PowerShell Script to remove Office 365 Service Plans from a user

When assigning an Office 365 license to a user, by default several service plans are enabled. When assigning an Office 365 E3 license to a user, the following service plans are enabled by default:

• Azure Rights Management
• Office 365 Pro Plus
• Skype for Business Online (Plan 2)
• Office Online
• SharePoint Online (Plan 2)
• Exchange Online (Plan 2)

From an end user perspective the user will see the following options when logging on to Office 365.

When looking at the users settings within the Office 365 Admin portal , things look as following:

The below PowerShell function allows an Office 365 user administrator to disable individual services for a registered Office 365 user.

The following command disables the Skype for Business Service

Disable-MsolUserServicePlan alextest@contoso.onmicrosoft.com -ServicePlan SkypeforBusiness

Now doing the same for Exchange and the Office web apps.

Disable-MsolUserServicePlan alextest@contoso.onmicrosoft.com -ServicePlan OfficeWebApps -Verbose

Disable-MsolUserServicePlan alextest@contoso.onmicrosoft.com -ServicePlan Exchange -Verbose

Note, before running the below command, you must connect to Azure Directory using the connect-msolservice cmdlet.

The script can be downloaded from here

More information:
Working with Office 365 User Licenses
Use Office 365 PowerShell to disable access to services

function Disable-MsolUserServicePlan
{
<#
.Synopsis
   Disables an Office 365 Service Plan for a user
.DESCRIPTION
   The Disable-MsolUserServicePlan cmdlet disables an Office 365 Service Plan for the specified user. 

   When assigning an Office 365 E3 license to a user, by default the following Service plans are enabled
   
   RMS_S_ENTERPRISE, OFFICESUBSCRIPTION,MCOSTANDARD,SHAREPOINTWAC,SHAREPOINTENTERPRISE,EXCHANGE_S_ENTERPRISE  

   Azure Rights Management, Office Pro Plus, Skype for Business, Office Web Apps, Sharepoint, Exchange
   
   Use the Disable-MsolUserServicePlan to disable an individual Service Plan. 

   This cmdlet requires the Azure Directory PowerShell module
   https://technet.microsoft.com/library/jj151815.aspx#bkmk_installmodule

   Connect to Azure Directory first before using this cmdlet
   Connect-MsolService

   
.PARAMETER UserPrincipalName
  The user ID of the user to retrieve.

.PARMAETER ServicePlan 
 The Service Plan to disable

.EXAMPLE
    Disable-MsolUserServicePlan -UserPrincipalName john.doe@contoso.onmicrosoft.com -ServicePlan SkypeforBusiness

    This command disables Skype for Business for user John Doe
.EXAMPLE
    Disable-MsolUserServicePlan -UserPrincipalName john.doe@contoso.onmicrosoft.com -ServicePlan Exchange

    This command disables Exchange for user John Doe
.NOTES
    Created by Alex Verboon, 13. Dec. 2015

    https://msdn.microsoft.com/en-us/library/dn568014.aspx
    https://technet.microsoft.com/en-us/library/dn771769.aspx
#>

[CmdletBinding(SupportsShouldProcess=$true)]
    Param
    (
         
        [Parameter(Mandatory=$true,
            ValueFromPipelineByPropertyName=$true,HelpMessage="The users office 365 principalname",
            Position=0)]
        [string]$UserPrincipalName,

        [Parameter(Mandatory=$true,
            ParameterSetName = "ServicePlan",
            ValueFromPipelineByPropertyName=$true,
            Position=1)]
            [ValidateSet("SkypeforBusiness","OfficeWebApps","SharePoint","Exchange","OfficeProfessionalPlus","AzureRightsManagement")] 
        [string]$ServicePlan
    )

    Begin
    {
       $AccountSkuID = (Get-MsolAccountSku | Where {$_.SkuPartNumber -eq "ENTERPRISEPACK"}).AccountSkuId
        
            switch($ServicePlan)
            {
                "SkypeforBusiness" {$planname = "MCOSTANDARD"}
                "OfficeWebApps" { $planname = "SHAREPOINTWAC"}
                "SharePoint" {$planname = "SHAREPOINTENTERPRISE"}
                "Exchange" {$planname = "EXCHANGE_S_ENTERPRISE"}
                "OfficeProfessionalPlus" {$planname = "OFFICESUBSCRIPTION"}
                "AzureRightsManagement" {$planname = "RMS_S_ENTERPRISE"}
              }
             Write-Verbose "Selected plan to disable: $planname"

             $ouser = Get-MsolUser -UserPrincipalName $UserPrincipalName -ErrorAction SilentlyContinue

            if ($ouser -ne $null)
            { 
                $ouserlicense = $ouser.Licenses | Select-Object -ExpandProperty ServiceStatus
                $DisabledServices = ($ouserlicense | Where-Object -Property ProvisioningStatus -EQ "Disabled").ServicePlan.ServiceName 
                Write-verbose "Current Disabled Service Plans: $DisabledServices"
                $EnabledServices = ($ouserlicense | Where-Object -Property ProvisioningStatus -EQ "Success").ServicePlan.ServiceName 
                Write-verbose "Current Enabled Service Plans: $EnabledServices"
            }
            Else
            {
                Write-Error "User $UserPrincipalName does not exist"
                break
            }
    }

    Process
    {
           If ($DisabledServices -contains $planname -eq $true)
            {
                Write-output "The Service plan DisableServicePlan is already disabled for user $UserPrincipalName"
            }
            Else
            {
                
                If ($DisabledServices.Count -eq 0)
                {
                    $DisabledServicesNew = $planname
                }
                Else
                {
                    $DisabledServicesNew = {$DisabledServices}.Invoke()
                    $DisabledServicesNew.Add("$planname")
                }
                
                $LicenseOptions = New-MsolLicenseOptions -AccountSkuId "$AccountSkuID" -DisabledPlans $DisabledServicesNew
                Write-Verbose "New Disabled Service Plans: $($LicenseOptions.DisabledServicePlans)"
                       
                If ($PScmdlet.ShouldProcess("Disabling Service Plan $planname for user$UserPrincipalName"))
                {
                    Set-MsolUserLicense -UserPrincipalName "$UserPrincipalName" -LicenseOptions $LicenseOptions
                }
            }
        }
     End{}
}