Administering Office 365
and Microsoft Intune
Lesson 3
Objectives
Objective Domain Matrix
Technology Skill Objective Domain Description Objective Domain
Number
Creating Users and Groups and Create users and groups and 3.1
Assigning Services and Licenses assign services and licenses and
in Office 365 and Microsoft Microsoft Intune
Intune
Assigning Permissions in Office Assign permissions in Office 365 3.2
365 and Microsoft Intune and Microsoft Intune
Monitoring Service Health in Monitor service health in Office 3.3
Office 365 and Microsoft Intune 365 and Microsoft Intune
Administering Office 365
• Office 365 is administered
through the Office 365 Admin
Center through the
https://portal.office.com/Admin
website.
• From there, you can establish
users and licenses, create
groups, run reports, and manage
services such as Exchange and
SharePoint.
Creating Users and Groups and
Assigning Services and Groups in
Office 365
• The person who signs up your
company for Office 365 is the
Global Administrator by
default.
• This person can then grant
administrator permissions to
other users in the organization
as needed to distribute the
workload.
Adding New Users
Creating Users and Groups and
Assigning Services and Groups in
Office 365
Office 365 supports the following
three sign-in models/identity models
for Office 365:
•Online identity (also known as
account identity)
•Synchronized identity
•Federated identity
Azure AD is a cloud-based
Infrastructure as a Service (IaaS)
that you can use for identity
management and access control.
Assigning Permissions in Office
365
Five administrator roles are
available for Office 365
enterprises:
•Global Administrator
•Billing Administrator
•Password Administrator
•Service Administrator
•User Management Administrator
Assigning a Role to a User
Monitoring Service Health in
Office 365
• As users depend upon Office 365 more
and more, make sure you monitor the
health of the services you provide.
• Office 365 provides a dashboard to
monitor the current status of all
services and to learn about any
upcoming planned maintenance.
• The Service Health option shows
seven days of health history,
including today, in the Office 365
Admin Portal.
Reviewing the Status of Office
365 Services
Subscribing to an Office 365
Health Feed
An Overview of Office 365 Health
Administering Microsoft Intune
• Because Microsoft Intune is a
cloud-based tool, it is managed
using the Microsoft Intune
account portal
(https://manage.microsoft.com).
• This is where you can add
users, create groups, create
policies, and configure alerts.
• You can also configure updates
and software to be installed.
Creating Users and Groups and
Assigning Services and Groups in
Microsoft Intune
• To make the process of deploying
Microsoft Intune policies,
software packages, and software
updates more efficient, consider
using Microsoft Intune groups.
• Microsoft Intune groups, which
are used to quickly organize and
manage your computers and users,
are created and managed in the
Groups workspace.
Adding Microsoft Intune Users
Managing Microsoft Intune Users
Assigning Microsoft Intune Roles
Assigning Permissions in
Microsoft Intune
• Microsoft Intune can be a very
powerful tool.
• As with any cloud solution, you must
determine the best way to assign roles
and permissions to Microsoft Intune.
• For most administrator functions, it
is best to use the built-in roles that
are included with Microsoft Intune.
• If you don’t have a technical staff
available, use a Microsoft Partner to
assist in managing your devices.
Adding a Device Enrollment
Manager Role
Managing Policies
Monitoring Service Health in
Microsoft Intune
• Computers configured with the
Microsoft Intune agent can be tracked
both on and off the corporate
network.
• As computers are configured with the
Microsoft Intune agent, they start to
report back to Microsoft Intune.
• Because Microsoft Intune is cloud-
based, users do not have to be
attached to your corporate network to
receive updates, patches, or receive
help removing malware.
The Microsoft Intune Service
Dashboard
Reviewing the Microsoft Intune
Standard Reports
Viewing Alert Types
Summary
• Office 365 is administered through the
Office 365 Admin Center through the
https://portal.office.com/Admin
website.
• Office 365 supports three sign-in
models/identity models for Office 365.
• When you edit the assigned license,
you can also define the user location
for the user.
• Make sure you monitor the health of
the services you provide.
Summary
• Microsoft Intune has multiple
portals/consoles that can be used when
managing Microsoft Intune.
• The Microsoft Intune Admin Console is at
https://manage.microsoft.com; it allows
you to configure groups, updates,
protection, alerts, apps, policies, and
administrator roles.
• The Microsoft Intune Account Portal is
at https://account.manage.microsoft.com;
it is used to manage users,
subscriptions, and service requests.
Summary
• Once a device has been added to Microsoft
Intune, you can perform a selective wipe
that removes only company data, perform a
full wipe that restores the device to its
factory setting, perform a remote lock,
or perform a passcode reset.
• As computers are configured with the
Microsoft Intune agent, they start to
report back to Microsoft Intune. Because
Microsoft Intune is cloud-based, users do
not have to be attached to your corporate
network to receive updates, patches, or
receive help removing malware.
