Configure your Microsoft 365 Tenant
*These are step by step from Administering Microsoft O365 training. *They'll need to be configured specifically to Husco. Capturing the knowledge first.
Configure your Microsoft 365 Tenant
Adatum Corporation runs their legacy applications (such as Microsoft Exchange) in an on-premises deployment. However, they recently subscribed to Microsoft 365, thereby creating a hybrid deployment in which they must synchronize their on-premises and cloud deployments.
Throughout the labs in this course, you will take on the persona of Holly Dickson, Adatum's Enterprise Administrator. You have been tasked with deploying Microsoft 365 using a virtualized lab environment. Adatum's project team has decided to implement Microsoft 365 in a pilot project that will not only provide them with experience using the product, but also enable them to match their business requirements with the Microsoft 365 feature set. In this exercise, you will begin implementing Microsoft 365 within the pilot project by setting up Adatum's Microsoft 365 trial tenant.
In the lab environment, your lab hosting provider has already:
- Deployed the trial tenant
- Created a default tenant administrator account (known as the MOD Administrator)
- Created 9 additional user accounts
In this lab, you will complete the following exercises:
Exercise 1 - Provision Adatum's Microsoft 365 tenant Exercise 2 - Complete the custom domain setup process Exercise 3 - Explore the Microsoft 365 administrator interfaces
Exercise 1 - Provision Adatum's Microsoft 365 Tenant
In this exercise, you will update Adatum's Microsoft 365 organizational profile, and you will verify the provisioning of Adatum's Microsoft 365 tenant, as well as the tenant's service health.
Task 1 - Try a free trial subscription
-
Switch to LON-CL1 and login as ADATUM\AdatumAdmin with the password Pa55w.rd
-
Return to Microsoft Edge and navigate to the following url: https://developer.microsoft.com/en-us/microsoft-365/dev-program and select Join now.
- If you already have a Microsoft Account sign in with those credentials, otherwise select Create one!.
- Follow the on screen instructions to create your new outlook.com account.
-
On the Join the Microsoft 365 Developer Program! screen select United States as your country. Specify Adatum as the company and English as the language then select the terms and conditions checkbox and click Next.
- On the next screen select Personal projects and click Next.
- On the next screen select several of the options and click Save.
- On the Set up your Microsoft 365 E5 sandbox screen, ensure that Instant Sandbox is selected and click Next.
-
On the next screen ensure North America is selected as the Country/Region. Enter admin as the Admin username and use the following password: Pa55w.rd12341234! then click Continue.
- Enter your Cell / Mobile number to verify you as a human then click Setup.
Note: It may take up to 5 minutes to provision your trial. Refresh the page if necessary.
- Once your tenant is provisioned, ensure you note down your tenant domain name. You will use this throughout the course.
- Close Microsoft Edge.
- Open a new instance of Microsoft Edge
Task 2 - Set up the Organization Profile
In your role as Holly Dickson, Adatum's Enterprise Administrator, you have been tasked with setting up the company's profile for its Microsoft 365 trial tenant. In this task, you will configure the required options for Adatum's tenant. Since Holly has yet to create a personal Microsoft 365 user account (you will do this in Lab 2), she will initially sign into Microsoft 365 as the default Microsoft 365 MOD Administrator account using the Tenant admin's username and password that has been assigned to you.
-
Log into LON-DC1 and enter Adatum\AdatumAdmin with the password Pa55w.rd.
- If you receive a Networks warning message asking if you want this PC to be discoverable by other PCs and devices on this network, select Yes.
-
Server Manager will automatically start. Leave it open but minimize the window for now.
-
In your web browser go to the Microsoft Office Home page by entering the following URL in the address bar: https://portal.office.com/
- In the Sign in dialog box, enter the Microsoft 365 Tenant administrator account then select Next.
- In the Enter password dialog box, and then select Sign in.
- On the Stay signed in? dialog box, select the Don't show this again check box and then select Yes.
- If a Get your work done with Office 365 window appears, then close it now.
- In the Microsoft Office Home page, you are now signed in as the MOD Administrator account (note the MA initials in the circle that appears in the upper right-hand corner of the screen). The MOD Administrator is a pre-defined user created in Microsoft 365 by your lab hosting provider. Since this user has been assigned a Microsoft 365 administrator role (in this case, the Global Admin role), the Microsoft 365 admin center is available on the home page along with all the other Office apps.
On the Office 365 Home page, the list of available apps is displayed. If an Office 365 apps box appears on the screen, select the Got it! button to close the box, since it covers up several of the apps. Select the Admin app, which opens the Microsoft 365 admin center.
- In the Microsoft 365 admin center, in the left-hand navigation pane, select ...Show all to display all the navigation menu options.
- In the left-hand navigation pane, select Settings, and then in the Settings group, select Org Settings.
- In the Settings window, the Services tab is displayed by default at the top of the screen. Since you want to update the organization profile, select the Organization profile tab, and then in the list of organization settings, select Organization information.
-
In the Organization information window that appears, enter the following information:
Note: The Contoso organization name was explained in the Introduction section at the start of this lab. For the purposes of this lab, you will change it to Adatum Corporation.
-
Street address: 123 Main Street
-
City: Redmond
- State or province: Washington
-
ZIP or postal code: 98052
- Country or region: United States
-
Phone: 425-555-1234
- Technical contact: Enter the Microsoft 365 Tenant administrator account
- Preferred language: English
Select Save.
Once the changes have been saved, a Saved message will appear at the top of the Organization information window. Select the X in the upper right-hand corner of the window to close it.
This will return you to the Organization profile tab of the Org settings window. In the organization profile list, select Release preferences.
In the Release preferences window, select Targeted release for select users and then select Save.
Note: One of the benefits of Microsoft 365 is the ability to have the latest features and updates applied to your environment automatically, which can reduce maintenance costs and overhead for an organization. By setting up your Release preferences, you can control how and when your Microsoft 365 tenant receives these updates.
The Targeted release for select users option enables you to create a control group of users who will preview updates so that you can prepare the updates for your entire organization. The Targeted release for everyone option is more commonly used in development environments, where you can get updates early for your entire organization. In non-development environments, such as Adatum, targeted release to select people is the more typical preference as it enables an organization to control when it wants to make updates available to everyone once the updates have been reviewed by the control group.
- Under the Targeted release for select users setting are options to Select users and Upload users (from a CSV file). Select the Select users option.
- In the Choose users for targeted release window, select the Who should receive targeted releases? field. This will display the list of existing Microsoft 365 user accounts that were created in your Microsoft 365 tenant by your lab hosting provider.
- In the list of users, scroll down and select the MOD Administrator account and then select Save.
- On the Release preferences window, select the X in the upper right-hand corner to close the window.
- On the Organization profile tab of the Org settings window, select Custom themes.
- In the Custom themes window, scroll though the page and review the various theme and branding options that are available for you to update. For the purpose of this lab, you can change any of the options or leave the default values as is. For example, you can add the logo of your company and set the background image as the default for all your users. Along with these options you can change the colors for your navigation pane, text color, icon color, and accent color. Go ahead and explore the different options for your tenant and make any changes that you wish.
Note: Some color patterns aesthetically distract users. If you do change any of the colors, it is recommended that you avoid using high contrasting colors together, such as neon colors and high-resolution colors like bright pink and white.
- If you made any changes in the Custom themes window, select Save when you are done. When you are finished with the Custom themes, select the X in the upper right-hand corner to close the window.
-
Remain logged into the LON-DC1 VM and leave all the tabs open in your browser for the remaining tasks in this lab exercise.
Task 3: Confirm Microsoft 365 Tenant provisioning
While your lab hosting provider created Adatum's Microsoft 365 tenant, Adatum must still configure and provision it. In your role as Holly Dickson, Adatum's Enterprise Administrator, you will complete the provisioning process in this task so that you can proceed with your Microsoft 365 pilot project.
-
After completing the previous task, you should still be logged into LON-DC1 as the Administrator account, and you should be signed into the Microsoft 365 admin center as the MOD Administrator account.
- In the Microsoft 365 admin center, in the left-hand navigation pane, select Users, and then in the Users group, select Active users.
- In the Active users list, you will see the list of existing Microsoft 365 user accounts that were created by your lab hosting provider.
Review the Username column. Note that each user's username is assigned to the domain.
To confirm that these users have been licensed, review the Licenses column. Each user should be assigned an Office 365 E5 license and an Enterprise Mobility+Security E5 license. The MOD Administrator account should also be assigned a Windows 10 Enterprise E3 license.
- In the left-hand navigation pane, under the Admin centers section, select Exchange.
- A new tab will open in your browser displaying the Exchange admin center. In the left-hand navigation pane, select Mailboxes.
- This displays the existing Microsoft 365 user mailboxes. The same users who were displayed in the Active users list in the Microsoft 365 admin center should be displayed in the mailboxes tab.
If you see the same list of users, this confirms the fact that your Microsoft 365 tenant had been properly provisioned and does not have any issues at this time.
- In your browser, close this Exchange admin center tab but leave the Microsoft Office Home tab and the Microsoft 365 admin center tab open and proceed to the next task.
Task 4: Verify Microsoft 365 service health
In this task, you will determine the service health of your Microsoft 365 tenant.
-
After completing the previous task, you should still be logged into LON-DC1 as the Administrator account, and you should be signed into the Microsoft 365 admin center as the MOD Administrator account.
- In the Microsoft admin center, in the left-hand navigation pane, select Health, and then select Service health. This will display the Service health dashboard.
- On the Service health page, the Overview tab at the top of the page is displayed by default. This tab displays all the Microsoft 365 services that are available with your current subscriptions.
Review the Status column for each service. If any service has a status other than Healthy, select the status for that service (the status value is hyperlinked, whereas the service name itself is not).
- Selecting the status of an non-healthy service displays the Advisories pane. Review any service interruption records or additional information in this pane.
Note: During Microsoft testing, on rare occasions Microsoft 365 did not create the trial tenant properly; as a result, the tenant did not have all the services available to it. If this happens to you, you should create a new trial tenant using a different business email (Microsoft account).
- Leave your web browser open and proceed to the next lab exercise.
Results: After completing this exercise, you should have successfully provisioned the Microsoft 365 tenant account for A. Datum Corporation.
Exercise 2: Complete the Custom Domain Setup process
Adatum has purchased a new domain lab18372685.godeploylabs.com. To support Adatum's new custom domain,
You must still complete the provisioning of this custom/vanity domain and its DNS records. This process is important since it places Adatum's business' name as its email domain, which adds validity to message traffic and confirms that Adatum owns the vanity domain that it has added.
To complete the domain setup process, you must run a setup wizard that verifies the accuracy of each required DNS record. This process enables you to review and validate the different types of DNS records that you will add to support this new vanity domain in Adatum's Microsoft 365 deployment.
Task 1: Complete Adatum's custom domain setup
In this task you will complete the setup of this custom domain in Microsoft 365. It is your job to complete this setup process by initiating a wizard to create and verify the accuracy of these DNS records.
-
After completing the previous lab exercise, you should still be logged into LON-DC1 as the Administrator account.
- In your Microsoft Edge browser, you should still be logged in to Microsoft 365 as the admin account.
- In the Microsoft 365 admin center, in the left-hand navigation pane, you already expanded the Settings group in the previous exercise when you updated the Org settings. To complete the custom domain setup in this task, select Domains that appears within the Settings group.
- Click + Add Domain to start the domain setup wizard
-
In the Add a domain page, in the Domain name field, enter your domain name in the form of lab18372685.godeploylabs.com and click Use this domain.
- On the How do you want to verify your domain? page, select Add a TXT record to the domains's DNS records and then click Continue.
- In the next Verify you own this domain page, write down the what's displayed to the right of the TXT value. This entry will be similar to MS=msXXXXXXXX. Record this value so that you have it available when you create an additional TXT record later in this task.
Important: If you select Verify at this point, you will receive an error indicating the system could not find the record you added for this domain (you can do this if you want to see the error; there is no harm in it). Therefore, you must complete the next series of steps to add the TXT record to this domain. Once you finish that, you will be instructed to return back to this page and select the Verify button so that you can complete the process of adding this domain in the Microsoft 365 admin center.
- Click the DNS tab in the lab environment.
- In the TXT records section click + to add a new resource record.
- In the New Resource Record box enter @.
- In the Value field, enter MS=msXXXXXXXX that you recorded in Step 7.
- Select Save to create the record.
-
You are now ready to return to the Microsoft 365 admin center and resume adding the domain record. If you'll recall, when you were adding the domain in the Microsoft 365 admin center, you indicated that you wanted to verify the domain using a TXT record. At that point you had to switch to DNS Manger and add the TXT record. Now that you've added the TXT record, you can go back to the Microsoft 365 admin center and proceed with the domain verification process.
- Select the browser and select the Microsoft 365 admin center tab that displays the Add and configure domain page.
- Scroll to the bottom of the window and select Verify.
Important: If you had a typo or any other configuration mistakes, the domain will not be verified. If this occurs, the Choose your online services window in the next step will not appear. In this case, you should repeat this task and take your time when configuring the domain to make sure you don't run into similar issues at this step in the process.
- If your domain was successfully verified, the How do you want to connect your domain? window will appear. Click Continue.
- In the Add DNS records window, scroll down through the window to see the MX, CNAME, and TXT records for this domain.
- Lets first create the Exchange and Exchange Online Protection records. Expand the sections and note the required DNS records required for Exchange. Create the records required in the DNS tab of the lab environment.
Important: In most cases you do not need to add labxxxxx.godeploylabs.com in the name field of the DNS records. See the example below. Your instructor will be able to assist you if necessary.
- Your records should look similar to the screenshot below.
- At the bottom, under Advanced Options select the Skype for Business and Intune and Mobile Device Management for Microsoft 365 check boxes and add the DNS records for these services also.
- Your records should look similar to the screenshot below.
- Once you have added all the records click Continue.
- Your domain setup should now be complete.
- Click Done.
- Notice your custom domain name is now the default domain.
- You have now completed the setup of Adatum's new vanity domain. However, as a best practice, there is one final step that you should perform. You should maintain a documented history of the DNS records that were created for Adatum by its domain registrar (your lab hosting provider) in the event you ever need to reference this information in the future.
To do so, click on your new default domain and on the DNS records tab, select the Download CSV file option. If a notification bar appears, select Save.
- On the taskbar at the bottom of your screen, select the File Explorer icon.
- In File Explorer, select the Downloads folder in the tree pane, and then double-click the lab18372685.godeploylabs.com.csv file that was just downloaded. Select Notepad to open the file.
- Review each of the records that were created for each DNS record type.
- Close Notepad and File Explorer.
- Leave your web browser open along with the Microsoft Office Home tab and the Microsoft 365 admin center tab and proceed to the next lab exercise.
Results: After completing this exercise, you should have successfully completed the setup process for Adatum's custom vanity domain.
Exercise 3 - Exploring the Microsoft 365 administrator interfaces
Now that you have finished provisioning your Microsoft 365 tenant, you can begin using Microsoft 365. In this exercise, you will be guided through several of the more commonly used Microsoft 365 administrator interfaces to familiarize yourself with them.
In the prior exercises, you accessed the Microsoft 365 admin center from the domain controller (LON-DC1) as you finished provisioning your Microsoft tenant and set up Adatum's custom domain. In this exercise, you will switch to the client PC on LON-CL1 to explore the Microsoft 365 administrator interfaces.
Task 1 - Explore the Microsoft 365 admin center
While you have already been introduced to the Microsoft 365 admin center in the prior lab exercises, in this task you will examine some additional functionality within this portal.
-
Switch to the LON-CL1 client VM.
-
Log into LON-CL1 as ADATUM\AdatumAdmin with the password Pa55w.rd.
- If you receive a Networks warning message asking if you want this PC to be discoverable by other PCs and devices on this network, select Yes.
- On the taskbar at the bottom of the page, select the Microsoft Edge icon. Maximize your browser window when it opens.
-
In your browser go to the Microsoft 365 admin center page by entering the following URL in the address bar: https://admin.microsoft.com/
- In the Sign in dialog box, copy and paste in (or enter) the username of admin credential.
- In the Enter password dialog box, enter your password then select Sign in.
- On the Stay signed in? dialog box, select the Don’t show this again check box and then select Yes.
- In Exercise 1, you already viewed the Active Users within the Microsoft 365 admin center. In this task, you will continue your exploration of Microsoft 365 clients by viewing the Microsoft 365 groups. In the left-hand navigation pane, select Groups and then select Active groups. This will display the two groups that were created by default for Adatum's Microsoft 365 tenant.
- In the left-hand navigation pane, select ...Show all to display all the navigation menu options.
- In the left-hand navigation pane, expand Health and then select Message center.
- In the Message center window, the Inbox tab is displayed by default. Review the messages. If you are interested in a particular message, select the message to open it. This will open a pane on the right side of the screen that displays the details associated with that message. When you are finished reviewing the message, select the X in the upper right corner of the pane to close it. Review as many messages as you would like.
-
Leave your browser open as well as the Microsoft Office Home tab and the Microsoft 365 admin center tab. All remaining tasks in this exercise will use LON-CL1 and the Microsoft 365 admin center.
Task 2 - Explore the Exchange admin center
-
After completing the prior task, you should still be in LON-CL1 and logged into the Microsoft 365 admin center. In the left-hand navigation pane, under the Admin centers group, select Exchange. A new tab will open displaying the Exchange admin center.
- In the Exchange admin center, select each of the items in the left-hand navigation pane. Review the information that is displayed for each item. Navigate through the available tabs that are displayed at the top of the page for each item.
- When you have finished exploring the Exchange admin center, close its tab in the browser (leave all other tabs open).
Task 3 - Explore the Teams admin center
- In the left-hand navigation pane, under the Admin centers group, select Teams. A new tab will open displaying the Teams admin center.
- In the Teams admin center, select each of the items in the left-hand navigation pane. Review the information that is displayed for each item. Navigate through the available tabs that are displayed at the top of the page for each item.
- When you have finished exploring the Teams admin center, close its tab in the Edge browser (leave all other tabs open).
Task 4 - Explore the SharePoint admin center
-
After completing the prior task, you should still be in LON-CL1 and logged into the Microsoft 365 admin center. In the left-hand navigation pane, under the Admin centers group, select SharePoint. A new tab will open displaying the SharePoint admin center.
- In the SharePoint admin center, select each of the items in the left-hand navigation pane. Review the information that is displayed for each item. Navigate through the available tabs that are displayed at the top of the page for each item.
- When you have finished exploring the SharePoint admin center, close its tab in the Edge browser (leave all other tabs open).
Task 5 - Explore the Microsoft 365 Security admin center
- In the left-hand navigation pane, under the Admin centers group, select Security. A new tab will open displaying the Microsoft 365 Defender.
- In the Microsoft 365 Defender, select each of the items in the left-hand navigation pane. Review the information that is displayed for each item. Navigate through the available tabs that are displayed at the top of the page for each item.
- When you have finished exploring the Microsoft 365 Defender, close its tab in the Edge browser (leave all other tabs open).
Task 6 - Explore the Microsoft 365 Compliance admin center
- In the left-hand navigation pane, under the Admin centers group, select Compliance. A new tab will open displaying the Microsoft 365 Compliance center.
- In the Microsoft 365 Compliance center, select each of the items in the left-hand navigation pane. Review the information that is displayed for each item. Navigate through the available tabs that are displayed at the top of the page for each item.
Note: If you will recall, in the prior task when you selected Security, the Security and Compliance Center displayed a banner indicating that security and compliance had been split apart. If you had selected the link in the banner to the Microsoft 365 Compliance center, it would have displayed this same Microsoft 365 Compliance center that you navigated to from the Microsoft 365 admin center.
- When you have finished exploring the Microsoft 365 Compliance center, close its tab in the Edge browser (leave all other tabs open).
- At this point, you should just have the Microsoft Office Home tab and the Microsoft 365 admin center tab open in your Edge browser. Leave these tabs open in the browser as they will be used in the next lab.