Categories
Microsoft365

File Requests In OneDrive – A Versatile Tool In Education

UPDATE 3rd April I was inspired after talking to some colleagues to create a quick video showing the awesome way to collect files with OneDrive File Requests and share with colleagues in the Teams file section easily. Check this out:

Original Post below:

The product set inside of Office 365 is continually evolving and today I was thrilled to see a new feature rolling out called File Requests. The official documentation is here, and it was launched in Q4 2019 according to the Microsoft 365 Road Map (that’s an incredible website – bookmark it and use the filters effectively to find out what’s coming and what has been released already).

File Request Rolling Out
The Microsoft 365 Roadmap shows that the new feature of File Requests was released in Q4 2019

I tweeted about this yesterday and it was well received by educators who had longed for this functionality:

What Is File Request?

With the file request feature in OneDrive, you can choose a folder where others can upload files using a link that you send them. The users that you request files from cannot see what’s in the folder – they can only upload files to it.

With a file request:

  • Anyone can send you a file – they don’t need to have OneDrive.
    • This is critical – reducing the barriers to collaborators sending you content by requiring no authentication and no existing account/subscription for a service means users can send the files you need with the least amount of hassle.
  • All the files sent to you are saved in a single folder that you choose.
    • See the scenarios below – the ability to collate all files inside your OneDrive is awesome.
  • People who respond to your request can only upload files. They do not have view or edit access to your OneDrive.

    • Security, security, security – preventing people from seeing the submissions of other collaborators means you can use OneDrive File Request with confidence that anonymity is assured for the submitter.

Some other cloud storage providers offer this as well – notably DropBox – however there are many reasons why educational institutes would like to use OneDrive for this functionality.

Concerns Around Shadow IT

I’ve written previously about teachers using “Shadow IT” services in their schools, this post focused on compliance risks around unauthorised sharing of intellectual property, and this one summarised the views of the New Zealand Government’s Chief Digital Officer on the topic. In the second report, it was noted:

“Shadow cloud” is a name given to public cloud services that employees use without formal approval. Shadow cloud usage exists for many reasons. For example, agency employees who have used public cloud services in previous jobs or at home often see the opportunity to use them in their work.

Generally, the motivation of employees (in this case, teachers, faculty and administrative staff) is good: they simply want to be more effective and efficient in their role and use tools to that end. However, many third party apps will likely not meet regulatory or compliance requirements and also mean that content is being shared in ways that can not be controlled, monitored or searched should the need arise.

This is why File Requests inside of OneDrive is so critical – it negates the need for Shadow IT by providing very useful functionality (see below for scenarios where this could be leveraged in educational institutes), whilst still affording the school all the benefits of strong security and compliance of the files. If you’re unfamiliar with the tools inside of Office365 in this space, a good starting point would be:

How Does File Requests Work?

  1. In your OneDrive, select the folder where you want the files to be uploaded, and then click Request files.

    The Request Files menu option in OneDrive for Business

  2. Under What files are you requesting, enter a descriptive name for the files you are requesting from others. (They’ll see this description when they get the file request.)The Request files dialog box after requesting files in OneDrive for Business
  3. Click Next.
  4. You can click Copy link to copy the request link and send it to anyone you would like to request files from, or you can enter the email address or addresses of the people you want to request files from. You can also type a message that will be included in the email that OneDrive sends to them.The Send file request dialog box providing a link or email address option in OneDrive for Business
  5. Click Done.

You’ll receive a notification email whenever someone uploads files to your file request folder.

The great part of this service is that anyone with the link will be able to upload files to the request. However, they aren’t able to see or edit other contents in the folder or see who else is able to upload files. They also do not need to be OneDrive subscribers – they simply click the link and enter their name so their file uploads are identifiable.

When recipients click the link, they’ll see:

The notification received when a OneDrive for Business user requests files

Notes:

  • If the recipient is not signed in, the recipient will be asked to add a first name and last name to help the requestor identify the different files uploaded. The provided first name and last name is not validated; it is purely for identification of the files (the name is prefixed to the uploaded file names)
  • If the recipient is signed in and responds to the request, the identity is recorded as part of the upload.
  1. Click Select files, browse to the appropriate folder, and select the file being requested. If you need to add additional files, click Add more files.
  2. When you’ve selected all the requested files, click Upload.The dialog box for uploading files in response to a file request in OneDrive for Business
  3. Recipients will get another notification once their files have been successfully uploaded.The notification received after a successful file upload in response to a file request in OneDrive for Business

Where Could This Be Used In Education?

There are a number of scenarios where this could be used in education and in fact, I used the DropBox equivalent in 2016 when I was running a Digital Scavenger Hunt for students in a school competition. I wrote about this extensively here, because at the time I had to crowdsource ideas on how to achieve this:

Initially, I was unsure of the best technology to get students to submit their photos and videos to a central location easily, and without needing a specific app or account. I tried to crowdsource some suggestions through my PLN (Professional Learning Network) on Twitter, with ideas of using PadletClusterInstagram and Google Drive all being suggested. I also thought about setting up an open course on our Moodle site that students could submit photos and videos for the competition through, however the reality is that it is still not super easy from a mobile phone to do this.

In the end the I opted for DropBox for the reasons I explained in the blog post, but now I’d definitely choose OneDrive File Requests. So what scenarios could this apply to?

  • Digital upload competitions, like the Digital Scavenger example above.
  • Assignment scenarios where large media files (videos, high resolution RAW photos etc) need to be submitted, but students can not see other files submitted by fellow students
    • Most Learning Management Systems have a maximum file submission size (e.g. in Microsoft Teams For Education it is 50MB)
  • Job Applications – asking potential employees to upload job applications to a single repository – with File Requests they’re secured in your OneDrive with things like Office365 Retention Policies and Version Controls protecting them, but none of the applicants being able to see them.
  • Photo Collections from events – this is one of the more popular scenarios – imagine a school sports day or festival and students have taken photos on their smartphones. Having an easy method to collect these in one place without requiring authentication or a dedicated app. Simply distribute the link and photos will be uploaded quickly and easily – a great example of crowdsourcing!
  • Articles for school newspapers / magazines that are written by many authors, sometimes staff members, students, external coaches and contractors – having a single point of collation makes for a super easy process of submission and subsequent organisation.
    • File Request also has the ability to set a cut off date when submissions can no longer be made – a useful way to try and drive compliance to a due date!
  • RFP responses from contractors – when a large school project is being outsourced, having respondents submit their proposals in an easy manner (that doesn’t require authentication or existing subscriptions to a service) is a very convenient method for both the school and the external parties.

Final Thoughts

Managing Shadow IT is an increasing concern for many ICT Directors and CIO – having the ability to offer staff the ease of use of File Requests coupled with the security and compliance of OneDrive and Office365 is something that many school leaders will be excited about.

It shows the continual evolution of the offerings inside the suite of Office365 and that is a great thing – perhaps the only challenge is keeping up with all the announcements! For that reason, do make sure you regularly check the Microsoft 365 Roadmap link I referenced earlier!

One thing that is worth noting is your Office 365 administrator must enable Anyone links in OneDrive for file requests to work. If you don’t, you’ll see this dialogue:

File Request
If you’re seeing this, you need your Office 365 Administrator to turn on “Anyone links” in your tenant
Categories
Microsoft365 Windows 11

Guest Posts: The Future Is Password-less & Intune For The Win!

In previous blog posts I’ve made, I’ve been quick to redirect readers to other’s blogs when I see an awesome post that covers a topic I’m interested in really effectively. Today is no different, except that I’m going to share with you two posts at the same time.

Identity.PNG

Enable Password-less Sign In With Security Keys

Original Post Here

A month or two ago a colleague showed me signing into the online Office Portal using a Yubikey – what intrigued me was not just no need to enter a password, but no need to enter a username. From this, I quickly obtained my own Yubikey, set up a demo environment and ended up demonstrating this during a presentation on Data Privacy and Security Considerations at the Independent Schools of New Zealand Annual Conference..

As I was getting on a plane this week I read Peter van der Woude’s latest post on using this technology to go a step further: signing into a Windows 10 1903 machine with a Yubikey but also managing all of this via Intune (additional information here):

If you’ve never used a Yubikey before, you essentially configure them with account credentials, which could be anything from your AzureAD username/password, through to your social media or other cloud services accounts, protect the key with a local PIN and/or biometric and you’re done. When you’ve configured a service, such as Twitter, to use your Yubikey, you’re prompted to insert the key into the device to authenticate, unlock it with your PIN and/or biometric, and the authentication is completed. The important point is you’ve never entered your username and/or password.

People often ask me, why is a PIN more secure than a password? Well, I’d suggest you read this article from The Verge, but perhaps more importantly, this documentation from Microsoft,  which goes into detail on the following reasons:

Why is a PIN more secure than a password?

  1. PIN is tied to the device: That PIN is useless to anyone without that specific hardware. Someone who steals your password can sign in to your account from anywhere, but if they steal your PIN, they’d have to steal your physical device too!
  2. PIN is local to the device: A password is transmitted to the server — it can be intercepted in transmission or stolen from a server. A PIN is local to the device — it isn’t transmitted anywhere and it isn’t stored on the server.
  3. PIN is backed by hardware: The Hello PIN is backed by a Trusted Platform Module (TPM) chip, which is a secure crypto-processor that is designed to carry out cryptographic operations. The chip includes multiple physical security mechanisms to make it tamper resistant.
  4. PIN can be complex if enforced by the organisation: You can require or block: special characters, uppercase characters, lowercase characters, and digits.

Why does this matter for education?

The ISNZ conference I presented at had a theme of “The Future of Talent” and all educational institutes need to be thinking about how they’re preparing students for the workforce, and this includes actively teaching and modelling good digital citizenship when it comes to security. Of course, this extends to parents as well: my eldest daughter signed up for Instagram this week and the first action I required of her was to set up multi factor authentication.

In many K-12 and Higher Education institutes, students use shared devices and routinely enter their passwords. A Yubikey would both simplify and secure this approach. Similarly, for younger students who often find it difficult to remember a username and password combination, using a Yubikey and remembering only a PIN could be a more effective approach.

I’ve been advising customers that MFA should be seen as a requirement for any senior leadership staff, HR, Finance and those dealing with pastoral care records in education, but to further protect their identity credentials using something like a Yubikey would be a sensible approach, especially given the relatively low cost of the keys and the ability to use them across almost all online services now. I have configured my Yubikey as an authentication mechanism for:

  • AzureAD
  • Microsoft Account
  • Google Account
  • Twitter
  • LinkedIn
  • DropBox
  • WordPress

If you’re not doing MFA or would like to know more about a password-less future then read Peter’s blog and talk to your local IT Team or Partner.

User Interactive Win32 Intune App Deployment with PSAppDeployToolkit

The second guest blog post I’d like to call out today is from Stefan van der Busse and show cases his great work extending some of the advanced Win32 app deployment features of Intune and combining it with User Interaction to deliver a really slick customer experience.

Original Blog Post Here

Stefan’s blog post, like Peter’s, is aimed at the IT Admin, but it is focused very much on improving the end user experience by prompting them when an application is going to be installed or upgraded, giving them the option to defer the process or requiring them to quit active or dependent applications before the install can proceed:

Win32PSApp3

To see it in action watch this YouTube video:

Stefan explains why this is important in his blog:

How can we provide end users whose devices are managed with Microsoft Intune (Standalone) with a better installation experience, for high user applications while not relying on them to self serve application updates using the Company Portal?

Services like this have previously been available through on premise tools such as SCCM, however the solution presented by Stefan via Intune ‘un-tethers’ the end user from the workplace, meaning these updates and installs can take place anywhere the device is connected to the internet. Education, like most other verticals, has an increasingly mobile workforce and customer base (students), so the ability to deploy apps ‘any time, anywhere’ is only going to grow.

Again, I encourage you to read Stefan’s original blog post here.

My Final Thoughts:

If you’ve not picked up on it already, I’m a big fan of Intune as an MDM for managing Windows10 in a modern way, and the two guest blogs I’ve shared today show innovative ways to improving the security and app deployment processes for organisations.

For educational institutes, who increasingly hold and manage hyper-sensitive information on students and staff, taking steps towards MFA and a password-less future is critical, and is a responsible approach to modelling good Digital Citizenship to both employees and students.

Similarly, adopting modern, cloud-first approaches to device management and app deployment will reduce costs for educational institutes whilst increasing flexibility in terms of not requiring IT Services to physically touch every device or have it on the local area network.

Lastly, I’m grateful to all those bloggers out there that write incredible posts that I can reference from my blog! Thank you!

Categories
Microsoft365 Windows 11

Minecraft:EE Comes To iPad & Greater Cross Platform Support In General

UPDATE 8th September: the iPad version of Minecraft:EE is now available in the App Store and can be downloaded today. You can sign in with your O365 credentials (still need an M:EE license)

There was a major announcement this week that Minecraft:Education Edition is coming to iPads in September 2018.

Hero-Photo_Minecraft-iPad-1

From the announcement:

“Minecraft: Education Edition on iPad unlocks new and intuitive ways of collaborating and sharing and has revolutionized the way our students and teachers explore curriculum and projects,” says Kyriakos Koursaris, Head of Education Technology for PaRK International School. “The features allow for deep and meaningful learning, and the values it promotes, from inclusivity to 21 century skills, empower everyone to use technology with extraordinary results,” said Koursaris.

This, combined with the announcement last week of a new national Schools’ Agreement between the Ministry of Education and Microsoft in New Zealand, means that even more schools will have access to Minecraft:Education Edition on multiple platforms of iOS, MacOS and Windows10. Talking with partners and educators there is already huge interest in the ability to now play Minecraft:EE on an iPad.

Engaging & Creative Learning Opportunities

You should, of course, check out the hundreds of lessons and worlds on the official Minecraft:EE website here, where you are bound to find a lesson for your curriculum area and age of students. However, on the weekend I saw on Twitter an awesome example of promoting literacy with students in Minecraft by Sarah Bau, a teacher in Australia.

Sarah decided to get students building their own house in a shared Minecraft:EE world:

Students negotiated amongst themselves on land selection, and were given two lessons to build, fit out and photograph their property.

She also used OneNote to create and share the lesson content with the students and has generously made this available online here.

MEE real estate.png
A screenshot of Sarah’s lesson plan in OneNote, including the WALT and WILF

Sarah then went on to get the students use Canva (something I’ve blogged about in the past when hosting TeachMeets at St Andrew’s College) to create real estate adverts in a tri-fold brochure to advertise their Minecraft:EE house for sale. They were even able to take “photos” of their house in Minecraft using the Camera feature and export these screenshots for inclusion in their real estate sales brochure. Here is one example from her blog (which I really do encourage you to check out again here):

MEE real estate1.png
Example student real estate brochure, designed in Canva and featuring their Minecraft:EE house.

This reminds me of other Minecraft focused literacy activities I’ve been involved with in the past and showcases the incredible flexibility of Minecraft and the diverse learning opportunities it supports. I suggest you also check out this example that Wilj Dekkers used with his students to support creative writing with Year 6 students, also combining OneNote and Minecraft.

Cross Platform Support From Microsoft

ipad meeWith the announcement of iOS support for Minecraft:Education Edition, it is continuing a theme of greater cross platform support from Microsoft for other OS in the Education Space.

I blogged last week about the release of iOS support for Intune for Education, something that is pretty significant in my perspective as it opens up that elusive opportunity for schools to manage all of their devices through a “single pane of glass” i.e. – one platform for MDM.

Perhaps the feature that has drawn the most attention from schools that use a mixture of devices and cloud collaboration suites is the integration of Google Drive (amongst other cloud storage platforms) into Microsoft Teams:

Teams
Note the option to “Add cloud storage” in the Files tab of a Microsoft Team for Education

You can see how easy it is above to add a third party cloud storage to your Microsoft Team (if your O365 Tenant Administrator has allowed this) and when this is selected, you are presented with a range of options:

Teams2

While Google Drive is arguably the most popular of the third party cloud providers above in education, I was in a large school recently where the Senior Leadership Team (SLT) had been using Dropbox.com for sharing Office documents across multiple devices. They were very excited to see the integration of Dropbox into Teams.

What surprises most teachers, however, is the ability to actually open and edit documents hosted in Google Drive directly inside Teams – you are not required to go to G Suite to edit:

Teams3
Viewing a range of Google Docs inside a Google Drive, within Microsoft Teams!
Teams4
Editing a Google Doc directly inside Microsoft Teams – you can see in the top right that I’m signed into Google with my personal Gmail account. In a school scenario, this could be achieved by using SSO hosted out of AzureAD.

My Perspective & Final Thoughts:

Three pretty recent announcements and/or product releases showing Microsoft support for other platforms in Education:

  • Third party cloud storage in Microsoft Teams (available now)
  • iOS support and management in Intune for Education (available now)
  • iOS support for Minecraft:Education Edition (coming in Sept 2018)

In many ways, this is simply continuing a recent trend from Microsoft to show more support and openness, highlighted by Satya Nadella’s comments that Microsoft loves Linux:

microsoftloveslinux.0.0.jpg
Some have been quick to deride this new ‘love’ for Open Source, but the continued support of other OS in Education shows there is some substance to these claims

Perhaps unsurprisingly, the ultimate winners out of all this is schools, teachers and students. There is an ever greater range and choice of platforms for teaching and learning for schools to choose from and with cross-platform management tools like Intune for Education now available it is simplifying their administration tasks as well.

In the end, this choice has to be a good thing.