Overview
This is a five-day instructor-led training (ILT) course that targets the needs of IT professionals who require fundamental technical skills of Office 365 to evaluating, planning, deploy, and administer core Microsoft Office 365 services, including:
- Office 365 Technical Fundamentals – Architecture and Tools
- Azure Active Directory - Managing Office 365 Users and Groups
- Identity Models and Directory Synchronization
- Microsoft 365 Apps
- Exchange Online
- Microsoft Teams
- Sharepoint Online
- Microsoft Purview (Compliance) and Security
- Office 365 Monitoring and Support
Audience profile
This course is intended for IT professionals who are responsible for planning, configuring, administering, and managing the core components of Office 365. Service Desk/Help Desk delegates would benefit from attending.
Students who attend this course are expected to have a fairly broad understanding of several on-premises technologies such as Domain Name System (DNS) and Active Directory Domain Services (AD DS).
Prerequisites
Before attending this course, students must have:
-
An understanding of core technical concepts, DNS, Networking, Active Directory, Identities, User Accounts
-
An understanding of basic Cloud Concepts (SAAS)
-
At least one year working in a technical support role would be advantageous
-
Experience working with Windows PowerShell would be beneficial
Instructors will demonstrate features throughout the event. Optional Lab exercises are available for students to complete within a free commercial Microsoft 365 tenancy provided free of charge for each student by QA. This tenancy lasts for 30 days but can be extended free of charge for another 30 days.
Delegates will learn how to
Deploy and maintain the core features of the main product pillars of Office 365. This course will provide an excellent technical grounding for further technical courses specializing in Azure AD, Exchange Online, Sharepoint Online, Microsoft Teams, Microsoft Purview (Compliance)
Note – this course provides delegates with the essential technical knowledge and skills required for core Office 365 product deployments, but it does not cover all features of any given product. Extensive labs are provided to facilitate hands on learning. The number of labs mean some will be optional for students post event.
Outline
Module 1 – Office 365 Technical Fundamentals
Overview
What is Office 365?
- Office 365 vs Microsoft 365
- Office 365 and Microsoft 365 Confusion
Office 365 is Evergreen
Office 365 Message Centre
Office 365 Release Preferences
Benefits of Office 365
Office 365 requirements
Office 365 Core Components
- Azure Active Directory
- Microsoft 365 apps for Business/Apps for Enterprise
- Exchange Online
- Sharepoint Online
- Microsoft Teams
- Purview/Compliance/Security
- Microsoft Information Protection
Office 365 additional Components
Office 365 Subscriptions
Office 365 license resources
Office 365 add-on services
Office 365 subscription features
Office 365 Signup Process
Office 365 Administration Tools
- Microsoft 365 Admin Center
- Other Microsoft 365 Admin Centers - Optional
- Azure Active Directory
- Microsoft Compliance Center
- Endpoint Manager
- Exchange Online Admin Center
- Microsoft PowerApps and PowerAutomate Admin Center
- Office Configuration Admin Center
- Microsoft Stream Admin Center
- Microsoft Search & Intelligence Admin Center
- Microsoft 365 Defender Portal
- SharePoint Online Admin Center
- Teams Admin Center
- Yammer Admin Center
Office 365 PowerShell
- Azure Active Directory
- Exchange Online PowerShell V2
- SharePoint Online
- Microsoft Teams
- Microsoft Security and Compliance PowerShell
Overview of Office 365 Administrator Roles
- Office 365 Admin Roles
- Relationships between Azure AD Administrative Roles
- Custom Role Groups
Azure AD Privileged Identity Management (PIM)
Azure AD Access Reviews
Office 365 Privileged access management
Configure and enable Office 365 Privileged access management
Office 365 Domains
- Adding a custom domain
- Custom Domain Considerations
Required Office 365 DNS Records
Office 365 Network Requirements
- Office 365 URLs and IP address ranges
- Additional Network Considerations
- Office 365 Network Connectivity Tools
- Microsoft 365 network connectivity test tool
- Microsoft Remote Connectivity Analyzer
Lab – Using Edge Profiles
Lab – Using Chrome Profiles
Lab – Sign up for an Office 365 trial
Lab – Office 365 PowerShell
Lab – Adding a custom domain
Module 2 Managing Office 365 Users and Groups
Azure Active Directory and Zero Trust
Azure Active Directory Editions
Azure AD Security Defaults
Microsoft Identity Models
- Cloud-only Identity Model
- Hybrid Identity Model
Creating cloud user accounts
- Creating User Accounts via the GUI
- Bulk Import Users using a CSV file
- Create an Azure AD User using PowerShell
- Create a user using Azure AD v1 PowerShell
- Create a user using Azure AD v2 PowerShell
- Create a user using Microsoft Graph Powershell
Create and use a template to add users
Managing User Accounts
Managing Azure AD Account Passwords
- Resetting Passwords
- Force Password Change for all users in Office 365
Azure AD Self Service Password Reset (SSPR)
Deleting User Accounts
Steps to take when a user leaves the business
Restoring user accounts
Azure AD Password Protection
Multi-factor Authentication
Multi-factor Authentication in Microsoft 365
Software Requirements for MFA in Microsoft 365
Security Defaults
Setting up Multi-Factor Authentication in Microsoft 365
MFA with conditional access
- Signals (conditions)
- Decisions (actions)
- GPS Named Location MFA control
- Conditional Access Filters for devices
- Conditional Access Report Only mode
- Conditional Access What if
- Azure AD Sign-in Logs – conditional access policy
- Conditional Access enforced MFA
MFA Enrolment User Experience
MFA Authentication App
MFA Number Matching and Additional Context
Per-user MFA - Legacy
App Passwords Legacy
Resetting MFA User Settings
Creating and Configuring Groups
- Microsoft 365 Group building blocks
- Guest access in Microsoft 365 Groups
- Controlling Microsoft 365 Group Guest access
- Controlling Microsoft 365 Group Guest Access
- Microsoft 365 Groups PowerShell management
- Controlling Microsoft 365 Group Creation
- Obsolete Microsoft 365 Group expiration and removal
- Microsoft 365 Group governance
Distribution groups
Mail enabled security groups
- Create a new mail-enabled security group using PowerShell
Creating Dynamic Groups – Azure AD Admin Center
Creating dynamic distribution groups in Exchange Online
Group naming policies
Lab - Creating and managing users
Lab – Admin roles
Lab – Self-service password reset
Lab – Conditional Access
Lab – Multifactor authentication
Lab - Creating and managing groups
Module 3 – Implementing Directory Synchronization
Hybrid Identity Overview
Hybrid Authentication Methods
- Password Hash Synchronization (PHS)
- Pass-through Authentication (PTA)
- Federated Authentication
Authentication Method Selection
Azure ADConnect
Installing ADConnect
- ADConnect Prerequisites
- Azure AD
- On-Premises Active Directory
- PowerShell execution policy
- Azure AD Connect server
- SQL Server used by Azure AD Connect
- Accounts
- Network Connectivity
ADConnect Supported Topologies
Azure AD Connect Express vs Custom installation
- Instructor Walkthrough Demo Express Installation
- Instructor Walkthrough Demo Custom Installation
Azure AD Connect sync: Scheduler
Monitoring and Troubleshooting ADConnect
Real World ADConnect Monitoring and Troubleshooting
- Microsoft 365 admin center notifications
- Azure AD Admin Center Status
- Windows Azure AD PowerShell
- Synchronization Service Manager
- Windows Server Event Logs
ADConnect Health
Azure AD synchronization errors
- Identity synchronization and duplicate attribute resiliency
- Troubleshooting Sync Errors Key Point
- Azure AD Connect Admin Agent
- ADConnectivityTool PowerShell module
Azure AD Connect: Staging server and disaster recovery
Azure AD Connect cloud sync
- Installing Azure AD Connect Cloud Sync
- Azure ADConnect Cloud Sync Configuration
- Azure AD Connect Cloud Sync Single Sign-On
- Azure AD Cloud Sync Troubleshooting
Lab – Azure AD Connect
Module 4 – Microsoft 365 Apps
Microsoft 365 Apps
Available Office Applications for End Users
- Office for the Web (Office Online)
- Office Mobile Apps
- Microsoft 365 Apps for Mac
- Microsoft 365 Apps for Business/Enterprise
Overview of Microsoft 365 Apps
- Microsoft Apps Common Features with Office 2021
- Microsoft 365 Apps Differentiating Features
- Microsoft 365 Apps Licensing
- Microsoft 365 Apps Deployment
- Application Compatibility
User Self Service Deployment
- Administration of Self Service installations
Removing Microsoft 365 Apps License
Organization Office installation options
Centralized Microsoft 365 Apps Deployments
- Installing the ODT
- ODT components
- ODT Modes
- ODT Configuration Files
Office Customization Tool
Managed Microsoft 365 Apps using Policies
- Microsoft 365 Apps Group Policies
- Office cloud policy service
- Policy Precedence
Microsoft 365 Apps Updates
- Administrator Control of Microsoft 365 App Updates
- Microsoft 365 Admin Center
- Group Policy
- ODT
- Apps Admin Center Servicing Profile
Monitoring
- Apps Inventory
- Security Update Status
- Apps Health
Lab - Deploying Microsoft 365 Apps
Module 5 – Exchange Online
Introduction
Exchange Online service overview
Exchange Online limits
Exchange Online Admin Center
Exchange Online Permissions
Exchange Online PowerShell
Requirements for using PowerShell to manage Exchange Online
- Connecting to PowerShell Endpoints
- Connecting to Exchange Online using PowerShell
- Exchange Online PowerShell v2 Module
Administering Exchange Online Recipients
Recipient types
- Mailboxes
- Create a mailbox using Exchange Online Powershell
- Deleting and Restoring Mailboxes
- Soft deleting User Mailboxes
- Hard-deleted user mailboxes
- Microsoft 365 Inactive Mailboxes
- Restoring user mailboxes
- Configuring mailboxes
- Mailbox Settings
Mailbox e-mail addresses
Exchange Online Plus addressing/Subaddressing
Default message size restrictions
Creating and configuring resources
- Configuring Resources using Powershell
- Creating a room distribution group
Creating and configuring contacts
Creating and configuring shared mailboxes
Creating and configuring address lists and address book policies
- Address lists
- Offline address books
- Custom address lists
- Managing address lists
- Address book policies
Exchange Online mail flow
- Mail Flow Rules
- Creating Mail Flow Rules
Exchange Online Message tracing
Accepted domains
Remote domains
Connectors
Mail Flow Exchange Online Alert Policies
Mail Flow Reports and Insights
Controlling automatic external email forwarding
- Email forwarding rule alerts
- Exchange Online Auto Forwarded Message Reports
Preset Security Policies
Configuration analyzer
Lab – Exchange Online Powershell
Lab – Configuring mailboxes and email addresses
Lab – Creating other recipient objects
Lab – Exchange Online RBAC
Lab – Mail Flow rules and message trace
Module 6 – Microsoft Teams
Overview of Teams
- Microsoft Teams Features & Licensing
- Microsoft Teams limits
- Teams Components
- Microsoft Teams and Channels
- Where is Team content stored
- Teams Meeting Recordings
- Controlling Teams Creation and Expiration
- Clients for Microsoft Teams
Administering Teams
- Microsoft Teams Admin Roles
- Microsoft Teams Administrative tools
- Microsoft Teams Admin Center
- Microsoft Teams Powershell
- Microsoft Teams Settings and Policies
- Teams Settings
- Teams Policies
- Microsoft Team Policy Precedence
- Policy Packages
- Managing Microsoft Teams
- Microsoft Team Templates
- Managing Teams Meetings
- Teams Meeting Settings
- Meeting Policies
- Meeting Policies PowerShell
- Managing Microsoft Teams Messaging
Managing Access to Teams
- Teams Roles
- Dynamic Microsoft Team Membership
Microsoft Teams External Collaboration
- External Access vs Guest Access
- Microsoft Teams External Access
- Microsoft Teams Guest Access
- Additional Guests Considerations
- Microsoft Teams Guest access management
- Enabling Guest Access with Windows PowerShell
- Specific Team Guest Permissions
- Adding Guests to a Team
- Microsoft 365 Guest Management
Lab - Managing Microsoft Teams
Module 7 – Sharepoint Online Sites and Navigation
Introduction
Sharepoint Online service overview
SharePoint Online Features
Isn’t SharePoint just a part of Microsoft Teams?
SharePoint Six Pillars
Sharepoint Online Updates
- SharePoint “What's New” Site
- SharePoint Intrazone
- SharePoint Pitstop - Monthly 9
SharePoint Online Administration Tools
- SharePoint Online Admin Centre(s)
- SharePoint Online Management Shell
- SharePoint PnP
SharePoint Sites
Modern Team Sites
Modern Communication Sites
Sharepoint Online Subsites
Deleting and restoring Modern Sites
Hub Sites
- Hub Site Benefits
- Configuring Hub Sites
- Associating Sites to a Hub Site
- Hub Site Approval Flow (PowerAutomate)
- Parent Hub Association
- Hub Site Features
- Hub Site Permissions
- Hub Site Limitations
Comparison of Associated hub sites and Associated (non hub) sites
When to create a new site
Site Collection Administrators
Site Collection Quotas
Deciding between a Single Site Collection vs Multiple Site Collections
Site Architecture and Navigation Relationship
SharePoint Online Site Navigation
- Modern Team Site Navigation
- Team Site Navigation Switcher
- Modern Communication Site Navigation
- Cascading vs Mega Menu Navigation
- WebPart Navigation Options
- Highlighted Content Webpart
- SharePoint App Bar and Global Navigation
Lab – SharePoint Online PowerShell and PnP
Lab – Creating and managing sites
Lab – Creating and managing sites using PowerShell
Lab – Managing SharePoint navigation
Lab – SharePoint search driven navigation
Module 8 – Sharepoint Online Permissions and External Sharing
Lesson 1: Sharepoint Permissions
- Sharepoint Permissions vs M365 Group Security
- SharePoint Team Sites
- Access Requests
- Member Sharing options
Lesson 2: Sharepoint Sharing
- SharePoint Sharing
- Sharing a Site
- Sharing a Document Library/List
- Sharing a Folder or Items
- Item QR Codes
Lesson 3: Advanced Permissions (When things get messy)
- Permission levels
- Bespoke Permission Levels
- Granting Explicit Permissions
- Permission Inheritance
- Breaking Inheritance
- Broken inheritance visibility
- Enabling and Disabling Permission Inheritance
Lesson 4: SharePoint Groups
- Creating additional Sharepoint Groups
- Sharepoint Group Owners
- SharePoint Group Best Practice
- Recommended Sharepoint Group Model
- Special SharePoint Groups
Lesson 5: Granting and Managing Permissions
- Checking Permissions
- Modifying and Removing Permissions
- Sharepoint Permissions via PowerShell
Lesson 6: Sharepoint Permissions Best Practice
- SharePoint Site Security Key Summary
SharePoint External Sharing
- Authenticated External User sharing
- Authenticated External User Link Management
- Anonymous Access Links
SharePoint Online External sharing administration
- Tenant Level External Sharing Administration
- Azure B2B One Time Passcodes for Guest Users
- Pre-Creating Guest Users
Advanced settings for external sharing
File and Folder Links
Outlook External Sharing Link Features
Site Collection External Sharing Options
PowerShell for External Sharing
SharePoint Online External Sharing Alerts, Auditing and Reporting
Lab – SharePoint permissions
Lab – SharePoint external sharing
Module 9 – Microsoft 365 Purview (Compliance) and Security
Introduction
What is Microsoft 365 Purview?
The Microsoft Trust Center
The Microsoft Service Trust Portal
Microsoft’s Information Protection Model
Microsoft 365 Security and Compliance Administration Tools
Security and Compliance Administrative Roles
Security and Compliance PowerShell
Office 365 Data Loss Prevention
- Components of DLP Policies
- Creating DLP Policies
- Sensitive Information Types
- Custom Sensitive Information Types
- Creating a Custom DLP Policy
- DLP Policy Locations
- Endpoint DLP
- Microsoft Compliance Extension for Google Chrome
- DLP Policy Rule Settings
- DLP Rule Conditions/Exceptions
- DLP Actions
- DLP User Notifications and User Overrides
- DLP Incident reports
- DLP Powershell
- DLP Mark Files as Sensitive by Default
- DLP Reports
- DLP Activity Explorer
Retention Policies
- Retention policy data behaviour
- Creating Retention Policies
- Adaptive vs Static Retention Policies
- Adaptive Scopes
- Retention Policy Locations
- Retention Policy Location Considerations
- Teams Retention Policy considerations
- Retention Options
Microsoft 365 Content Search
- Content Search Security
- Configure Security Filtering for Content Search
- Running a Content Search
- Search for Teams chat data for on-premises users
- Targeted Collection Search
- Condition Card Builder & KQL Editor
- Preview Sample Search Results
- Search Statistics
- Content Search PowerShell
- Export Content Search Results
- Unindexed Items in Content Searches
- Search for and Delete Email Messages in an Office 365 Organisation
Office 365 Auditing
- Audit Log Permissions
- Running an Audit Log Search
- Viewing Audit Log Search Results
- Exporting Audit Log Search Results
Azure AD Logs
Office 365 Alerts
Compliance Manager and Compliance Score
Compliance Manager Automated Testing
Microsoft Compliance Configuration Analyzer (MCCA)
Microsoft 365 Secure Score
Compliance/Secure Score “Old Skool”
Lab – Data Loss Prevention
Lab – Retention policies
Lab – Office 365 Auditing
Lab – Alerts
Lab – Secure Score
Module 10 – Office 365 Monitoring and Support
Office 365 Monitoring and Support
Office 365 Troubleshooting Fundamentals
Microsoft Support and Recovery Assistant
Microsoft 365 Health Reports
Microsoft 365 Status Twitter Feed
Office 365 Troubleshooting Guide
Microsoft 365 Community
Microsoft 365 Technical Support
Microsoft Support SLA’s
Microsoft 365 learning pathways
= Required
= Certification
Technical Decision Maker
Office 365 General Administration
Exchange Online/Hybrid
SharePoint Online/Hybrid
Device Management, Identity and Services
Security and Compliance
Modern Desktop
Power Platform
Microsoft Teams
Microsoft Teams Development
Technical Decision Maker
Microsoft Official
Microsoft Official
QA Mastering
QA Mastering
Office 365 General Administration
Microsoft Official QA
Microsoft Official QA
Authored Courses
Authored Courses
Exchange Online/Hybrid
Microsoft Official
Microsoft Official
SharePoint Online/Hybrid
Device Management, Identity and Services
Microsoft Official
Microsoft Official
Security and Compliance
Microsoft Official
Microsoft Official
Microsoft 365 Security Administrator (MS-500)
MS500
4 Days
£2,615 ex VAT
View course
Microsoft Security Operations Analyst (SC-200)
MSC200
4 Days
£2,550 ex VAT
View course
Microsoft Identity and Access Administrator (SC-300)
MSC300
4 Days
£2,550 ex VAT
View course
Microsoft Information Protection Administrator (SC-400)
MSC400
4 Days
£2,550 ex VAT
View course
Microsoft Security, Compliance, and Identity Fundamentals (SC-900)
MSC900
1 Day
£795 ex VAT
View course
Modern Desktop
Microsoft Official
Microsoft Official
Power Platform
Microsoft Official
Microsoft Official
Microsoft Power Platform Fundamentals (PL-900)
MPL900
1 Day
£785 ex VAT
View course
Microsoft Power Platform App Maker (PL-100)
MPL100
4 Days
£2,575 ex VAT
View course
Power Platform Functional Consultant (PL-200)
MPL200
5 Days
£3,310 ex VAT
View course
Microsoft Power Platform Developer (PL-400)
MPL400
5 Days
£3,415 ex VAT
View course
Power Platform Solution Architect (PL-600)
MPL600
3 Days
£2,095 ex VAT
View course
Microsoft Power BI Data Analyst (PL-300)
MPL300
4 Days
£2,575 ex VAT
View course
QA Mastering
QA Mastering
Microsoft Power Apps Essentials
QAPAESS
1 Day
£1,080 ex VAT
View course
Microsoft Power Automate Essentials
QAPWAUTESS
2 Days
£1,600 ex VAT
View course
Mastering Power Apps
QAMPAPPS
3 Days
£3,405 ex VAT
View course
Mastering Microsoft Power Automate
QAPWAUTMS
3 Days
£2,875 ex VAT
View course
Mastering Power Platform Dataverse and Model-Driven Apps
QAMPMOD
3 Days
£3,145 ex VAT
View course
Microsoft Teams
Microsoft Official
Microsoft Official
Microsoft Teams Development
Microsoft Official
Microsoft Official
QA Mastering
QA Mastering
Frequently asked questions
See all of our FAQsHow can I create an account on myQA.com?
There are a number of ways to create an account. If you are a self-funder, simply select the "Create account" option on the login page.
If you have been booked onto a course by your company, you will receive a confirmation email. From this email, select "Sign into myQA" and you will be taken to the "Create account" page. Complete all of the details and select "Create account".
If you have the booking number you can also go here and select the "I have a booking number" option. Enter the booking reference and your surname. If the details match, you will be taken to the "Create account" page from where you can enter your details and confirm your account.
Find more answers to frequently asked questions in our FAQs: Bookings & Cancellations page.
How do QA’s virtual classroom courses work?
Our virtual classroom courses allow you to access award-winning classroom training, without leaving your home or office. Our learning professionals are specially trained on how to interact with remote attendees and our remote labs ensure all participants can take part in hands-on exercises wherever they are.
We use the WebEx video conferencing platform by Cisco. Before you book, check that you meet the WebEx system requirements and run a test meeting (more details in the link below) to ensure the software is compatible with your firewall settings. If it doesn’t work, try adjusting your settings or contact your IT department about permitting the website.
Learn more about our Virtual Classrooms.
How do QA’s online courses work?
QA online courses, also commonly known as distance learning courses or elearning courses, take the form of interactive software designed for individual learning, but you will also have access to full support from our subject-matter experts for the duration of your course. When you book a QA online learning course you will receive immediate access to it through our e-learning platform and you can start to learn straight away, from any compatible device. Access to the online learning platform is valid for one year from the booking date.
All courses are built around case studies and presented in an engaging format, which includes storytelling elements, video, audio and humour. Every case study is supported by sample documents and a collection of Knowledge Nuggets that provide more in-depth detail on the wider processes.
Learn more about QA’s online courses.
When will I receive my joining instructions?
Joining instructions for QA courses are sent two weeks prior to the course start date, or immediately if the booking is confirmed within this timeframe. For course bookings made via QA but delivered by a third-party supplier, joining instructions are sent to attendees prior to the training course, but timescales vary depending on each supplier’s terms. Read more FAQs.
When will I receive my certificate?
Certificates of Achievement are issued at the end the course, either as a hard copy or via email. Read more here.