Microsoft Custom Script Updates

In a strategic move that underscores its commitment to enhancing security and manageability across its platforms, Microsoft has announced pivotal updates to the Custom Script settings in SharePoint and OneDrive, set to take effect in March 2024.

Recognizing the significance of these changes and the impact they may have on users, Microsoft has also extended support for a newly introduced PowerShell command until mid-November 2024, reflecting their responsiveness to user feedback.

A Shift in Custom Script Management

Custom scripts play a crucial role in personalizing and extending the functionality of SharePoint and OneDrive sites. However, in an effort to streamline operations and bolster security, the ability to execute custom scripts on personal sites and self-service created sites will be discontinued. This setting, currently located in the SharePoint Admin Center under Classic Settings, will be removed, marking a significant shift in how custom scripts are managed.

PowerShell to the Rescue

To ease this transition, Microsoft has unveiled the "DelayDenyAddAndCustomizePagesEnforcement" PowerShell command. This addition to the SharePoint Online Management Shell allows administrators to delay the enforcement of these changes until mid-November 2024. It's important to note that while this command is a powerful tool for administrators, its usage prior to the official release of the settings in March may result in errors, as it is part of an experimental feature set.

Understanding the Implications

The implications of these updates are twofold:

• Default settings will automatically disable the ability to add custom scripts within 24 hours of the last change, unless the new PowerShell command is utilized to maintain changes.
• Post-November 2024, administrators must manually re-enable custom script execution every 24 hours to use features reliant on unmanaged custom scripts.

Furthermore, the "NoScriptSite" setting will be applied universally, with specific exceptions for certain site templates, ensuring the execution of existing scripts remains unaffected.

Preparing for Change

As these changes represent a significant departure from current practices, it's imperative for organizations to begin preparing now. No extensions beyond the mid-November 2024 deadline will be granted, making it essential for site owners to be informed and for training materials and documentation to be updated accordingly.

Embracing the Future

While these updates may pose challenges, they also offer an opportunity for organizations to review and enhance their security practices and script management policies. As always, Microsoft's support resources and community forums will be invaluable for those seeking guidance during this transition.

For additional details on how to allow or prevent custom script and to navigate these changes effectively, we encourage our readers to review Microsoft's comprehensive guidelines.