously spotted one)
    2) I seem to have found something that correlates with the external member visibility in the global address list

    It is when I look at the account in entra, if I go to the overview of a user that DOESN'T show in the GAL I see this


    Whereas if I go to the overview of a user that DOES show, I see this

     

    So, the difference is the Sign-Ins box, which indicates that there is some setting that is different. Hopefully someone can tell me what the difference between those two accounts is? (They are both shared from another tenant in an MTO, there were some issues getting the connection working properly so they may have been shared with different settings)

  • # Set the user's email
    $userEmail = "email address removed for privacy reasons"

    # Import Exchange Online Module (Ensure you have ExchangeOnlineManagement module installed)
    Import-Module ExchangeOnlineManagement

    # Connect to Exchange Online (Uncomment if not already connected)
    # Connect-ExchangeOnline -UserPrincipalName "email address removed for privacy reasons"

    Write-Host "🔹 Checking Address Book Policy (ABP) for $userEmail..."
    $abp = Get-Mailbox -Identity $userEmail | Select-Object AddressBookPolicy
    Write-Host "✅ ABP Assigned: $($abp.AddressBookPolicy)"

    Write-Host "🔹 Checking if user is hidden from GAL..."
    $hidden = Get-Recipient -Identity $userEmail | Select-Object HiddenFromAddressListsEnabled
    Write-Host "✅ HiddenFromAddressListsEnabled: $($hidden.HiddenFromAddressListsEnabled)"

    if ($hidden.HiddenFromAddressListsEnabled -eq $true) {
        Write-Host "⚠ī¸ User is hidden from GAL. Unhiding now..."
        Set-Recipient -Identity $userEmail -HiddenFromAddressListsEnabled $false
    }

    Write-Host "🔹 Forcing GAL & Offline Address Book Update..."
    Get-AddressList | Update-AddressList
    Get-GlobalAddressList | Update-GlobalAddressList
    Get-OfflineAddressBook | Update-OfflineAddressBook

    Write-Host "🔹 Checking Azure AD Sync Status..."
    $syncStatus = Get-MsolUser -UserPrincipalName $userEmail | Select-Object DisplayName, ImmutableId
    Write-Host "✅ User Display Name: $($syncStatus.DisplayName), 

Resources