Beware! This spoofed Apple phone call looks so convincing

Apple warned its customers to beware of spoofed calls that look like they’re coming from Apple.

If you see the following messages or alerts on your phone, computer or other device, and you didn’t initiate the customer service call, it’s likely a scam. Read on to learn how these spoofed calls are designed to deceive you and what you can do to protect yourself.

Apple spoofed call can look so legitimate

This time, they’re spoofing Apple’s real support number 1-800-MY-APPLE (800-692-7753) to dupe unsuspecting iPhone owners into thinking that there was a data breach.

But don’t be fooled! It’s just another mass robocall that’s out to get you.
As usual, calling the supplied phone number on the voicemail will connect the victim to a fake Apple Support call center, where someone will try and convince you to give out your personal information, banking details and even control your computer remotely.

Why is this spoofed call displaying Apple’s information?

The interesting thing about this spoof is that, in some cases, it will display Apple’s actual logo, address and phone number on its contact information page.

How come? Remember MobileMe, Apple’s old cloud syncing service and iCloud’s predecessor? Chances are, if you ever used MobileMe and were already using an iPhone before 2011, you will have Apple’s contact card saved by default in your contact list.

This means that if you were an early iPhone adopter and you get a call that’s spoofing Apple’s support number (800-692-7753), it will actually display Apple’s logo, address and phone number as its contact information (the default data saved in your contact list.)

Go ahead, check your iPhone’s contact list now and see if you have Apple’s old MobileMe contact information. If you do, you may want to delete it to prevent getting duped by spoofed calls like this.

What is caller ID spoofing?

Caller ID or phone number spoofing is a growing plague that’s not only annoying, but it is also equally dangerous, too.

With this scheme, criminals are using VOIP (voice-over-IP) and phone spoofing software to impersonate a phone number’s caller ID. This means they could make any call show up on your phone as if it is coming from a familiar person, company or organization.

In fact, these Caller ID phone phishing scams (also known as vishing) are getting so sophisticated and professionally handled that they’re fooling even the most tech-savvy people around.

How to protect yourself against phone phishing scams

This Apple phone phishing scam may look convincing to some people but at the end of the day, it’s just another garden-variety phone spoofing scam.

To protect yourself against phone spoofing calls in general, here are some suggestions:

• If you receive an unsolicited phone call that purports to be from Apple (or any other legit company) and requests you to give out personal information, hang up or ignore the call/voicemail.
• Remember, Apple does not make unsolicited support phone calls. If you get an unexpected call from someone who claims to be from Apple, it’s most likely a scam.
• If you do need to contact Apple (or any other company), initiate the call yourself. If you don’t know their customer phone numbers, look for them on the company’s website itself. (Note: Don’t rely on search results on Google. Always get the phone numbers directly from the company’s official website.)
• Treat all unsolicited phone calls with skepticism. Do not provide any personal information.
• Go to Apple’s support page to learn how to report the spoofed call to them.

site collection features - SharePoint Online

SharePoint Online lets you enable and disable site collection features that determine everything that should be available to users. Most site collection features are turned off by default.

To enable or disable a site collection feature

On any SharePoint sites, select Site contents in the top menu bar and then click Site settings.

On some sites, click Settings (Wheel icon - top right side) and then click Site Settings. If you don't see Site settings, click Site information and then click View all site settings.

On the Site settings page, click Site collection features under the Site Collection Administration heading.

Do one of the following on each site collection feature you want to enable or disable:

Click Activate to enable the site collection feature.
Click Deactivate to disable the site collection feature.
_______________________________________________________________________
When you activate SharePoint Server Standard Site Collection features, the below features will be activated.

Community Site Infrastructure
Display Templates for Search and Content Web Parts
Document Routing Resources
Item Form Recommendations
Portal Layouts Feature
Record Resources
Search Server Web Parts and Support Files
SharePoint Portal Server Local Site Directory Capture Control
Web Part Adder default groups

_______________________________________________________________________

When you activate SharePoint Server Enterprise Site Collection features, the below features will be activated.

Access Services

Chart Web Part

Community Site Infrastructure

Display Templates for Search and Content Web Parts
Document Routing Resources

Excel Services Application View Site Feature

Excel Services Application Web Part Site Feature

InfoPath Forms Services

Item Form Recommendations

Portal Layouts Feature

Record Resources

Search extensions

Search Server Web Parts and Support Files

SharePoint Portal Server Business Applications Content Type Definition

SharePoint Portal Server Local Site Directory Capture Control

Visio Web Access

Web Part Adder default groups

_______________________________________________________________________

When you activate SharePoint Server Publishing Infrastructure, the below features will be activated.

Asset Library

Display Templates for Search and Content Web Parts
Document Routing Resources
Enhanced Theming 
Enterprise Wiki Layouts

Html Design

Media Web Part

Mobile and Alternate Device Targeting

Page Layouts and Master Pages Pack

Portal Navigation

Publishing Prerequisites

Publishing Resources

Ratings

Record Resources

Search Server Web Parts and Support Files

Translation

New Roles and administrators - O365 vs Azure Active Directory

Roles in O365	Roles in Azure Active Directory	Roles Description
Groups Admin	Groups administrator	Members of this role can create and manage groups, create and manage group settings like naming and expiration policies, and view groups activity and audit reports. It is important to understand that assigning a user to this role gives them the ability to manage all the groups in the tenants across various workloads like Teams, SharePoint, and Yammer in addition to Outlook. Also, the user will be able to manage the various group settings across various admin portals like Microsoft Admin Center and the Azure Portal, as well as workload specific ones like Teams and SharePoint admin centers.
Office apps admin	Office apps administrator	Users in this role can manage Office 365 apps cloud settings. This includes managing cloud policies, self-service download management and the ability to view Office apps related report. This role additionally grants the ability to manage support tickets, and monitor service health within the main admin center. Users assigned to this role can also manage communication of new features in Office apps.
Power Platform admin	Power platform administrator	Users in this role can create and manage all aspects of environments, PowerApps, Microsoft Flows, and Data Loss Prevent policies. Additionally, users with this role have the ability to manage support tickets and monitor service health.

Groups admin Permissions

Manage all
Read and configure ‎Azure Service Health‎
Create and manage Azure support tickets
Read and configure Service Health
Create and manage ‎Office 365‎ service requests

Create
Create groups in ‎Azure Active Directory‎

Delete
Delete groups in ‎Azure Active Directory‎

Modify
Assign product licenses to groups for group-based licensing in ‎Azure Active Directory‎
Reprocess license assignments for group-based licensing in ‎Azure Active Directory‎
Restore groups in ‎Azure Active Directory‎
Update basic properties on groups in ‎Azure Active Directory‎
Update members of a group in ‎Azure Active Directory‎
Update owners of a group in ‎Azure Active Directory‎
Update settings of groups in ‎Azure Active Directory‎

Read
Read hidden members of a group (groups.hiddenMembers property) in ‎Azure Active Directory‎
Read ‎Office 365‎ usage reports

Read basic properties on all resources in ‎Microsoft 365‎ admin center

__________________________________________________

Office apps admin Permissions Manage all    Read and configure ‎Azure Service Health‎    Create and manage Azure support tickets    Read and configure Service Health    Create and manage ‎Office 365‎ service requests    Manage all aspects of end-user communication settings Read    Read messages in Message Center    Read ‎Office 365‎ usage reports    Read basic properties on all resources in ‎Microsoft 365‎ admin center

___________________________________________________

Power Platform admin Permissions

Manage all

Read and configure ‎Azure Service Health‎

Create and manage Azure support tickets

Manage all aspects of ‎Dynamics 365‎

Manage all aspects of ‎Flow‎

Read and configure Service Health

Create and manage ‎Office 365‎ service requests

Manage all aspects of ‎PowerApps‎

Read

Read ‎Office 365‎ usage reports

Read basic properties on all resources in ‎Microsoft 365‎ admin center

For other roles info, click below links
Global reader (Azure role)
Roles and administrators - O365 vs Azure Active Directory

Updated Feature: Email notifications for comments and @mentions in Word, PowerPoint, and Excel

MSFT will be updating email notifications for comments and @mentions in Excel, PowerPoint, and Word.
We'll be gradually rolling this out in mid-January 2020
The roll out will be completed worldwide by the end of February 2020

This message is associated with Office 365 Roadmap ID 51538.

How does this affect me?
Currently, when a user comments on a document, presentation, or spreadsheet and adds the @ sign with someone's name (an @mention), that person may receive an email with a link to that comment. By clicking on the link, the mentioned person opens the document comment and enters that conversation.

With this update, when a user gets an email notification that someone has @mentioned them or who has replied to their comment, the email may now show both the comment thread and the surrounding document context without requiring them to open the document. In addition, users who receive the email will be able to reply to the comment without needing to open the document.

This update applies to these versions of Excel: Windows (version 1911 or later), Mac (version 16.31 or later), mobile, and web.
For Word, this update applies only to mobile and web versions.
For PowerPoint, this update applies only to the web version.
We will add additional support for PowerPoint and Word in 2020 and will notify you of those updates at that time.


Sometimes users may get email notifications that do not include the comment thread, context, or ability to reply from the email. This can happen:
When the file is marked sensitive via rules supporting Data Loss Prevention;

If the file is Rights Protected; or
Kathy > is there a better link?

If the person who left the comment is using a version of Office that does not yet support this feature.

Additional information

Updated Feature: Image resizing in the modern SharePoint experience

MSFT is introducing the ability to resize an image in the modern SharePoint experience. 

We'll be gradually rolling this out to Targeted Release customers in early January 2020.
The roll out will be complete by the beginning of February 2020.

This message is associated with Office 365 Roadmap ID 57812.

How does this affect me?
The modern SharePoint site is comprised of web parts, the building blocks of the page. The Image web part lets an editor insert an image on a page, whether from their SharePoint site, their computer, or an external web location.

With this update, page editors will also be able to resize images in the image web part.



What do I need to do to prepare for this change?
There is no action you need to take to prepare for this change, but you might consider updating your user training and notifying your help desk.

Updated Feature: Exchange Online - FindTime, updating back-end service

MSFT is updating how FindTime stores polling data.

• MSFT will be gradually rolling this out to targeted release customers in mid-December 2019.
• The rollout will be completed by the end of March 2020.
This message is associated with Microsoft Office 365 Roadmap ID 58210.

How does this affect me?

FindTime is an Outlook add-in that helps your users quickly find time to meet with others by simplifying group scheduling via a poll. Customers have asked that FindTime store application data at the organization’s location. To address this, the new FindTime service will now store collected data in the meeting organizer’s Exchange mailbox.

The new FindTime service will be supported in Outlook on the web, Outlook for Windows 2016 version 2016.0.7828.100 and above, and Outlook for Mac 2016.

What do I need to do to prepare for this change?

If you have not enabled FindTime for your organization, this update does not apply to you.

If you have enabled FindTime for your organization:

• For your users who have a supported version of Outlook, their FindTime polling data will be stored in their Exchange mailbox.

• For your users who have a non-supported version of Outlook, their FindTime polling data will be stored in a North America server.

Install FindTime for everyone in my organization

As a tenant admin, you can install Office apps for your Office 365 users using the Exchange admin portal.

1. In the EAC, navigate to Organization > add-ins.
2.  Click , and then choose the right option.

◾Add from the AppSource. 
Note: Access to the AppSource isn’t supported for mailboxes or organizations in specific regions. If you don’t see Add from the AppSource as an option in the Exchange admin center under Organization > add-ins >  Icon, you may be able to install an App for Outlook from a URL or file location. For more information, contact your service provider.

◾Add from URL. In URL, enter the full URL for the app manifest file that you want to install.


◾Add from file. Select Browse, and then navigate to the location of the app manifest file that you want to install.

We go with 'Add from the AppSource' option. 

This opens a new tab redirecting to MSFT appsource site, select the app you want to install (look for FindTime app), 

and then click GET IT NOW.

 Click 'Continue'

 Click 'Yes'

 You will see the FindTime icon under Home tab of the Mailbox and under Message tab of the opened e-mail.

Click on  Reply with Meeting Poll - FindTime icon, Click on 'Link Now'

Sign in for the first time

Once connected, select the Meeting time(s) and Click 'Next'

 

Update the Location and click on 'Insert to email'

You will see the email as shown below.

New Feature: Meeting chat notifications

MSFT are enabling meeting chat notifications for Teams. They will be gradually rolling this out in early December 2019.The rollout will be completed by mid-December.

This message is associated with Microsoft 365 Roadmap ID 54637.

How does this affect me?

By default, meeting chats will be muted until a user either sends a message in the chat or joins the online meeting.
Users who have joined a meeting, whether or not they have sent a message in the meeting chat, will receive notifications of chat messages for that meeting unless they have modified their settings.
Users who send a message in a meeting chat will receive notifications for chat messages for that meeting unless they have modified their settings.

Users can change the default setting:
In the web browser or desktop client, users should tap their profile picture at the top right of the app, select Settings > Notifications.

In the mobile client, users should access the "Hamburger" menu and choose Settings > Notifications.
Then navigate to the meetings section and open the menu for Meeting chat notifications.


What do I need to do to prepare for this change?

There is nothing you need to do to prepare for this change, but you may consider updating your user training and notifying your help desk.

LookBook for SharePoint Online sites

Recently MSFT released LookBook to make SharePoint admins and users get inspired with these designs or add them to your tenant to start building your next stunning site with them. This also includes SharePoint Themes Designer to Design beautiful and performant sites, pages, and web parts with SharePoint in Office 365.

In this episode, we will work on applying new branding site from LookBook.

Click on the https://lookbook.microsoft.com/ link.  

On top Navigation, go to View the designs to view a bunch of available designs. Below screenshot shows the existing branding templates.

Picked 'Mark8 Project team' site under Team.

Click on "Add to your tenant". You will see the below message if you have SharePoint admin role.  You need Tenant admin role.

Tenant admin means Global admin.

Checkbox the Consent on behalf of your organization and Click Accept

Change Site Title or Site URL if needed and click on Provision

Click on Confirm, and watch the Provisioning Status.

Sometimes, it might take more than 5 mins. No worries, you will receive an email notification (as shown below).

Click on Open site >. You can also view/open the site thru Active Sites.

The new created Site looks the same as the preview in the LookBook site.

File hover card feature in O365/SPO

MSFT introduced an Office 365 file hover card feature: people who viewed files.

We'll be gradually rolling this out to Targeted Release customers in mid-November 2019.
The roll out will be completed by the end of February 2020.

This message is associated with Microsoft 365 Roadmap ID 56515.

How does this affect me?
This new file card feature will show you who has viewed your files and pages in SharePoint. When someone views a file you own or a page or news article that you have authored, SharePoint displays that people information and profile image of the viewer in the file hover card.



This information is available only to people who themselves have access to a file and only when the SharePoint site owner has enabled this feature. Users who cannot access the file will not see this data.

This feature exists alongside file details and actions like Inside Look and Activity.

What do I need to do to prepare for this change?
Tenant level: There are administrative controls to enable and disable at the tenant level. This setting is default On at the tenant level.

To disable the feature for all SharePoint sites in the tenant, admins will need to change the control by visiting the SharePoint admin center and navigating to the Sharing settings.

SharePoint site level: The administrative controls for each SharePoint site are default Off. This toggle is accessible in the Manage Site Features settings.

Viewer information will only appear if a SharePoint site owner changes the default setting to Active.



Tenant and SP setting options


Note: Microsoft recommends enabling the file viewers feature on sites where users are expected to be collaborating frequently and not on communication sites or sites with potentially sensitive information.

Sharing Reports for OneDrive

When you run the sharing report on file and folder sharing in OneDrive, the CSV file is saved to a location of your choosing in the OneDrive. 
NOTE: If you don't want site members to see the report, consider creating a folder with different permissions where only site owners can access the report.

Steps to Run the Sharing report.

Open the site where you want to run the report.
On the Settings menu, click OneDrive settings.

Under More Settings, Manage access section, click Run sharing report.

Create a New > Folder (here we created MyShareReport Folder), select the Folder and click Save, and then click Run sharing report again.

The report may take some time to run depending on the size of the site.

When the report is finished running you will receive an email with a link to the report.

Go to MyShareReport Folder, inside, you will see the saved sharing report in CSV format.

CSV format

For items shared with direct access, the report contains one row for each user / item combination. SharePoint groups are shown in the report, but not individual users inside them.

For items shared with a link, the report contains a row for each signed-in user who has used the link or has been sent the link through the sharing dialog box. Links emailed directly that haven't been clicked, and Anyone links are not included in the report.

The report contains the following columns:
Resource Path - The relative URL of the item

Item Type - The type of item (web, folder, file, etc.)

Permission - The permission level the user has on this item

User Name - Friendly name of the user or group that has access to this item. If this is a sharing link, the user name is SharingLink

User E-mail - The email address of the user who has access to this item. This is blank for SharePoint groups.

User or Group Type - The type of user or group: Member (internal), Guest (external), SharePoint group, Security group or Office 365 group. (Note that Member refers to a member in the directory, not a member of the site.)

Link ID - The GUID of the sharing link if user name is Sharing Link

Link Type - The type of link (Anonymous, Company, Specific People) if user name is Sharing Link

AccessViaLinkID - The Link ID used to access the item if a user's permission to an item is via a link.