Microsoft 365 Group Policies How did You Miss This?

[@MartinPatterson]

This solves a mystery I have been chasing with a client of mine since March! Thank you.

[@JonathanIsrael708]

What was the mystery?

[@Finchwizard]

We use a reg key (or you can do via intune) to turn on OneDrive Health. Then it reports into that showing uses who have issues with their one drives or if they have known folder redirection on or off and for what etc. Gives you a nice insight into that area.

[@JardaniJovonovich1984]

Very useful!! Thank you!!

[@supriyochatterjee4095]

Excellent information

[@JyotiPatra-y6w]

Thanks lot sir...

[@cdiaz666]

Thank you. Just an FYI, this is also available in the Intune Portal under Apps and then Policies for Office Apps.

[@AndyMaloneMVP]

Yes, it is, you are correct. But this license gives you the ability to manage both user and device settings.

[@wg2060]

Interesting food for thought. Maybe follow up with a more in depth “best practices” on some key settings? Such as managing temp files on local devices or managing 3rd party plugins. Good stuff

[@AndyMaloneMVP]

Great idea, thank you. 👍 and a happy New Year.

[@stayhungri]

Fantastic

[@martinzonderland1543]

License requirements you mentioned that it is also available for Microsoft 365 Business Premium, but with my experience the most policies are not working on Microsoft 365 Apps for Business (included in Premium) and are only working for Microsoft 365 Apps for Enterprise... This is also mentioned in the Microsoft Docs in a note: "You can create a policy configuration for Microsoft 365 Apps for business, but only policy settings related to privacy controls are supported."

[@AndyMaloneMVP]

You are incorrect I’m afraid. Apps for business are a separate cheaper subscription. Enterprise apps are included with business premium.

[@lkentwell249]

Nice video. One question. You said you can enforce this for guests. I assume that to mean the type of guest account you create when in Entra Admin Under Identity, All Users, New User, invite external user? You also said it supports purview, does that mean we need to give this guest user an E5 license?

[@AndyMaloneMVP]

By guest users, it means anonymous users that you share files with. With ID it’s the auditing functions, so guests do not require an E5 license.

[@ITLifeLineLtd]

Many thanks for your insights Andy. One question, when we are dealing with the settings on a user devices, it can be frustrating to know what mechanism takes priority. When using policy configurations under M365, if a machine is already attached to local AD, will the settings be over ridden with local AD policies? PS. HNY.

[@AndyMaloneMVP]

Yes

[@Abyksh]

Hi! :)

[@dominicknight9540]

If you have group policy’s setup in intune for office , will these policies create a issue or conflict

[@AndyMaloneMVP]

If you have an intune license, you can manage both software and device settings. The software settings will automatically show up intune as these are just essentially shortcuts. So no there won’t be any conflicts or issues. It’s important to note here as well that if you do have in tune, you would generally do the set up in intune.

[@westcoastguy3063]

when was this functionality created or deployed to the users as a whole? it seems this duplicate of intune, purview, defender . compliance settings , what is advantage of this over other older methods? thank you for this training

[@lkentwell249]

Yeh seems MS tends to duplicate things in different places. Is this a symptom of different dev teams doing their own thing trying to outdo other dev teams and there is no internal control over what dev team is working on what?

[@AndyMaloneMVP]

The advantage for orgs that don’t have all that other functionality. Also it’s tied to the user rather than a device. So any settings follow the user rather than the device 🙂

[@AndyMaloneMVP]

I agree

[@schylerjones5722]

It is not duplicate functionality but a design choice to expose those features in M365 plans that don’t otherwise include them.

[@12Burton24]

Lots of new privacy infrictions and data collection. To get you overwatched and controlled.