+ Post New Thread
Results 1 to 11 of 11
Cloud Services Thread, Office 365 lockdown in Technical; Morning, just curious if anyone locks office 365 down to limit what the kiddies can do. I've had a look ...
  1. #1

    Join Date
    Nov 2005
    Location
    North
    Posts
    1,817
    Thank Post
    24
    Thanked 91 Times in 71 Posts
    Rep Power
    50

    Office 365 lockdown

    Morning,

    just curious if anyone locks office 365 down to limit what the kiddies can do. I've had a look round and you can do some stuff but its quite open. Looking at stuff like stopping them doing blogs or disabling sites (think I have solved that one). Thinks like removing the newsfeed and sites at the top (did find a way to do this but it didn't work). Also them messing with their profile information. I know its built on SharePoint but really we just want SkyDrive and office 365, no interest in sites just yet.

    Also, where is the link for downloading the software for the students. I have found it once and installed it but I can't find it again.

  2. #2
    Boredguy's Avatar
    Join Date
    Jun 2011
    Location
    Swindon
    Posts
    568
    Thank Post
    3
    Thanked 128 Times in 119 Posts
    Rep Power
    50
    I've restricted out users quite considerably via the Exchange User Roles (Found in the permissions menu)
    I created a new Assignment policy for Pupils that has none of the values ticked.
    I also created a Outlook Web App Policy to restrict the communication & profile settings.

  3. #3

    Michael's Avatar
    Join Date
    Dec 2005
    Location
    Birmingham
    Posts
    9,262
    Thank Post
    242
    Thanked 1,568 Times in 1,250 Posts
    Rep Power
    340
    When specifying the licensing, just by ticking Exchange and nothing else will hide all the tabs you talk of. At the same time (optionally), you can enable these to all staff, or certain members of staff. Office 365 is quite flexible like this

  4. #4

    Join Date
    Nov 2005
    Location
    North
    Posts
    1,817
    Thank Post
    24
    Thanked 91 Times in 71 Posts
    Rep Power
    50
    I don't use exchange, its just the Skydrive we want.

  5. #5
    bondbill2k2's Avatar
    Join Date
    Jan 2011
    Location
    West Midlands
    Posts
    1,013
    Thank Post
    80
    Thanked 66 Times in 51 Posts
    Blog Entries
    2
    Rep Power
    42
    You can prevent pretty much all profile information using Manage Policies under the user profile admin pages. We had some users who had already changed their display photos so we used
    Code:
    Set-OwaMailboxPolicy-DefaultMailboxPlan -DisplayPhotosEnabled $false -SetPhotoEnabled $false
    on our student mail policies to hide them and prevent them being changed. We disabled use of my sites for all students by Managing profile service permissions. I'm yet to find a good way to disable blog features, my sites and walls but leave skydrive. I don't think its currently possible because of its close integrated with my sites
    Last edited by bondbill2k2; 10th February 2014 at 04:37 PM.

  6. Thanks to bondbill2k2 from:

    sonofsanta (11th February 2014)

  7. #6

    Edu-IT's Avatar
    Join Date
    Nov 2007
    Posts
    7,113
    Thank Post
    403
    Thanked 619 Times in 566 Posts
    Rep Power
    180
    Quote Originally Posted by bondbill2k2 View Post
    You can prevent pretty much all profile information using Manage Policies under the user profile admin pages. We had some users who had already changed their display photos so we used
    Code:
    Set-OwaMailboxPolicy-DefaultMailboxPlan -DisplayPhotosEnabled $false -SetPhotoEnabled $false
    on our student mail policies to hide them and prevent them being changed. We disabled use of my sites for all students by Managing profile service permissions. I'm yet to find a good way to disable blog features, my sites and walls but leave skydrive. I don't think its currently possible because of its close integrated with my sites
    How do you apply that to a particular group of users, for example your students?

  8. #7
    bondbill2k2's Avatar
    Join Date
    Jan 2011
    Location
    West Midlands
    Posts
    1,013
    Thank Post
    80
    Thanked 66 Times in 51 Posts
    Blog Entries
    2
    Rep Power
    42
    With the policies we couldn't but I bet you could with powershell, the photo settings obviously can be done by mailbox policy so we have staff and students ones. Profile service permissions are done by groups too

  9. #8

    Edu-IT's Avatar
    Join Date
    Nov 2007
    Posts
    7,113
    Thank Post
    403
    Thanked 619 Times in 566 Posts
    Rep Power
    180
    Sorry, not sure I explained myself properly. Powershell newbie. With the code you have given above, how would that be tailored to apply to just staff? Is it just a case of changing Set-OwaMailboxPolicy-DefaultMailboxPlan to match the name of the OWA policy you have created for staff? For example Set-OwaMailboxPolicy-Staff if the OWA policy is called staff?

    Also where are the profile service permissions and what exactly does that stop?

  10. #9

    Join Date
    Oct 2005
    Location
    hey hey hey, stay outta my shed. STAY OUT OF MY SHED.
    Posts
    1,007
    Thank Post
    238
    Thanked 190 Times in 146 Posts
    Rep Power
    106
    Quote Originally Posted by Simcfc73 View Post
    I know its built on SharePoint but really we just want SkyDrive and office 365, no interest in sites just yet.
    Not sure how well that will work. Skydrive Pro is the user's SharePoint MySite Document Library. You might be able to lock down what they can do in sharepoint but you can't stop them from having a sharepoint site while letting them have Skydrive Pro.

  11. #10
    bondbill2k2's Avatar
    Join Date
    Jan 2011
    Location
    West Midlands
    Posts
    1,013
    Thank Post
    80
    Thanked 66 Times in 51 Posts
    Blog Entries
    2
    Rep Power
    42
    Quote Originally Posted by Edu-IT View Post
    Sorry, not sure I explained myself properly. Powershell newbie. With the code you have given above, how would that be tailored to apply to just staff? Is it just a case of changing Set-OwaMailboxPolicy-DefaultMailboxPlan to match the name of the OWA policy you have created for staff? For example Set-OwaMailboxPolicy-Staff if the OWA policy is called staff?

    Also where are the profile service permissions and what exactly does that stop?

    Yep just change it e.g.
    Set-OwaMailboxPolicy staff -DisplayPhotosEnabled $false -SetPhotoEnabled $false
    to disable photo uploading and displaying for all members of the staff OWA policy. profile service permissions are found under the sharepoint admin center user profiles page then select manage user permissions. You can then allow or deny permissions to Create Personal Site (required for personal storage, newsfeed, and followed content) Follow People and Edit Profile , Use Tags and Notes. The profile policies page allows you to disable individual fields on their profile such as phone number, full name and all the other fields found on the edit profile page.
    permis.png

  12. #11

    Edu-IT's Avatar
    Join Date
    Nov 2007
    Posts
    7,113
    Thank Post
    403
    Thanked 619 Times in 566 Posts
    Rep Power
    180
    It's worth noting that Follow People and Edit Profile has no effect if the create personal site is allowed.

SHARE:
+ Post New Thread

Similar Threads

  1. Replies: 2
    Last Post: 5th February 2012, 01:32 PM
  2. Free Office 365 ebook
    By steve in forum Cloud Services
    Replies: 0
    Last Post: 18th August 2011, 07:35 PM
  3. Office 365 Charges
    By klop in forum General Chat
    Replies: 7
    Last Post: 9th May 2011, 03:54 PM
  4. Microsoft Office 365 Public BETA
    By EduTech in forum General Chat
    Replies: 4
    Last Post: 21st April 2011, 09:40 AM
  5. Replies: 3
    Last Post: 20th October 2010, 09:35 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •