We currently are experiencing an issue with 365 where a user placed in eDiscovery and hold is left in an "active mailbox" state. One of the problems this causes is the accounts show up in the GAL.
I set a business rule to hide users from the GAL & remove the Office 365 license when they are disabled. The issue I am having is when users are in this "active" but unlicensed state they do not sync with our on-prem AD. This means the user doesn't get hidden from the GAL as Dirsync never has a chance to run before the license is removed.
Do you have any suggestions on how we could work around this problem?