I was noodling away with a recently set up Office 365 Small Business Premium (P2) plan when I notice the following on the default team site:

In the previous version of the P Plan all the SharePoint sites (internal and external) were http like so:

I haven’t as yet tested all the new plans but I would have to assume that all new Office 365 internal SharePoint sites now run using https! (if not leave a comment on this post so I can check).

Yet another improvement over the old version.

For people who follow along with blog you will know that I have done some posts on SkyDrive Pro including:

Even more SkyDrive Pro info

SkyDrive Pro Primer

A bit more SkyDrive Pro info

I have taken these, added more information and published my next e-Book – “Getting Started with SkyDrive Pro for Office 365”, which is the first title I have done on the new version of Office 365.

Abstract

This book helps users understand the basic usage and operation of SkyDrive Pro which is part of SharePoint 2013 in Office 365 so they can be more productive. SkyDrive Pro is a location with SharePoint that users can save and share files with others inside and outside their organization. It examines the following components of SkyDrive Pro: Uploading, Creating, Editing deleting and recovering files. It will show you how to edit, create and view documents as well as share files with contacts inside and outside your organization. It will show you how to synchronize these files to your desktop. If you are keen to find out how to make the most of SkyDrive Pro for Office 365 then this book is for you.

You can purchase the book at all the usual locations but I certainly would appreciate you purchasing it directly from my site at if it is of interest:

http://www.ciaops.com/publications

All purchases continue to support the work that I do in providing other free content like this blog and my YouTube channel. So if you find benefit from what I offer please support me and help me to create more. You can also assist by letting other know about this and my other publications.

Keep an eye out for more upcoming publications on the new Office 36 from me.

A couple posts ago I wrote that external user sharing is confusing with the new Office 365 but I’m glad to report that things have changed for the better (not unexpectedly) just recently.

So now when you share a site with the new Office 365 for an external contact they will receive an email like:

Clicking on the link they will now be taken to:

which is MUCH clearer that it used to be (see the previous post for what it was like)!

It is still recommended that you have an existing Windows Live Id already created and if so you select the Microsoft Account option at the top.

You’ll then be taken to the familiar Office 365 login, from which you’ll need to select Sign in with Windows Live ID at the bottom of the page, which I think is still a little confusing to an external (non-Office 365) user.

However, if you are already signed into the browser with Windows Live ID, you will see the above screen, with most of the details already in place. To me this is much more obvious. So, there’s a tip, before an external user clicks on the sharing link from Office 365 get them login with their Windows Live Id to:

http://login.live.com

just to make things easier. Would of course be nice to not have to do that to keep things simple but I’ll take any change that come.

The great thing overall is that it demonstrates how quickly these things are being improved so I would expect further changes in the very near future. Keep them coming Microsoft.

It is best practice to create security groups and assign these groups rights in SharePoint, for once the security groups have been correctly configured there is no need to return and fiddle with SharePoint securities if new users get added for example. All that now needs to be done is to add the new user to the appropriate security group. When they are added they automatically receive the appropriate rights in SharePoint simply because they are part of the security group that already has assigned SharePoint rights. Thus, you only ever need to add the security groups to SharePoint once. You should never add individual user rights they should all be done via security groups.

To do this with Office 365 you’ll need to login to the administration portal.

Then select the Security Groups from the menu on the left hand side under the Management heading. This will display any existing security groups.

To create a new security group select the New link.

You’ll then be asked to provide a name and description for the security group. My advice, when it comes to specific SharePoint Security groups is to always start them in the same way. That way they will appear together in a list. Here I have chosen to create the security group SP-Accounts-RO.

Once you have created the group you need to add users to the group. You can return later and edit this if you need to. To add users simply place a check in the box to the left of their name and press the Add link.

 

When complete you should see the security group listed. Remember what name you used.

If you visit your SharePoint site and select Site Actions then Site Settings from the top left.

Now select Site Permissions in the top left under the Users and Permissions heading.

By default SharePoint securities inherit. This means areas have the same rights as the area directly above them in the hierarchy. To create unique rights you’ll need to select the Stop Inheriting Permission button. Press OK to proceed past the warning confirmation dialog you receive.

You should now see that you can select existing groups and users and remove them if desired.

To add the security group just created press the Grant Permissions button.

In the dialog that appears enter the security group name into the Select Users area at the top (here SP-Accounts-RO).

In the Grant Permissions area you can elect to give this user or group direct permission or make them part of an existing SharePoint Group. In this case we’ll elect to make the newly created security group part of the existing SharePoint group, Team Site Visitor, which has Read permissions to the site. Remember, adding something to a pre-existing group will provide that user or group access to everything the group has access to the site. Thus, by adding the newly created security group to the SharePoint Team Site Visitors group every user in the security group will effectively have read permissions to every part of the site, not just the one being edited here. If you don’t want that then only give the user or group direct permissions (i.e. the second option above).

Once complete you should now see the name of the newly created security group appear in SharePoint as shown above. In this case, since we made it a member of Team Site Visitors group in SharePoint that is where it appears.

SharePoint security is easy if you map it out before and implement it using this best practice. In my opinion, no user should be granted direct access to a SharePoint site, they should be part of a security group and that security group is assigned rights in SharePoint.Configuring things this way is gong to reduce confusion and make it less likely you’ll assign the wrong rights, which is easy to do as securities become more complex.

Remember, distribution groups are typically used so lots of users can receive e-mail sent to a single e-mail address. The primary purpose of a security group is to assign permissions to a large group of users instead of assigning permissions to individual users one at a time. If you’re a Microsoft Online e-mail organization, use security groups if you need to assign users permissions to resources in other hosted online services such as Microsoft SharePoint Online.