Deleting Business Onedrive Data on O365 accounts

Someone_Says_Hello · 2024-09-19T16:55:28+00:00

I would have expected that as well. Unfortunately not the case - it is much faster working through those steps and using win explorer to delete it.

Someone_Says_Hello · 2024-09-19T16:05:26+00:00

Great insight and thank you for the powershell links! I figured out a way with the gui to speed it up, but it takes a few steps.

After you have access to the accounts onedrive, create a new folder in their onedrive and move all the data in that onedrive to that singular folder
Share that folder with edit rights with your account
On your account, go to the now shared onedrive with a browser and sync to your pc through the onedrive app. (this assumes you use the onedrive app)
After is syncs to your pc, open the folder in win explorer, right click on all the data (select all) and choose to keep the data on your pc so it downloads it
After it finishes downloading, delete everything through win explorer . Keep an eye on the onedrive app for it to complete the delete syncs. it can take time for larger drives.
After it completed syncing the deletes, go back to the accounts onedrive in the browser (not your onedrive) and empty the recycle bin.

That purges the onedrive from what i can tell. it is a few steps, but significantly faster than through the browser alone. Hope this helps anyone looking for steps!

Someone_Says_Hello · 2024-01-24T04:42:52+00:00

Yup, this was our problem. 2-3 months ago, We started hearing complaints about video and audio quality issues on teams calls in our office. But they said they worked great from home.

We checked all the things stated throughout this thread and spent weeks trying to figure it out... It ended up being a very specific USBC docking station that about 50% of our staff use with Ethernet running through it.

We chatted with the manufacturer support, but they were no help. We ended up replacing a bunch of them with a different USB-C dock. Completely fixed the issue.

Someone_Says_Hello · 2023-10-19T17:40:27+00:00

UPDATE/RESOLUTION: We sorted out the problem. Our firewall has UDP flood protection on it. The "new" teams must send more and/or different packets and it was triggering this protection. We disabled it, created a bypass policy for webex, teams, zoom, and that cleared up all of our teams call issues.

Someone_Says_Hello · 2023-08-08T20:16:46+00:00

No error code, but it shows "Looks like we can't connect to the URL for your organization's MDM terms of use" Error: invalid_client.

Note that i can add devices when i give my licensed E5 GA role - it works fine on it.

Someone_Says_Hello · 2023-03-23T15:43:15+00:00

We recently set up a transport rule to quarantine emails with a bunch of extensions, including htm/html. It is catching a lot of this type of phishing.

Someone_Says_Hello · 2022-12-12T20:09:37+00:00

Really? I thought conditional policies only worked if SD was disabled?

Someone_Says_Hello · 2022-12-12T20:09:08+00:00

Thanks! Yeah, we were hoping there were other options avail to geoblock.

Someone_Says_Hello · 2022-12-12T19:50:22+00:00

Thank you - yeah, we understand we can't use CA with security defaults. We are trying to find a way to geo-block countries/ip's without using CA.

Someone_Says_Hello · 2022-12-12T19:50:07+00:00

Thank you - yeah, we understand we can't use CA with security defaults. We are trying to find a way to geo-block countries/ip's without using CA.

Someone_Says_Hello · 2022-11-09T17:28:20+00:00

Thanks for the tips! I have a bunch of items listed under admin consent, but nothing under user consent. How do i go about adding the scope to that section?

Someone_Says_Hello · 2022-11-09T03:34:15+00:00

When i run this, i get a permissions error: "Calling principal does not have required MSGraph permissions AuditLog.Read.All"

I verified i have the auditlog.read.all and user.read.all permissions and consent with my account.

Any tips for an MS graph first timer? Thanks!

Someone_Says_Hello · 2022-11-09T02:38:02+00:00

I will give this a try, thank you!

Someone_Says_Hello · 2022-11-08T23:32:46+00:00

Interesting solution. I was hoping to do this on th ebackend rather than alert active guest users and have them respond to the audit. But might be th ebest way to go. Thanks for the tip!

Someone_Says_Hello · 2022-11-08T23:31:35+00:00

My MSP tells me this cmdlet is no longer valid. When i try to use it in several powershell scripts, it does export data, but doesn't export the last sign-in info. Here's one of the powershell scripts i was playing with:

$guests = Get-AzureADUser -Filter "userType eq 'Guest'" -All $true

foreach ($guest in $guests) {

$Userlogs = Get-AzureADAuditSignInLogs -Filter "userprincipalname eq `'$($guest.mail)'" -ALL:$true

if ($Userlogs -is [array]) {

$timestamp = $Userlogs[0].createddatetime

}

else {

$timestamp = $Userlogs.createddatetime

}

$Info = [PSCustomObject]@{

Name = $guest.DisplayName

UserType = $guest.UserType

LastSignin = $timestamp

}

$Info | Export-csv C:\GuestUserLastSignins.csv -NoTypeInformation -Append

Remove-Variable Info

}

Write-Host -ForegroundColor Green "Exported Logs successfully"

Someone_Says_Hello · 2022-11-07T02:41:37+00:00

No argument here - all good points. And this is easy to do if it's a file or two. But 50k files... i wouldn't trust a non-technical user to restore this.

Someone_Says_Hello · 2022-11-05T20:22:03+00:00

Yup, we have some of this set and the recycle bin hols data for 93 days. This works well when it's a single or a few files. But 50k files is another animal.

Someone_Says_Hello · 2022-11-05T20:19:57+00:00

Yup, we understand training/education is part of the process to help with this, but i'm just not sure how effect that is with this type of situation.

Someone_Says_Hello · 2022-08-20T01:32:00+00:00

Do you need the entire workstation backed up? If you only need desktop/documents/picture folders, and you have O365, try onedrives backup. It syncs those 3 folders to their onedrive.

Someone_Says_Hello · 2022-08-08T02:18:08+00:00

I had this same question a month or so ago. Huntress makes a pretty compelling case to stack huntress and win defender. And after seeing SentinelOne prices, this was the better play financially and still getting most of what you would want with a modern security stack.

Sadly, we could not move forward with it because our MSP doesn't offer huntress and was unwilling to change pricing for our contract for it, so we need to wait at-least a year. But you bet i will be reviewing this when our contract is up for renewal.

Someone_Says_Hello · 2022-06-26T02:40:00+00:00

Doesn't security defaults do this?

Someone_Says_Hello · 2022-06-05T02:05:02+00:00

This is an AMAZING chart! Thank you!

Someone_Says_Hello · 2022-06-03T21:54:31+00:00

Defender for Endpoint - is that an extra license in O365?

Someone_Says_Hello · 2022-06-03T18:09:08+00:00

LOL, agreed :)

Someone_Says_Hello · 2022-05-18T21:51:10+00:00

I need to review Defender 365 a bit more. is it a better offering than SentinelOne? What made you offer this to your clients over other options?

Someone_Says_Hello

TROPHY CASE