OneDrive: Monitoring & Restricting Usage

[MYK-IT]

Hi,

 

For those who use Microsoft 365 in their school, I am just interested to know what, if anything, you have in place to 'pro-actively' monitor or restrict OneDrive activity by students?

 

For example,

 

- disabling, or restricting students from being able to share their OneDrive content to other students?

- restrict certain file types (I know this can be defined globally, at tenancy level, but can it be achieved at user / group level?)

 

I fully aware of the many Microsoft 365 Admin auditing and search facilities and how these can help identify such activity (normally after the event) etc, but I'm just intrigued what other schools may have in place to manage this? And was this a similar issue of concern before you issued your own students with Microsoft 365 / OneDrive accounts? (e.g. 1TB of unrestricted storage space). And if so, how did you mitigate your concerns? (e.g. Student takes responsibility, AUP and/or implement a 3rd party solution).

 

As you can tell, have my 'legacy hat' on, based on data previously being stored on file servers utilising FRSM, Quota, file screening methodology!

 

 

Thanks,

Edited January 10, 2022 by MYK-IT

[MYK-IT]

Based on the amount of views 'vs' feedback, this perhaps seems to correlate with when I asked our IT Provider the same question, as in what other schools do in relation to OneDrive and students (e.g. managing and monitoring of, restricting of etc.)? and their response what that they had not been asked (for) that before (from other schools).

 

I just thought with being a school supplied service, you'd want to ensure it was controlled / monitored accordingly. e.g. against Little Freddie in Y9, uploading a game / big video etc and sharing with numerous other students??

 

I fully appreciate that there are AUP, and students must learn to take responsibility - but equally, just like student emails you'd want some form of monitoring and level of safeguarding.??? Speaking of which, I'd also be interested in what email monitoring services do you use within your school? I'm currently looking at SENSO (as supports MS Teams too), but appreciate there are many others systems available.

 

Many Thanks,

[ChrisSpinkSecurly]

Securly offer full monitoring of Gmail, Google Drive, One Drive and Outlook for keywords and images. No client install needed. Check it out: https://www.securly.com/auditor

[MYK-IT]

Sorry to an old discussion, but this (e.g. monitoring, control of files / sharing within OneDrive) has been brought up again for review / update.

 

Besides utilising the various auditing logs within Microsoft 365 (combined with an AUP) is there still no way of limiting file types and / or who files can be shared with - in respect of student accounts? Similar, to perhaps email control? I fully appreciate how OneDrive, effectively SharePoint, is designed to store and shared data and integrates with TEAMs (e.g. SDS) for classes etc. and the whole M365 eco-system.

 

Ultimately, I am just intrigued how other schools are overseeing OneDrive usage, especially as many migrate away from local storage combined with FRSM controls (e.g. quota management, File Screen) - Or have schools concluded this is a non-issue???

 

Many Thanks,

Edited September 30, 2022 by MYK-IT

[DrCheese]

Or have schools concluded this is a non-issue???

 

Pretty much this. I'm not worried about students bringing in .exe files or unauthorised software as we just run applocker in approved app only mode on our end user devices so they can't run anything we don't approve anyway.