Auto mapping

Auto Mapping is the feature of KONNEKT, that automatically maps all SharePoint Online sites & document libraries into the users Windows File Explorer (and other file dialogues). Only sites & libraries, the user has access to, are mapped.

Administrators can control this feature on two levels:

1. Site level

2. Library level

KONNEKT updates the mappings every 60 minutes.

Site scope

This policy is applicable to version 2.0 and above

By default KONNEKT will map all team and communication sites and subsites the user has access to. Private channels of Teams are not in the default site scope.

If you are fine with that, you do not need to use this policy.

Policy Definition

• Policy Name (ADMX): Sharepoint Sites Query

This policy enables you to define the query string used to find SharePoint sites.

The site query needs to be expressed in KQL. You can find general KQL documentation here: https://docs.microsoft.com/en-us/sharepoint/dev/general-development/keyword-query-language-kql-syntax-reference

A list of query properties for SharePoint can be found here: https://docs.microsoft.com/en-us/sharepoint/technical-reference/crawled-and-managed-properties-overview

You can test your KQL site query at this SharePoint Online URL:

https://<YourTenantName>.sharepoint.com/_layouts/15/osssearchresults.aspx

In the following paragraphs, you can find some examples for KQL query strings.

Default

If you do not configure this policy, KONNEKT will use the following default KQL query:

(webtemplate:STS OR webtemplate:GROUP OR webtemplate:SITEPAGEPUBLISHING) AND (contentclass=STS_Site OR contentclass=STS_Web)

This will map all team and communication sites, the user has access to. Private channels of Teams are not in the default site scope

Examples

Sites whitelisting

Filter on site name/title

Title="<MySiteName>"

Query String to map only the sites "Give" and "Leadership"

(webtemplate:STS OR webtemplate:GROUP OR webtemplate:SITEPAGEPUBLISHING) AND (contentclass=STS_Site OR contentclass=STS_Web) AND (title="Give" OR title="Leadership")

Note: restarting KONNEKT is required to apply the policy

Note: To show all sites with <Leadership> in the name, use the operator (:) instead of (=) by title

Sites whitelisting using * operator

Filter on site name/title using (*) operator

Show all sites has a word starting with Con title:<"Con*">

Query string

(webtemplate:STS OR webtemplate:GROUP OR webtemplate:SITEPAGEPUBLISHING) AND (contentclass=STS_Site OR contentclass=STS_Web) AND (title:"Con*")

Note: We do not recommend combining the (=) operator together with asterisk (*) when you do exact matching. Instead, use the (:) operator with (*)

Sites blacklisting

Exclude sites per site name/title

Map all sites and libraries except specific sites (and their libraries)

Query string to exclude <Site01> and <Site02>

(webtemplate:STS OR webtemplate:GROUP OR webtemplate:SITEPAGEPUBLISHING) AND (NOT (sitetitle:"Site01" OR sitetitle:"Site02"))

Note: restarting KONNEKT is required to apply the policy

Teams private and shared channels

Add Microsoft Teams private and shared channels

Map all SP sites, Teams private channels and Teams shared channels

By adding webtemplate:TEAMCHANNEL to the query

Query string

(webtemplate:STS OR webtemplate:GROUP OR webtemplate:SITEPAGEPUBLISHING OR webtemplate:TEAMCHANNEL) AND (contentclass=STS_Site OR contentclass=STS_Web)

Note: restarting KONNEKT is required to apply the policy

Since private and shared channels are dedicated sites on SharePoint, they appear as dedicated volumes in KONNEKT.

All Subsites for multiple SharePoint sites

Show all Subsites of one or more SharePoint sites

To map all Subsites (and Libraries) of one or more SharePoint sites, you can use the following query

Query string

(webtemplate:STS OR webtemplate:GROUP OR webtemplate:SITEPAGEPUBLISHING) AND (contentclass=STS_Site OR contentclass=STS_Web) AND (path:https://c4a8ehamed.sharepoint.com/sites/MySite1 OR path:https://c4a8ehamed.sharepoint.com/sites/MySite2)

Note: change MySite1 and MySite2 to your SharePoint site names.

You map Subsites and libraries of only one SharePoint site or even add multiple URLs if needed

There are several ways to apply the policy:

• manually by adding the key in the registry under machine or user registry settings

• via GPO, check settings via GPO

• pushing policies via Intune, see settings for Intune Managed Devices

Manual setting in the registry

You do not need this if you use GPO or Intune management.

• Registry Value name: SharepointSiteQuery

• Registry Value type: REG_SZ

• Registry Value data: KQL string

• Registry Value storage location:

  • HKEY_CURRENT_USER\SOFTWARE\Policies\GlueckKanja\Konnekt or

  • HKEY_LOCAL_MACHINE\SOFTWARE\Policies\GlueckKanja\Konnekt

Library scope

Map default document site libraries

You can find this setting in the preferences menu:

You can also configure this setting via registry/GPO/MDM:

Policy Name (ADMX): Sharepoint Sites Autodiscovery

Registry

Key name: O365SharepointUsage Key type: REG_DWORD

Enable or disable access to SharePoint Online sites.

Function	Value	Behavior
Disable	0	KONNEKT maps the OneDrive for Business library, only.
Enable	1 (default)	KONNEKT maps the OneDrive for Business and all default document libraries of the SharePoint Online sites, the user has access to.

The default value is 1 (enable).

We recommend using our ADMX template to configure this setting.

Map all document libraries

You can find this setting in the preferences menu:

Please make sure to reboot KONNEKT after changing this setting.

You can also configure this setting via registry/GPO/MDM:

Policy Name (ADMX): Add all sharepoint libraries

Registry

Key name: AddAllSharepointLibraries Type: REG_DWORD

Function	Value	Behavior
Disable	0 (default)	KONNEKT will map the default document library of the SharePoint Online sites, only. Format of the UNC addressing is: \\OneDrive-<tenant-name>\<site-name>\...
Enable	1	KONNEKT will map all document libraries of the SharePoint Online site. Format of the UNC addressing is: \\OneDrive-<tenant-name>\<site-name>\<library-name>\...

The default value is 0 (disable)

If users in your company are using different values of this setting, their UNC paths will not be compatible with each other (e.g. when they exchange UNC links).

To prevent this, make sure, that all users use the same value for this setting.

We recommend using our ADMX template to configure this setting.

There are several ways to apply the policy:

• manually by adding the key in the registry under machine or user registry settings

• via GPO, see settings via GPO

• pushing policies via Intune, see settings for Intune Managed Devices