1 00:00:03,135 --> 00:00:05,580 Now that we have seen the theory, let's go 2 00:00:05,580 --> 00:00:07,850 to the lab environment and check out those 3 00:00:07,850 --> 00:00:11,421 final tenant settings for SharePoint 4 00:00:11,421 --> 00:00:14,212 Online. I am now in the lab, so let me 5 00:00:14,212 --> 00:00:17,135 open up the browser where I'm in the 6 00:00:17,135 --> 00:00:19,707 SharePoint Online admin center. All of 7 00:00:19,707 --> 00:00:21,535 those settings are unfortunately not in 8 00:00:21,535 --> 00:00:25,535 the new admin center, so we have to go to 9 00:00:25,535 --> 00:00:28,335 the old admin center. So I'll simply go 10 00:00:28,335 --> 00:00:30,885 into Settings, and at the bottom I will 11 00:00:30,885 --> 00:00:33,580 look in the classic settings page, and 12 00:00:33,580 --> 00:00:37,564 here is where I'll find all of them. First 13 00:00:37,564 --> 00:00:41,469 one, Show or Hide App Tiles. So here I can 14 00:00:41,469 --> 00:00:45,135 decide to show or hide OneDrive and Office 15 00:00:45,135 --> 00:00:49,635 Online and SharePoint. If I go a bit 16 00:00:49,635 --> 00:00:52,802 lower, Microsoft or Office Delve, do I 17 00:00:52,802 --> 00:00:55,135 want to enable Delve and related feature 18 00:00:55,135 --> 00:00:58,707 or disable Delve and related features? I 19 00:00:58,707 --> 00:01:02,421 highly recommend to leave it on, and I 20 00:01:02,421 --> 00:01:04,260 really have to remind you that, as they 21 00:01:04,260 --> 00:01:07,635 say in the description here, the Delve app 22 00:01:07,635 --> 00:01:10,635 will not give additional permissions to 23 00:01:10,635 --> 00:01:14,135 users. It simply allows them quick access 24 00:01:14,135 --> 00:01:16,802 to documents that might be relevant to 25 00:01:16,802 --> 00:01:19,358 them. And, however, I fully understand 26 00:01:19,358 --> 00:01:21,760 that, for some organizations, especially 27 00:01:21,760 --> 00:01:26,135 right after they migrate to Office 365, 28 00:01:26,135 --> 00:01:29,408 permissions might be a bit of a mess, and 29 00:01:29,408 --> 00:01:31,863 you might want to turn it off at the 30 00:01:31,863 --> 00:01:33,850 beginning. However, I highly recommend 31 00:01:33,850 --> 00:01:37,135 turning it on because Microsoft will keep 32 00:01:37,135 --> 00:01:39,885 showing it at conferences, will keep 33 00:01:39,885 --> 00:01:42,935 enhancing it and showing it off in 34 00:01:42,935 --> 00:01:46,885 keynotes, online, in blogs, and then users 35 00:01:46,885 --> 00:01:49,135 are going to get confused when they do not 36 00:01:49,135 --> 00:01:51,954 have access to it, and we don't want users 37 00:01:51,954 --> 00:01:55,735 to see IT as a blocker. So make sure that 38 00:01:55,735 --> 00:01:58,135 you get those permissions problems solved 39 00:01:58,135 --> 00:02:01,735 if you have any, and then try to enable 40 00:02:01,735 --> 00:02:05,135 it, but again, the choice is up to you. 41 00:02:05,135 --> 00:02:09,135 Now let's talk about IRM, Information 42 00:02:09,135 --> 00:02:12,913 Rights Management. For IRM, you don't 43 00:02:12,913 --> 00:02:15,707 actually need to install anything. It 44 00:02:15,707 --> 00:02:19,135 simply comes installed using Office 365. 45 00:02:19,135 --> 00:02:22,335 You can use the IRM service specified in 46 00:02:22,335 --> 00:02:26,469 your configuration or do not use IRM. Once 47 00:02:26,469 --> 00:02:29,850 you have it at use, you have enabled it 48 00:02:29,850 --> 00:02:32,850 for the tenant, but then you still have to 49 00:02:32,850 --> 00:02:36,802 go in specific document libraries. So I'll 50 00:02:36,802 --> 00:02:39,469 go here in this Documents library in my 51 00:02:39,469 --> 00:02:43,635 test site, then I need to go into Library 52 00:02:43,635 --> 00:02:46,278 settings, and I will have Information 53 00:02:46,278 --> 00:02:49,385 Rights Management under Permissions and 54 00:02:49,385 --> 00:02:53,135 Management. And from here, I can restrict 55 00:02:53,135 --> 00:02:55,954 the permissions on this library on 56 00:02:55,954 --> 00:02:59,135 download, let me click on SHOW OPTIONS, 57 00:02:59,135 --> 00:03:01,905 and I can set all of the different IRM 58 00:03:01,905 --> 00:03:04,469 options that I want, such as, for example, 59 00:03:04,469 --> 00:03:07,635 do I want to allow viewers to print? Okay, 60 00:03:07,635 --> 00:03:11,535 yeah, for sure. Do I want to allow users 61 00:03:11,535 --> 00:03:14,335 to run screen readers and download the 62 00:03:14,335 --> 00:03:17,535 document? Yes. And also, I want to say 63 00:03:17,535 --> 00:03:20,246 that document access rights will expire, 64 00:03:20,246 --> 00:03:24,135 let's say, 30 days after it's downloaded, 65 00:03:24,135 --> 00:03:27,135 and then users must verify their 66 00:03:27,135 --> 00:03:30,335 credentials every 15 days. So really, I 67 00:03:30,335 --> 00:03:33,135 can configure them at the library level. 68 00:03:33,135 --> 00:03:35,135 Once you turn it on at the tenant level, 69 00:03:35,135 --> 00:03:38,469 you simply enable that configuration 70 00:03:38,469 --> 00:03:42,635 option, but IRM needs to be configured in 71 00:03:42,635 --> 00:03:46,635 every list and library that you want it 72 00:03:46,635 --> 00:03:49,135 on. Now let's go back to the admin center. 73 00:03:49,135 --> 00:03:53,421 Connection from sites to Office 365 74 00:03:53,421 --> 00:03:57,135 Groups. Do you want to prevent site 75 00:03:57,135 --> 00:03:59,135 collection administrators from connecting 76 00:03:59,135 --> 00:04:02,385 sites to new Office 365 Groups? And 77 00:04:02,385 --> 00:04:04,635 something really important is that this is 78 00:04:04,635 --> 00:04:07,735 for classic team sites. If you have groups 79 00:04:07,735 --> 00:04:10,707 enabled and you already use Office 365 80 00:04:10,707 --> 00:04:13,135 Groups and have that governance in place, 81 00:04:13,135 --> 00:04:17,635 I recommend to allow users to connect and 82 00:04:17,635 --> 00:04:20,535 create new Office 365 Groups. However, 83 00:04:20,535 --> 00:04:23,850 this is really useful if for now you're 84 00:04:23,850 --> 00:04:26,802 only using SharePoint, you're not ready to 85 00:04:26,802 --> 00:04:30,135 use the full tools in Office 365 Groups, 86 00:04:30,135 --> 00:04:32,469 and you want to make sure that you roll it 87 00:04:32,469 --> 00:04:35,674 out in a planned way. This would be a good 88 00:04:35,674 --> 00:04:38,135 one where you would prevent it for now. 89 00:04:38,135 --> 00:04:42,058 Lastly, Comments on Site Pages. Do you 90 00:04:42,058 --> 00:04:45,751 want to allow people to comment on site 91 00:04:45,751 --> 00:04:48,635 pages or not? You can enable it at the 92 00:04:48,635 --> 00:04:50,802 tenant level, disable it at the tenant 93 00:04:50,802 --> 00:04:54,135 level, but what I've seen usually most 94 00:04:54,135 --> 00:04:57,385 commonly done is it being enabled at the 95 00:04:57,385 --> 00:04:59,935 tenant level. But if you have any site 96 00:04:59,935 --> 00:05:01,992 that is more sensitive where you don't 97 00:05:01,992 --> 00:05:05,635 want it to happen, you just disable it at 98 00:05:05,635 --> 00:05:09,535 that site level using the Set-SPOSite 99 00:05:09,535 --> 00:05:13,010 PowerShell cmdlet. That is it for the 100 00:05:13,010 --> 00:05:15,469 other important settings in SharePoint 101 00:05:15,469 --> 00:05:22,000 Online. Now let's go back to the slides and finish off this module.