Search the Community

We have recently integrated our MIS system to Office365. As part of this, we have updated student school photos into Office365 email profiles. Overall this has been accepted well as both students and teachers are finding it useful for new students and staff, etc. However, the Lead Safeguarding Officer has asked for student images to be removed from emails sent to non-school email addresses. Any idea if this is possible, or will be have to switch off the integration of images altogether? Thanks everyone Angela

Hi, Some of our Class Teams seem to have had the 'Class Materials' read-only folder deleted. So when you go into Files the folder is no longer there. When going in via Sharepoint, I can still access the folder and it's contents in the left hand menu. Any idea how to reinstate the folder into the Files section so Staff/Students can access it again through Teams?

I am using Salamander free. The Office365 class groups are created and the class teacher is added as the owner but no students are being added to the group. Within Teams when the teacher tries to look for the O365 group of course this reports as empty. They can add the students manually. I had been under the impression that The O365 group would be populated with students leaving them to add students to the Team by searching for the O365 group. Found this on the Salamander site From 26th March 2020 – SDS will still create the Office 365 Group and add the teacher and students. However, the Microsoft SDS process will no longer create Teams. Teachers will need to manually create their Class Teams and add Students. These can be done by searching for and selecting the Class Office 365 Group, during the class team setup process. You will not need to add students one by one. Any thoughts? Thanks Ern

Hi All, Firstly, thank you for checking out my query and thank you in advance for any input you may have. I am looking for a little advice if possible regarding Office365 and permitting mobile phones to only be permitted access to Exchange and Teams. We will likely need to at some point enroll them into intune device management at some point, however as they are iOS this will mean factory resetting the devices thus this is not acceptable at present. I would like to allow certain users the ability to add exchange email and teams to their mobile device, blocking access to all other paps, I particularly wish to block access to Sharepoint or onedrive on these mobile devices. I currently have two core conditional access policies which are assigned to all users (with exclusions): 1. Require Compliant Device for ALL Apps. 2. Require MFA for ALL Apps. The mobile users who require email and teams on their mobile device are excluded from the policy (1) requiring compliant device. Is it my understanding that I should now create two new CA policies assigned to the mobile users: 1.CA policy requiring a compliant device for ALL apps with the exception of exchange and teams. This should then block access to anything other than exchange or teams from the mobile devices. 2. CA policy targetting Android & iOS forcing MFA, Approved Apps & App Protection Policy I have an app protection policy for iOS and Android, enfocing a password for apps and blocking copy and paste etc. Does this sound like an acceptable way of securing these mobile devices? Any thoughts greatly appreciated. Thanks MM

Hi, please can I ask what is the recommended way to deal with staff that have left the organization. I currently block the users mailbox however they can still receive emails. I have put an automatic reply, but what do others do? Thanks

Good morning everyone, Just wanted to ask if anyone is using PowerPoint Quickstarter here? I am trying to find evidence that it is available in the UK but with no luck. Thanks in advanced C

Hi, Got a bit a issue which I wanted to get some advice on. First some background information. I work in a school as a IT Tech and in previous years the AD Accounts (as well as email address) have taken the form of first letter of first name and first letter of second name "@ourschool.org.uk". Example if there was a teacher called John Smith his AD account would be [email protected]. I have been asked to recreate all the staff accounts (for a variety of reasons!) in the format of [email protected]. Example John Smith would now be [email protected]. Thats fine as I have created a nice powershell script to recreate the AD Accounts. My question is, is there a way I can migrate their old mailbox (i.e. [email protected]) to the new one (i.e. [email protected]) with some sort of powershell script? Or does someone know of a good third party tool? Let me know if that makes sense. Thanks!

Hi All, I wonder if you can help. We have around 30 SharePoint sites and by default under Policies / Sharing we have this set to "Content can be shared with: Existing Guests". We wish to keep this by default however we now require one single new SharePoint site where we require the sharing policy to be with Anyone. I have created the iste but I am unable to select Share with Anyone in that site settings, it is greyed out. I am aware I can amend the organisational setting to "Anyone", and then go through each of our existing sites and set sharing manually to Existing Guests. This will then allow me to enable anyone sharing against the single nw site. However before I do this, is there any way that I can set this single new site with its sharing anyone permission without amending the organisational setting (this would be prefered as it will be more secure for the existing sites). Any thoughts or guidance very much appreciated. Thanks, MM

I'm currently looking into the use of Skydrive Pro for use in a school environment, while we are still on the 2010 version of 365 waiting for the 2013 version I want to clear a few things up.... Can SkyDrive be configured for each users redirected home folder so effectively they have a direct synced copy of their my documents in their SkyDrive cloud area? How is the above managed, certain requirements such as roaming profiles? GPO's available? Does SkyDrive pro support SSO?

Hi, We have a suite of MFPs for printing and scanning. Up until recently, our LEA provided us with a free SMTP service for scanning to email. That's now been withdrawn because of spamming issues. Unfortunately, if we can't use Office365 as an SMTP alternative, because it requires TLS authentication, which is not supported on HP printers. I've gone through setting up an outward facing server as an SMTP relay, which satisifes the printers when testing the validity of the listed SMTP server, but the mail doesn't get through to the recipient. Help!

We are currently trying to setup Exchange Hybrid Mode on Exchange 2013. We have had 6 weeks of calls with Microsoft on this and are no further forward. Essentially when we run the Exchange Hybrid Configuration Wizard it always fails at the last step saying MRS Proxy Failed. We have 2 Exchange Servers both on the latest build of 2013. Both have MRS Proxy enabled on both servers. 1 server is on our internal network and hosts the mailboxes and the other is in the DMZ and is used for Client Access. We get the same error when running the wizard on both servers. Microsoft are wanting to put our internal exchange server directly in the cloud with an external IP address so both Inbound and Outbound traffic can flow to it. We tried to explain we have another exchange in the DMZ but we were not getting anywhere. This has obviously set some alarm bells ringing. Has anyone had any experience of this and is what Microsoft is asking correct or could point us in the right direction. Any help would be most welcome.

Teams is the absolute worst showing Microsoft has and displays a dangerous lack of caring for end users and managment. The client has always been a bag of hammers, 'conveniently' designed to run on a browser framework inside a container, inside an OS, inside an app container guaranteed to be slow on anything but a fresh new pc... That needs to update, as each individual user every 30 days or it will give them a 'you must upgrade' prompt with no button to fix it. The new AppX one has been around for some time now and is still unable to detect a computer in presentation mode, or focus mode and will helpfully spew chat notifications on screen while projecting to a wireless display. Sure you can go into options and manually turn it off, but that is the only option. No shortcut, nothing. In the past Microsoft at least had the decency to release an API so if they forgot something, or could not be bothered, you could script it or make a plug-in via the API. No such luck now, they really don't care, whoever is running the Teams development needs to be re-educated heavily by sysadmins from education and corporate alike for their complete lack of care in this regard. If you are not going to fix two year old feature requests then at least have an API to allow someone else to patch over your incompetence.

Someone has suggested that we ought to backup all our Office-365 material? That what we're keeping in Office365 - like email, work in Teams or Sharepoint - is not guaranteed by Microsoft - and so we ought to purchase something. Anyone else done this? Seems to be several thousand a year - which wasn't a cost we'd anticipated. Thanks

Hi All, I am currently trying to install the O365 apps to do away with Office 2019, I have tested the O365 setup install in task manager on 2 pcs, one connected to our firewall and one that just goes straight out to the internet, the pc which goes straight out installed office however the PC which was going through our firewall didnt, has anyone has this before , what IP/sites should I whitelist in order to install the o365 package Thanks in advanced

I want to use Teams for external student remote learning whilst restricting students from seeing staff contact lists (Email and Teams) Is this possible in the same tenant?

Hi all, We're IAM Cloud - the forum sponsors. I wanted to make this sticky post a bit more useful for people searching for solutions in the Office 365 / cloud IT space. We've created a number of products that solve problems IT managers can sometimes run into. Here's a run-down of the problems our products can help solve (in no particular order). Problem 1) We want to provide our users with mapped drive letters to OneDrive, SharePoint or Microsoft Teams for our desktop and/or VDI or terminal environments. Solution 1) Cloud Drive Mapper. It's our most popular product. Does what it says on the tin but has a few nice extra features too. Affordable and very simple to configure and deploy. You can try it for free too. Problem 2) We want to migrate our Home Drives data to OneDrive for Business. Solution 2) Cloud Winch. Automates the entire migration process, configured in just a few clicks, and affordable. Problem 3) We're a Multi-Academy Trust (or similar) and we have multiple separate Office 365 tenancies that we want to migrate/merge into one central tenancy. Solution 3) Lift&Shift. Cloud-based platform that migrates all your Exchange Online, OneDrive for Business, SharePoint/Teams, OneNote and other Office 365 data from one tenancy to another. Problem 4) We want our users to be able to securely reset their own passwords remotely and re-write the new password back to Active Directory, but we can't justify the costs of Azure AD Premium. Solution 4) Surp4ss! (Surpass). Browser-based password reset with AD-writeback, with school-branded design, configurable policies and different reset methods. Comes with a client MSI you can push to domain joined machines to enable password reset from the Windows login screen too. You can try this for free too. Problem 5) We want to save time with provisioning and deprovisioning accounts by synchronising data from your student system, such as SIMS or Bromcom. Solution 5) IDxSIMS / IDxBromcom (other integrations available) is our identity provisioning & synchronisation service. It makes staff/student IT onboarding much easier, while removing dead accounts quickly, increasing security. Problem 6) We want single sign-on and MFA for our applications and can't find an affordable solution that meets our requirements. Solution 6) Simple Sign-On. Affordable but it has all the main features you need from an SSO platform. It's also flexible and avoids some issues Azure AD can face, especially in Trusts with MANY:MANY 1:MANY MANY:1 relationships between AD and Office 365. Last thing to mention: Support. Support is included in everything we offer, and we will happily go above and beyond wherever we possibly can to help our customers. I know that this sounds like the kind of spiel that every company says, but if you know us, hopefully you'll know this is true. I can sometimes miss replies to forum threads, so if you have any questions about any of the above, please feel free to email me at [email protected] Thanks! Leon

Does anybody know/is there a way to add a custom AUP on Office 365/Teams when students sign-in? Similar to Impero, where users have to read/sign the agreement otherwise it refuses sign-in.

We've had a member of staff leave us and come back. Originally she was on the o365 system, after leaving her active directory account was moved to disabled (and disabled) this takes it out of the o365 scope (thus deleting the account from o365). a year later she's come back, we had her in the disabled accounts (in ad) so just put her back with her old password. At this point office 365 should have made a new account. Now I'm unsure what her email status would be. I thought i'yd just make a new mailbox but it seems to think there is a local exchange account that need migrating. The local exchange server still thinks there is a o365 mailbox. How should I proceed? (and what should I do in the future)