m03 o365 domains user mgmt v1.4

8/16/2019 M03 O365 Domains User Mgmt v1.4

1/38

Module 3

Ofce 365Domains, Usersand Groups

Presenter Name

Presenter Role


2/38

Conditions and Terms of UseMicrosot Condential

!is trainin" pac#a"e is proprietar$ and condential, and is intended onl$ or uses descri%ed in t!e trainin" materials& Contento $ou under a Non)Disclosure *"reement and cannot %e distri%uted& Cop$in" or disclosin" all or an$ portion o t!e content asuc! pac#a"es is strictl$ pro!i%ited&

!e contents o t!is pac#a"e are or inormational and trainin" purposes onl$ and are pro(ided as is 'it!out 'arrant$ o animplied, includin" %ut not limited to t!e implied 'arranties o merc!anta%ilit$, tness or a particular purpose, and non)inrin

rainin" pac#a"e content, includin" UR.s and ot!er /nternet 0e% site reerences, is su%1ect to c!an"e 'it!out notice& 2ecausto c!an"in" mar#et conditions, t!e content s!ould not %e interpreted to %e a commitment on t!e part o Microsot, and Microsaccurac$ o an$ inormation presented ater t!e date o pu%lication& Unless ot!er'ise noted, t!e companies, or"aniations, pmail addresses, lo"os, people, places, and e(ents depicted !erein are ctitious, and no association 'it! an$ real compan$, odomain name, e)mail address, lo"o, person, place, or e(ent is intended or s!ould %e inerred&

Copyright and Trademarks4 78 Microsot Corporation& *ll ri"!ts reser(ed&

Microsot ma$ !a(e patents, patent applications, trademar#s, cop$ri"!ts, or ot!er intellectual propert$ ri"!matter in t!is document& 9-cept as e-pressl$ pro(ided in 'ritten license a"reement rom Microsot, t!e urndocument does not "i(e $ou an$ license to t!ese patents, trademar#s, cop$ri"!ts, or ot!er intellectual prop

Compl$in" 'it! all applica%le cop$ri"!t la's is t!e responsi%ilit$ o t!e user& 0it!out limitin" t!e ri"!ts undt!is document ma$ %e reproduced, stored in or introduced into a retrie(al s$stem, or transmitted in an$ or:electronic, mec!anical, p!otocop$in", recordin", or ot!er'ise;, or or an$ purpose, 'it!out t!e e-press 'riMicrosot Corporation&

, Aune>, B%o- 36>, DirectB>, 0i0indo's> are eit!er re"istered trademar#s or trademar#s o Microsot Corporation in t!e United ?tates anOt!er Microsot products mentioned !erein ma$ %e eit!er re"istered trademar#s or trademar#s o MicrosotUnited ?tates and+or ot!er countries& *ll ot!er trademar#s are propert$ o t!eir respecti(e o'ners&

http://www.microsoft.com/about/legal/permissions/http://www.microsoft.com/about/legal/permissions/http://www.microsoft.com/about/legal/permissions/http://www.microsoft.com/about/legal/permissions/


3/38

O(er(ie'

3

!is module co(ers t!e mana"ement o domains"roups, includin"=

• Usin" custom domains• !e (arious met!ods t!at can %e used to crea

"roups

• !e process to reco(er accidentl$ deleted use


4/38

O%1ecti(es

8

*ter completin" t!is module, $ou 'ill %e a%le to=

• *dd and (eri$ a domain

• Create, edit, delete and reco(er a user

• *ssi"n permissions to users or ser(ice speci

• Create and mana"in" securit$ "roups


5/38

.esson 7=

Domains

5


6/38

!e Microsot

Online DeaultRoutin"Domain

6

• Deault domain is in t!e ormat o contoso.o

• Created automaticall$ and assi"ned to t!e

up•


7/38

Usin" $our

O'nDomain inOfce 365

• *pplies to userEs ?MP and ?/P addresses•


8/38

2eore

*ddin" $ourDomain toOfce 365

F

• ou must alread$ o'n t!e domain

• Domain must not alread$ %e in use %$ anot!e

tenant• ou must %e a%le to create pu%lic DN? records

domain


9/38

*ddin" and

@eri$in" aDomain

7

Usin" Po'er?!ell

New-MsolDomain –Name contoso.com

Get-MsolDomainVericationDns –DomainName coMode Dns!t"ecord

Create DN? B record

#onrm-MsolDomain –DomainName contoso.com

@ia t!e Ofce 365 *dmin Center usin" t!e Add d

'iard


10/38

?er(ice

DN?Records

77


11/38

Proacti(e

DN? RecordC!ec#s

7

• o !elp ensure t!at $ou !a(e t!e correct con"uration, Oproacti(el$ c!ec# t!e DN? records t!at are reuired to ussuccessull$

• / $our DN? records do not matc! '!at 'e e-pect or $ou'ill recei(e a notication '!en $ou are lo""ed into $our OCenter

• 0e 'ill t!en pro(ide $ou 'it! proposed actions to - $ourrecords issue

• / $our domain is !osted %$ GoDadd$, $ou 'ill !a(e t!e opt!e DN? records automaticall$ updated or manuall$ con

•


12/38

C!an"in" t!e

DeaultDomain

73

• Once a custom domain !as %een added $ou cdeault domain or $ou tenant to %e t!e ne' c

•

Users 'ill no' recei(e a primar$ ?MP addresuserKcontoso&com instead o userKcontoso&o

• !e deault domain can %e c!an"ed (ia=• Ofce 365 *dmin Center• Po'er?!ell

$et-M$%&Domain –Name contoso.com –'sD


13/38

Remo(in" a

Domainrom Ofce365

78

• 2eore remo(in"=• Domain cannot %e associated 'it! an$ use•

Domain cannot %e set as $our Deault dom• Must delete+9dit users and "roups and c!a

associated domain• ?!arePoint Online site collections usin" t!e

must %e deleted

• Remo(e t!e domain=• @ia Ofce 365 *dmin Center• @ia Po'er?!ell

"emo(e-MsolDomain -DomainName conto


14/38

.esson =

Mana"in" Users

75


15/38

Creatin" or

9ditin"Users

76

• Create, edit and license users, indi(%ul#•


16/38

Creatin"

Users (iaOfce 365*dminCenter

7L


17/38

*dd

MultipleUsers 'it!C?@


18/38

Creatin"Users (iaPo'er?!ell

7

User mana"ement cmdlets=• Get)MsolUser•

Ne')MsolUser• Remo(e)MsolUser• ?et)MsolUser• ?et)MsolUser.icense• ?et)MsolUserPass'ord• ?et)MsolUserPrincipalName

New-Msol)ser -)ser*rincipalName

con+ictuser@sor,ara.onmicrosoft.com -DisplaN

$mith -&icense0ssi1nment contoso:2N2"*"'$2

-)sa1e&ocation )$ -*assword *assword4


19/38

*dminRoles

Dependin" on t!e sie o $our or"aniation, $ou mdesi"nate se(eral admins '!o ser(e diIerent un

ollo'in" admin roles are a(aila%le=• Glo%al admin

• 2illin" administrator

• Pass'ord administrator

• ?er(ice administrator

• User mana"ement administrator

• 9-c!an"e administrator

• ?!arePoint administrator

• ?#$pe or 2usiness administrator


20/38

*dminRolesPermissions

3


21/38

.istin"Users 'it!*dminRoles

8

• !e Ofce 365 *dmin Center Users pa"e pro((ie' so $ou can uic#l$ and easil$ determine

admin ri"!ts or create ne' custom (ie'


22/38

*ssi"nin"*dminRoles toUsers

5

• *ssi"n a user an *dmin role t!rou"! t!e Ofce 365 *a user is created, or %$ selectin" a user and t!en Ed

• @ia Po'er?!ell 0dd-Msol"oleMem,er -"oleName 5$er(ice 0dministr-"oleMem,er2mail0ddress [email protected]


23/38

Dele"ated*dminRoles

L

Microsot partner companies aut!oried to pro(idadministration or customers can %e=•


24/38

DeletedUsers

F

Ofce 365 user accounts can %e deleted in an$ o t'a$s=

•

2$ usin" t!e Ofce 365 *dmin Center• 2$ usin" Po'er?!ell

• User accounts can %e deleted t!rou"! a s$nc!rt!e on)premises user o%1ect 'as deleted rom t*cti(e Director$ data%ase

• !rou"! a s$nc!ronied deletion i director$ s$nlterin" c!an"es e-clude t!e on)premises *cti(o%1ect rom t!e s$nc!roniation set

• Deleted user accounts and data can %e restored%eore restorin" a deleted user, an a(aila%le usreuired

• Pur"e Rec$cle 2in usin" "emo(e-M$%&)ser-"emo(e6rom"eccle7in


25/38

Restorin"DeletedUsers

3


26/38

Restorin"DeletedUsers (iaPo'er?!ell

37

• Retrie(e a list o all deleted usersGet-Msol)ser -"eturnDeleted)sers

•

o restore all deleted usersGet-Msol)ser -"eturnDeleted)sers "estore-M

• o restore a sin"le deleted user"estore-Msol)ser -)ser*rincipalNamecon+ictuser@sor,ara.onmicrosoft.com


27/38

Resol(in"Conicts

'!enRestorin"DeletedUsers

3

C!an"es t!at are made to a domain or to a user 365 ater a user account is deleted and %eore t!is reco(ered can aIect t!e reco(er$, suc! as=

• * ne' user is created '!o uses a uniue user'as ormerl$ assi"ned to t!e deleted user&

• * ne' user is created '!o uses a uniue emat!at 'as ormerl$ assi"ned to t!e deleted use

0!en t!ese conicts occur, conictin" attri%utes updated to remo(e t!e conict %eore user reco(completed


28/38

Resol(in"Conicts '!en

Restorin"Deleted Users (iat!e Ofce 365*dmin Center

33


29/38

Resol(in"Conicts '!en

Restorin"Deleted Users(ia Po'er?!ell

38

0!en usin" Restore)MsolUser to resol(e a conict pro(ide t!e ollo'in" e-tra parameters in order to

•

*utoReconcilePro-$Conicts• Ne'UserPrincipalName

"estore-Msol)ser -)ser*rincipalNamecon+ictuser@sor,ara.onmicrosoft.com-0uto"econcile*ro!#on+icts -New)ser*rincipalNarestored8con+ictuser@sor,ara.onmicrosoft.com


30/38

Ho' toDetermine0!en anUser 'asDeleted

35

• Deleted users are stamped 'it! t!e date and Get-Msol)ser -)ser*rincipalNamecon+ictuser@sor,ara.onmicrosoft.com 9 6&$oftDeletionimestamp


31/38

.esson 3=

Mana"in" Groups

36


32/38

?ecurit$Groups

3L

!ere are t'o places '!ere securit$ "roups can %Ofce 365, %ot! ser(e a diIerent purpose

* Security Group created in t!e Ofce 365 Admused to "rant access to specic ?!arePoint Online

• !ese "roups can onl$ %e mana"ed (ia t!e OfCenter or t!rou"! t!e *ure *cti(e Director$ Pmodule

* mail enabled Security Group created (ia t!e Admin Center can %e used to distri%ute messa"mem%ers as 'ell as to "rant access permissions tOnline resources onl$

• !ese "roups can onl$ %e mana"ed (ia t!e 9-Center, remote Po'er?!ell


33/38

Creatin"?ecurit$Groups

3


34/38

.a%= Users, ?ecurit$

Groups and *dminRoles Mana"ement

3F


35/38

ModuleRe(ie'

8

• Can $ou remo(e or rename t!e deault Microsdomain

• 0!at DN? records must %e created as part o (erication process

• 0!atEs t!e Po'er?!ell cmdlet name t!at is usne' users

• 0it!in '!at time rame can deleted users %e


36/38

ModuleRe(ie'

:*ns'ers;

87

• Can $ou remo(e or rename t!e deault Microsdomain

*ns'er= No

• 0!at DN? records must %e created as part o (erication process

*ns'er= B or MB record

• 0!atEs t!e Po'er?!ell cmdlet name t!at is usne' users

*ns'er= New-M$%&)ser

•

0it!in '!at time rame can deleted users %e *ns'er= 3 da$s


37/38

Module?ummar$

8

/n t!is .esson, $ou learned=

• *%out incorporatin" compan$ o'ned domains

•

*%out t!e deault Microsot Online domain and• Ho' to create users and "roups (ia t!e U/ and

• Ho' to reco(er deleted users and deal 'it! at


38/38

4 7 Microsot Corporation& *ll ri"!ts reser(ed& Microsot, 0indo's, 0indo's @ista and ot!er product names are or ma$ %e re"istered tr

in t!e U&?& and+or ot!er countries& !e inormation !erein is or inormational purposes onl$ and represents t!e current (ie' o Microsot Co

t!is presentation& 2ecause Microsot must respond to c!an"in" mar#et conditions, it s!ould not %e interpreted to %e a commitment on t!e p

Microsot cannot "uarantee t!e accurac$ o an$ inormation pro(ided ater t!e date o t!is presentation& M/CRO?O

m03 o365 domains user mgmt v1.4

Documents