Tuesday, August 14, 2018

I’m puzzled by new-protectionalert

Microsoft is transitioning Office 365 Activity Alerts which I have talked about configuring here with PowerShell:

Create Office 365 Activity Alerts using PowerShell

to Alert Policies which you can see in the console here:

image

You will notice that I have been able to go in and create two of my own alerts (test and Test 2). I did this via the web console. I performed this web console configuration on a Microsoft 365 Business tenant.

Working with the web console is the slow way to get things done. PowerShell is best practice if you want to do things quickly and make them repeatable.

My thinking was, if I can configure these alerts in the web console I “should” also be able to that in PowerShell.

Initially, I thought you could using this new PowerShell command:

new-protectionalert

Now the information for this actual command is a bit sparse but I started working backwards from the alerts I created in the web console.

image

As you can see from the above, when I was able to work out a command that seemed to execute I was greeted with the error:

Creating advanced alert policies requires an Office 365 E5 subscription or Office 365 E3 subscription with an Office 365

Threat Intelligence or Office 365 EquivioAnalytics add-on subscription for your organization. With your current subscription, only single event alert can be created.

which seems to indicate I don’t have the license, but yet I can create what I believe to be an identical alert in the web console. Basically, I just want an alert when someone marks an email as “Phish”.

image

In Powershell I’m using the parameter:

-filter "Activity.SubmissionType -eq 'Phish'"

which would seem to me to be the same thing. Yet, I’m told that I don’t have the right license??

In the end, I want to create a PowerShell script that allows me to configure these commands so that they can be easily applied. Currently, at the moment, I’m a bit confused on how to exactly achieve this.

Sunday, August 12, 2018

CIAOPS Need to Know Azure Webinar–August 2018

pexels-photo-325229

This month I’m going to take a closer look at one of the automation options in Azure, JSON templates. I’ll show you what they are, how they are created, what the parameter and how to use them in your deployments.

August Azure Webinar Registrations

The details are:

CIAOPS Need to Know Azure Webinar – August 2018
Wednesday 29th of August 2018
2pm – 3pm Sydney Time

All sessions are recorded and posted to the CIAOPS Academy.

There of course will also be open Q and A so make sure you bring your questions for me and I’ll do my best to answer them.

The CIAOPS Need to Know Webinars are free to attend but if you want to receive the recording of the session you need to sign up as a CIAOPS patron which you can do here:

http://www.ciaopspatron.com

or purchase them individually at:

http://www.ciaopsacademy.com/

Also feel free at any stage to email me directly via director@ciaops.com with your webinar topic suggestions.

I’d also appreciate you sharing information about this webinar with anyone you feel may benefit from the session.

CIAOPS Need to Know Office 365 Webinar–August

laptop-eyes-technology-computer

Video is an extremely powerful communication mechanism and this month I’m going to take you through the Stream video service that is part of Office 365. You’ll get a better understanding of exactly what Stream is and how it can be used in your business.

You can register for free at:

August Webinar Registrations

The details are:

CIAOPS Need to Know Webinar – August 2018
Wednesday 29th of August 2018
11am – 12am Sydney Time

All sessions are recorded and posted to the CIAOPS Academy.

There of course will also be open Q and A so make sure you bring your questions for me and I’ll do my best to answer them.

The CIAOPS Need to Know Webinars are free to attend but if you want to receive the recording of the session you need to sign up as a CIAOPS patron which you can do here:

http://www.ciaopspatron.com

or purchase them individually at:

http://www.ciaopsacademy.com/

Also feel free at any stage to email me directly via director@ciaops.com with your webinar topic suggestions.

I’d also appreciate you sharing information about this webinar with anyone you feel may benefit from the session.

Friday, August 10, 2018

Need to Know podcast–Episode 187

Brenton speaks with Tas Gray and Cam Male about their recent experiences at the Microsoft Inspire conference in Las Vegas. We get to hear what it is like for two first timers to attend one of the biggest Microsoft events of year. We also get to hear the learnings and take aways that Tas and Gray gained from attending. Of course, Brenton and I also update you with all the latest news from the Microsoft Cloud so download, plug in, sit back and enjoy yet another episode of the Need to Know podcast from the CIAOPS.

Take a listen and let us know what you think -feedback@needtoknow.cloud

You can listen directly to this episode at:

https://ciaops.podbean.com/e/episode-187-reactions-on-microsoft-inspire/

Subscribe via iTunes at:

https://itunes.apple.com/au/podcast/ciaops-need-to-know-podcasts/id406891445?mt=2

The podcast is also available on Stitcher at:

http://www.stitcher.com/podcast/ciaops/need-to-know-podcast?refid=stpr

Don’t forget to give the show a rating as well as send us any feedback or suggestions you may have for the show.

Resources

@contactbrenton

@directorcia

Microsoft is hiking prices for Office 2019, Windows 10 Enterprise

Page Talk app

Page Talk video

OneDrive updates

Productivity Library

New guided deleted user workflow

Notifiable data breach report

New Azure AD roles

CIAOPS O365 online security course - use coupon code = PODCAST

Friday, August 3, 2018

View SharePoint external sharing setting

image

Many people don’t seem to appreciate that most SharePoint sites in Office 365 are configured for sharing outside the organisation by default. This is designed to allow external parties to more easily access common content.

This means that generally, by default, users of those SharePoint sites (which includes Microsoft Teams) are going to be able to share links to that information. You can obviously disable this if you want, but generally, by default, sharing is enabled.

An easy way to see what the sharing status of your sites is current set to is to run the following PowerShell command after connecting to SharePoint Online:

get-sposite | Select-object url,sharingcapability

This will show you the one of following results:

Disabled – external user sharing (share by email) and guest link sharing both disabled

ExternalUserSharingOnly – external user sharing (share by email) enabled, but guest link sharing disabled

ExistingExternalUserSharingOnly - (DEFAULT) Allow sharing only with external users that already exist in organisation’s directory

ExternalUserAndGuestSharing - external user sharing (share by email) and guest link sharing both enabled

You can then go and make any adjustments you need to.