Office 365 Internet Zone Settings

This is a follow-up to my 2015 post about the recommended IE Internet Security Zone settings for maximum user authentication happiness.

On the post http://www.tuomi.ca/2014/06/23/overcoming-sticky-logouts-office-365-azure-windows-intune-web-browser/, I tried to rationalize IE security settings relating to Office 365.

Here’s a good explanation of why we should care, as quoted from the more recent MSFT post:
“Starting with Windows Vista , Internet Explorer has a new security zone protection feature, called protected mode, and that is set up by default for Internet, Intranet and Restricted Security zones.

Understanding and Working in Protected Mode Internet Explorer

The effect of the protected mode is that the sites in these zones will not have access to the folders available to other application (i.e. data available in other zones). This means the cookies available for one session for a site in a Protected mode zone will not be accessible to a site that resides in a separate zone (and the other way around), which will trigger behind the scene repeated authentication attempts.”

Net result: persistent login prompts, hair pulling, annoyances. The fix? Either manually or through group policy, apply the following settings to your Windows workstations:

Trusted Sites Zone:
https://*.microsoftonline.com
https://*.sharepoint.com
https://*.sharepointonline.com
https://*.outlook.com
https://*.lync.com
https://*.office365.com
https://*.office.com
https://*.microsoftstream.com
https://*.sway.com
https://*.powerapps.com
https://*.yammer.com

Intranet Zone:

*.microsoftonline.com
*.sharepoint.com
*.sharepointonline.com
*.outlook.com
*.lync.com
*.office365.com
*.office.com
*.microsoftstream.com
*.sway.com
*.powerapps.com

 

 

References:
https://blogs.technet.microsoft.com/victorbutuza/2016/06/20/o365-internet-explorer-protected-mode-and-security-zones/
– Latest new URL’s added e.g. PowerApps.com
https://support.microsoft.com/en-us/help/2507767/problems-when-signing-out-of-office-365–azure–or-intune-in-a-web-bro – Original official reference.

 

Continue Reading No Comments

TechNet: Are you a technology guru? Show us your solutions and become Guru of the Month!!

From TechNet:

Starting this month, TechNet Wiki is looking for and celebrating the best of the best!

Is that you? Do you consider yourself an expert, or authority on SharePoint?

Show us your forum solutions and become MICROSOFT TECHNOLOGY GURU OF THE MONTH!

This is an official Microsoft TechNet recognition programme, where people such as yourselves can get the recognition you deserve, for the time you’ve given the community.

If you spend any amount of time crafting an awesome answer to a forum question, then why not get the most back for your efforts, by posting it to TechNet Wiki.

1) Please copy over any solutions you post here to TechNet Wiki.

2) Add a link to it on THIS WIKI PAGE, so we know you’ve contributed

3) Every month, we will highlight your contributions, and select a “Guru of the Month” in each technology.

This is a new initiative, currently only rewarding “textually” in the TechNet blogs, similar to my weekly contributor awards, however once “on our radar” and making your mark, you will probably be interviewed for your greatness, and eventually even invited into other TechNet/MSDN circles!

Either way, winning this award in your favoured technology can only be good for your career! 😉

This is BRAND NEW INITIATIVE, AS OF TODAY, JUST GONE LIVE, and there’s only 11 days left for May. So if you get one in now, you have a better chance of winning the first of this new monthly award!

For more on the benefits, recognition points & glory of posting to TechNet Wiki, please read this sticky.

Continue Reading No Comments

Categories