Full Migration to MS365
Hello everyone, I'm reaching out for some insights concerning a recent transition we've embarked on. Initially, our business operated with 10 users on Windows Server Essentials 2016, utilizing SSLVPN for remote access via RDP for remote users. All ran smoothly until about a month ago when we took the step to incorporate MS365 Business Premium, coinciding with a slight increase in users, now totaling 12. Given our team's familiarity with the new system and the company's demanding schedule, we decided to phase in the transition. Thus far, I've successfully migrated our emails to MS365 and integrated Teams. Currently, the team still relies on VPN for accessing shared drives. However, we aim to pivot to a setup where access to shared folders is governed via SharePoint, but exclusively for managed devices while blocking all other access points. All our computers are AD-registered. The goal is a full migration to the cloud: transitioning shared folders to SharePoint, user profiles to OneDrive for Business, and utilizing Intune for comprehensive desktop management. I've considered employing a third-party tool, specifically ForensiT, for user migration. Before moving forward, I'd appreciate any feedback or alternative suggestions you might have. Ultimately, we'd like to retire the current server and SSL VPN setup. Thank you for your time and guidance.
Self-prevision guest account to AzureAD from ODFB sharing, but not MS Teams guest invitation
Our Tenant currently has "Sharing - Let users add new guests to the organization" set to Off. All the external sharing settings for SharePoint/OneDrive for Business (ODFB) and Microsft Teams guest are set to on to the maximum permissive level. When users share a file in ODFB to a specific external user who has an external Microsft account, such as Hotmail account, or another O365 Tenant account, the account will be automatically added as Azure AD guest. However, in Microsoft Teams when users add a guest user as the Teams member who has a different O365 Tenant account, the guest user has to already exist in the Azure AD or it will report no permission. The account cannot be automatically added to Azure AD as a guest user. I wonder how come ODFB can override the Tenant level setting "Sharing - Let users add new guests to the organization", which cause the inconsistent behavior and hard to control the guest provision? Is there any way to disable this gust account self-provision with ODFB but not affect it guest link sharing?
How to add alias domain for all users?
Hi, There's a company with their company's full name as their domain name and a shorter domain name. So, contoso.com and conto.so. They need all their users to have an alias of contoso.com and conto.so to be their primary email address. This way, they can: Send/Send as/Receive emails as both domain names for the respective users Receive shared files (OneDrive for Business and SharePoint Online) on both domain names for the respective users Call as/receive call/book meeting on Skype for Business using both domain names for the respective users Send and receive calendar shares or event invitations on both domain names for the respective users This needs to be automatic, rather than adding the domain alias for each user. How can this be configured? Thanks,
How to make Skype for Business and OneDrive automatically insert credentials on launch ?
We have a client, that wants new users to sign in to a domain joined computer and automatically get signed in to Outlook, Skype for Business and OneDrive. Now the client has an on-premise Active Directory which is synced with AAD Connect to Office 365. So desktop applications are Office 365. Now, I have configured Seamless Single Sign On feature and configure modern authentications, pushed intranet sites with GPO. This has solved half of the issue, now the users don't have to enter their password, only email. But Outlook and Teams for example already automatically get their email address entered into Sign in Address bars, that can't be said for Skype for Business and OneDrive though, I still need to manually enter email addresses there and let sSSO do it's work. Now my question is this, is it possible to make it so, that all of the remaining applications (Skype for Business and OneDrive) would automatically insert user's email address into Sign in Address (or email address, or user name, etc.) on first launch?Tenant to Tenant migrations - User switch on client
I will plan a tenant migration. I tried to recreate this with test accounts, everything worked for the tenant to tenant migration. The switch for the user to the client is less clear for me. As soon as everything is on the new tenant, the user has to register again. What's the best order after logging on Windows? Unlink old Onedrive account an add the new one Log off Teams an Log in Create new Outlook profile an add the email from the new tenant an register outllok (for office license) open Word, Excel, PP and Log in for Office register an link onedrive? As i saw aad registered has no influence on the task above Hence my question: How are the easiest steps to switch the user to the new tenant? Maybe important. The domain is also contained in the new tenantPassword Challenges in Microsoft Team
Hi Experts, We are using the Office 365 Business Essentials Service for the last 7 Years. We have the following Setup. Office 365 is connected with Azure AD for Sync User Name and Password of Local Active Directory with Office 365 Azure. (Pass-through Authentication) We have Domain Controller with Single Forest and Multiple Domain Controller Users are Configured with Multifactor Authentication Problem : Some users are not happy when their local AD Password changes after 30 Days (As Per Organizational Policy) the Microsoft Challenges them to re-enter newly change AD Password in some cases and MFA prompt however Microsoft Outlook 2013 (Desktop Version) does not ask to re-enter password the reason could be we had to save Application Password (App Password). Also, One Drive Sync Client also asks for a re-authentication like Microsoft Team Question : Is there any way so we can bypass this password prompt / MFA prompt once a user changes the local AD Password.
SPO - Guests inviting Guests - No AAD guest account created
Hi All, This lies across two products Azure B2B and SPO. I'm looking to test the "Allow Guests to Share items they don't own" global SPO control. I've noted with New and Existing Guests on a SPO site, that a folder or file can be shared to a guest. During the sharing process, the guest account is created in Azure AD and all is working well with the Azure B2B integration configured. I've then set the allow guests to invite guests - the invitation is sent as expected from one guest to another. However, it looks like the guest inviting another guest doesn't trigger the guest account creation in Azure AD. SPO shows the secondary guest with access to the file, they just cant login receiving the "does not exist in tenant error due to no guest account created. I am sure it would work if I create a guest account for the user in AAD, however, I was hoping it to be the same as a member sharing to a guest to remove additional overhead. I haven't found any information on this looking through all the docs.microsoft.com articles, is this by design, or does this operate on a really long synchronisation schedule between SPO and AAD? Thanks!
