Opening Documents after logging in issue

%3CLINGO-SUB%20id%3D%22lingo-sub-96912%22%20slang%3D%22en-US%22%3EOpening%20Documents%20after%20logging%20in%20issue%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-96912%22%20slang%3D%22en-US%22%3E%3CP%3EI%20have%20deployed%20our%20first%20Surface%20Hub%20device%20in%20my%20office.%20So%20far%20it%20is%20really%20neat.%20I%20had%20a%20few%20hiccups%20getting%20our%20certs%20on%20the%20machine%2C%20but%20finally%20got%20Skype%20signed%20in%20and%20working.%20I%20decided%20to%20sign%20in%20as%20myself%20on%20the%20device%20to%20pull%20up%20my%20calednar%20and%20files%20to%20work%20on%20something.%20When%20I%20tried%20to%20pull%20a%20file%20from%20OneDrive%20it%20says%20%22FILENAME.pptx%20may%20be%20locked%2C%20in%20use%2C%20or%20you%20don't%20have%20sufficient%20permissions%22.%20I%20have%20to%20sign%20into%20ADFS%20about%203%20or%204%20times%20before%20it%20actually%20gets%20me%20to%20where%20PowerPoint%20is%20opening%20up%20the%20file%20then%20errors%20out.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAny%20idea%20what%20would%20cause%20this%3F%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-118609%22%20slang%3D%22en-US%22%3ERe%3A%20Opening%20Documents%20after%20logging%20in%20issue%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-118609%22%20slang%3D%22en-US%22%3EHi%20Paul%3CBR%20%2F%3E%3CBR%20%2F%3EI%20would%20have%20assumed%20so%2C%20we%20certainly%20have%2C%3CBR%20%2F%3E%3CBR%20%2F%3EWindows%2010%20Team%20is%20incredibly%20locked%20down%2C%20and%20does%20not%20have%20a%20user%20accessible%20win32%20environment%20within%20which%20to%20run%20anything%20malicious.%20It%20has%20Windows%20Defender%20built%20in%20too%2C%20and%20you%20can%20monitor%20using%20Operations%20Management%20Suite.%3CBR%20%2F%3E%3CBR%20%2F%3ECheck%20the%20security%20and%20lockdown%20section%20here%20for%20more%20info%3A%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-gb%2Fsurface-hub%2Fdifferences-between-surface-hub-and-windows-10-enterprise%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-gb%2Fsurface-hub%2Fdifferences-between-surface-hub-and-windows-10-enterprise%3C%2FA%3E%3CBR%20%2F%3E%3CBR%20%2F%3EBecause%20we%20have%20it%20on%20our%20LAN%2C%20we%20have%20them%20in%20a%20separate%20VLAN%20and%20log%20all%20incoming%2Foutgoing%20traffic%20at%20the%20switch%20and%20firewalls%2C%20meaning%20IF%20anything%20did%20happen%2C%20we'd%20pick%20up%20on%20it%20almost%20immediately.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-118451%22%20slang%3D%22en-US%22%3ERe%3A%20Opening%20Documents%20after%20logging%20in%20issue%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-118451%22%20slang%3D%22en-US%22%3E%3CP%3Eso%20what%20was%20the%20outcome%20of%20this%3F%26nbsp%3B%20I%20have%20a%20surface%20hub%20too%20with%20the%20same%20problem%20and%20mine%20is%20AzureAD%20connected.%26nbsp%3B%20My%20personal%20one%20drive%20account%20works%20fine%2C%20but%20not%20my%20corporate%20O365%20account.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EDo%20most%20people%20put%20these%20things%20on%20their%20LAN%3F%26nbsp%3B%20I'm%20hesitant%20to%20do%20that%20because%20we%20can't%20put%20any%20monitoring%20or%20anti%20virus%20software%20on%20it.%26nbsp%3B%20I'm%20worried%20it%20could%20get%20hacked%20if%20someone%20visits%20an%20inappropriate%20website.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-107404%22%20slang%3D%22en-US%22%3ERe%3A%20Opening%20Documents%20after%20logging%20in%20issue%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-107404%22%20slang%3D%22en-US%22%3E%3CP%3EOne%20stop%20link%20%3A)%3C%2Fimg%3E%3CA%20href%3D%22https%3A%2F%2Faka.ms%2Fsurfacehubsupport%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Faka.ms%2Fsurfacehubsupport%3C%2FA%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-107382%22%20slang%3D%22en-US%22%3ERe%3A%20Opening%20Documents%20after%20logging%20in%20issue%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-107382%22%20slang%3D%22en-US%22%3EHi%20Jeff%20This%20is%20one%20where%20you%20might%20want%20to%20open%20a%20support%20ticket%20with%20Microsoft%20to%20investigate%20and%20provide%20logs.%20D%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-107368%22%20slang%3D%22en-US%22%3ERe%3A%20Opening%20Documents%20after%20logging%20in%20issue%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-107368%22%20slang%3D%22en-US%22%3EI'm%20AD%20joined%20on%20premise.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-103213%22%20slang%3D%22en-US%22%3ERe%3A%20Opening%20Documents%20after%20logging%20in%20issue%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-103213%22%20slang%3D%22en-US%22%3E%3CP%3EHello%20Jeff%2C%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EMy%20guess%20is%20that%20your%20Surface%20Hub%20is%20Azure%20AD%20Joined%20%3F%3C%2FP%3E%0A%3CP%3EIf%20it%20is%20the%20case%20it%20is%20a%20known%20limitation.%20SSO%20is%20not%20working%20in%20this%20scenario.%20To%20have%20it%20worked%20you%20need%20to%20join%20your%20hub%20to%20an%20AD%20or%20leave%20it%20in%20a%20workgroup.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3ESourceURL%3A%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fsurface-hub%2Ffirst-run-program-surface-hub%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fsurface-hub%2Ffirst-run-program-surface-hub%3C%2FA%3EFirst-run%20program%20(Surface%20Hub)%20%7C%20Microsoft%20Docs%20%3C!--%20%5Bif%20lt%20IE%209%5D%3E%0A%20%20%3Cscript%20src%3D%22https%3A%2F%2Fajax.aspnetcdn.com%2Fajax%2FjQuery%2Fjquery-1.12.4.min.js%22%3E%3C%2Fscript%3E%0A%20%20%3Cscript%20src%3D%22%2F_themes%2Fdocs.theme%2Fmaster%2Fen-us%2F_themes%2Fglobal%2Fjs%2Fpolyfills%2Fall.js%22%3E%3C%2Fscript%3E%0A%20%3C!%5Bendif%5D--%3E%20%3C!--%20%5Bif%20gte%20IE%209%5D%3E%3C!--%3E%20%3C!--%3C!%5Bendif%5D--%3E%3C%2FP%3E%0A%3CDIV%20class%3D%22container%20mainContainer%22%20lang%3D%22en-us%22%20dir%3D%22ltr%22%20data-bi-name%3D%22body%22%3E%0A%3CDIV%20id%3D%22main%22%3E%0A%3CDIV%3E%0A%3CDIV%20class%3D%22content%22%3E%0A%3CUL%20class%3D%22lf-text-block%20lf-block%22%20data-lf-anchor-id%3D%22838f2c2bd4b360b839891ddb4f234f71%3A0%22%3E%0A%3CLI%3E%3CDIV%20class%3D%22IMPORTANT%20alert%22%3E%0A%3CH5%20id%3D%22toc-hId-1841800960%22%20id%3D%22toc-hId-1841800960%22%3EImportant%3C%2FH5%3E%0A%3CP%3EIf%20you%20join%20Surface%20Hub%20to%20Azure%20AD%20during%20first-run%20setup%2C%20single%20sign-on%20(SSO)%20for%20Office%20apps%20will%20not%20work%20properly.%20Users%20will%20have%20to%20sign%20in%20to%20each%20Office%20app%20individually.%3C%2FP%3E%0A%3C%2FDIV%3E%0A%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3C%2FDIV%3E%0A%3C%2FDIV%3E%0A%3C%2FDIV%3E%0A%3C%2FDIV%3E%0A%3CP%3EHTH%3C%2FP%3E%0A%3CP%3EEric%20S.%3C%2FP%3E%3C%2FLINGO-BODY%3E
Contributor

I have deployed our first Surface Hub device in my office. So far it is really neat. I had a few hiccups getting our certs on the machine, but finally got Skype signed in and working. I decided to sign in as myself on the device to pull up my calednar and files to work on something. When I tried to pull a file from OneDrive it says "FILENAME.pptx may be locked, in use, or you don't have sufficient permissions". I have to sign into ADFS about 3 or 4 times before it actually gets me to where PowerPoint is opening up the file then errors out. 

 

Any idea what would cause this? 

6 Replies

Hello Jeff,

 

My guess is that your Surface Hub is Azure AD Joined ?

If it is the case it is a known limitation. SSO is not working in this scenario. To have it worked you need to join your hub to an AD or leave it in a workgroup.

 

 

SourceURL: https://docs.microsoft.com/en-us/surface-hub/first-run-program-surface-hub First-run program (Surface Hub) | Microsoft Docs

  • Important

    If you join Surface Hub to Azure AD during first-run setup, single sign-on (SSO) for Office apps will not work properly. Users will have to sign in to each Office app individually.

HTH

Eric S.

I'm AD joined on premise.
Hi Jeff This is one where you might want to open a support ticket with Microsoft to investigate and provide logs. D

so what was the outcome of this?  I have a surface hub too with the same problem and mine is AzureAD connected.  My personal one drive account works fine, but not my corporate O365 account.

 

Do most people put these things on their LAN?  I'm hesitant to do that because we can't put any monitoring or anti virus software on it.  I'm worried it could get hacked if someone visits an inappropriate website.

 

 

Hi Paul

I would have assumed so, we certainly have,

Windows 10 Team is incredibly locked down, and does not have a user accessible win32 environment within which to run anything malicious. It has Windows Defender built in too, and you can monitor using Operations Management Suite.

Check the security and lockdown section here for more info: https://docs.microsoft.com/en-gb/surface-hub/differences-between-surface-hub-and-windows-10-enterpri...

Because we have it on our LAN, we have them in a separate VLAN and log all incoming/outgoing traffic at the switch and firewalls, meaning IF anything did happen, we'd pick up on it almost immediately.