Announcement: New OneDrive Admin Center Preview

[Stephen Rose]

Over the past year, OneDrive has evolved at a rapid pace introducing new features for end users and IT, across sync, web, and mobile. As the number of users and usage continues to grow, our customers have asked for an easier way to administer their company OneDrive settings and policies. Today, we’re excited to announce the rollout of the OneDrive admin center preview to First Release customers and we want to hear your feedback.

Once deployed to your tenant, all tenant and SharePoint admins will have permissions to access the OneDrive admin center preview at https://admin.onedrive.com.

Key features by section include:

1. Home: This is the dashboard for the admin center and will soon show recent Office 365 Message Center posts and usage reporting related to OneDrive for Business.
2. Sharing: This section helps admins gain control over how and with whom your users are sharing information. This includes controlling the use of external sharing and anonymous links, as well as limiting which external domains users can share with.
3. Sync: Admins can block syncing of specific file types and deny syncing to non-domain joined PCs.
4. Storage: This section allows admins to easily set default storage limits and document retention durations.
5. Device Access: This gives admins control over how and from where a user can access their files. This includes allow/deny access from personal devices or specific networks as well as rich Mobile Application Management Intune policies for iOS and Android.
6. Compliance: Admins can find quick links to the Office 365 Security and Compliance Center for key scenarios like auditing, data loss prevention, retention, and eDiscovery.

Please have a look at the preview and provide us your feedback and comments below. Our plan is to begin the generally available rollout later next month and subsequently add a link from the Office 365 admin center.

Thank you!

Stephen Rose

Director, OneDrive Product Marketing

[#2]

Thanks for this :-)...I have already access to the new ODB Admin Center, but the shortcut is not shown yet in the Office 365 admin portal.

[#3]

This is pretty great, bravo!

[#4]

@Stephen Rose I think it's worth sharing this on Office Blogs as it's worth shouting out! I'd like to see this as a dedicated tile in the app launcher too so I can find it easily. Well done, super useful!

[#5]

IMHO this should appear in the App Launcher in the same way we don't have in the App Launcher tiles for EXO, SPO, S4B Admin, Azure AD, etc

[#6]

Thanks Juan. It may take a day or so. If it's doesn't pop up by Sunday, let me know.

[#7]

Thanks Brent! We are super excited to bring this to market.

[#8]

Agreed. We will soon but we wanted to make sure we got this to you folks as quickly as possible first 🙂

[#9]

When I go in to limit which domains can sync it asks "Enter each domain as a GUID on a new line."

Where am I to find my domain's GUID?

[#10 · Accepted solution]

Hi Cary - here is TechNet article on how to enumerate domain guids.
https://technet.microsoft.com/en-us/library/dn938435.aspx

[#11]

Doesn't work.

Tried using Administrative Windows Azure Active Directory Module for Windows Powershell. Connected to MSOL and the command Get-AdForest is not recognized.

[#12]

Hi Cary -

In the article above we mention the solution when encountering this issue - have you tried this?

If the following error message is displayed: "The term [Get-ADForest]' is not recognized as the name of a cmdlet, function, script file, or operable program.", you might not have the Active Directory module loaded that contains the Active Directory cmdlets. To resolve this error message, use the Import-Module ActiveDirectory command in Windows PowerShell window or open ActiveDirectory Module for Windows Powershell.

[#13]

Finally got it to work.

[#14]

Looks great, thank you.  Is there an upper limit on the document retention period in days under the Storage section?

Also, if a SPO site collection has already been created with external sharing DISABLED in the SPO Admin Center, is that originsl setting honored, or does the default under the new Sharing section for SharePoint sites override the previous value for external sharing?

Tim

[#15]

Good start but a transfer ownership feature would be nice to easily transfer files for users leaving and organization. Posted this same comment on office365.uservoice.com

[#16]

Few things that are missing IMO:

1) Controls for company-shared links (or simply rename the "sharing" section to "External sharing")

2) Didnt see the RequireAcceptingAccountMatchInvitedAccount exposed, or the BCC for sharing options. Same goes for all other missing settings we have compared to Set-SPOTenant

3) Ability to set default type of sharing to read-only link (or Edit for those that prefer it)

4) More control (custom entry) for the link expiration setttings

5) IP range restrictions should be visible under Sharing as well, or at least make sure that people understand they dont only apply to mobile devices.

[#17]

Here are eleven OneDrive settings are not yet available in the OneDrive Admin Center (use the SharePoint Admin Center to manage these OneDrive settings)
•External users must accept sharing invites using the same account that the invites were sent to
•custom link expiration dates
•Configuring the OneDrive experience (New or Classic)
•Controlling whether all users or only specific users will get OneDrive sites created when a SharePoint license is assigned
•Notifications (external sharing, or mobile push)
•Show/Hide OneDrive Button
•Script Setting that controls whether or not the ‘Copy to SharePoint’ button will appear in OneDrive
•Ability to enable/disable IRM for OneDrive Globally
•Ability to enable/disable IRM for individual OneDrive Sites
•My Site Cleanup Access Delegation
•My Site Cleanup Secondary Owner
•My Site Secondary Admin
•The following OneDrive settings are still only available in PowerShell and have not yet been surfaced in the SharePoint or OneDrive web admin interfaces:
•Get-SPOTenant | ft ProvisionSharedWithEveryoneFolder
•Get-SPOTenant | ft ShowEveryoneExceptExternalUsersClaim
•Get-SPOTenant | ft ShowEveryoneClaim
•Get-SPOTenant | ft ShowAllUsersClaim
•Get-SPOTenantSyncClientRestriction | ft OptOutOfGrooveBlock
•Get-SPOTenantSyncClientRestriction | ft OptOutOfGrooveSoftBlock
•Get-SPOExternalUser

[#18]

For the 'Days to retain files in OneDrive after a user account is marked for deletion' setting defaulting to 30 days, I believe it can be increased all the way up to 3650 days.

Souce 1 & 2 - (OrphanedPersonalSitesRetentionPeriod) 

[#19]

I just set mine to 3650, so you are correct

[#20]

Ah well, someone broke it: