Office 365 health mobile app

Microsoft has released a new app for Windows Phone (with iOS and Android versions coming soon), that allows you to monitor the health of your Office 365 tenant. You can find out more information about the release at this blog post:
http://blogs.office.com/b/office365tech/archive/2013/11/21/check-the-service-health-of-your-office-365-service-on-the-go.aspx
and if you actually want the Windows Phone app then you can get it from:
http://www.windowsphone.com/en-us/store/app/office-365-admin/76f9b288-37bc-4d75-8164-16d1df0447a2

Although the app is pretty basic at the moment I see it maturing into being so much more. What it does indicate is Microsoft’s commitment not only to mobile devices but also to the range of mobile operating systems.
if you have an Office 365 tenant download it to your device today and see what it does. Remember, I think that it is only going to improve.

Message encryption coming to Office 365

A very common request I see out there is people wanting to ensure that a person who receives an email does so securely and can’t forward it to others. That is a little tough given the way the standard email protocol was designed and implemented.
To provide an enhanced level of security with its Office 365 service Microsoft has recently announced that it will be shortly introducing email message encryption. if you want to see how it will work then check out this blog post.
http://blogs.office.com/b/office365tech/archive/2013/11/21/introducing-office-365-message-encryption-send-encrypted-emails-to-anyone.aspx
The great thing about this is that you’ll be able to send encrypted mail to anyone! That is certainly going to fill a major need these days as well as make a real point of differentiation for Office 365.
We’ll have to wait until early next year until it becomes available and the good news is that E3 and E4 plans will automatically receive it. It will also be available as an option with other plans but in the long run I see it becoming part of the standard Office 365 offering for all plans.

Disabling SkyDrive Pro in Office 365

SkyDrive Pro in Office 365 is a personal area where users can store files. Every user in Office 365 currently receives 25GB of space allocated to them, that can be increased up to 100GB if desired. However, what happens if you don’t want users to have access to this web based file storage in office 365? Can it be disabled? Yes it can. Here’s how.

image

A user’s standard SkyDrive Pro looks something like that shown above. To remove this access the first thing you’ll need to do is login as an administrator to the Office 365 portal.

image

In the top right of the portal you’ll find an Admin option, which if selected will display the menu shown above. From this menu select SharePoint.

image

In the SharePoint admin center select user profiles from the menu on the left and then Manage User Permissions from the People section on the right.

image

You should see here that the group Everyone except external users has the rights to Create Personal Site. To prevent any future users from creating or accessing SkyDrive Pro simply Remove this group.

image

If the box is blank, as shown above then no new users will have access to SkyDrive Pro. You can of course individually add users and group in here for whom you wish to have the ability to create SkyDrive Pro at any stage.

What does that look like if a newly created user now attempts to access SkyDrive Pro?

image

When they try and access SkyDrive Pro from the menu across the top of their account by selecting SkyDrive they will be taken to the Newsfeed tab as shown above.

Can you remove the SkyDrive option from the menu bar across the top of the page? Not at this stage.

Now that is all well and good for NEW users, what about that already have SkyDrive Pro set up? Can that be disabled? Yes it can but the process is much more involved.

A users SkyDrive Pro is basically a SharePoint subsite created in the Site Collection:

http://-my.sharepoint.com

under /personal

Now the primary administrator for the Office 365 tenant (i.e. the first login assigned when the tenant was created) has full rights to the site collection

http://-my.sharepoint.com

however they only have read rights (like every other Office 365 licensed user) by default to another individuals SkyDrive Pro. Thus, if that administrator navigates to a users SkyDrive Pro they can view it but not make changes. This needs to be changed so the administrator can take control.

image

To change the ownership of an individual users existing SkyDrive Pro site you need to return to the SharePoint admin center and select Manage User Profiles from the People section in the right hand side of the screen.

image

Now run a search for the user whose SkyDrive Pro you wish to modify. In this case Lewis Collins as shown above.

image

On the right of the Account name you will find a down arrow which when selected will display the menu above. From this menu select Manage site collection owners.

image

By default you will see the users name listed as the Primary and Secondary Site Collection Administrator. You’ll need to remove the user from both locations and the recommendation would be to add the administrator so that the site still can be managed.

image

Thus now, Lewis Collins no longer should have access, only Robert Crane (i.e the tenant administrator) does.

Once that is saved the administrator should now be able to access the URL of the users SkyDrive Pro and be able to edit the site.

image

You’ll know you’ll be able to do that if when you select the Cog icon in the top right of the screen you see a menu like that shown above that includes the menu item Site Settings. Select this item to continue.

image

Select Site Permissions from under the Users and Permissions section in the top left of the page as shown above.

image

Select the user from the list by placing a check mark to the left of their name and then selecting Remove User Permissions from Ribbon menu.

Don’t forget that the user is still a member of the group Everyone except external users, so if you don’t also edit that security group in Office 365 and remove them from there they will continue to have read access.

If however no one except the administrator needs access to this users SkyDrive Pro Site then simply remove the group Everyone except external users using the same process above.

image

In this case we only want the administrator to have access so we have removed everything displayed. The administrator will continue to gain access to the site no matter what rights are modified in the actual SharePoint site because they where made a Site Collection administrator previously.

image

Return to Site Settings using the Cog in the top right hand corner of the window.

Now select Site collection administrators from the Users and Permissions section in the top right as shown above.

image

If any items appear in here that you don’t want to gain access (i.e. the user Lewis Collins) remove them and press OK to save.

image

Return to Site Settings again and this time select People and Groups at the top of the Users and Permissions section.

image

If the user appear here, place a check to the left of their name and then select the Actions menu.

image

From the menu select Delete users from Site Collection.

image

Press OK to continue.

You might ask why didn’t I do that first and remove the user from the Site Collection in one action? The reason is, I wanted to illustrate how many locations it is possible to provision rights. I would therefore highly recommend you check all areas I have run through here to ensure the user no longer appears.

So finally,

Before, with normal SkyDrive Pro access:

image

After, with no SkyDrive Pro access:

image

Now when a user visits their SkyDrive Pro they will no longer see any files or they will no longer be able to upload documents. Basically, they have no access.

You need to beware of the fact that a users SkyDrive Pro area is a dedicated SharePoint site in which the user has full admin rights when it is created. This means that can change permissions, create subsites with different permissions and so on. It is like giving users full access to a folder on a network drive.

The easiest way to prevent a user from accessing SkyDrive Pro is to disable the account or remove their rights to SharePoint, however the above scenario illustrates that you can still permit access to SharePoint but not SkyDrive Pro, even if SkyDrive Pro for that user has already been created. It is a lot of work to do that but at least you know how to if you need to. Just beware that there may be further permissions enabled by a user (perhaps giving buddy hidden access) that you may have to dig out. Finger crossed, most users won’t alter the defaults but beware they certainly have the power to if they want by default!

Office Web Apps improvements

You have always been able to work on documents simultaneously in Office Web Apps and Word on the desktop with SharePoint Online in Office 365, the only difference was that it would do a paragraph lock. This differed from the Google Docs approach which showed you real time editing of everyone. Basically you could follow every change they made to a document. Microsoft’s research indicated that was distracting to authors (and it is for me I know) so that is why they initially did it the way they did.

However, it seems that having the ability to see people individually editing every item in a document has won out, so Microsoft has now updated it’s Office Web Apps in SkyDrive and Office 365 to include this feature. You’ll get a better idea of what it looks like in this video:

This now makes the Office 365 editing experience more like that in Google Docs and removes a perceived difference between the products (and to be honest what appeared like a limitation in Office 365 even though it wasn’t). That is great news for Office 365 and makes the sell to customers who want a Google Apps like web editing experience much easier.

It will be interesting to see what Google does about this as puts the ball back in their court to come up with another differentiator. In fact, I think it puts the pressure squarely on them to come up with something as rich as what Office Web Apps is. Google Apps is looking pretty basic compared to Office Web Apps these days I reckon.

CIAOPS November Virtual Meeting–Resources

After a bit of a technical hiccup during the meeting yesterday I decided to re-record the video which you can now on my YouTube channel:

Here are the remaining resources I mentioned during the meeting:

Some resources on the Office 365 Public web site:

Office 365 Public website examples:

I hope to see you at the next meeting on December 4th featuring Boon Tee talking about on premise server integration with Office 365. Registrations will be available shortly.

DIRSYNC can now be deployed on a domain controller

The latest release of DIRSYNC (version 6553.0002) can now be installed on a domain controller according to the release notes at:

http://social.technet.microsoft.com/wiki/contents/articles/18429.windows-azure-active-directory-sync-tool-version-release-history.aspx

image

The details on how to go about this are located at:

http://social.technet.microsoft.com/wiki/contents/articles/17370.best-practices-for-deploying-and-managing-the-windows-azure-active-directory-sync-tool.aspx#A11

DIRSYNC is a stand alone application that copies information from the local active directory (user names, passwords etc) and copies them to Office 365, saving you from having to create these attributes in Office 365. DIRSYNC continues to copy any changes from the local Active Directory to Office 365 as well.

This is a HUGE improvement for smaller customers who typically only have a single server in their environment which runs as a domain controller (read Small Business Server).

It again points to fact that Microsoft is continuing to make incremental improvements to Office 365 in light of what customers are asking for. They don’t always come as quickly as we would like but they do come as evidenced above.

Now’s there’s one less excuse for smaller customers to configure Office 365 and one less excuse for going hybrid.

Additional versions of recent SharePoint Online book

GSWSP2013E

As promised, additional versions (ePub and Kindle) of my latest book “Getting Started With SharePoint Online 2013 for Enterprises” are now available from:

www.ciaops.com/publications

Although this book is aimed at people with Office 365 E and M plans much of it still remains relevant for those on P plans.

I’d also appreciate you letting others know about this work as it takes many, many hours to create and edit these books and at a sale price of less that five dollars I REALLY need to sell a lot to even break even, so any assistance you can provide really does go a long way.

Look out for additional titles soon.