No access privileges opening document from Office Online (365) on Mac - macos

We're developing a Microsoft Office Add-in and encounter issues switching from editing a document on Office Online to Edit in Word. Even without the add-in, the issue can be reproduced.
The user which is a registered Microsoft Outlook account has access to a shared directory (folder) on a Sharepoint site. Edit: Opening a file on the users own OneDrive works.
results in a prompt from the Office for Mac to ask the user to sign-in.
After the sign-in, Office for Mac shows a dialog saying user does not have access privileges message in Word on Mac.
The user which is a registered Microsoft Outlook account has access to a shared directory (folder) on a Sharepoint site. The user is registered as an external user (through invitation which has been accepted) on an Azure Active Directory and is part of a user group on this Active Directory which can edit the folder. The user has access to the directory via the group permission, not directly.
Browsing the folder via https://[app].sharepoint.com/sites/pub/Shared%20Documents/[SharedDirectory] as the user works. Documents can be opened and edited on Microsoft Online. Switching from Online edition to Edit in Word or Edit in Excel fails after signing-in with the user.
The very same user is already signed-in to Microsoft Office for Mac and should actually not be prompted again to authenticate.
From the moment of signing-in, Word and Excel behave different.
Word shows a dialog saying Word cannot open the document: user does not have access privileges.
Excel keeps prompting the user to sign-in.
On Windows 10, Edit in Word/Excel works. If the user is not signed-in to Microsoft Office for Windows yet, a prompt appears similar to the Office for Mac, asking the user to sign in. After the sign-in, the user is signed-in Office for Windows, the document opens and can be edited and saved.
Is there a way to ensure that shared documents can be edited through Office for Mac?
The Mac version used is 15.37 (170815)

The described behavior could be verified by the Microsoft Support team. I created a post in UserVoice and encourage everyone with the same issue to upvote for it and get notified about changes through that:
https://office365.uservoice.com/forums/264636-general/suggestions/31387858-enable-viewing-and-editing-of-shared-documents-on

Related

Error when login apple enterprise account in VS2022

I'm facing a really big problem.
I develope in VS2022 with a .net Maui application on my Windows 10 Laptop. Now I want to debug on my local iOS devices via .net Maui hot restart (https://learn.microsoft.com/de-de/dotnet/maui/deployment/hot-restart?view=net-maui-7.0).
I have an enterprise account from my company which is declared as an app-manager:
First I tried to add my enterprise account in Options>Xamarin>Apple Accounts. I just typed my user data in nothing else. I didn't downloaded any key or anything else. I tried to add it but I get the following error message:
The first time I tried to add it, it wasn't the same. I got the window to enter my code which was send on my phone. But the progress was interrupt because of a bad internet connection.
I allready contaced the apple support about this but they said if I can login in App Store Connect its not their problem and I have to contact Microsoft about this. The problem: The VS support I found wasn't free...
Sometimes when I reopen the Apple Account window my Apple-Id gets listed and also as an enterprise account. The only problem there is no Team I can select and the View Details button is not selectable:
So my question: What am I supposed to do? I need this access to work.
Thanks for your help.
Credits: Dongzhi Wang-MSFT
You must have to login with the account holder account from your organization. That worked for me.

Unlink non-logged on account from Microsoft in Windows 10

One of my customers got hacked big time: Hotmail (where it probably started), Facebook, Instagram, Snapchat. She couldn't log on to her computer anymore, since her password on her Microsoft account has been changed by the hacker.
I enabled the Administrator account, and gained access to the data.
Now I am looking for a way to unlink the local user account from Microsoft, so I can log in to her own account.
I have access to her files, but not to her account.
Is there any way to unlink a local account without being logged on?
I found a solution, or rather, a workaround:
I booted the computer from a Windows USB-stick, chose "Repair", "Advanced" and then "Command Prompt"
I changed drive and directory to the System32 folder on the volume Windows was installed
I renamed utilman.exe to utilman_old.exe and copied cmd.exe to utilman.exe
I restarted the computer normally with boot from harddisk/ssd.
At the logon screen, I clicked the button for Accessibility Options, which normally invokes utilman.exe. However, utilman.exe is now a copy of cmd.exe, so an ELEVATED command prompt is started
I wrote the line "net users administrator active=yes"
I rebooted the computer, and at login, I chose the Administrator account that was located at the bottom left of the login screen
I downloaded ProfileWizard from https://www.forensit.com/downloads.html, installed it an ran it
I selected the profile, that was linked to the Microsoft account, and clicked Next
I opened an elevated Command Prompt, and wrote "net users tempuser /add"
I went back to Profile Wizard, and wrote "tempuser", and clicked "Next"
At finish, the current administrator user was logged of, and logged on again. I logged administrator off, and logged on as "tempuser". I then had full access to the account that was linked to a Microsoft account, but now as a local account.

Deploying On-send Outlook Addins on Mac devices

We are working on an Outlook add-in that uses the On-send feature (https://learn.microsoft.com/en-us/outlook/add-ins/outlook-on-send-addins?tabs=unix). We want to know what our options are when it comes to deploying this add-in to actual users, with the focus being on users running Outlook on Mac. Per documentation, On-send Add-ins are not allowed on AppSource. The ideal flow we are looking for is one where there's little to no manual action required on behalf of either the end-users or the Admins.
Is there a way to deploy the add-in automatically on the end-user device (running Mac), with neither any admin-side action required, nor any manual action required by the user -- e.g., by downloading the Add-in manifest, and running a script on the device?
I'm aware user can sideload the manifest once the manifest is downloaded, but this is not acceptable in our case; we are looking for a way where the installation of the add-in is automated, without requiring any manual action on behalf of the user.
If the above is not an option, what is the recommended way to deploy the add-in? I found two links from MS, with possibly conflicting info; which of these two is the right one to try?
The first one is "Publish Office Add-ins using Centralized Deployment via the Office 365 admin center" from https://learn.microsoft.com/en-us/office/dev/add-ins/publish/centralized-deployment#end-user-experience-with-add-ins. Looks like this is supposed to be done from the O365 Admin Console --> Settings > Services & add-ins.
This approach requires (from https://learn.microsoft.com/en-us/office365/admin/manage/centralized-deployment-of-add-ins?view=o365-worldwide) the following as pre-requisites; are all of them actually required?
"have Exchange Online and active Exchange Online mailboxes" -- is there a difference between "Exchange Online" and "active Exchange Online mailboxes"?
"Version 1701 or later of Office 365 ProPlus." -- does this apply for Mac as well? If so, is there such a version for Mac?
"Your subscription'd directory must either be in, or federated to Azure Active Directory."
Looks like there's a Powershell-based alternative to this: https://learn.microsoft.com/en-us/office365/enterprise/use-the-centralized-deployment-powershell-cmdlets-to-manage-add-ins. Is this subject to the same requirements as the above?
The second flow, which is more geared towards Outlook (rather than the other Office apps) is https://learn.microsoft.com/en-gb/exchange/clients-and-mobile-in-exchange-online/add-ins-for-outlook/specify-who-can-install-and-manage-add-ins?redirectedfrom=MSDN. This is to be initiated from Exchange admin center under Organization > Add-ins > New Add Icon
Does this work with a non-ProPlus O365 subscription as well?
Does this work outside of Azure AD?
(Assuming Bullet 1. is not an option so we have to go with 2.) After deploying add-in from admin, is further action required to activate it on the end-user device?
Per https://learn.microsoft.com/en-us/office/dev/add-ins/publish/centralized-deployment#end-user-experience-with-add-ins:"For Outlook 2016 or later, users can do the following: In Outlook, choose Home > Store. Choose the Admin-managed item under the add-in tab. Choose the add-in, and then choose Add."
(Again assuming Bullet 1. is not an option so we have to go with 2.) Is there API support to help automate bullets 2 and 3?

Disable Auto Login Windows 7 (and missing account icons)

Running into a strange issue with a Windows 7 image. Three years ago, I wrote a Powershell script which took a basic Windows 7 image (with only the Administrator account on it) and the script adds all the user accounts, applications, programs, regedits, et al. Used sysprep to complete the image so it could be cloned using Clonezilla onto several hundred computers and go out to different sites, as well as create replacement PCs down the line.
Those original PCs we used ran out and we got a different line of PCs from the same maker, again with a Windows 7 operating system and just an Administrator account. Found out this time the person who created that basic image for me did not put a password on the Administrator account as they did the first time, so it was automatically logging on for me. Added a password to the Administrator account so it wouldn't auto-login.
Ran my script after making some edits to bring applications up to date. Now after rebooting, it not only tries to Auto logon (despite everything I've checked to make sure Auto logon was disabled), but when you click OK to get past the Auto login error, it only shows the Administrator account instead of showing Administrator along with the other two account icons. You then have to click "Switch user" and it will show only "Administrator" and "other user". You have to click on "other user" and input your account name and password.
How do I get it back to showing me all three account icons - Administrator plus my other two user accounts - after a reboot?
PS - these images were loaded onto the PCs by a person from another dept. Same person three years ago as currently.
I finally discovered from a worker in another dept that Microsoft changed Windows 7 so that the last user logged in is the icon that is shown after logging off or rebooting. Love how Microsoft always "fixes" things that don't need fixing.

How to set different system locale loaded for different user

I have a Windows Server 2008 R2 platform hosting a website in a cloud service provider. When I remote desktop in as the main administrator account the UI and system locale is set to Chinese (convenient for the Chinese freelancers we have working on the project). How do I set it so that it is not system wide as it ask for a system reboot.
I created a new user and placed it in the administrator group but how do I set it so that whenever this user logs on, everything is displayed in English while the main administrator user account remains the same and displays Chinese?
I downloaded the english pack and installed it on the server. With my second administrator account, I changed the language under the "Keyboard and Languages" tab to english. Problem solved.
Now my first administrator account will always display windows GUI in chinese while the second one one will display english. Restart of the server was required though as prompted when the setting was changed.

Resources