SharePoint 2013 On-Prem- Can I limit users of only 1 group should be only able to create OneDrive?

I have a requirements of limiting users to use onedrive for business site. What I want to do is below
1) I want to configure in such a way that not all users should be able to create their personal site
2) only members of a particular AD group should be able to create oneDrive?
Is this possible? and how?

You can do this by editing the permissions in the User Profile service application. Access the User Profile service in Central Admin. Click on the Manage User Permissions link in the first set of links on the manage user profile page. By
default the groups listed have all three permissions. Remove the Create Personal Site permission from all the existing groups. Now add the AD group that you want to be able to create personal MySites (OneDrive) and give them all three permissions.
Click OK.
This won't affect any existing users that already created mySites (OneDerive). But only members of the AD group you gave permission to will be able to create OneDrive for business sites from then on.
Paul Stork SharePoint Server MVP
Principal Architect: Blue Chip Consulting Group
Blog: http://dontpapanic.com/blog
Twitter: Follow @pstork
Please remember to mark your question as "answered" if this solves your problem.

Similar Messages

Search SharePoint 2013 On-Prem with Office 365

We're trying to understand federated search in SharePoint 2013, when it comes to Office 365. We have both a SharePoint 2013 on-prem environment, and an Office 365 environment. The 2 are completely separate, and have not been configured to use a hybrid model.
Is it possible to configure a Result Source in either the SharePoint environment or the Office 365 environment to index the other? Reading this
article from Technet, it indicates that you can configure a remote SharePoint farm as a Result Source:
"Remote SharePoint provides
results from the index of a search service in another farm."
But I've read on another
thread on here that this is not possible from O365.
I'm hoping that someone can provide some guidance, or point me in the right direction.
Thanks,
cflbasser

Yes, you can receive search results from an on-premise SharePoint Server 2013 farm within SharePoint Online.
Hybrid search between SharePoint Server and SharePoint online uses federated search results. Neither the on-premise farm nor SPO crawl the other location, they just send a federated search query over the fence and wait for the results.
You can search in either direction (one-way hybrid search) or both ways (bidirectional hybrid search).
The one-way search can either be SharePoint Server sending search queries to SPO or SPO sending queries to SharePoint Server which also needs a reverse proxy for securely publishing your on-premise farm to SPO.
Bi-directional hybrid search just combines both one-way methods together so either location can receive search results from the other location.
Here are some further resources to help you plan and implement hybrid search:
Hybrid for SharePoint Server 2013
Configure hybrid Search for SharePoint Server 2013
Chris O'Brien has an excellent article that describes the actual search experience. Check out Office 365 SharePoint hybrid - what you
DO and DO NOT get
Jason Warren
@jaspnwarren
jasonwarren.ca
habaneroconsulting.com/Insights

Can I add Users and/or Groups?

Hi,
Can I add Users and/or Groups in a Realm from my webapplication?
(not using administrative console....but from my code)
Tanks by
Angelo.

Yes.
"Angelo" <[email protected]> wrote:
>
Hi,
Can I add Users and/or Groups in a Realm from my webapplication?
(not using administrative console....but from my code)
Tanks by
Angelo.

SharePoint 2013- on-Prem - Create OneDrive Site for all users automatically

I want to create OneDrive for all users automatically by running some PowerShell code
Can somebody provide me link to the reference of creating that PS script

Hi,
here you are the code as stated in this link
http://matthewyarlett.blogspot.com/2014/06/script-creating-sharepoint-user-mysites.html
Function Create-MySite
[CmdletBinding()]
Param
[Parameter(Mandatory = $True,Position=2,valueFromPipeline=$true)][String]$Username,
[Parameter(Mandatory = $True,Position=1)][String]$MySiteRootURL
[void][reflection.assembly]::Loadwithpartialname("Microsoft.Office.Server");
$site=new-object Microsoft.SharePoint.SPSite($MySiteRootURL);
try
$serviceContext = Get-SPServiceContext $site;
$upm = new-object Microsoft.Office.Server.UserProfiles.UserProfileManager($serviceContext);
if($upm.UserExists($Username) -eq $false)
Write-Host "User $Username was not found in the profile store." -f yellow;
return;
$userProfile = $upm.GetUserProfile($Username);
if($userProfile.PersonalSite -eq $Null)
Write-Host "Creating MySite for user $Username" -f darkyellow;
$userProfile.CreatePersonalSite();
Write-host "Successfully created MySite for user $Username" -f green;
else
Write-Host "User $Username already has a MySite." -f darkgreen;
catch
Write-Host "Encountered an error creating a MySite for user $Username. Error:"$_.Exception -f Red;
finally
$site.Dispose();
to call the function:
#Example - Create a MySite for user "tonyj"
Create-MySite -MySiteRootURL "http://mysite.bigintranet.com.au" -Username "tonyj"
#To Create for an array of users
$users = @('tonyj','bobh','markf','billd')
$users | Foreach {Create-MySite -MySiteRootURL "http://mysite.bigintranet.com.au" -username $_}
Kind Regards,
John Naguib
Technical Consultant/Architect
MCITP, MCPD, MCTS, MCT, TOGAF 9 Foundation
Please remember to mark your question as answered if this solves your problem

Sharing item/folder in SharePoint 2013 on-prem

I'm trying to share an item/folder in a library (in a subsite that has unique permissions) to a user that doesn't have access to the site/library. Is this even possible?
I've tried to share the item/folder directly with read permissions, but that doesn't work (access denied). And when I share the library (read permissions) and then share the item/folder it works. But the user cannot open the item (ex. word file), it says:
"Sorry, we couldn't open: http://urltothedocument.docx".

Hi,
Yes, you can share a document or folder in a document library in SharePoint 2013.
For your issue, please take steps as below:
1.Go to your site collection -> Site Settings -> Manage Site Collection Features.
2. Make sure "Limited-access user permission lockdown mode" is deactivated.
Best Regards,
Eric
TechNet Community Support
Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact
[email protected]

Migrating to Sharepoint 2013 from 2010 - Can you use the same URL for the Web Application without affecting the 2010 environment?

Hi,
I am currently trying to migrate our SharePoint 2010 environment to SharePoint 2013. The first thing I'm doing is creating a 2013 development environment to verify that this migration goes smoothly. I'm also doing this so that we will have a testing environment
after the upgrade to 2013 is complete.
So here is my question: I have a 3 tier farm including; 1 app server, 1 wfe, and 1 sql server. I have made a copy of our SharePoint 2010 database and installed that on our sql server 2012 sever (This new environment is on 3 completely separate servers from
our 2010 environment). I have also installed the prereqs and configured SharePoint 2013 on the App server and wfe servers, as well as configuring the necessary service applications (I have created a completely new 2013 database where I will migrate my 2010
database content when I'm ready).
I am now at the point where I need to create a new web application on the 2013 app server, where I will be migrating the copied 2010 database. (Also note that we have a 2010 development site called https://[email protected])
When I go to create a new web application in our 2013 dev environment, can I use the same url (https://[email protected]) to create this web app, or will this screw up our current 2010 dev environment?
I'm new to SharePoint migrations, so I apologize if this is a stupid question.
Thanks in advance for any insight you can share on this!
Boe Barlage

So, what you are recommending is that before I create a web application in my new 2013 environment, I need go into my hosts file on my 2013 app server and alter it to point to my 2013 wfe.
Then after I do that, then I can create my new web application on my 2013 app server with the same url as my 2010 testing environment
(https://[email protected]).
Then after that I should be able to access my new sharepoint 2013 environment at the same URL (https://[email protected])?
I must be missing something.
In your first reply, you told me to alter the host file on my 2010 app server and point it to my 2010
wfe (I guess I thought it probably already is). You also told me to alter the host file on my 2013 app server and point it to my 2013 wfe.
so I am confused on after I do this, what url would I access my 2010 test environment, and what url would
I access my 2013 test environment?
I am fine with having my test environment as a different URL until I am totally ready to roll everything over and kill the 2010 site. But I want to make sure that when I migrate my database, none of the site links are broken.
I also want to make sure that if I proceed this way, I want to be sure that I will be able to modify the URL to what my 2010 environment is (without a lot of headaches) when I am ready to kill the 2010 site.
Thanks again for your help, it's much appreciated!
Boe Barlage

SharePoint 2013 Discussion items "visibility" depending on permession for specific groups and users

Hello,
I have a blank site in SharePoint 2013 in which i activated `CommunityFeature` and i created a discussion board app which is displayed in a web part.
Now, i want to be able to change the discussion visibility ... E.g. when i click on new discussion i want to have a people picker that allows me to choose people or groups that are allowed to see and reply for that discussion...
How can this be made? can anyone help me please?

Hi,
The OOTB feature “Audience Targeting” on list item will be capable of your requirement.
“List or library items can be targeted to appear only to people who are members of a particular group or audience”.
More information about
Audience Targeting:
http://office.microsoft.com/en-001/sharepoint-server-help/target-content-to-specific-audiences-HA010169053.aspx
Best regards,
Patrick
Patrick Liang
TechNet Community Support

Getting Error while Installing Workflow Manager 1.0 on Sharepoint 2013 On-Prem server

I am trying to install Workflow Manager 1.0 on our SharePoint Server 2013 which is On-Prem installation. The SharePoint Server 2013 is functioning correctly. During the installation of Workflow Manager 1.0 on the same SharePoint 2013 server, I receive the
following message: "Port number 9355 specified for HTTPS Port is blocked" I have checked our firewall Inbound rules and this port is not blocked.
Any reason why this could be happening or did I miss anything?
Thanks Snehal H.Rana SharePoint Consultant

I am happy to inform you that I was able to resolve this error. I configured this on different ports other than 9355. We need to modify 2 files called "ClusterManifest.1.0.xml" and "ClusterManifest.current.xml" in c:\Program
Files\Windows Fabric\Bin. They were pointing to older FQDN under following node:
<NodeList>
<Node NodeName="yourserverfqdn" IPAddressOrFQDN="yourserverfqdn" IsSeedNode="true" NodeTypeRef="DefaultNodeType" />
</NodeList>
These files won't let you edit directly in notepad so you will need to make a copy of these files (just in case). Open up the notepad as "Run As Administrator". Drag these files to the notepad. After you are done editing, save these as original
names but make sure that the extension is .xml
You will also need to do IISReset
That did the trick for me.
Thanks Snehal H.Rana SharePoint Consultant

How can i restrict user through material group

Dear Guru's
We have two business process CDMA and GSM
Two purchase organisations, different document types and different material groups
our user is procuring a materials for CDMA using GSM materials codes.
How can i restrict him.if he selects GSM purchase organisation he should procure only for GSM using GSM materials codes.
IS it possible to restrict through material groups
Regards
subhash

Hi Ha Tran,
Thanks for your suggestion.
But the problem is that we have two business CDMA and GSM business.
The enitity and reporting will be in the same company code.
So we came up with two purchasing organisation because the first purchase organisation was already assigned to company code.
and the business want different material groups for difeerent business.
Ex: one material 100000000 DESC : Switching with material group NWTR
the same material with different number 1000000001 Desc: Switching material group : GNWTR
Now the user while creating purchase order for GSM ,he is using CDMA material.
I want to restict the users that if he selects document type and purchasing organisation of GSM. System should allow only GSM materials.
Regards
Subhash

User statuses on notifications should carryover to order when created from

Hi,
I have requriement for user statuses on notifications (IW21/22) should carryover to order when created from notification automatically.
Did anybody worked on this type of scenerios. I already found some userexit (QQMA0014) but i could not able to find any thing related to user status in VIQMEL view.
At the time of creation of notification IW21, when i go for creation of order, User status of notification should copied to order automatically.
Appreciate any help.
Regards
MM

Thanks Anji for your response.Yes there is FM status_read which i can use to get Status but my problem is during creation of order from notification, i don't have notification number so i can't use any database tables to get status for later use. As per requirment, during creation of notification, I can go to order creation. at that time whatever user-status I choose at notifcation, same status should get copied to order. I hope it got clear to you now.
Please suggest.
Regards
MM

Can I Share a document with a user who does not have righs to the site? (SharePoint 2013 on prem)

Joe is in Sales
He must Share a document with Jane in Marketing.
He only wants to Share this one document.
Does he need to go into the Sales site and add Jane as a site user? Jane will then be able to see everything on the site. No good.
Does Joe now need to break inheritance on all the other site libraries from Jane to hide them??
In a perfect world, Joe shares the doc with Jane. Jane gets email with link. Jane clicks link and goes to sale site where all she sees is the document that was Shared- nothing else.
Cheers, Jim ___________________________________________________ If this was helpful please mark as an answer.

With 2013, you can just Share the specific item. It will automatically break inheritance on that item and allow Jane to see that one document only and Jane will get a link inviting her to the document.
Trevor Seward
Follow or contact me at...
&nbsp&nbsp
This post is my own opinion and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs.

SharePoint 2013 access to custom lists a user creates

In an InfoPath custom list form 2013, I have setup a group of test users with 'view' access to my test SharePoint website. These users are able to enter data in a custom list.
When the user looks at the data that they originally entered by accessing the data from the sharepoint website, the InfoPath Form looks like the form is read only. However if the user clicks the auto generated edit buttons on the top of the form, they are
able to change the data in the list.
Basically I would like a way for the user to not be able to change the original data in the custom list.
Is there a way that I can accomplish this goal like:
1. disable the autogenerated buttons,
2. have all the textboxes set as read only,
3. change some kind of an access level?
Would you let me know what method works and how to accomplish my goal?

In InfoPath Designer go to File, Info, Form Options.
In the Web Browser category uncheck Show InfoPath Commands in Ribbon or Toolbar.
Mike Smith TechTrainingNotes.blogspot.com
Books:
SharePoint 2007 2010 Customization for the Site Owner,
SharePoint 2010 Security for the Site Owner

SharePoint 2013 alerts not sending emails to users

Worked on this all day yesterday and to no avail.
Followed up on every one of these fixes and they are all correct/have been run.
http://www.sharepointdiary.com/2012/02/sharepoint-alerts-not-working-troubleshooting-checklist.html
I got a telnet session to work as well but still, no alerts are being sent to users when something changes.
I poked holes in the firewall, set up a receive connector in exchange server as well.
In outbound email settings, I tried putting in the IP address and the server name (which both should work) but nothing happened.
Any suggestions anyone?

could you please give us more details about the issue.
Alerts not working for every body or few users?
Users on network or out-network i.e gmail etc
Any error in Uls Logs?
using the exchange server, are your server part of Exchange relay?
Please remember to mark your question as answered &Vote helpful,if this solves/helps your problem. ****************************************************************************************** Thanks -WS MCITP(SharePoint 2010, 2013) Blog: http://wscheema.com/blog

Sharepoint 2013 SPSitedataquery result trimming for Loggedin user

Hi,<o:p></o:p>
I am using SPSiteDataQuery to roll-up information from Site-collection, it fetches all the records from all the sites
inside that Site-Collection. Now I want to enable security trimming on the result.
For example if user has no access to a particular site (SPWeb) inside the Site-collection, records from that site should not be included in
result of SPSiteDataQuery.<o:p></o:p>
Please help me out.<o:p></o:p>
Regards,<o:p></o:p>
Mayank<o:p></o:p>
Mayank Nigam

Hi,
For your requirement, a workaround is that we can check whether the current login user has the permission needed, then perform the query job accordingly.
Gets the current user of the site with SPWeb.CurrentUser property
by using the a line of code like this:
SPContext.Current.Web.CurrentUser.LoginName
Indicates whether the specified user has a specified set of permissions:
SPWeb.DoesUserHavePermissions method
http://msdn.microsoft.com/en-us/library/ms441848.aspx
Another link about Check User Permissions Programmatically for your reference:
http://tad.co.in/gnosis/check-user-permissions-programmatically-in-sharepoint-2010/748
Best regards
Patrick Liang
TechNet Community Support

How can point single user to multiple groups in ACS

Hi,
we are having almost 150 NDG groups in my ACS Server, in that one group is specifically for Security devices like pix & ASA's.
Now My requirement is that i want to Restrict this Security NDG group to one Specific Group under Group setup menu in ACS.
is it possible in ACS Server.
If it possible how can i point multiple multiple groups to single user.
Because not all users required access to this Security NDG group. only few users require the access.

Give a read to how NAR works, then apply it to the security group on ACS.
http://www.cisco.com/en/US/products/sw/secursw/ps2086/products_white_paper09186a00801a8fd0.shtml
Regards,
Prem
Please rate if it helps!

SharePoint 2013 On-Prem- Can I limit users of only 1 group should be only able to create OneDrive?

Similar Messages

Maybe you are looking for