How can specific users be exempted from a tenant-scoped Microsoft 365 Apps Policy?
Hello, I am looking for guidance regarding Microsoft 365 Apps Cloud Policy Service behavior and policy precedence. Current configuration: In Microsoft 365 Apps Admin Center → Policy Management (config.office.com), we have the following policies: Policy 1 Name: Shorten Meeting Global Scope: Tenant Priority: 0 Configured settings: Shorten appointments and meetings = Enabled Reduce the end time of short appointments and meetings = 5 minutes Reduce the end time of long appointments and meetings = 10 minutes Policy 2 Name: Test Scope: User (Security Group) Priority: 1 Assigned only to a dedicated test group Relevant settings configured as Not Configured Observed client behavior: On corporate-managed devices, affected users receive the following registry values: HKCU\Software\Policies\Microsoft\Cloud\Office\16.0\Outlook\Options\Calendar shortenevents = End_Early endearlyshort = 5 endearlylong = 10 The Outlook option: File > Options > Calendar > Shorten appointments and meetings is greyed out. Additional validation: Using the same Microsoft 365 account on an external non-corporate device: The above registry path is not present. The Outlook option is editable. Testing performed: A user-scoped Cloud Policy was created and assigned to a dedicated security group. For the "Shorten appointments and meetings" setting, only the following options are available: Enabled Not Configured There is no Disabled option. but the Tenant policy continued to apply and the Outlook option remained locked. Questions Is there a supported way to exempt specific users from a tenant-scoped Microsoft 365 Apps Cloud Policy when the setting only supports "Enabled" and "Not Configured" and does not provide a "Disabled" option? Does Not Configured in a User-scoped policy allow evaluation to continue to the lower-priority Tenant policy? If policy precedence is changed so that: Test Policy = Priority 0 Tenant Policy = Priority 1 would the User policy potentially suppress the Tenant setting? Is there a supported way in Microsoft 365 Apps Cloud Policy Service to provide exceptions for specific users while keeping the Tenant policy as the organizational default? Has anyone successfully implemented an exclusion or override scenario for the "Shorten appointments and meetings" setting? Any guidance or documentation references would be greatly appreciated. Thank you.New add-in inventory report for Configuration Manager
Today a new report was released to the GitHub community site that allows you to collect and view an inventory of the Office Add-ins that are in use by the clients that you manage with System Center Configuration Manager (2012 R2 or later). This report gathers the inventory of each Office add-in that is installed as well as the device that has it installed and the status (enabled, disabled) allowing you to determine which add-ins are in use as well as the impact based on the number of installations. This report also provides a link to Microsoft's Office ProPlus Add-in Readiness report which you can view from http://aka.ms/addinreadiness. To get this new report, download it directly from GitHub at https://github.com/OfficeDev/Office-IT-Pro-Deployment-Scripts/tree/master/Office-ProPlus-Management/Get-OfficeAddins
Microsoft Sway - Restricting Access to Templates
Hi all, We are assessing the usage of Sway for internal project and change communications, and have a concern that those with access to Sway could create content which does not follow internal approved designs and patterns. Are there mechanisms in place to allow us to control which templates the content creator could use as a baseline for their content, whether that involves access to explicitly approved templates only (workflows for approvals??), or restricting access to marketplace or generally available content? TIA Geoff
24 hour format - Onedrive
Good afternoon. My time format in OneDrive, on the regional site is 24 hours. But the file history or file change history in OneDrive is shown in 12 hours. An example If I make a change to a file at 14:00, OneDrive shows 02:00 Here in Spain we use 24 hours as the preferred format and for our company with more than 100 employees it is important to control this well. Can you help me? Regards, Thank you
How to allow B2B users in Microsoft Places workgroups?
Our company recently purchased another company. While we are preparing migrating users from the two legacy tenants to a new, third tenant, we collaborate with each other using Cross Tenant Synch and Cross Tenant Access. I am currently testing out Places, but I am unable to add my team members from the other company to a Workgroup in Places: "1 user(s) couldn't be added, the administrator has disabled adding these user(s) to any workgroup". Any idea how/where I can change this? I am Global Admin.
SSO issues in Word and Excel, but not Outlook
Hi, Strange issue started a month ago at a customer site. They use RDS with Office 365 installed. Historically this has been working fine, then it randomly stopped signing in properly for all users. We can't point it down to anything specific however. Network / User / Settings all look good. What is strange is on first login to Outlook, it says it's done SSO but says unlicensed. A simple restart then would show it licensed. We have managed to work round that issue by saving the license folder \appdata\local\microsoft\office\ to the UPD. So for this, a month ago, new and existing users would just sign in and it worked. Then something changed and users were being asked to sign in every time. So we have made this change to include \appdata\local to the UPD - now users only see this problem once (a month). While not as good as it was a month ago, it is acceptable. However, and this is what I need help with. SSO is NOT working at all from Word / Excel. Open Word Blank Micrsoft Sign In box pops up. You have to type username and hit enter You then have to type your password and hit Sign In That popup then goes away, but at the tope right of Word, it still shows "Sign In". When you go to Account, it still has a Sign in box. BUT... if you now close and reopen word, both of those show the signed in user. The problem here is that this doesn't persist over the UPD, so happens every time the users open Word or Excel. As this is used by a business app to open docs, it's actually breaking the process and we need to fix this. I have been having a look at SSO info, because it feels like something fairly low level has changed with how this works, but can't find anything helpful, hence posting here after about a month of searching and trying things. It's not very helpful when you have MS links like: How to use Remote Connectivity Analyzer to troubleshoot single sign-on issues for Microsoft 365, Azure, or Intune https://learn.microsoft.com/en-us/microsoft-365/troubleshoot/active-directory/single-sign-on-issues How to run Remote Connectivity Analyzer to test SSO authentication To run Remote Connectivity Analyzer to test SSO authentication, follow these steps: Open a web browser, and then browse to https://www.testconnectivity.microsoft.com/tests/SingleSignOn/input. However, that page just hangs with LOADING written on it. Then on the change notes for this page we see that it was removed in 2022! Version 4.0.15 (October 2022) Removed the Single Sign-on Test now that basic authentication in Exchange Online is being disabled. Quick note on the setup. AD is synced to Entra using Entra Connect (Password Hash Sync + SSO enabled), latest version. SSO URLs are added to Internet trusted sites as per setup instructions. Network has been tested and all URLS accessible and working for the user. User is on RDS on fully updated Server 2016 and is on the latest Office 365 app updates. So I guess my first question is: 1) Does SSO still work for Word and Excel? Is it a realistic expectation that the user will sign in to the PC and then Word and Excel will automatically sign in for the user (proper seamless single sign on) like it was doing only a month or so ago? 2) What can I do to test and troubleshoot this if it should be working? I have been trying for a month, so I have already tried a lot of things. But maybe I am missing some tests? Any info to help get this working again (or that it's no longer possible and we missed that instruction from MS) would be ideal. Thanks in advanceCan we configure filter for me in Office Online Server On-premise(Sharepoint)
We are using SharePoint Server 2019 along with Office Online Server (On-premise). Multiple users work on the same worksheet simultaneously. However, when one user applies a filter on sheet1, it affects all the users instead of being user- specific. Is there any workaround to make the filter apply only for individual users?
Mac Legacy Outlook - Emails moves to Draft folder
Hi All, Has anyone observed/faced an issue with the Legacy version of Outlook for MAC? When sending an email, it gets moved to the Draft folder with the Error "HTTP error. Access to the resource is forbidden. Mail could not be sent. The message has been moved to your Drafts folder.” But when you go to the Draft folder and resend it, it goes or even switches to a new outlook works perfectly fine.
