OneDrive - office365 - Potential Problems - your thoughts....?

[petben]

Here’s a scenario if you use OneDrive with Office365:

 

1. A student logs into OneDrive as someone else (or finds a computer left logged in)

2. They create a OneDrive folder called ‘F*** Off’, or something racist, or bullying related, and then share it to the EVERYONE group.

3. Every staff and student receives an email telling them the folder ‘’F*** Off’ has been shared with them.

4. The folder instantly appears in every users ‘Shared with me’ folder (there is no ‘Accept’ option, it just appears)

5. Even if the source folder is deleted it takes ‘up to 2 days’ for OneDrive to remove the folder from the ‘Shared with me’ folders

 

 

Note:

- You (as an admin) can’t disable sharing.

- You can’t retract the emails

- You can’t limit the number of share recipients.

- Users can’t even remove folders that have been shared with them, they only disappear if the source folder is removed.

 

OneDrive is potentially a great resource but surely this could be a massive problem? Is this even fit for school use? Is anyone successfully using OneDrive?

[FN-GM]

You can’t retract the emails

 

You can actually, you can do stuff with powershell to remove the message from all mailboxes

 

As for OneDrive, I can't comment, I haven't dealt with it to much.

[petben]

OK, I didn't know that. Thanks. Having to do that is disaster recovery though, if OneDrive is to come into schools MS need to address the security, a 'prevent sharing folders' or 'limit sharing to n users' is needed.

 

I've raised a support case with MS, see what they say I suppose.

[spc-rocket]

Hiya,

 

Are you using the onedrive for business client? if so you may not want to do that and just use the map drive feature so its a mapped drive like any other. I suppose if they are using the web view of the onedrive then they can do all those things you mentioned.

 

Ash.

[CamelMan]

Is there a difference in substituting "OneDrive" for "email"? Users sends abusive email message as someone else = investigation and discipline action.

 

Yes you have the issue of it taking 2 days to delete the folder - but in email you would have to ask everyone to delete it (or retrieve email if you can). I wouldnt see it as a massive problem - and not one that would put me off using OneDrive (or any other file sharing stuff) as the potential of it happening (at least here) would be small.

[localzuk]

Is there a difference in substituting "OneDrive" for "email"? Users sends abusive email message as someone else = investigation and discipline action.

 

Yes you have the issue of it taking 2 days to delete the folder - but in email you would have to ask everyone to delete it (or retrieve email if you can). I wouldnt see it as a massive problem - and not one that would put me off using OneDrive (or any other file sharing stuff) as the potential of it happening (at least here) would be small.

 

Indeed. This is a management issue, not a technological issue. A while back, we had a shared drive where pupils could share work. A pupil decided to create folders all over the drive with unsavoury language. Yes, there was an issue from our side, but the result of it all was the kid was suitable reprimanded for it. It never happened again.

[sted]

Hiya,

 

Are you using the onedrive for business client? if so you may not want to do that and just use the map drive feature so its a mapped drive like any other. I suppose if they are using the web view of the onedrive then they can do all those things you mentioned.

 

Ash.

 

how i cant see a way of mapping onedrive for business as a mapped drive

[petben]

spc-rocket - They log into office365 outlook.office365.com, then click the OneDrive menu. It is similar to email yes but there are email recipient and group limits so you cant send a message to everyone.

 

I am surprised that MS are encouraging the use of 365 in schools, to millions of students, and they cant put some protection in place

[Michael]

I'm having similar problems. OneDrive for Business cannot be mapped and you can't connect to it via a UNC path either - only physical volumes.

 

If someone has a working solution to this, please let us know!

[Michael]

I've tried following this guide which doesn't work on Win 7, yet if I copy/paste the URL into IE it does work. Any ideas?

[sted]

I've tried following this guide which doesn't work on Win 7, yet if I copy/paste the URL into IE it does work. Any ideas?

 

just been trying on a win 8.1 office 2013vm (will try a 7 one in a moment) and i have onedrive mapped as a "network location" rather than a drive "o:" just rebooting to see if it holds and that guide looks about right BUT the you past the url (and need to modify what ie has in the address bar a bit) in a slightly different place

[Michael]

Could you give me an example of a URL I need to modify?

[sted]

Could you give me an example of a URL I need to modify?

 

let me just see if its repeatable or i lucked out

[sted]

ok log into office 365 on a pc (tick the keep me signed in box)

go to onedrive

add onedrive to the trusted sites list

copy the address from the address bar to a notepad window (just makes it easier to deal with editing it)

paste the url in it should look like this (obviously ive changed names etc)

https://yourschool-mysharepoint.com/personal/first_surname_yourschool_org/documents/forms/all.aspx

chop off the end after documents so

https://yourschool-mysharepoint.com/personal/first_surname_yourschool_org/documents

open up explorer and go to computer (so you see local/mapped drives in the main pane)

right click add a network location, click next, select choose a custom network location click next

paste your modified url click next

 

that worked on my 8.1vm dosent seem to be working on a win7 one just creating a new user on my win8.1 vm but its doing the preparing your apps bit so it could be a few mins

 

edit

yes repeatable on an 8.1vm with office 2013 installed im just installing office 2013 on my 7vm to see if that helps

Edited May 14, 2015 by sted

[Michael]

My URL already ends in Documents, so I didn't need to change anything. Trying the network location still doesn't work on Win 7, yet I am definitely signed in via IE.

[sted]

My URL already ends in Documents, so I didn't need to change anything. Trying the network location still doesn't work on Win 7, yet I am definitely signed in via IE.

 

nope i cant get it working on 7 works fine on 8.1 though i presume its missing something to make sense of the reply it gets when it tries to connect

[MrFrostmaul]

Also for sharing their coursework between students and other work don't want. A feature where we can say who can share such as teachers to student would be good.