User Profile
AndrewFrance
Copper Contributor
Joined 6 years ago
User Widgets
Recent Discussions
OneDrive Sync Resctrictions
We're looking to control OneDrive Sync on unmanaged devices, without affecting other apps like Teams. We also want to allow students to continue using the OneDrive sync app, so they need to be excluded. So far we've found that the unmanaged devices conditional access policies that are created from Access Control in SharePoint Admin apply to all apps that access SharePoint Online, including Teams. This also seemed to sign-out our Teams desktop phones, which we did not expect. It also breaks any Teams chat that contains references to linked Files. We may be able to do something by utilising the Intune Registration option in Microsoft Authenticator, which soft joined personal devices, but we need to be careful as we do not want to take control of these. The OneDrive Sync controls in SharePoint Admin only apply to Active Directory Domain joined devices, and we also can't exclude users from that. Microsoft Defender App Control seems to just be for web apps. App enforced restrictions seemed promising, but it looks like we would need to label each and every site one by one, and it's not clear how that would affect Teams either. What we're looking to achieve is to limit the chances of encrypted files on a compromised unmanaged device being uploaded into SharePoint Online. We're happy to take the risk with student data, but staff have more access to sensitive information and so we are looking to protect this specifically. Accessing files directly from the web or from app like Teams, doesn't pose the same threat as OneDrive Sync appears to.Re: Sync Error
MROB83 Hi, I've tested it our side, and it does appear to resolve the issue. I added my Global Admin account into the security group for Office 365 group creation, and I got no errors. Interestingly it does say in Microsoft's documentation that Office 365 Global admins can create Groups via any means, such as the Microsoft 365 admin centre, despite the group restrictions, which is probably why SDS could create the group despite the error. https://docs.microsoft.com/en-gb/microsoft-365/admin/create-groups/manage-creation-of-groups?view=o365-worldwide Many thanks for updating the ticket with this solution. Andrew2.7KViews0likes0CommentsRe: Sync Error
MROB83 Wow well done. That's really interesting. In fact although we are getting the error, the Office 365 groups and Teams are being created successfully. I'm also signed-in as a Global Administrator. However we did just update our policy so that only members of a certain Group could create Office 365 groups, of which I don't think I've added Global Administrators into, as I didn't think they would affected by this. Or at least don't seem to be. I had a great Teams Meeting with SDS support yesterday, and he informed me that as this issue was not causing any problems then it was probably safe to ignore. The value TenantActionable is also False, which should indicate that there's nothing I can change to resolve the error. I will look through that article, and most likely add my admin account to the Group which allowed to create Office 365 groups, and test again.2.7KViews0likes0CommentsSync Error
I keep getting the below sync error. I'm just testing, but the CSV files are very simple so I can't think what could be the problem. Anyone know what this means? Message: Export of the object with id = 37f05531-2739-42b6-a9e8-182e4c14e4e1 and joining property = Section_9999 to the Microsoft Online Directory Service failed. Reason: Message: One or more errors occurred. Web Response: Message: The remote server returned an error: (400) Bad Request. Web Response: Web Response:Solved2.8KViews0likes6CommentsRemove Test Teachers and Students
Hi, To test SDS we've been using a few accounts as teachers and students, but I'd like to cleanup SDS now and remove these accounts from SDS without actually removing them from AzureAD. One of them is my own account, I don't really want to be deleted! I can see the extension attributes on the users using Get-AzureADUserExtension -ObjectId679Views0likes0CommentsClass Notebook Transfer Nightmare
This is the first year we've had teachers leave that need their class notebooks transferred to a new teacher, and now that there is a new online tool for this I thought it was going to be really straight forward. Unfortunately it wasn't. Every single notebook failed. Working with Microsoft Support on this, who have been very helpful, the cause of the issue has been identified to the sections being too large. The limit is 250MB per section. I have been advised to split one of the sections down and retry. There are some fundamental issues with this. First of all I need to log in as that user, and find that section, which is proving tricky in itself. But this only solves it for this one notebook. This teacher has 25 notebooks, and the only way of knowing which section is too large is by sending the failing correlation id for each notebook to Microsoft for them to analyse their logs. I'm very puzzled to the low limit on sections. OneNote has no restrictions that I am aware of regarding sections. However there is a 250MB on embedded files. The users have plenty of OneDrive space, so storage is not an issue. I understand Teams resolves this issue, which is what teachers are slowly moving over to. But there has to be a better resolution to the above issue. The best solution would be to be able to transfer notebooks into a team, and therefore remove the relationship to any one user's OneDrive.907Views0likes0Comments