Search This Blog

Monday, August 10, 2020

Microsoft 365 Apps modern management, get rid of nag screens

How often have you clicked through numerous screens when starting the local office package? I know I have done my fair shares, and I am done with it.

image

 

As we enter the cloud with more and more services, we also have new tools providing control across our devices. I mean with Microsoft 365 apps it enables us to work anywhere with the online access, and with a local copy at home. We need tools to provide policies to all locations and not only at work.

Work is not a place.

 

If you like me do not like prompts, tips or other “helpful” popups while using Office 365 on a new device, then you should read along.

In this guide I will use 3 techniques. I could easily put everything in a PowerShell script, but I like to use the tools we are given by Microsoft.

 

1. https://config.office.com/

2. Administrative Templates (intune)

3. Powershell Script

 

Prompts we are removing: (some pictures in Danish)

clip_image001

clip_image002

clip_image003

clip_image004

clip_image005

Ok so I have seen these prompts like a ton of times and I just want to use Office without having to click a million prompts.

First set default policies to https://config.office.com/ as we can define a baseline that will target all accounts authenticating to Microsoft 365 Apps.

 

Go to https://config.office.com/

Log on as an administrator

clip_image006

clip_image007

Give it a default name

clip_image008

Click Assignments

clip_image009

Choose “this policy configuration applies to users”

clip_image010

(I create a test group before applying to all users. You might do the same.)

Target your Azure AD group

clip_image011

Configure Policies

clip_image012

Search for these policies and set them to “Enabled”

clip_image013

Hit Create

clip_image014

First step done. These settings will apply from the cloud on every device where you use your office 365 account. Pretty neat!

 

Next, we like to remove the tips that Microsoft are giving us. I have not come across that this is a GPO that can be added, so here we need to create a PowerShell script. I already did, so you can have mine.

https://github.com/mindcoredk/Public/blob/master/RemoveBalloons.ps1

Save the script to your device as we need to upload it to Intune.

 

Go to https://endpoint.microsoft.com

Devices -> Windows -> PowerShell Scripts -> Add

clip_image015

Build a standard structure that document itself.

clip_image016

Upload the script and “Run this script using the logged-on credentials”

clip_image017

Assign it by selecting a group

clip_image018

Again, I start with a test group before adding new stuff to everyone

clip_image019

Add it

clip_image020

Ok so we are pretty much ready for a silent start of every product in the Microsoft 365 Apps for business.

 

Last thing to setup is Outlook to automatically configure your profile based on primary SMTP address.

Go to https://endpoint.microsoft.com

Devices -> Windows -> Configuration profiles -> Create Profile

clip_image021

clip_image022

Naming standards + make it easy to get overview of your setting when debugging or reviewing them later.

clip_image023

Enable “Automatically configure only the first profile based on ac….”

clip_image024

clip_image025

Assign it to your test group

clip_image026

Create

clip_image027

Happy testing!

No comments:

Post a Comment