Cloud Services Thread, Office 365 lockdown in Technical; Morning,
just curious if anyone locks office 365 down to limit what the kiddies can do. I've had a look ...
6th February 2014, 10:40 AM #1
Office 365 lockdown
just curious if anyone locks office 365 down to limit what the kiddies can do. I've had a look round and you can do some stuff but its quite open. Looking at stuff like stopping them doing blogs or disabling sites (think I have solved that one). Thinks like removing the newsfeed and sites at the top (did find a way to do this but it didn't work). Also them messing with their profile information. I know its built on SharePoint but really we just want SkyDrive and office 365, no interest in sites just yet.
Also, where is the link for downloading the software for the students. I have found it once and installed it but I can't find it again.
6th February 2014, 10:52 AM #2
I've restricted out users quite considerably via the Exchange User Roles (Found in the permissions menu)
I created a new Assignment policy for Pupils that has none of the values ticked.
I also created a Outlook Web App Policy to restrict the communication & profile settings.
6th February 2014, 10:57 AM #3
When specifying the licensing, just by ticking Exchange and nothing else will hide all the tabs you talk of. At the same time (optionally), you can enable these to all staff, or certain members of staff. Office 365 is quite flexible like this
6th February 2014, 11:05 AM #4
I don't use exchange, its just the Skydrive we want.
10th February 2014, 04:35 PM #5
You can prevent pretty much all profile information using Manage Policies under the user profile admin pages. We had some users who had already changed their display photos so we used
on our student mail policies to hide them and prevent them being changed. We disabled use of my sites for all students by Managing profile service permissions. I'm yet to find a good way to disable blog features, my sites and walls but leave skydrive. I don't think its currently possible because of its close integrated with my sites
Set-OwaMailboxPolicy-DefaultMailboxPlan -DisplayPhotosEnabled $false -SetPhotoEnabled $false
Last edited by bondbill2k2; 10th February 2014 at 04:37 PM.
Thanks to bondbill2k2 from:
sonofsanta (11th February 2014)
10th February 2014, 06:30 PM #6
How do you apply that to a particular group of users, for example your students?
Originally Posted by bondbill2k2
10th February 2014, 06:33 PM #7
With the policies we couldn't but I bet you could with powershell, the photo settings obviously can be done by mailbox policy so we have staff and students ones. Profile service permissions are done by groups too
10th February 2014, 06:52 PM #8
Sorry, not sure I explained myself properly. Powershell newbie. With the code you have given above, how would that be tailored to apply to just staff? Is it just a case of changing Set-OwaMailboxPolicy-DefaultMailboxPlan to match the name of the OWA policy you have created for staff? For example Set-OwaMailboxPolicy-Staff if the OWA policy is called staff?
Also where are the profile service permissions and what exactly does that stop?
10th February 2014, 07:04 PM #9
Not sure how well that will work. Skydrive Pro is the user's SharePoint MySite Document Library. You might be able to lock down what they can do in sharepoint but you can't stop them from having a sharepoint site while letting them have Skydrive Pro.
Originally Posted by Simcfc73
11th February 2014, 08:45 AM #10
Originally Posted by Edu-IT
Yep just change it e.g.
to disable photo uploading and displaying for all members of the staff OWA policy. profile service permissions are found under the sharepoint admin center user profiles page then select manage user permissions. You can then allow or deny permissions to Create Personal Site (required for personal storage, newsfeed, and followed content) Follow People and Edit Profile , Use Tags and Notes. The profile policies page allows you to disable individual fields on their profile such as phone number, full name and all the other fields found on the edit profile page.
Set-OwaMailboxPolicy staff -DisplayPhotosEnabled $false -SetPhotoEnabled $false
11th February 2014, 03:29 PM #11
It's worth noting that Follow People and Edit Profile has no effect if the create personal site is allowed.
By Arthur in forum Downloads
Last Post: 5th February 2012, 01:32 PM
By steve in forum Cloud Services
Last Post: 18th August 2011, 07:35 PM
By klop in forum General Chat
Last Post: 9th May 2011, 03:54 PM
By EduTech in forum General Chat
Last Post: 21st April 2011, 09:40 AM
By DaveP in forum Cloud Services
Last Post: 20th October 2010, 09:35 AM
Users Browsing this Thread
There are currently 1 users browsing this thread. (0 members and 1 guests)