11 Move, Manage, Protect
Rolling Out OneDrive SuccessfullyWashington DC Metro User Group – 2/8/2017THANK YOU – Bill Baer for the brand new slides
33
Who am I?
Community Member Since 2007
@collabadam
44
Is it Ready? Adoption
Agenda
Deployment
55
Is it Ready? Adoption
Agenda
Deployment
66
Focus on the individual/ OneDrive
Post Ignite momentumOffice 365 OneDrive
Microsoft Teams Admin centerMicrosoft Staffhub SPO Team sites syncSPO Team News Selective syncModern SharePoint list—flow and PowerApps integration
Activity center
Yammer—Office 365 groups integration File activity and insightsOffice activity feed Bandwidth throttling
Stand alone Mac clientConditional access
OneDrive roadmap for 2017 H1Sync and
fundamentalsCollaboration and
sharing Productive photos Insights and analytics Developer Administration
CY17Q1
• Shared Folder and SharePoint Online Sync
• Download multiple files on web
• Access team files from all OneDrive apps
• Rich sharing notifications
• New web sharing experience
• Improved sharing mails
• Multi page scan from mobile app
• File Handlers preview
• Microsoft Graph improvements
• New OneDrive Admin Console
• Device based conditional access policy
• Location based conditional access policy
• Multi Geo preview
CY17Q2
• Share from Explorer
• Office Instant Previewers
• New Shared by Me
• Updates to Shared with Me
• Password protected links
• Access stats per file
• File Activity across OneDrive apps
• Version History API
• OneDrive and SharePoint file picker SDK
• Flow integration
• Remove # and % blocked characters restriction
• BYOK preview
• Increase MaxPath
• Sharing controls
MICROSOFT CONF IDENT IAL – INTERNAL ONLY
99
Where Does OneDrive for Business Fit In?
OneDrive through the years2007 2010 2011
2013
2015 2016 New Sync Client
SkyDrive becomes OneDrive
SkyDrive website
SkyDrive sync client
SkyDrive iOS and Windows
Phone apps
OneDrive Mobile Apps
SkyDrive ships with Windows
8.1
Windows Live
Folders become SkyDrive
SkyDrive Xbox app
SkyDrive Android
app
New OneDrive website
OneDrive Graph API
Office Online
Integration
SkyDrive API
2012
IGNITE 2016
Office 2013&
SkyDrive Pro
launches
2014
Authoring
WordExcel
PowerPointOneNote
Mail & Social
OutlookYammer
Sites & Content
OneDriveSharePoint
Delve
Chat, Meetings & Voice
Microsoft TeamsSkype for Business
Analytics
Power BI Microsoft Graph
Office 365The most complete, intelligent & secure service for digital work
Office 365 Groups Graph Security & Compliance
Intelligently discover, share, and collaborate on content from anywhere &
on any device
OneDrive by the numbers
OneDrive all up
OneDrive for Business
250M Mobile app downloads
1 EXB Data stored
100M+ Active users
99.999% Cloud reliability
100% YoY growth in monthly active usage
300% YoY growth in storage
Compliance certifications
Argentina PDPA CSA-CCM CS Mark (gold) DISA ENISA IAF EU Model Clauses
FDA 21 CFR Part 11
FedRAMP FERPA FIPS 140-2 FISC FISMA
GxP HIPAA/HITECH CCSL (IRAP) ISO/IEC 27001 ISO/IEC 27018 Japan My Number Act
MTCS NZ CC Framework Section 508/VPATs Shared Assessments
SOC 1 SOC 2
ENS Spain UK G-Cloud
My files Our filesOur files
File share vs. collaboration
Anywhere access and sharing for all your files
Content collaboration for teams and organizations
CollaborationIntelligence
MobilityTrust
Is it Ready? Adoption
Agenda
Deployment
Understanding your company’s file ecosystemThink about your users’ habitsWhere do your users work every day? Where do they put their files? Do your users already have files in OneDrive?
Think about content generation across your company Where are the bulk of the files being generated today?Do you have GBs, TBs of content already?
Balancing end user and IT expectations
Consumer-level ease of use vs. IT compliance and security
Store anything
Share with anyone
Access from anywhere
Use all my devices
Full auditing transparency
Control external access
Protect sensitive data
Control unmanaged devices End user IT pro
+
Security, usability, and data sensitivitySecurit
yUsability
Data sensitivityLow High
Security, usability, and data sensitivitySecurit
yUsability
Data sensitivityLow High
Security, usability, and data sensitivity
Security
Usability
Data sensitivityLow High
• Seamless Office integration on desktop along with browser and mobile • Productivity experiences like modern attachments• and integration with Microsoft Flow
Differentiating OneDrive for Business
User experience
IT controls Deployment Cloud leadership
User experience• Seamless Office integration on desktop along with browser and mobile • Productivity experiences like modern attachments• Search and insights powered by Microsoft Graph• Collaboration experience with SharePoint Teams across sync, browser and
mobile
IT controls• Cost and Management—OneDrive for Business comes bundled with Office
365• Dedicated admin center • Extensive DLP, eDiscovery, Data Retention controls—not just for ODB
but right across the Office 365 suite• Auditing via our Security and Compliance Center
OneDrive for Business, comes bundled with your Office365 subscription. The Office 365 collaboration offers rich integration across products.
OneDrive as an ecosystem
Intelligence
.
Productivity
Team collaboration
Modern sharing
Social sharing
Automated work
OneDrive sync client Mac StandaloneFeaturesDeployable package with all languages includedAutomatic updater (invisible to user)Creates Finder Shortcuts to your synced foldersAutomatically turns on Finder extension for sync status overlaysOpen at login enabled by default
Configurable OptionsRun at loginDisable personal accountsSet default folder location and/or disable change locationHide dock iconComing soon: Automatic upload bandwidth allocation
Is it Ready? Adoption
Agenda
Deployment
The Deployment Journey
OneDrive everywhere with your user’s Documents, Pictures and Desktop in sync
OneDrive Sync
Team Sites Sync
Document Redirectio
nUnattended Setup
Deployment & Operational Tools
3434
Scenarios
Scenario:Everyone on Windows 10
3535
Scenario:Different computers PCs & Macs
Deployment
Three Steps of Deployment
MonitorPrepare For Rollout
Controlling access to data
AppMobile App is managedMobile App reputationSaaS app sensitivity
OtherNetwork locationBreach detected
DeviceManaged Compliant
UserGroup membershipsAuth strength (MFA)Risky behavior
Conditional access with EMS
Users, device and applicationsManage UsersAAD to manage users and groups Enforce strong passwordsMulti factor authenticationConditional access based on users and groupsRevoke suspicious user sessions
Manage device and application accessIntegrated device and app management through Microsoft InTune Prevent or downgrade access on unmanaged and non-compliant devices Control apps and their level of access on both managed and unmanaged devicesIntegration with other EMM providers such as MobileIron, AirWatch etc.
Location and data sensitivityManage location of accessRestrict access to specific IP ranges Automatically revoke access when user moves to untrusted location
Manage access to sensitive dataOffice 365 Data Loss Prevention (DLP) policies protect sensitive dataPrevent sharing of sensitive data with external users or within the organization
Sharing controlsManage external sharing in your organizationRestrict who can share with whomControl what data can be shared with external usersRestrict what external users can do
DEPLOY!
Behind the Scenes
Wait for Silent Manual
IT insights, security, control and complianceOne directory – AAD
Powerful capabilities with conditional access and policies
Manage employees and guests (no cost)
Integrated with Azure Information Protection, and Intune MDM/MAM
Integrated admin capabilities and simple OneDrive Admin
Auditing and reportingAuditingEvery user action recorded for full audit trailCustom alerts to get notified when a specific event occursOffice 365 Management Activity API to export audit logs
ReportingFull usage dashboard to monitor all Office 365 servicesTenant level and per user reporting
Sync Network Utilization Pattern
Time
Load
Initial Sync Operation & Organic Usage Growth