<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:"Trebuchet MS";
panose-1:2 11 6 3 2 2 2 2 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
span.EmailStyle18
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:windowtext;}
span.EmailStyle19
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:#1F497D;}
span.EmailStyle20
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal"><span style="color:#1F497D">I thought this was an interesting addition to our repertoire of defense tools against misuse of the O365 groups. Banned words lists for O365 group creation. We are banning “bad words” as well as terms related
to business operations like bursar, admissions, financial services, etc. etc.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">Jesse is a systems administrator on our team and assembled this documentation from a couple of blogs as the info from Microsoft is not very complete at this time.
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">Rob<o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span style="color:black">Rob Greggs</span><span style="font-size:12.0pt;font-family:"Times New Roman",serif;color:black"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black">Acting Vice President for IITS</span><span style="color:black"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black">Oklahoma City Community College<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black">7777 S. May Ave.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black">Oklahoma City, OK 73159<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black">O: 405.682.7877<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black">F: 405.688.3900<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black"><a href="mailto:rgreggs@occc.edu"><span style="color:blue">rgreggs@occc.edu</span></a><o:p></o:p></span></p>
<p class="MsoNormal"><i><span style="font-size:10.0pt;font-family:"Trebuchet MS",sans-serif;color:black">Die dulci freure</span></i><span style="color:black"><o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b>From:</b> Uffen, Jesse P. <br>
<b>Sent:</b> Thursday, September 13, 2018 11:34 AM<br>
<b>To:</b> Greggs, Rob <rgreggs@occc.edu><br>
<b>Subject:</b> Adding Custom Banned Words for Office 365 Group Creation<o:p></o:p></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Adding custom banned words to O365 Groups names was talked about in the Community Hours call a few months back. I wanted to get this setup asap after we enabled Teams for students and after seeing an increase of compromised student accounts.
Global admins and a few other administrative roles can bypass the filter if needed.
<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">The cmdlets needed are available in the AzureADPreview powershell module:
<o:p></o:p></p>
<p class="MsoNormal"><a href="https://www.powershellgallery.com/packages/AzureADPreview/2.0.1.18">https://www.powershellgallery.com/packages/AzureADPreview/2.0.1.18</a>
<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I used these two blog posts for guidance: <o:p></o:p></p>
<p class="MsoNormal"><a href="https://drewmadelung.com/managing-office-365-group-using-azure-ad-powershell-v2/">https://drewmadelung.com/managing-office-365-group-using-azure-ad-powershell-v2/</a> - Used to configure group settings in our tenant. <o:p></o:p></p>
<p class="MsoNormal"><a href="https://drewmadelung.com/office-365-groups-naming-policy/">https://drewmadelung.com/office-365-groups-naming-policy/</a> - Configuring custom blocked words.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">A quick basic guide using powershell cmdlets from the blogposts I linked and my own experiences:<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Connect-AzureAD <span style="color:red">– Connect to your tenant</span><o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Get-AzureADDirectorySetting | ForEach Values <span style="color:red">
– View your current settings</span><o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">$settings = Get-AzureADDirectorySetting | where-object {$_.displayname -eq “Group.Unified”}
<span style="color:red">– Put your settings policy into a variable</span><o:p></o:p></p>
<p class="MsoNormal">$settings["CustomBlockedWordsList"] = "HR,Contoso,Payroll,CEO,CFO,CIO"
<span style="color:red">– Configure the values for the custom blocked words list in the variable we created above</span><o:p></o:p></p>
<p class="MsoNormal">Set-AzureADDirectorySetting -Id $settings.Id -DirectorySetting $settings
<span style="color:red">– Apply the settings</span><o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Get-AzureADDirectorySetting | ForEach Values<span style="color:red"> – You should now see the updated values when you view your settings<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:red"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:red"><o:p> </o:p></span></p>
<p class="MsoNormal">To make it easier, I created a text document with all of my banned words (separated by commas) and put that content into a variable so I did not have to type out my list every time I made a change. When I set the custom blocked words list
setting I pointed to the variable. <o:p></o:p></p>
<p class="MsoNormal">$badwords = get-content <filepath of txt file><o:p></o:p></p>
<p class="MsoNormal">$settings["CustomBlockedWordsList"] = $badwords<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Jesse<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><b><span style="font-family:"Times New Roman",serif">Jesse Uffen<o:p></o:p></span></b></p>
<p class="MsoNormal"><span style="font-family:"Times New Roman",serif">Systems Administrator<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Times New Roman",serif">405.686.6214<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Times New Roman",serif"><a href="Juffen@occc.edu">Juffen@occc.edu</a><o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</body>
</html>