Intune lets you manage the devices and apps on how they access your company’s data and to us this MDM the devices must first need to be enrolled in the Intune service so that an MDM certificate is issued which is then used to communicate with Intune service. In this blog, we will see the end-user process on how to enroll the devices with Intune. Pre-requisites: Intune must have been set up with MDM enabled. Setup an App Protection Policy in Intune. Microsoft Intune or Microsoft 365 E3 and above license are required to setup Intune. Once the Android App Policy is assigned to all the users, there will be some restrictions (as per your Org. requirements) and without enrolling the devices, users won’t be able to access corporate data. To enroll the mobile devices with Intune, please follow the below screenshots. When you try to access any Microsoft App, like Outlook, Teams, etc. you will be asked to install the Microsoft Intune Company Portal App. Click on “Go to Store”. You will redirected to Google Playstore to install Company Portal App. Install the Application and then Click on Sign In with the Work Account. After you Sign, you will see the list of all the devices. Unmanaged devices will be highlighted as shown in the screenshot below. Click on the mobile device, you are tyring to enrol. The devices will be shown as Unmanaged. Click on “This device is unmanaged”. You will be asked to setup the device through 3 stage starting from creating a Work profile. Click on Begin. Provide the App permission by clicking on Continue. It will then Set up your work profile. Click on  Accept and Continue. Click on Continue once the Work Profile setup is completed. It will then Activate the work profile and will also update device settings. Click on Done. You device is now enroled and ready to access the corporate data.

Many of us who are using SharePoint Online for Document Management as using the manual method for syncing the Document Libraries on our devices. Here we can leverage Intune Administrative Template. Administrative Templates are responsible to facilitate the management of registry-based policies that allows configuring many settings on Windows machine. With the availability of these Administrative Templates in Intune for Windows 10, it is helping Administrators to easily manage applications on Windows 10 or later devices using device configuration profiles. Profiles in Intune lets you configure settings and then push them to the devices in an organization. In this article, we will see how to silently sync SharePoint Online Document Libraries via Intune Administrative Template. Pre-Requisites: Devices must be Joined to Azure AD. If you have on-premises environment that uses AD, you can enable Hybrid AD Join. Enabling the Sync: Login to Microsoft Endpoint Manager Admin Center (endpoint.microsoft.com). Under Devices, go to Configuration Profiles and then click Create Profile. Select Windows 10 and later as Platform and Profile will be Administrative Template. Click Create. Enter a Name for the Profile and optionally a Description. Click Next. Under Computer Configuration, search for team site and then select ‘configure team site libraries to sync automatically’. Get Library ID from SharePoint Online Document Library, the instructions to get the ID will be given in the setting itself. Once the library ID is copied, go to the setting, and click Enable. You will also need to provide the Library Name and the Library ID which you copied. Once the Settings are configured, click Next and go to Assignments. Under Assignments, you need to select a Group, if you want to assign this profile to specific set of people. You may also choose All users or All Devices. Once selected, click Next, Review, and create the Profile.

Administrative Templates are responsible to facilitate the management of registry based policies that allows to configure many settings on Windows machine. With the availability of these Administrative Templates in Intune for Windows 10 it is helping Administrators to easily manage applications on Windows 10 or later devices using device configuration profiles. Profiles in Intune lets you configure settings and then push them to the devices in an Organization. In this article, we will see how to configure an Administrative Template for OneDrive so that the settings are pushed to the enrolled devices and provide below features. Silently Sign in users to the OneDrive Sync client. Silently move Windows known folder to OneDrive Set File on-Demand states. Pre-Requisites: Devices must be Joined to Azure AD. If you have on-premises environment that uses AD, you can enable Hybrid AD Join. Step 1: Login to Microsoft Endpoint Manager Admin Center (endpoint.microsoft.com). Under Devices, go to Configuration Profiles and then click Create Profile.  Select Windows 10 and later as Platform  and Profile will be Administrative Template. Click Create.  Enter a Name for the Profile and optionally a Description. Click Next.   Under Computer Configuration, select OneDrive and then select the settings you want to configure.   In our instance, we will configure the first setting which is Silently signed-in users on to the OneDrive Sync client. Second setting is to silently move the windows known folders to OneDrive. In this case the known folders which is Documents, Desktop and Pictures will be automatically get synced with the OneDrive. Note: Some configuration required Tenant ID which you get from portal.azure.com >  Azure Active Directory. Third setting is to Use files on-demand. Files on-demand allows you to access all your files stored in the cloud using File Explorer without having to sync them directly and storage space on your device. Similarly, there are various other setting which can be configured. Step 2: Once the settings are configured, click Next and go to Assignments. Under Assignments, you need to select a Group, if you want to assign this profile to a specific set of people. You may also choose All users or All Devices.  Once selected, click Next, Review and create the Profile. With the help of these Administrative Templates, Administrators can easily manage the Applications and push the settings to all the Users and Devices.

Your Organization might have a requirement to change the Microsoft Teams recording storage mode from Stream to OneDrive for Business and it has some advantages as well. You have had tried working on sharing and permission on Microsoft Streams and it is not much effective so why not use our OneDrive for Business and we can easily set permissions on the recordings. Currently there is no option to share the recording to external users from MS Stream in this case OneDrive for Business helps additionally you can provide shared links as well. This recording option is a setting that is available at Teams policy level and in this article, we will see how to achieve that. Pre-requisites: You need to have the Teams PowerShell Module installed. Microsoft 365 license is required which includes OneDrive for Business. Installing Teams PowerShell module: Open Windows PowerShell as an Administrator. Enter the command “Install-Module MicrosoftTeams”. Install the Skype for Business Online Connector: Skype for Business Online Connector is currently a part of Teams PowerShell Module. Enter below commands“Import-Module -Name MicrosoftTeams”“$userCredential = Get-Credential” – Enter Admin Credentials.“$sfbSession = New-CsOnlineSession -Credential $userCredential”“Import-PSSession $sfbSession” Set Teams Meeting Policy to transition from the Stream storage to OneDrive for Business or SharePoint. Once you are connected to SfB Connector using the above steps, you can use the below command to set the transition.“Set-CsTeamsMeetingPolicy -Identity Global -RecordingStorageMode “OneDriveForBusiness“ To check if the setting successfully applied, get the Teams Policy Settings using the below command and the “Recording Storage Mode” status, it should be OneDrive for Business.“Get-CsTeamsMeetingPolicy”. You might think that it will take huge storage and OneDrive for Business only has 1 TB of storage, in that case I recommend increasing the storage for OneDrive for Business. You can increase your OneDrive for Business storage to up to 5TB. Please refer this blog for more information – https://www.cloudfronts.com/how-to-increase-onedrive-for-business-storage-up-to-5tb/ Where will the recordings get stored? For non-Channel meetings, the recording will get stored in OneDrive for Business under a folder named “Recording”. This OneDrive will be of the person who started the meeting. For Channel meetings, the recording will get stored in the Team Site document library in SharePoint Online in a folder names Recording.

Your Organization might have this requirement to publish Win32 Application with Microsoft Intune. You might think if it is even possible to deploy the Windows 10 store Apps, MSI files or .exe file. Yes, it is possible to deploy these apps through Microsoft Intune. The only hurdle is you will not be able to publish the .exe files directly. You need to either convert the .exe file to MSI package or you can convert the same to an. INTUNEWIN file. In this article we will discuss how to create an INTUNEWIN file from an .exe file. Step 1: Create 3 folder on your device. Here I am creating the below 3 folders in C:\ C:\Adobe: Since I am generating INTUNEWIN file for Adobe, I have created a folder with Adobe name. You will need to place the source files here which is required for installation. C:\IntuneApps: This folder is for the Output file which will be generated and then we can use this file to deploy on Microsoft Intune. C:\IntuneWinAppUtil: This folder is for the tool which we will be using for converting the file to INTUNEWIN. This tool is Intune Win 32 Prep Tool. Step 2: Put the file in the respective folder. Here we will gather the Source file and the Intune Win 32 Prep Tool and will put it in the respective folder. We can get the Intune Win 32 prep Tool from here –https://github.com/microsoft/Microsoft-Win32-Content-Prep-Tool/blob/master/IntuneWinAppUtil.exe Download this file and put it in the C:\IntuneWinAppUtil. Now you can download your source file, in my case I have downloaded .exe file for Adobe and put it into C:\Adobe. Step 3: Create the IntuneWin file. Open Windows PowerShell as an Administrator and navigate to the folder where we have kept the Intune Win32 Prep Tool. Once you run the IntuneWinAppUtil.exe, you will be asked to provide the below details. Please specify the source folder: Enter the source folder where you have the .exe file. Please specify the setup file: You will need to specify the name of the .exe file. Please specify the Output folder: Enter the folder where your Output file will get generated. After that press Enter. INTUNEWIN file will be created within seconds and you see something like this. Now you can go to the Output folder and check whether the file is generating over there. This is how we can generate INTUNEWIN file and can publish the App on Microsoft Intune.

Suppose you are sharing a confidential file externally, of course, you will not want the external user to edit the file or download it or share it again with others. In this article, we are going to see how we can achieve that. This is applicable to both OneDrive for Business Online as well as with the app (OneDrive files synced on your system). OneDrive for Business users have the option to restrict the level of access. Anyone – gives access to anyone with the link, whether received directly or forwarded. This can also include external users as well. People in your Organization – give anyone in your organization who has the link access, whether received directly or forwarded. People with Existing access – Can only be used by the people who already have access to the document. Specific People – gives access only to people you specify. This cannot be accessed if forwarded to others who don’t have access already. If you see any of these options greyed out, your admins might have restricted the options from Admin Center. Steps 1: Sharing process for the confidential files. Go to OneDrive for Business, select a file you want to share by selecting the circle, you can also pick multiple items to share them together. Select Share at the top of the page or beside the file name there is a small Share icon (See above screenshot). Select “Anyone with the link can edit” to customize the option. You can see the other options as well, now select “Specific People”, uncheck Allow Editing and toggle ON the Block download option and click Apply. Enter the email address of this user with whom you want to share this file and click Send. Steps 2: What happens when the external user receives the file. The user received the email with a file link and it is clearly indicated that this link will not work if forwarded to someone who doesn’t have access to this file already. When the user will try to open the file, it will ask for verification and users will need to click on Send Code. The code will be generated and sent to the user via email. The user will enter the code and verify it. The file will open after it is verified. Users won’t be able to edit or download the file. If this user will forward this document to another user, the other user will be asked to log in with the credentials to which the file was initially shared, hence securing the file if it gets forwarded. In this way, you can share confidential documents with external users and hence securing the data. Hope this article helps to achieve the same.

Separate versions of Word, Excel, and PowerPoint is already available on both iOS and Android. The new Office mobile app combines Word, Excel, and PowerPoint into a single app and introduces new mobile-centric features to make it your go-to productivity app on a phone. Microsoft has done a good job of combining all of the functionality from the separate Word, Excel and PowerPoint apps into a single Office app and this is surely going to replace all the separate versions. Key Benefits: Combining Word, Excel, and PowerPoint and to some extent Microsoft Office Lens to a single app making switching between the apps easy and requires less space with respect to the individual apps. Do more with your phone camera like converting images into editable Word and Excel documents, scanning pictures into PDF, Scan QR code and capturing whiteboards with digital enhancements to make content easier to read. New functionality for common tasks like making quick notes, signing PDF, converting a document to PDF and transferring files between devices. Connect your Office App with Work or School account. All productivity apps in the same and easily switch between Apps. Find all the recent documents.   4. Easily locate the document in OneDrive, SharePoint. Browse Google Drive documents, documents on your device and also you can connect other cloud storage such as Dropbox.   5. Easily search for documents through the Search bar. 6. Transfer files between devices -Open the Office App on your mobile device and open transfer.office.com on your system, pair the device by scanning the QR code and easily transfer files. 7. Share files to nearby devices quickly.   8. Other important features: Image to Text – Extract text from your image to Word document. Image to Table – Extract a table for an image to Excel document. Sign a PDF – Add your signature to a PDF file. Scan to PDF – Scan pictured to PDF. Pictures to PDF – Create PDF from the pictures stored on your system. Document to PDF – Easily convert your documents to PDF. Scan QR code – Scan QR code from within the Office App to open a document. Upcoming Features –  Word Dictation – Turn your voice into written text and use voice commands. Refer  – Word Dictation Source  – Microsoft Article Outline to PowerPoint –  Write your presentation content as a simple outline and let PowerPoint designer turn it into presentable slides with proper formatting and styling of the content. Refer – Outline to PowerPoint Source – Microsoft Article Excel Card Views – View and edit data in an Excel table row in a simple, digestible card format so you do not have span across columns that extend beyond the limits of the screen. Refer – Excel Card Views The new Office app is surely going to replace the individual apps for Word, Excel, and PPT as it makes very easier to download and install. It saves space of individual apps on the device and quickly switches the apps within the Office app. Additionally, we have seen above the features that provide the opportunity to do more with the App. Thanks!

You must have known that OneDrive for Business storage has a limitation of 1TB but what if you have utilized the full capacity (1TB). There is no such announcement for the same, but the limit is not 1TB. In this article, we will see how we can increase the storage capacity for OneDrive for Business up to 5TB through PowerShell. As per one of the Microsoft articles “If your organization has a qualifying Office 365 plan and 5 or more users, you can change the storage space to more than 5TB”. So as per this statement, we can get more than 5TB as well. That means the limitation is not 5TB as well. Increasing the storage from 1TB to 5TB can be done with the help of your Microsoft 365 Administrator through PowerShell, but going beyond 5TB, you will need the help of Microsoft Support with justification and then it might get increased up to 25TB quota. Pre-requisites: Download SharePoint Online Management Shell. https://www.microsoft.com/en-us/download/details.aspx?id=35588 Connect to SharePoint Online through PowerShell. $adminUPN=”<the full email address of administrator account>” $orgName=”<name of your Office 365 organization>” $userCredential = Get-Credential -UserName <the full email address of administrator account> This is prompt to enter Message, enter the admin account password and hit enter. Connect-SPOService -Url https://$orgName-admin.sharepoint.com -Credential $userCredential You will be prompted to provide admin credentials. Increasing the storage quota for OneDrive for Business: Check the current set quota for a user. Get-SPOSite -Identity <User’s OneDrive URL> | select $StorageQuota Note: – Storage quota is in MB. Change the storage quota for a specific user. Set-SPOSite -Identity <User’s OneDrive URL> -StorageQuota $StorageSize Note: – Replace $StorageSize with 5242880 (MB) which is 5TB To verify the change, run cmd Get-SPOSite -Identity <User’s OneDrive URL> | select $StorageQuota You can also verify the same from Office 365 Admin Center > Active Users > Select User > OneDrive.  This article will help you to increase storage quota for OneDrive for Business up to 5TB without any need of calling Microsoft Support. If you need to increase it more than 5TB then you will need to take help from Microsoft Support with justification. Thanks!

As an Administrator, you might face this situation and suddenly you are not able to see one of the Channel in Microsoft Teams. There might be a chance that it got deleted somehow. Will you be able to recover the deleted Channel? The answer is Yes as a Team owner you will be able to recover the deleted channel. You can restore any deleted channel up to 21 days. In this article, we are going to see how to restore deleted channels, auditing, and other preventive measures. Restoring a deleted Channel in MS Teams: Go to Microsoft Teams > Click on Team whose Channel got deleted. Click on the 3 dots beside and then go to the Manage Team. Go to Channel option, expand Deleted items. You will see all the deleted Channels listed over there. Click Restore. By default, all the Members of the team have the right to delete the Channel in Microsoft Teams. After this incident, you might want to remove delete permission for the Team members. Please find the steps below. Go to the Team for which you want to manage permissions. Click on the 3 dots beside and then go to the Manage Team (as we did while Restoring the channel). Go to the Settings option, expand “Member Permission”. Uncheck “Allow members to delete and restore channels”. You can manage other permissions as well as per your organization requirements. If any channel got deleted, you might want to know who has deleted this, to ensure it doesn’t happen again. We can search for the Audit logs from Security and Compliance center. Login to Security & Compliance center (protection.office.com). On the left navigation, Go to Search > Audit log search. Select the activities, you want to search for. In this case, we need to find who deleted the Channel. Scroll down to MS Teams activities. Provide the start date and end date and then search. You can leave the Users field blank. Click on Search. You can find the deleted channel activities on the right-hand side. You can also set up Teams retention policy for chat and channel messages and decide whether to retain data, delete it or retain for a specific period.  Find the steps below to setup Retention Policy. Go to Office 365 Security & Compliance Center > Information Governance > Retention > Create. Name your Policy and add a description. You can set the Retention Policy for Retain Data or Delete Data. Retain Data – This will ensure that your data is retained for a specified period. Data is retained and is available for eDiscovery even if the user deletes it. You can define whether to delete data or do nothing after the Retention period is over. Delete Data – If you set up the Retention policy to delete data after the defined time. Choose Microsoft Teams as a location. You need to select if you want to apply Retention policy for Teams Chat and Channel messages. Review your settings and create the policy. In this article, we saw how we can restore a deleted channel, managing members permissions, checking the Audit logs and applying Retention Policy which will help your organization to manage MS Teams more efficiently. Thanks!

In this article, we will see how we can map a Network Drive on our system to a file stored on the cloud using Azure File Share. Using Azure File Share is useful when you want to share files on multiple systems and all the data will be on the cloud. IT Considerations: You must have an Azure subscription for using Azure File Share. You must be a Global Administrator for Azure to perform these steps. You should have a Resource Group created on Azure. You will need to have an Azure subscription, if you trying it for the first time, you can also take a trial for a month. Azure Files offers fully managed file shares in the cloud using Server Message Block (SMB) protocol. The advantage of using File Share is that you can replace on-premise file shares with Azure file shares, begin able to share file systems across multiple systems. You do not have to deal with any kind of hardware. Step 1: Creating Storage Account on Azure: For using Azure File, you can use a storage account that is already created or else you can create a new one. Let’s see how to create a new Storage account below. Go to portal.azure.com. In the Search bar, search for Storage accounts. Click on “Add” and then provide all the required details. Choose Subscription. Select Resource Group, if you haven’t created it yet, create a new one. Under Instance details, provide Storage account name. This should be unique. Select your location. You can leave the other fields set to their default value. Choose Review + Create, to review the Storage Account settings and create the account. Once the Storage account is created, it will look like this. Step 2: After the Storage account is created, you will need to create a File Share. Go to the Storage account which you created, select File Shares. Click on “+File Share” to get started. Name the File Share and set a quota in GiB to limit the total size of the files on File Share. Click Create. Step 3: We had created a File Share in Step 2, now we will map the Azure File Share as a Network Drive on the system. To map Azure File Share as a Network Drive, you need the following information. The URL of your FIle Share – Open File Share > Properties. The Storage Account name and Storage Account key to allow access – Go to the Storage Account which you created > Access Keys. Open Windows Explorer > Click on This PC > Computer > Map Netwrok Drive. Select the Drive (Choosing Z:) then provide the File Share URL, which we got from Point 1. Please find the screenshot below. Once you click on Finish, a pop-up will open, which will ask for the credentials. You will find a Network Drive created in the system mapped with Azure File Share which we created. You can now save any file in your Network Drive, which will appear in the Azure File Share and on all the connected devices. You can also use Microsoft Azure Storage Explorer to upload, download and manage Azure blobs, File Shares and other storage entities. You can download the same from https://azure.microsoft.com/en-in/features/storage-explorer/ This is how you can utilize Azure File Share by mapping it to a Network Drive on your system to have shared access and being able to share a file system across multiple machines, no hardware to manage. You can go through the above 3 steps to easily create the same without having any difficulties.