The request for access notification (email when a user request access to a OneDrive or SharePoint) needs to provide more information. Especially the actual file/folder.

Details: Had an external user that requested access to a users OneDrive Folder. More than likely in error as they were previously sent a link to an actual file. The request only show the tenantname-my-sharepoint.com No further information was mentioned. After researching the audit logs, I was able to determine the user was sent the link and what OneDrive(OD4B) the user was attempting to access. Would be nice if the email would display the full path of the folder and or file requesting access to.

Hi Lucas

As discussed today the email address xxxx@deakin.edu.au which was previously active email tied to your student account. This account we unlinked from your Dxxxx Account when it was deleted on this date: 2016-12-05.

Dxxxx student username/emails are randomly generated and hosted on Exchange365 making it now impossible to recover this email. I would also advise the company you are dealing with that usernames unlike student ID numbers can and do get reassigned to different users after a certain period of years, this would pose a security risk and/or data breach for any data you have stored/hosted on their systems.

If you require any further assistance, please contact the IT Service Desk on 1800 .

Kind Regards,
Nxxxxx Mxxxxx
Senior Service Desk Analyst.

Reference: REQ0608xxx (LINK)

*English follows Japanese

■Title(件名)：

ライセンス条件を満たしていないユーザーが、IRM を使用できる件について。
Users without required license are able to use IRM feature

■Description(内容):
以下の公開情報から、IRM 機能を使用する場合は該当のユーザーに "Azure Information Protection" のライセンスが必要であることを確認しています。

<参考情報>
タイトル : SharePoint Online Service Description
アドレス : https://technet.microsoft.com/ja-jp/library/sharepoint-online-service-description.aspx

---- 以下、抜粋 ----
Azure Information Protection を使用した IRM
Office 365 Enterprise E1
No
---- 抜粋、以上 ----

---- 以下、抜粋 ----
3 Azure Information Protection は付属していませんが、アドオンとして別途購入して、サポートされている Information Rights Management (IRM) 機能を有効にすることができます。一部の Azure Information Protection 機能では、Office 365 ProPlus のサブスクリプションが必要です。そのサブスクリプションは、Office 365 Business Essentials、Office 365 Business Premium、Office 365 Enterprise E1、Office 365 Education、Office 365 Enterprise F1 には含まれていません。
---- 抜粋、以上 ----

しかしながら、テナント内の管理者が "Azure Information Protection" を所持しており、 "Azure Rights Management " 機能を有効にしている場合、 ユーザーが "Azure Information Protection" が付与されていない場合に本来 IRM 機能が利用できないはずですが、現時点での動作としては利用できることを確認。
また、利用できるのが既定の動作であれば、テナント内のユーザーを指定して IRM 機能の使用を禁止する機能を追加してほしい。

According to the below public information, "Azure Information Protection" license is required to allow users using IRM feature.

Title: SharePoint Online Service Description
URL: https://technet.microsoft.com/en-us/library/sharepoint-online-service-description.aspx

3 Azure Information Protection is not included, but can be purchased as a separate add-on and will enable the supported Information Rights Management (IRM) features. Some Azure Information Protection features require a subscription to Office 365 ProPlus, which is not included with Office 365 Business Essentials, Office 365 Business Premium, Office 365 Enterprise E1, Office 365 Education, or Office 365 Enterprise F1.

However, in practice, we confirmed that some users without this license are able to use IRM feature if the administrator for the tenant have "Azure Information Protection" license and enable it, so some users have different experiences from its mentioned in the information.

If this behavior is expected, we would like you to allow administrator restricting to use IRM feature with specifying users.

Thank you for your considerations.

The job that runs when a user leaves the company, and their account has been disabled, needs to include some logic. Before a email is ever sent to a manager, there should be verification that there is data in the OneDrive. I don't know how many times, a manager has received a message regarding a OneDrive, only to find out there isn't any documents in the OneDrive account.

This creates a lot of wasted time by a manager, legal hold, and our IT staff. Only to find out there isn't any information to worry about. This can't be a hard thing to put into the logic. Why waste peoples time? If the OneDrive doesn't have content don't send a message.

Ideally, we could harmoniously deploy the features that separately convinced us to buy in to the Microsoft vision (M365, O365, EMS, Windows 10 Professional for Workstations and Windows 10 Enterprise). OD4B and OD worked harmoniously on NTFS volumes, OD4B works beautifully on ReFS -- but despite running on the identical sync client OD fails to support ReFS at all. OD fails to support "protect important files" on corporate devices, but recently it's announced (and we implemented) directing all those system Known Folders that populate "This PC" to reside in OD4B on ReFS. I am unsure if we're chasing your capabilities, or you're pushing us around with all the unharmonized changes to capabilities between and among the OneDrive(s), File Systems, and OS capabilities. Maybe the redirection of Known Folders into OD4B will address the problem we were trying to solve by enabling both personal and business to reside on the same ReFS storage space. Is that the idea that is envisioned here?