Matt Gibson

I help IT organizations get the most out of their Microsoft investment 😎

[Matt Gibson @Gibz]

👀 Looking for honest feedback

Unfortunately, I was turned down for the European Collaboration Summit 2024. My session title and description is below. Would anyone have been interested in this topic? If not, what should I have done differently?

Title:
Maximize E3 Potential: How to Govern Microsoft 365 for E3 License Holders

Description:
Many companies feel they HAVE to have E5 licensing to properly govern their Microsoft 365 tenant, and that's simply not true. There's a lot we can do with the tools included in the E3 license SKU

[Matt Gibson @Gibz]

@DanielGlenn I prefer that over using a second laptop!

[Matt Gibson @Gibz]

Does anyone know if it’s possible to programmatically set a sensitivity label to a document library via SharePoint Advanced Management? #sharepoint #microsoftgraph

[Matt Gibson @Gibz]

@MKBHD Wow you’ve accomplished your success by 30. That’s awesome Marques!

[Matt Gibson @Gibz]

Had to get on the Microsoft Designer train and create an avatar!

#microsoft #designer #design #creativity #generativeai #ai #artificialintelligence #dalle3 #dalle

[Matt Gibson @Gibz]

@SuperSimple365 Mark, do you know if they made the old “project on the web” a premium template?

[Matt Gibson @Gibz]

@Todd_Crooks Congratulations Todd!

[Matt Gibson @Gibz]

Stocking up! @jockowillink

[Matt Gibson @Gibz]

Gotta make up for yesterday somehow! #wehackhealth

[Matt Gibson @Gibz]

@DanielGlenn As a consultant with far too many Edge profiles, this drives me insane!

[Matt Gibson @Gibz]

@_POPPELGAARD @Microsoft It’s like the old SharePoint wheel, but Copilot!

[Matt Gibson @Gibz]

I have no need for a new keyboard. I already have 3..

But those Sterling colors tho… 🤤

[Matt Gibson @Gibz]

@j4ykadam Any time I have 10 mins free between meetings, I hit up monkey type. Congrats on the new PR!

[Matt Gibson @Gibz]

Oh my gosh this is amazing. Cant wait to see this roll out!

Microsoft might not always be 💯 right out the gate, but over time, 🤌

[Mark Thompson @SuperSimple365]

🆕 The tired old Files app in #MSTeams is dead. Long live the excellent #OneDrive app!

Soon, the Files app in Teams will be replaced by the OneDrive experience.

📆 Due late November to mid-December.

🔗 https://t.co/BwSmgUCvas

🔗 Also new in Teams: https://t.co/bcpaUyhD5N

[Matt Gibson @Gibz]

@TKarafilov Congratulations!

[Matt Gibson @Gibz]

🔐 Secure guest sharing: 9 tips to help!

Ensure MFA for your guests! [configured in Entra ID]

Have them accept Terms of Use. [configured in Entra ID]

Expire access after 60 days. [configured in SharePoint admin center]

Ensure guests cannot share what they don't own [configured in SharePoint admin center]

Limit guest access to web-only (be careful, this restricts download, print, and sync) [configured in SharePoint admin center]

Ensure applications can only connect using modern authentication [configured in SharePoint admin center]

Boot inactive users [configured in SharePoint admin center]

Require group owner approval for guest invites [configured at SharePoint site level]

Restrict sharing by domain at tenant or site level [this can be configured at SharePoint admin center OR site level]

[Matt Gibson @Gibz]

@LShelton_Tech Seriously! I really love where Microsoft is going. It’s such a refresh from the old ways. But wow is it getting pricey…

[Matt Gibson @Gibz]

Greenfield Microsoft 365 Tenant? 🙌

There are 2 things you can't change after creating the tenant, so choose wisely:

🙅‍♂️ Tenant name (check availability at https://t.co/6DM7tZzWoQ)
🌏 Tenant region

With the tenant created, there are a few more things to be careful of. You can technically do these later, but it'll be harder than doing it upfront:

🌎 Multi-geo
⚖ Governance

[Matt Gibson @Gibz]

@0xDigital @HackingDave How did today go??

[Matt Gibson @Gibz]

😍 OneDrive Governance: sync client settings.

There are a lot of settings you can configure to ensure that the OneDrive sync client is being used properly in your tenant. Remember, it's not just OneDrive that uses the sync client. Any syncing from Teams and/or SharePoint uses it as well.

Here are the most common ones I see configured at our clients:

✅ Allow syncing OneDrive accounts for only specific organizations (AllowTenantList)
✅ Prevent users from syncing libraries and folders shared from other organizations
✅ Prevent users from changing the location of their OneDrive folder
✅ Prevent users from syncing personal OneDrive accounts
✅ Require users to confirm large delete operations
✅ Prevent users from redirecting their Windows known folders to their PC
✅ Silently move Windows known folders to OneDrive
✅ Prompt users when they delete multiple OneDrive files on their computer
✅ Block file downloads when users are low on disk space
✅ Silently sign in users to the OneDrive sync app with their Windows credentials (this requires Entra ID joined or hybrid Entra ID joined devices)
✅ Enable sync health reporting for OneDrive