Lab Answer Key: Module 2: Office 365

Administration, Tools, and Techniques

Lab: Administering Office 365

Exercise 1: Using the administrative portal

Task 1: Create user accounts

1. Switch to LON-CL1.

2. Open Microsoft Edge browser, and then browse to https://portal.office.com.

3. Sign in as [email protected], where yyxxxxx is your

unique Adatum number, by using Holly's password.

4. On the Microsoft Office 365 portal, click Admin.

5. In the Microsoft 365 admin center, on the menu on the left side, expand Users,
and then click Active Users.

6. Click Add a user.

7. On the New User page, in the First name text box, type Lindsey.

8. In the Last name text box, type Gates.

9. Notice that the Display name text box is automatically filled in as Lindsey

Gates.

10. In the User name text box, type Lindsey.

11. Verify that Adatumyyxxxxx.onmicrosoft.com is listed in the text box after

the at sign (@), where yyxxxxx is your unique Adatum number.
Expand Product licenses at the bottom of the list of options, set Office 365
Enterprise E5 to On and then click Add.

12. On the User was added page, note the temporary password here: _____________

13. Click Send email and close. If feedback window appears, click Cancel.

14. Repeat steps 6 through 13 to create the following users (for the User name,
use the First name):
  Christie Thomas

 Amy Santiago

 Sallie McIntosh

 Francisco Chaves

15. Note their temporary passwords here:

 Christie Thomas _____________

 Amy Santiago _______________

 Sallie McIntosh ______________

 Francisco Chaves ____________

Task 2: Review the available Admin centers

1. In Microsoft Edge, in the Microsoft 365 Admin center, in the navigation pane,
expand Admin centers.

2. In the list of admin centers, click Exchange. A new tab opens in Microsoft

Edge.

3. In the Exchange admin center. In the navigation pane, click recipients. Your

users are listed.

4. In the navigation pane, click organization. Review the settings.

5. In the navigation pane, click permissions.

6. Review the available admin roles.

7. In the navigation pane, click mail flow, and then click the accepted

domains link.

8. Review the accepted domains.

9. Switch back to the Microsoft 365 Admin center and then, in the navigation
pane, click Teams & Skype.

10. In the navigation pane, click Users. Your users are listed.

11. In the navigation pane, expand Org-wide settings.

12. Review the available settings.

 13. Switch back to the Microsoft 365 Admin center and then, in the navigation
pane, click SharePoint.

14. Review the available site collections.

15. Close Microsoft Edge.

Result: After completing this exercise, you will have used the administrative portal
and explored the user interface.

Exercise 2: Administering Office 365 with Windows

PowerShell

Task 1: Create user accounts

1. On LON-CL1, on the desktop, right-click the Windows Azure Active

Directory Module for Windows PowerShellshortcut, and then click Run as
administrator.

2. If a User Account Control dialog box appears, click Yes.

3. At the command prompt, type the following command, and then press Enter:

Connect-MsolService

4. In the Sign in to your account dialog box, sign in

as [email protected], where yyxxxxx is your unique
Adatum number, by using Holly's password.

5. At the command prompt, type the following command, where yyxxxxx is your

unique Adatum number; and then press Enter. Provide a password that meets
the complexity requirements.

New-MsolUser -UserPrincipalName [email protected]

-DisplayName "Catherine Richard" -FirstName "Catherine" -LastName "Richard"
-Password 'Provide a password' -ForceChangePassword $false -UsageLocation "CH"

6. At the command prompt, type the following command, where yyxxxxx is your

unique Adatum number; and then press Enter. Provide a password that meets
the complexity requirements.

New-MsolUser -UserPrincipalName [email protected] -DisplayName

"Tameka Reed" -FirstName "Tameka" -LastName "Reed" -Password 'Provide a password'
-ForceChangePassword $false -UsageLocation "CH"

7. To determine which users are unlicensed, at the command prompt, type the
following command, and then press Enter:
Get-MsolUser -UnlicensedUsersOnly

8. To view the available licenses, at the command prompt, type the following
command, and then press Enter:

Get-MsolAccountSku

9. To license Catherine Richard, at the command prompt, type the following

command, where yyxxxxx is your unique Adatum number; and then press
Enter. Replace Adatumyyxxxxx in the -AddLicenses attribute with the
unique .onmicrosoft.com domain name prefix:

Set-MsolUserLicense -UserPrincipalName [email protected]

-AddLicenses "Adatumyyxxxxx:ENTERPRISEPREMIUM"

10. To license Tameka Reed, at the command prompt, type the following
command, where yyxxxxx is your unique Adatum number; and then press
Enter. Replace Adatumyyxxxxx in the -AddLicenses attribute with the
unique .onmicrosoft.comdomain name prefix:

Set-MsolUserLicense -UserPrincipalName [email protected]

-AddLicenses "Adatumyyxxxxx:ENTERPRISEPREMIUM"

11. To prevent a user from signing in, at the command prompt, type the following
command, where yyxxxxx is your unique Adatum number, and then press
Enter:

Set-MsolUser -UserPrincipalName [email protected]

-BlockCredential $true

12. To delete a user, at the command prompt, type the following command,
where yyxxxxx is your unique Adatum number, and then press Enter:

Remove-MsolUser -UserPrincipalName [email protected] -Force

13. To view the Deleted Users list, at the command prompt, type the following
command, and then press Enter:

Get-MsolUser -ReturnDeletedUsers

14. Verify that Catherine Richard is in the list of deleted users. Note that it
specifies that she is still licensed.

15. To restore a deleted user, at the command prompt, type the following
command, where yyxxxxx is your unique Adatum number, and then press
Enter:

Restore-MsolUser -UserPrincipalName [email protected]

 16. To view the deleted users list, at the command prompt, type the following
command, and then press Enter:

Get-MsolUser -ReturnDeletedUsers

17. Verify that Catherine Richard is no longer in the list of deleted users.

18. To view the active users list, at the command prompt, type the following
command, and then press Enter:

Get-MsolUser

19. Verify that Catherine Richard is in the active users list.

20. To allow a user to sign in, at the command prompt, type the following
command, where yyxxxxx is your unique Adatum number, and then press
Enter:

Set-MsolUser -UserPrincipalName [email protected]

-BlockCredential $false

Task 2: Using Windows PowerShell to change user settings

1. At the Windows Azure Active Directory Module for Windows PowerShell

prompt on LON-CL1, type the following command, where yyxxxxx is your
unique Adatum number, and then press Enter. Provide a password that meets
the complexity requirements.

Set-MsolUserPassword -UserPrincipalName "[email protected]"

-NewPassword 'Provide a password'

2. Use the following command to set user passwords to expire. At the command
prompt, type the following command, and then press Enter:

Get-MsolUser | Set-MsolUser -PasswordNeverExpires $false

Result: After completing this exercise, you will have successfully administered Office
365 by using Windows PowerShell.

Exercise 3: Configuring role-based administration

Task 1: Assign service administrators in the Office 365 admin center

1. On LON-CL1, open Microsoft Edge, and then browse

to https://portal.office.com.

2. Sign in as [email protected]; where yyxxxxx is your

unique Adatum number, by using Holly's password.
 3. In the Office 365 admin center, click Admin.

4. In the Microsoft 365 admin center, on the left side menu, expand Users,
click Active users, and then click Francisco Chaves.

5. On the Francisco Chaves page, in the Roles section, click Edit.

6. Under Edit user role, click Customized administrator, select Billing

administrator from the list, above the Alternate email address text box,
click Edit and then type [email protected], click Save, and then click Close twice.

7. In the list view, click Tameka Reed.

8. On the Tameka Reed page, in the Roles section, click Edit.

9. Under Edit user role, click Customized administrator, and then

select Password administrator from the list.

10. Above the Alternative email address text box, click Edit and then

type [email protected].

11. Click Save, and then click Close twice.

12. In the list view, click Christie Thomas.

13. On the Christie Thomas page, in the Roles section, click Edit.

14. Under Edit user roles, click Customized administrator, and then select User

management administrator from the list.

15. Above the Alternative email address text box, click Edit and then

type [email protected].

16. Click Save, and then click Close twice.

17. Close Microsoft Edge.

Task 2: Manage service administration with Windows PowerShell

1. In the Windows Azure Active Directory Module for Windows PowerShell

window on LON-CL1, at the command prompt, type the following command,
where yyxxxxx is your unique Adatum number, and then press Enter:

Add-MsolRoleMember -RoleName "Service Support Administrator"

-RoleMemberEmailAddress "[email protected]"

2. At the command prompt, type the following command, where yyxxxxx is your

unique Adatum number, and then press Enter:
Add-MsolRoleMember -RoleName "Company Administrator" -RoleMemberEmailAddress
"[email protected]"

3. At the command prompt, type the following command, and then press Enter:

$role = Get-MsolRole -RoleName "Service Support Administrator"

4. At the command prompt, type the following command, and then press Enter:

Get-MsolRoleMember -RoleObjectId $role.ObjectId

5. Verify that Sallie McIntosh is in the list of users who have the Service Support
Administrator role.

6. At the command prompt, type the following command, and then press Enter:

$role = Get-MsolRole -RoleName "Billing Administrator"

7. At the command prompt, type the following command, and then press Enter:

Get-MsolRoleMember -RoleObjectId $role.ObjectId

8. Verify that Francisco Chaves is in the list of users who have the billing
administrator role.

9. At the command prompt, type the following command, and then press Enter:

$role = Get-MsolRole -RoleName "Company Administrator"

10. At the command prompt, type the following command, and then press Enter:

Get-MsolRoleMember -RoleObjectId $role.ObjectId

11. Verify that Amy Santiago is in the list of users who have the Company
Administrator role. You should also see Holly Spencer on the list.

12. Close the Windows PowerShell window.

Task 3: Verify service administration

1. On LON-CL1, open Microsoft Edge, and then browse

to https://portal.office.com.

2. Sign in as [email protected]; where yyxxxxx is

your unique Adatum number, by using the password assigned to Tameka's
account. If prompted to stay signed in, click No.

3. On the Office 365 portal, click Admin.

4. If prompted, sign in again as [email protected];
where yyxxxxx is your unique Adatum number, by using the password
assigned to Tameka's account.

5. On the Microsoft 365 admin center, expand Users, and then click Active users.

6. Click Lindsey Gates. Note that you cannot perform any administrative tasks.

7. Click Reset password.

8. On the Reset password page, click Reset.

9. Write down the temporary password here for future reference, and then
click Send email and close: ______________________________

10. Close and reopen Microsoft Edge, and then browse

to https://portal.office.com.

11. Sign in as [email protected]; where yyxxxxx is

your unique Adatum number, by using the temporary password that you
recorded earlier.

12. Change Christie's password to a new password that meets the complexity
requirements. If prompted to stay signed in, click No.

13. In the Office 365 portal, click Admin.

14. If prompted, sign in again as [email protected];

where yyxxxxx is your unique Adatum number, by using the password you
assigned to Christie's account.

15. In the Microsoft 365 admin center, on the Home page, expand Users,
click Active users, and then click Lindsey Gates.

16. On the Lindsey Gates page, in the Contact information section, click Edit.

17. On the Edit contact information page, expand Contact information.

18. In the Office Phone text box, type 555-1234, click Save, and then click Close.

19. In the Sign-in status section, click Edit, click Sign-in blocked, click Save, and

then click **Close **twice.

20. In the Office 365 admin center, click Add a user.

21. In the First name text box, type Chris.

22. In the Last name text box, type Breland.

 23. In the User name text box, type Chris, then in the Product licenses section,
enable Office365 Enterprise E5 license, clickAdd, and then click Send email
and close.

24. In the Active users list, click Chris Breland.

25. On Chris Breland page, click the Delete user.

26. On the Delete user page, click Delete, and then click Close.

27. Close Microsoft Edge.

Result: After completing this exercise, you will have assigned Office 365 administrator
roles.

Exercise 4: Troubleshooting administrative access in

Office 365

Task 1: Attempt to unblock a user

1. On LON-CL1, open Microsoft Edge, and then browse

to https://portal.office.com.

2. Sign in as [email protected], where yyxxxxx is your

unique Adatum number, by using the password that you recorded earlier in
the lab when you created Sallie's account.

3. On the Update your password page, in the Current password text box, type

the password that you recorded earlier.

4. In the New password and Confirm password text boxes, type a new

password, and then click Update password and sign in.

5. On the Microsoft Office 365 portal, click Admin.

6. On the menu on the left side, click Users, and then click Active Users.

7. In the details pane, click Lindsey Gates.

8. Notice that you are unable to unblock the account. Why?

9. Click Close.

10. Close Microsoft Edge.

Task 2: Attempt a resolution

1. On LON-CL1, on the desktop, right-click the Windows Azure Active

Directory Module for Windows PowerShellshortcut, and then click Run as
administrator.

2. If a User Account Control dialog box appears, click Yes.

3. At the command prompt, type the following command, and then press Enter:

Connect-MsolService

4. In the Sign in to your account dialog box, sign in

as [email protected], where yyxxxxx is your unique
Adatum number, by using Holly's password.

5. In the Windows PowerShell window, at the command prompt, type the

following command, where yyxxxxx is your unique Adatum number, and then
press Enter:

Add-MsolRoleMember -RoleName "User Account Administrator" -RoleMemberEmailAddress

"[email protected]"

Task 3: Test your resolution

1. On LON-CL1, open Microsoft Edge, and then browse

to https://portal.office.com.

2. Sign in as [email protected], where yyxxxxx is your

unique Adatum number, by using the password you assigned to Sallie's
account.

3. On the Microsoft Office 365 portal, click Admin.

4. On the menu on the left side, click Users, and then click Active Users.

5. In the details pane, click Lindsey Gates.

6. On the Lindsey Gates page, next to Sign-in status, click Edit.

7. Click Sign-in allowed, and then click Save.

8. Click Close twice.

9. Close Microsoft Edge.

10. Close Windows PowerShell.

Task 4: Prepare for the next module

 When you have finished the lab, keep the virtual machines running for the next
module.

Result: After completing this exercise, you will have resolved issues with Office 365
administration.