I was recently tasked by a client who, concerned about sensitive documents being accessed by those who were not privileged, to enable them to be notified when a document on an employee's OneDrive was accessed.

This sounds like it'd be easy, and perhaps it is if you only have one or two to monitor, but watching a company of 2,000 people in this way is not such a simple task. To learn why, as IT people, we need to understand how OneDrive for Business works in Microsoft Office 365.

A basic primer on OneDrive for Business
Each employee with the appropriate license will have a OneDrive for Business site that they can access. These are essentially specialized SharePoint sites on the back end, and each individual is the site collection administrator for their own OneDrive for Business site. However, other administrators -- including the global admin -- are not automatically granted access to what's in each employee's site, only what is shared across the organization.
This means that there is no easy way to grant administrators access to every OneDrive for Business site -- changing the settings from the top level only changes the top level and is not inherited to each individual site.

So, how do I see what's going on in my employees' OneDrive for Business sites? I really need to know.
Ok, ok, I get it, you want to see what they're storing in their little hidey-holes. Professionally, I would only recommend doing this if absolutely necessary. There is an element of trust when giving employees access, and breaching that trust (if they were to find out) could jeopardize morale -- and it's not likely that every employee is using their OneDrives for illegal or otherwise unsavory activities.

That being said, let's say we know that Allie Bellew is being a bad OneDrive for Business user. An IT employee walked past her desk and saw her streaming music from her sweet collection of 90's techno, she saw it, she swears! In some companies, this might be OK or even encouraged, but not in this fictional case. No music for Allie.
(Alan Steiner is also reputed to be squirreling away his salacious photo collection in his OneDrive, but we'll leave that for another post.)

An IT admin decides then to snoop on Allie's OneDrive, but is met with this:
Not very revealing, eh?

In short, since there's no simple or straightforward way to grant your IT employees access to Allie's OneDrive to see what she's up to, you have to use PowerShell to make them the site collection administrator.

TechNet has a handy guide and PowerShell scripts available to accomplish this task. The scripts will grab a list of all OneDrive for Business sites in your organization, then assign a user as site collection administrator for those sites. If IT only needs to see an individual site, the list that the first script outputs can be modified to include just that one site location.

This procedure also comes in handy if you need to enable eDiscovery for your company's OneDrive for Business sites on a global scale. If there's a legal issue, it's almost certain that this will need to be done to ensure compliance and discovery of all appropriate documents.
 
 
If you're getting into setting up a home SharePoint lab, you may have encountered problems with the .NET Framework 3.5 not installing on Windows Server 2012/R2.

This is a well documented problem, with a well-documented fix.

The DISM command-line tool fixes things up nicely:

http://www.danielclasson.com/install-net-framework-35-server-2012/

HOWEVER...

I encountered issues where the installation would complete to 66% -- every time -- and fail to complete. This was maddening, until I found the answer (no, I don't remember where.)

The problem was occurring because I had performed multiple updates on the server from Windows Update before installing the software. This caused the "image version" to be different -- this has to be the same for the .Net 3.5 installation to complete properly.

As such, whenever redoing my lab VM's, I always install the framework AS SOON AS POSSIBLE to ensure the tool will run properly.

 
 
While I'm still thinking about the all-important email features of SharePoint, here's another handy tool for testing -- this time, it's a good ol' PowerShell command:

http://www.msdigest.net/2011/09/test-sending-mail-to-your-smtp-connector-using-powershell/

 
 
When I first started working with SharePoint, I was concerned that I wouldn't have an adequate environment for a home lab.

Google around, you'll see -- the recommendations for running a home lab with Hyper-V are pretty crazy. (Admittedly, this machine would be SWEET! So much RAM...)

Regardless, I tried to make do with what I have. I figured, why not use my gaming rig?

- AMD FX-8350 8-Core Processor

- 16GB RAM

- Samsung SSD (840 Series)

- Various 7200RPM HDD's

- AMD Radeon HD 7870

First, I attempted to run Hyper-V in the native Windows 8.1 environment. It worked, but man, was it pokey.

Next, I decided to dual boot an evaluation version of Windows Server 2012 in its own environment -- now we're talking.

This setup suffices for basic testing of a three-tier SharePoint farm environment, and is surprisingly fast, especially given that all the VM's are running on the same HDD. I set the parameters as follows:


- WFE (Web front end): 4GB RAM, 2 processor cores

- SQL: 6GB RAM, 2 processor cores

- APP (Application server): 4GB RAM, 2 processor cores

- DC1 (Domain controller): 1GB RAM, 1 processor core

Ideally, in the future, I'd love to get a large SSD or hybrid drive to further speed up the environment in the interim before I can get a "real" server! Plus, the SQL Server needs a lot more RAM and processor power, I know...

 
 
I had recently resolved an SMTP send/receive issue with a SharePoint farm, and found this tool handy for testing solutions in my lab.

http://smtp4dev.codeplex.com/

It acts as a "dummy" SMTP server that lives in the background. It can recieve email and show you the result, but nothing ever gets sent. Nifty!

 

    Peter Redmer: Online Marketing Specialist, MCP in Chicagoland

    I work with SEO, SEM, online communities, Microsoft Office 365, SharePoint, Yammer, and other digital productivity tools that help companies solve problems and make work easier... and more fun.

    Archives

    October 2015
    August 2015
    July 2015
    June 2015
    May 2015

    Categories

    All