Office365 & Non Employees / Cover Staff

[PotNoodleTech]

Hi Peeps.

 

How do you deal with temporary cover staff whom are not school employees having access to office365?

 

My main concern is that a) they can access their account outside of school hours and b) with the school domain name etc, they "look" as if they are employees of the school, even though they are not & can send external emails to anyone purporting to be from the school?

 

I've trawled the web for ways of disabling accounts out of hours, but can't find anything applicable as we do not use AD Federated Services so can't use AD logon hours.

 

It would be ideal if we could make it so just this small subset can only log on from within school IP range but I can't find a way to do that either!

 

Any ideas? Or am I just being oversensitive RE: the risks?

 

Cheers

 

A.

[sted]

you could at the very least force a signiture on emails to the effect they are temporary staff. You could probably disable / enable the account via a powershell script outside hours but thata a bit extreme. You can also set emails to need aproval before sending so i did it on a test account a teacher needed to read and approve any email id sent before the recipient even knew about it

[Steve21]

Can't you setup mail delivery restriction group on their accounts so they can only send it internally rather than externally?

 

Steve

[sted]

Can't you setup mail delivery restriction group on their accounts so they can only send it internally rather than externally?

 

Steve

 

it can be done yes you can even specify external people who they can contact/who can contact them

 

just been looking through you could disable mobile/web access so they have to use the outlook pc client i cant see that many people setting that up outiside school

[sted]

id imagine logon hours has to be there somewhere because i believe french law requires employers not to contact employees once theyve left woprk (dont know the specifics and im not 100% sure if this is current law or a proposed one but i do remember seeing it somewhere)

[Ecalpemos2000]

That is the law in France, employers are not allowed to contact staff outside their working hours or indeed send any type if generic for info emails etc. The only thing they can do is send snail mail.

I have to say, it's great that after 4pm all is quite...

[witch]

Can't you setup mail delivery restriction group on their accounts so they can only send it internally rather than externally?

 

Steve

 

This. I have also set the cover staff account to be able to see the onedrive with the cover folder in it but not the team site with school info etc