Security Incident Response

If you think you have or know you have a Security Incident please fill in the form and our experienced Onevinn CSIRT team will reach out shortly.
 
The team has long experience in supporting customers in Incident Response and Compromised Recovery.
 
Keep calm and we will be with you shortly!

Tom Aafloen 18 Dec 2020
2 min

How to receive files using OneDrive for Business

If you want to receive files without using email, you can use the Request files feature in OneDrive for Business.

Locate the folder you want the incoming files to end up in, click on the three dots next to it, and select Request files:

clip_image002

Enter a descriptive text. This will be shown to the users sending you the files (as you will see in screenshots later):

clip_image004

You are now presented with two options:

1. A link that you can copy and share with people that are going to send you files

2. Add email addresses to send a file request email to

clip_image006

The link looks something like this:
https://onevinnab-my.sharepoint.com/:f:/g/personal/tom_aafloen_onevinn_se/EmRFfuOt2aFMsheK8XsVz4Qroqv-J7MhU2-cahd-x2b65Q
Note that the link exposes your tenant and email address. If you lose the link, it can be retrieved again, see Managing Access below.

Here I added two email recipients and added a message. Notice the warning that one of them is outside of my organization:

clip_image008

After sending the request, I am shown this message:

clip_image010

The recipients will get an email that looks like this:

clip_image012

You will see the request name and custom message. Notice that I can not see the other recipients of the file request here.

When you click on the link in the email (or the copied link, if you chose not to send emails), you will end up here:

clip_image014

Clicking on Select files opens a local Open dialog, where you can locate the file you want to send:

clip_image016

You can add more files here, but you can also upload more files later by returning to the same link (as long as the Request file access has not been removed).
When you are done adding files, click on Upload:

clip_image018

In the example above I was already logged in to OneDrive, so you can see that my name was prepopulated (and not editable).

You do not have to be signed-in to OneDrive, or even have a OneDrive account to upload files. In those cases, you must add a name yourself:

clip_image020

Upload progress will be shown:

clip_image022

Then you will see this message:

clip_image024

As the receiver, I will receive a notification email about uploaded files:

clip_image026

Clicking the link takes me to the folder in my OneDrive for Business and I can see the files that have been uploaded. Every file will have a prefix to help you identify who uploaded it:

clip_image028

If two files with the same name are uploaded, OneDrive will automatically add a number to the second file’s name.

To stop the possibility to upload files, click on the three dots next to the folder and select Manage access:

clip_image030

On the Manage Access pane, click on the three dots next to the sharing link:

clip_image032

Click on the X to remove the sharing link.
Notice that the sharing description says Anyone with the file request link can upload only, so you are technically not sharing anything.

clip_image034

Approve the warning about link deletion to complete the removal.

clip_image036

The next time someone uses the link they will see this message:

clip_image038

Maybe a more File request related message would have been better (it is not access to a document that has been removed), but the link stopped working, and that is what is important.

Some important notes:

· Your admin must have enabled Anyone links in OneDrive

· Uploaders cannot see the content of the folder, edit, delete, or download files, or even see who else has uploaded files

· This feature is not available for Office 365 Government, Office 365 operated by 21Vianet, OneDrive for home, or Office 365 Germany

· The maximum file size is 100GB

If you try to upload a larger file you will get this message:

clip_image040

Files prefixed with ~tmp are still uploading or failed attempts. You can see that the file size is not displayed for these:

clip_image042

I hope this was helpful!