Microsoft 365 offers Enterprise Mobility & Security (EMS), Windows 10, and Office 365 to enhance business productivity and security. Because Microsoft 365 offers a variety of services and features, not everything is in the same place. Therefore, we need to navigate within different portals, and familiarity with “what is where” gets really important over time.
In this course, we will have a look at some of the most common tasks to be performed by Microsoft 365 administrators related to Azure AD identities, how to secure your environment by assigning the correct permissions to your users, and how to reduce administrative overhead. We’ll do various tasks in different ways by using the Microsoft 365 Admin Center, the Azure portal, and even use Windows PowerShell for automating bulk actions.
Choosing the right type of identity for your current infrastructure is the first step for any successful Microsoft 365 deployment.
Learning Objectives
- Plan Azure AD Identities
- Manage Users and Groups
- Manage User Access with Access Reviews
- Manage Passwords and Password Policies
- Implement Self-Service Password Reset (SSPR)
- Manage Product Licenses
Intended Audience
- People preparing for Microsoft’s MS-100 exam
- Microsoft 365 Administrators
Prerequisites
- Experience with Microsoft 365
- Experience with the Azure portal
- Experience with PowerShell
If your organization has enabled a self-service password reset, the next time you log in into Microsoft 365 you may be required to enter a few details. Let's use a user with no admin roles and see what's the process.
Enter your username and click next. And enter your password. Click sign in. And depending on the methods that your administrator has set up for the self-service password reset, you may need to enter more information. Click on next.
Let's set up the authentication by phone. Click on set it up now. Select your country. And enter your phone number. And click on text me or call me to verify that you enter a correct phone number. I have now received a text on my phone. Click on verify, and the authentication by phone is now set up.
Note that the admin has also set up the email address and as authentication method, so let's do that now. Click on email me, and look into your inbox. Remember that this is an external email address. Click on verify, and now we've set up the two authentication methods, let's click on finish. And now we are registered for the self-service password reset.
Veronique is a SharePoint and Office 365 consultant for an IT company based in Glasgow, UK. She loves photography, the outdoors, and long walks with her two dogs! You can follow Veronique on Twitter @veronicageek or read her blog at https://veronicageek.com.