In this session, learn how to manage your Microsoft SharePoint Online (SPO) and Microsoft OneDrive for Business environments in the browser (the SharePoint Online Admin Center) and by using the SharePoint Online Management Shell (a.k.a., Microsoft PowerShell for SPO). We cover numerous scenarios and demos for both seasoned SharePoint admins and new SPO admins.
Here are my session notes:
SharePoint Online Admin 101
Site Collection Provisioning, Service Level Settings, hybrid, PowerShell will be discussed in this session.
Control external sharing
Restrictive on service level, override on site level
So in other words, global SharePoint settings are do not allow sharing with externals, but allow it on specific sites only if you need it. For anonymous sharing, Chris suggests to let the links expire, otherwise its hard to track whats still shared.
You can even create alerts if someone shared content via anonymous links with email notification – or bcc an email account if someone shares something (Powershell):
There are new capabilities to restrict access to data sitting on the Microsoft platform, limit by network, domain join and more – some of them require Azure AD Premium. Need to fiddle with this, a client wanted to block specific clients from sync and access.
Prevent data loss
Multitude of different options here, from stop sync to Azure RMS / IRM – different requirements require different solutions.
Employee termination and retention
As we heard yesterday, files in OneDrive can now be retained for up to 10 years, that does not require a license.
Assign new permissions in the admin portal or forced sign-out (e.g. lost notebook or cell).
Audit events got a major update for SharePoint online and they can be queried with powershell. There are some usescases when this could be come handy for my clients (legal stuff & eDiscovery or people leaving the company).
There is a pretty cool workbook that guides you through core questions: https://blogs.office.com/2015/11/23/announcing-office-365-customer-security-considerations-preview/
Chris has a lot of stuff on his blog: https://blogs.technet.microsoft.com/cbortlik/
Lots of demos (could not catch everything here, go watch the recording!), lots of insights and tips & tricks – I need to dive deeper afterwards.
The shown powershell scripts are super handy, I totally liked the style of the session!