Students can see sharepoint people/staff?!

[technoguy414]

How do you disable the ability for students to see/search people in sharepoint?

[jemal]

on sharepoint online/O365, I struggled with this a few years ago as there would be staff profiles and showing what documents people had been working on (it would hide docs the students had no permissions to view, but still a bit creepy and wary there could always be some confidential docs that staff could in error have accessible to all). Back then I disabled a feature I think was called delve or graphing, which worked for that issue, but it hindered some other useful search based features. Hopefully there's a better solution now, just describing what I did. I've heard of some places having different O365 tenancies for students and staff, I'm guessing that helps manage those kind of features too.

[ITGURU]

I've come across an even bigger problem - 365 users can sign into Bing, search the directory from there and see users photos

[mavhc]

I've come across an even bigger problem - 365 users can sign into Bing, search the directory from there and see users photos

 

Profile photos of users, or photos users have taken and uploaded?

[ITGURU]

Profile photos of users, or photos users have taken and uploaded?

profile photos of users

[mavhc]

Now they'll know what the people they know from school look like.

[technoguy414]

Yeah this is killing me. I was able to get it following another tutorial from MS so that users cannot see the Global address book. Great. new book for them. Even so, they can still search everyone. What is everyone else doing to combat this? I believe creating another tenant causes another mess with sharepoint etc and trying to add students, and having to deal with that manually.

[2097]

Yeah this is killing me. I was able to get it following another tutorial from MS so that users cannot see the Global address book. Great. new book for them. Even so, they can still search everyone. What is everyone else doing to combat this? I believe creating another tenant causes another mess with sharepoint etc and trying to add students, and having to deal with that manually.

 

Did you manage to solve this ?

 

I basically just want kids/staff to have access to Office and Onedrive . No online exchange. The kids when they login to office365 can see any user account using the search button. Pretty annoying !, Any way around this ?

[Boredguy]

If you don't want them to use Exchange, you just don't assign them the licence for it.

We used the guide from here (https://blogs.msdn.microsoft.com/ukeducloud/2013/04/15/alumni-address-book-policy-in-office-365-education/) to create a Pupils address book that only contains other students and the Teaching staff, and apply that address book policy to their accounts when they are created.

[2097]

If you don't want them to use Exchange, you just don't assign them the licence for it.

We used the guide from here (https://blogs.msdn.microsoft.com/ukeducloud/2013/04/15/alumni-address-book-policy-in-office-365-education/) to create a Pupils address book that only contains other students and the Teaching staff, and apply that address book policy to their accounts when they are created.

 

 

The problem being is we sync them with AD ( and we have them removed from exchange online) , As we have exchange onsite i think its picking up msexchhidefromaddresslists and populating the global address list.

 

I have hidden a staff account using the msexchhidefromaddresslists set to true and it does in indeed disappear.

 

Just wondering if i remove this attribute from the sync ( if possible ) will it remove them all from the global address list.

[2097]

Turns out i could answer my own question. Heres some info for any one wanting to know.

 

You cant remove people from search

 

But ! you can remove certain attributes from syncing to the cloud which is ok for us.

 

In the Synchronization Service i was able to remove some AD attributes such as Firstname and surname ( so only username is displayed ) also unchecked the email from showing as thats not needed atm

 

But ! i did notice i couldn't do this with the current users , I had to remove all users , change attributes and re-add them again.

 

Luckily i haven't allowed any one access yet so all is good