Accessing all Students OneDrives

[MarkBerridge]

Hello everybody, I wonder if anyone can help me.

 

We currently have a bespoke tool written be a clever previous technician that can find a students home folder on the server and open it for any staff to access. Has anyone got any ideas how we could give access to all students OneDrive to all staff to do the same thing? I wonder if Salamander could give access to staff to all students OneDrives and then we have a list of URL's in a spreadsheet corresponding to a child?

 

Has anyone else done similar to this?

 

Thanks in advance

[Ex-MGSTech]

I know Admins in 365 can access anyone's OneDrive's, but the permissions for staff to do so could be "interesting"

[clareq]

Staff simply ask students to share a file or folder with them if they need access to it. That's the benefit of 365, staff only have access to the work they need, rather than having to dredge through all subjects.

[MarkBerridge]

As much as I agree with you, secondary students don't always hand in there work, even coursework that has been completed and unfortunately staff need the access to go digging to retrieve the work.

[Boredguy]

Best way is for students to share folders with their work (or just the file) with the teacher. While the admin centre allows links to be generated to access other people accounts, that is not something that should be done on a regular basis.

If the student shares the file just once with the teacher, they at least have access to it until the student works out how to revoke the permission (or moves it elsewhere).

[psydii]

We have a group that has permissions to 'all' users' OneDrives

 

 

we used ideas described here: https://morgantechspace.com/2018/03/add-secondary-site-administrator-to-all-odfb-sites-powershell.html

 

 

But almost exclusively teachers ask their students to share a folder rather than ever asking for full access. There are issues around safeguarding if staff have arbitrary access to all OneDrive's.

[clareq]

On the rare occasion students fail to hand in work, I will find it and share it with the teacher. I estimate I need to do this maybe twice a year.

[kevin_lane]

I exported all of our pupils one drive links and then used a power shell script to add our teaching staff ad group to all our users one drive site collection (not teaching staff as site collection admin) just on the pupils part Edited February 3, 2022 by kevin_lane

[Primus]

I exported all of our pupils one drive links and then used a power shell script to add our teaching staff ad group to all our users one drive site collection (not teaching staff as site collection admin) just on the pupils part

 

Could you share that script please?

[kevin_lane]

This part of the script below is the group that is sync'd with your on prem ad, you can find this from the azure ad portal and look under the object ID xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx

 

you will need to make sure the first column has the test URL in the cell and then the one drive links underneath

 

it will then loop through all of the exported home drives from the csv file

 

$Group = "C:0t.c|tenant|xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"

$TenantUrl = "https://xxxxxxxxxx-admin.sharepoint.com"

Connect-SPOService -Url $TenantUrl

Import-Csv C:\Users\xxxxx\Desktop\HomeDrives\SharePoint\test.csv |

 

ForEach-Object {

$URL = $_.url

 

Set-SPOUser -Site $URL -LoginName $Group -IsSiteCollectionAdmin $true

Write-Host "Applying Permission on: " $URL

}

 

run this powershell code in a test environment and I take no responsibility for any errors

Edited February 4, 2022 by kevin_lane

[enjay]

Best way is for students to share folders with their work (or just the file) with the teacher.

 

That's what we do, too. Students create a folder for each subject and share it with their teacher (this used to be manual, now it is automated as part of our Cloud Design Box installation).

[jblackburnHWGA]

Sorry to jump on an old post. Thank you for the script it works well.

 

How do you manage user profile creation? DO you just wait for first login use and run scripts afterwards or do you know a way to force the user profile to create first. Pre-provision as it were. It would just be so we can add the permission before start so new users and near intakes

 

EDIT - I got the right wording on Google!

 

This works

 

Request-SPOPersonalSite -UserEmails

 

Edited February 10, 2023 by jblackburnHWGA

[Cazab]

As much as I agree with you, secondary students don't always hand in there work, even coursework that has been completed and unfortunately staff need the access to go digging to retrieve the work.

 

This is very much a behaviour issue, not an IT issue.