Windows 10: What’s new in Office 365 Groups administration

Brink · Jun 12, 2016

Last December, we announced that Office 365 Groups are now supported by eDiscovery. Since then, we’ve delivered a number of updates to help administrators govern and manage Office 365 Groups, which provides cross-application group membership to enable teams to easily collaborate in their favorite apps.
The following capabilities are available today to all Office 365 commercial and education customers:

Ability to update privacy type—When you create an Office 365 group, users have two privacy options: public (anyone within your organization can access the group’s content) and private (only approved members can access the group’s content). This update enables group owners to change the privacy setting from public to private or vice versa by editing the group properties in Outlook on the web. Administrators can also leverage the Set-UnifiedGroup cmdlets to change the privacy type. Read “Make Office 365 groups public or private” for more information.

Easily edit a group’s privacy setting.

Multi-domain support—Larger organizations use separate email domains to reflect different parts of their businesses. Office 365 groups that are created by users in one domain will share that domain (as opposed to using a common domain across the tenant). Administrators now also have control to create groups in specific domains of their choosing. Read “Multi-domain support for Office 365 Groups” for more information.

Guidance to configure Office 365 Groups with on-premises Exchange mailbox users—If you’ve configured a hybrid deployment between your on-premises Exchange organization and Office 365, you can make groups created in Office 365 available to your on-premises users by following the steps outlined in “Configure Office 365 Groups with on-premises Exchange hybrid.”

Allow users to send as the Office 365 group—If you want to enable your group’s shared mailbox to “Send As,” you can now use the PowerShell cmdlets to configure this. Once you enable this setting, your Office 365 group users can use Outlook or Outlook on the web to send and reply to email as the Office 365 group. Users can go to the group, create a new email and change the “Send As” field to the group’s email address. See “Use PowerShell to manage Office 365 Groups” for more information.

In addition to the above improvements, the following capabilities are starting to roll out today and expected to be fully deployed by the end of July:

Creation policy in Azure Active Directory—We’ve implemented policy in Azure Active Directory that allows administrators to restrict group creation to certain users. This ensures that the creation of Office 365 groups through all endpoints, such as Planner and Power BI, can be given to selected users. The existing Exchange Mailbox policy only applies to creation in Exchange.

Usage guidelines—You’ll be able to define usage guidelines for Office 365 Groups—to educate your users about best practices that help keep their groups effective and educate them on internal content policies.

Data classification and extensible policy—You’ll be able to create a customizable data classification system for Office 365 Groups that allows separation of groups by policy type (e.g., “unclassified,” “corporate confidential” or “top secret”). In this manner, your groups can exhibit the policies of other content in your organization. Extensible policy allows your organization to configure an endpoint that is called whenever a group is created or changed—and you can then implement your own policies for group creation or change.

Mobile application management—To protect users’ data on the go, we’re working on exposing the Outlook Groups mobile apps in Microsoft Intune as policy-managed apps.

We are continually investing in Office 365 Groups to improve the administration experience. See the key items below that are on our roadmap:

Exchange Admin Center (EAC) UI for migrating Distribution Lists (DLs) to groups—Building on the scripts we released (mentioned above) for DL migration, you will soon be able to migrate a DL to a group directly from the Exchange Admin Center with one click!

Naming policy in Azure Active Directory—Administrators will be able to configure a policy for appending text to the beginning or end of a group’s name and email address no matter where the group is created (e.g., Outlook, Planner, Power BI, etc.). Administrators can also configure a list of specific blocked words that can’t be used in group names and also rely on the native list of thousands of blocked words to keep their directories clean.

Ability to search for private Groups files—By integrating Groups files (stored in a SharePoint document library and surfaced in OneDrive for Business) and Office Delve, users will be able to search content from both public and private groups as long as they’re a member.

In addition to the governance and administration innovations mentioned above, we plan to deliver the following key features in the second half of this year to continue helping you work across teams and organizations: the ability to add external members to a group, a SharePoint team site for every group and integration of Yammer groups with the Office 365 Groups service.

For more information about upcoming improvements to Office 365 Groups, please visit fasttrack.microsoft.com/roadmap. We also look forward to seeing you at Ignite, September 26–30 in Atlanta, where we’ll be sharing details on these recent Office 365 Groups innovations and more.

—Christophe Fiessinger, @cfiessinger, senior product manager for the Office 365 marketing team
Click to expand...

Source: What's new in Office 365 Groups administration—June 2016 update - Office Blogs

:)

Tim923347 · Jun 12, 2016

Can't connect to App Store with 'For Business' account

I am the administrator of an Office 365 group and trying to log onto the store on my Surface produces and error "That Microsoft account doesn't exist. Enter a different account or get a new one .. "

I am logged on to that PC as a local administrator and have my office 365 details in the School or Work account fields of Office, and 'Email & app account' and 'Access work or school fields' under Accounts in Windows Settings.

With this same configuration (local admin, office 365 account in the fields mentioned) on a different PC I can use the store successfully.

TechGuardIE · Jun 12, 2016

Why does W10 Hello assign me admin rights when I log in

Hi there

I have been testing out joining a Windows 10 Pro laptop to Azure AD (Office 365) by setting up/logging into the new laptop with my Office 365 account via Windows 10 Hello. However when I sign in I (Azure AD\email) automatically become a member of the default
administrators group. (As I can see in Local users and group console). I would like to find out the process for how to stop auto admin access being given or how to remove admin access so that a prompt for admin credentials appears when installing programs
or opening command prompt as admin?

In an attempt to figure out how to remove my account from having local admin rights - I setup a new local only (non Azure AD) admin account on the laptop and logged in as that account and removed my Office 365 account "Azure AD\*** Email address is removed for privacy ***" entry from the
"local administrators" group (via local users and groups console). However signing out and back in as the Azure account to ensure my admin rights were removed made no difference to my actual admin rights. Even though my Office 365 Azure email was no longer
listed in the "Administrators" group. I still had admin rights - can open the command prompt as admin and can install programs.

I next tried to log in as another account (in my organization) and I found that this account also was given admin rights.

I also tried to go into the Windows 10 account user section and "add a work account" and added my office 365 Azure AD account and chose "standard" only account for the user but again upon logging out and back in as the office 365 user - I still have admin
rights.

Can anyone help me figure out how do I join Windows 10 laptops to Azure AD (for office365) but restrict the local admin rights each account appears to be given on sign in (as removing them from the Administrators group in the local users and group console
doesn't work).

Thanks

Gerry

Cluster Head · Jun 13, 2016

Microsoft Reorganizes Office Group to Focus on Common Tasks

Microsoft Corp. has reorganized its Office unit to combine products that tackle the same tasks rather than carving out individual products, said Julie Larson-Green, chief experience officer for Microsoft’s applications and services group.

The company combined PowerPoint, Word and the Sway interactive-presentation app, all tools for content creation, while putting data and analytics tools like the Excel spreadsheet and Access database together, she said on Tuesday at the Bloomberg Technology Conference in San Francisco.
Click to expand...

Read more: https://www.bloomberg.com/news/artic...n-common-tasks

Windows 10: What’s new in Office 365 Groups administration

What’s new in Office 365 Groups administration

What’s new in Office 365 Groups administration

What’s new in Office 365 Groups administration

What’s new in Office 365 Groups administration - Similar Threads - What’s Office 365

New install of Office 365 not showing in account.microsoft.com....and Office 365 doesn't work

What’s new in Office 365 Groups for April 2017

What’s new in Office 365 administration—October update

Office 365 Groups update at Ignite 2016

Yammer Integration with Office 365 Groups

What’s new—Office 365 Video

What’s new in Office 365 administration

New to Office 365 in July 2017

Office 365: What’s new in January 2015