Finding out which Azure AD accounts have licenses (service plans) for different applications isn’t difficult. You can do it with either PowerShell or the Microsoft Graph API. This article explains how to use PowerShell (and the equivalent Graph API call) to find accounts which have a certain license (service plan) enabled or disabled. Once you know how to navigate license data in Azure AD accounts, you can take the code and adapt it for different purposes.
A new control allows organizers of Teams meetings to disable videos for attendees before or during calls. Organizers and presenters can also selectively enable video for specific attendees. It’s probable that this feature will be most interesting to those who want to run webinars through Teams meetings, but other use cases exist too… like when someone turns up with an objectionable background image!
Office 365 Cloud App Security (OCAS) is very good at identifying potential problems for tenant administrators to investigate. But don’t think that it’s always right. Humans are often better at resolving issues than computers are, simply because we can use our wider knowledge of how applications work and the Office 365 datacenter network to understand what might be behind an alert. Humans might be slower than computers, but when it comes to resolving OCAS alerts, we’re always better.
An update to Microsoft 365 apps for enterprise, aka Office Pro Plus, means that Word, Excel, and PowerPoint now suggest files which users might want to open. Although the traditional Most Recently Used (MRU) list isn’t being replaced, the set of suggested files is device independent and based on other activity than just simple file opens.
Azure B2B collaboration is used by Microsoft 365 Groups-based apps like Teams, Planner, and Yammer to create new guest accounts. You can update settings in the Azure AD portal to stop new accounts from specific domains or restrict guests to a list of known domains. But before you go ahead and update the settings, it’s a good idea to know where existing guest accounts come from. It’s easy to create a report with PowerShell. The next step might be to remove guests from offending domains.
The May 2021 update for the Office 365 for IT Pros (2021 edition) eBook contains changes to 20 of the 24 chapters. The changes cover many topics from Microsoft’s FY21 Q3 results to new sensitivity labels settings for Outlook. Now spanning over 1,300 pages, Office 365 for IT Pros is packed full of practical and most importantly, up-to-date knowledge and guidance about Office 365, Exchange Online, SharePoint Online, OneDrive for Business, Teams, Planner, Azure AD, PowerShell, the Microsoft Graph, and many other topics.
In their FY21 Q3 results, Microsoft announced that Teams now boasts 145 million daily active users. That’s a growth of 30 million over the last six months. Office 365 now has nearly 300 million paid seats. A paid seat is different to an active user, but Microsoft loves to mix up its data so that people believe what Microsoft wants them to think. In any case, the numbers are impressive.
Microsoft introduced a new organization setting for Office 365 tenants to have Outlook shorten meetings automatically. The idea is to create a break between meetings to give people time to decompress and prepare for their next call. It all sounds good and it makes sense to build buffers into your calendar during busy days. The problem is that other people might come late to a meeting, start it early (without you), or prolong it into your carefully scheduled buffer. Technology can help humans do the right thing, but in this case it’s strictly advisory.
The Teams usage data reported in the Microsoft 365 admin center can now be obfuscated. Teams is the last workload to support this facility. It’s all very well to anonymize, deidentify, or obfuscate user data to protect individual privacy and it’s appropriate to do so in the Microsoft 365 admin center where people with several roles can access the data, but having a single on/off switch for data obfuscation for the Microsoft Graph Reports API is a real pain.
Given the amount of change inside Office 365, it can be hard to test everything before new software appears in production. Which is why you should have a test or development Office 365 tenant. You can check out new features in safety, or run code downloaded from the internet like PowerShell scripts or new versions of PowerShell modules. All in all, it’s a great idea.
Organizations can choose to control updates of user photos by policy in their Office 365 tenants or allow users to go ahead and use any image they like. In this article, we explore the value of having a user photo for every Office 365 account (and Teams and Groups too) and the choices organizations must make when they decide whether to control user-driven updates.
Supporters of the Bing search engine will be delighted that Microsoft 365 can link Azure AD accounts to to personal accounts to accrue Microsoft Rewards. A tenant org-wide setting is available to control the feature. Whether this is enough to convince organizations and individual users to switch allegiance to Bing from another search engine is debatable.
Teams meetings include a neat Private Preview feature to allow users to see what their video feed will look like if they enable their camera. All good, except that a strange blog post feels that user privacy might be compromised. In my opinion, that view is a load of rubbish. Private Preview is a very worthwhile feature and a little training can make sure that no one is ever surprised by their video geed appearing unexpectedly in a Teams meeting.
Teams Live Events now support anonymous external presenters, defined as people who don’t have Azure AD or MSA accounts. It’s a useful change because many large public meetings (the natural ground for Live Events) involve external presenters brought in because of their expertise in the meeting topic. The update is rolling out in April 2021.
The April 2021 update for the Office 365 for IT Pros eBook is available for download by the book’s subscribers. Every chapter received updates in April, making this month’s update the broadest revision we have ever delivered. It all underlines the amount of change which occurs within Office 365 and why a book that’s republished monthly is so valuable.
Every Microsoft 365 tenant has a tenant identifier. Sometimes you need to know what the identifier is, so here are several options to find it from PowerShell to the Azure AD portal to an external service. Tenant identifiers are public and need to be, otherwise apps wouldn’t be able to find the data they want.
Now deployed to Office 365 tenants, large Teams meetings can support up to 20,000 view-only attendees, if an organization chooses to update its Teams meeting policies. Interestingly, this is a feature which Microsoft originally planned to license under its Teams advanced communication add-on, but the growth of large meetings in organizations might have forced their hand to bring the feature to mainline Teams.
The March 2021 update for the Office 365 for IT Pros eBook is now available. Office 365 for IT Pros is the only book updated monthly. which covers Microsoft’s cloud office system. This update covers 23 of the 24 chapters and is packed full of new information and insights covering anything from Teams to Stream to Exchange Online and SharePoint Online.
The Office 365 audit log is packed full of information about what happens inside workloads. New events show up all the time. The question is how to understand what actions these events relate to. We outline a simple procedure to discover the presence of new audit events and dive into the investigation of an event called Consent to application, which is pretty important in the context of recent high-profile attacks.
The February 2021 update for the Office 365 for IT Pros eBook is now available for subscribers to download. Office 365 for IT Pros is the only book with monthly updates covering the Office components of the Microsoft 365 ecosystem. Subscribers to the 2021 edition can now download updates PDF and EPUB files from Gumroad.com.
Microsoft released their FY21 Q2 results on Tuesday. Buried in the details were several nuggets relating to Office 365.. Here are the interesting bits including some detail on the penetration of Teams into large organizations and a new number for Azure AD users.
Teams Data Loss Prevention (DLP) policies help to stop users sharing confidential information through chats and channel conversations. A recent update means that accounts to be included or excluded in DLP policies can be specified using distribution lists or mail-enabled security groups. While this doesn’t sound very exciting, it is if you need to deploy DLP policies to targeted sets of Teams users.
Feb 24 2021 Update: The picker used for OneDrive for Business accounts will support distribution lists and security groups in March.
Need a PowerShell script to do something with Office 365? You might find a script or at least an idea – in the Office 365 for IT Pros GitHub Repository. We have created over 80 scripts as examples and demonstrations of how to get stuff done in an Office 365 tenant with PowerShell. You’re welcome to use anything in the repository and especially welcome to fix our bugs.
All services suffer outages or incidents. The Service Communications API allow Office 365 tenants to retrieve information about incidents programmatically and report details in whatever way they want. In this post, we show how to use PowerShell to fetch service messages with the API and filter for recent incidents. After that, it’s just a matter of presenting the details.
The January 2021 update is available for Office 365 for IT Pros, the only eBook about Microsoft’s cloud Office service that’s updated monthly. Twenty-one of the 24 content chapters are updated as change keeps on happening in Exchange Online, SharePoint Online, Teams, Planner, Stream, Azure AD, and more.
It’s easy to create a custom theme for the Office 365 browser apps (except Teams, which does its own thing). All you need is a corporate logo, some colors, and perhaps a sense of how colors go together. You can also block users from selecting from the default set of themes that come along with Office 365, an action that might just remove some light from some peoples’ lives.
Microsoft is changing the default setting for guest access to Teams from Off to On. This won’t affect tenants already using Teams, but it’s a good opportunity to review how guest access is used in tenants and consider whether existing guest accounts are needed or can be removed. This post offers some ideas about using policies to control guests and how to check what these accounts are used for.
The data used for Microsoft 365 usage reports comes from the Microsoft Graph. You can anonymize the data to replace references to user, group, and site names with system-generated values to protect user privacy. This works, but it reduces the usefulness of the reports by a large degree, so you should be prepared to switch to show full user data sometimes.
Many Office 365 features depend on accurate user account data in Azure AD. Here’s how to use PowerShell to track down accounts with missing properties. Once you know which accounts need to be updated, it’s easy to insert the missing properties. Boring, but easy…
When you use an Office 365 content search to find items, the results from Exchange Online might include some encrypted attachments. A change means that the attachments can now be decrypted to make it easier for investigators to review the information. It’s a small but important change, just like the update to Edge which stops ClickOnce programs running unless an Edge setting is enabled. All good, clean, honest fun.
An update to the Teams Windows and Mac clients introduces automatic noise suppression for Teams meetings. You can tune suppression up or down to reflect your environment. The feature works by analyzing the audio feed from the microphone used in a meeting and removing unwanted noise. The more suppression is done, the more resources are used, so this is something to keep an eye on.
Microsoft has made Endpoint DLP generally available. Leveraging Windows 10 workstations and the Edge browser, Endpoint DLP sends signals for evaluation to detect possible violations. The solution requires Microsoft 365 licenses and only supports Windows, so it’s not for every tenant. But those who have Microsoft 365 licenses will find this an attractive solution.
Project Moca is a new Office 365 personal productivity app which doesn’t have a mobile app. It’s hard to be productive if you can’t be when mobile. Which is why To Do allows people to capture thoughts. A workaround of sorts is available through To Do tasks. Whether this is enough for you to switch to Moca is debatable.
Microsoft has updated the Exchange Online outbound spam filter policy to stop automatic forwarding of email from user mailboxes. The change is now effective with the default set to block automatic forwarding. You can create a custom policy and apply it to selected mailboxes and distribution lists if they need to forward email.
Together Mode is a more immersive way to present participants in a Teams meeting. The original theater scene is being augmented with new scenes including boardrooms (suitable for small meetings) and amphitheaters (for large meetings). At the same time, the view used for Teams meeting recordings is changing from 2×2 to 3×3.
Quest has acquired Quadrotech to add to their portfolio of Office 365 applications designed to help organizations get date into the cloud and manage it when it’s there. Recent Quest acquisitions of Metalogix, Binary Tree, and now Quadrotech give it a bunch of technology, notably in the area of tenant-to-tenant migrations.
Unlike email systems, Microsoft Teams doesn’t support user delegation, or assigning the right for someone to act on behafl of someone else. Here’s how to workaround some of the issues involved in helping managers and their assistants work effectively together, including personal chat, channel messages, and scheduling calendar meetings.
The Teams Windows and MacOS desktop clients will soon allow users to add a personal account to the set of Office 365 tenants they connect to. A great deal of excitement ensued after people saw Microsoft 365 roadmap item 68845 and assumed this meant that Teams would support connections with multiple work accounts. The ability to add more than one work account to your Teams profile isn’t available now as the update is to support connectivity to Teams at home (personal), but support for multiple work accounts is coming in the future.
Microsoft is rolling out an update to remove the Everyone Except External Users (EEEU) permission from OneDrive for Business accounts created before August 1. They’re also doing a permissions reset of lists created in those accounts, meaning that some folks might lose access to lists. It’s hard to know how much impact this will have on Office 365 tenants, but it’s probably a good ideas to ask.
Outlook Mobile synchronizes contacts from Exchange Online to iOS. Sometimes errors happen and duplicate contacts result. It’s easy to resolve the problem by forcing a complete resynchronization of contacts to rebuild what’s on the iOS device.