Office 365 Internet Zone Settings

This is a follow-up to my 2015 post about the recommended IE Internet Security Zone settings for maximum user authentication happiness.

On the post http://www.tuomi.ca/2014/06/23/overcoming-sticky-logouts-office-365-azure-windows-intune-web-browser/, I tried to rationalize IE security settings relating to Office 365.

Here’s a good explanation of why we should care, as quoted from the more recent MSFT post:
“Starting with Windows Vista , Internet Explorer has a new security zone protection feature, called protected mode, and that is set up by default for Internet, Intranet and Restricted Security zones.

Understanding and Working in Protected Mode Internet Explorer

The effect of the protected mode is that the sites in these zones will not have access to the folders available to other application (i.e. data available in other zones). This means the cookies available for one session for a site in a Protected mode zone will not be accessible to a site that resides in a separate zone (and the other way around), which will trigger behind the scene repeated authentication attempts.”

Net result: persistent login prompts, hair pulling, annoyances. The fix? Either manually or through group policy, apply the following settings to your Windows workstations:

Trusted Sites Zone:
https://*.microsoftonline.com
https://*.sharepoint.com
https://*.sharepointonline.com
https://*.outlook.com
https://*.lync.com
https://*.office365.com
https://*.office.com
https://*.microsoftstream.com
https://*.sway.com
https://*.powerapps.com
https://*.yammer.com

Intranet Zone:

*.microsoftonline.com
*.sharepoint.com
*.sharepointonline.com
*.outlook.com
*.lync.com
*.office365.com
*.office.com
*.microsoftstream.com
*.sway.com
*.powerapps.com

 

 

References:
https://blogs.technet.microsoft.com/victorbutuza/2016/06/20/o365-internet-explorer-protected-mode-and-security-zones/
– Latest new URL’s added e.g. PowerApps.com
https://support.microsoft.com/en-us/help/2507767/problems-when-signing-out-of-office-365–azure–or-intune-in-a-web-bro – Original official reference.

 

Continue Reading No Comments

What is Office 365? Two simple & current Infographics

You just know you’re in a complex business when even having a good oversight of the major tangents of what you do, is hard to come come by. In Office 365, we have a lot of new services being added on to plumbing/infrastructure backbone of the already massive SharePoint framework.

Conversely, recent changes to SharePoint itself have consolidated some of the user experience scenarios, addressing BIG day to day problems for information workers – file collaboration, CMS-style content publishing and getting away from a “one-size fits all” intranet scenario.

So what IS the mile high perspective? Naming the services is one thing, but showing their intended relationship with each other is crucial. It’s said you don’t really understand something unless you can explain it in simple terms-  here’s two awesome takes on it:

 Image provided by Christophe Fiessinger Office 365 product manager, you can find him on Twitter at https://twitter.com/cfiessinger

..and here’s a different perspective, from Ben at ShareGate:

What's in Office 365 infographic

Crafted by: Sharegate, The SIMPLEST Office 365 and SharePoint Security & Management tool suite.

Continue Reading No Comments

Categories