Global Support

Welcome To Microsoft
New Hire’s Start Guide

The following steps will help you set up your new Microsoft
account and all your Microsoft connected devices. It will
guide you through connecting to VPN, and will help you
connect to Microsoft Teams, Engineering resources and
Live Events! Onsite or offsite this is your connectivity one-
stop-shop!

Let’s Begin!
 Step 1. Enable your corporate account
1.1. Resetting temp password
1.2 Setting up two-factor authentication

Step 2. Setting up your MSFT PC (Setting up Mac guide here)

Key connectivity 2.1. Two possible paths for MSFT device set-up

steps Step 3. Be productive anywhere

3.1. Connecting remotely to Microsoft resources
3.2. Access MSFT resources from any (non-MSFT) device using
WVD
3.3. Get your key Microsoft productivity apps
Step 1. Enable your corporate account
Before we begin…
Congratulations! You now have a corporate account that gives you access to Microsoft resources. It’s important that you know what’s
what with your account, how to use it and how to secure it.

Your corporate account consists of two parts; your local domain and your username (also called your alias).

Local domain + User-name (Alias) = Your corporate account

Examples:

+ makaylax =
Makayla Example*
Works in Building 37
redmond REDMOND\makaylax

+ javierx =
Javier Example*
Works in Tokyo
fareast FAREAST\
javierx

*no relation
Step 1.1 Resetting your temp password
You should have received your alias, your temporary network password and your domain from your manager or during your orientation
experience. Your first step is to reset this temporary password. If you haven’t received your temporary password, contact your hiring manager.

Please note: This temporary password will not work to access your new MSFT
device. The temporary password must be reset before attempting your first log on Password guidelines:

Visit https://aka.ms/initialpw to reset and create a new, strong password. Your password must be at least 8 characters long and contain:

(This can be performed on any internet facing device.) • Upper-case letter(s)

• Lower-case letters
• Numbers
• Symbols (~!@#$)

Your password must NOT contain:

• Any previous passwords used at Microsoft
• Part of your name or title
• Sequential numbers or letters (111, 123, aaa, abc, etc.)

For additional guidance on how to set a strong password, visit

Once you have reset your password, you won’t ever have to reset it again! MSProtect!

If there are any issues with the temporary password, please visit https://aka.ms/testpassword to ensure it is a valid temporary password.
If the temporary password is not valid, ask your manager to reset your password for you at https://aka.ms/coreidentity
Step 1.2 Setting up Two-Factor Authentication
With your new password set, its time to set up two-factor authentication. To do this you first have to register your mobile device to the
corp domain. Follow the steps below.

Step 1: Register your mobile device (This can be performed on any internet facing device.)

1. Visit https://aka.ms/ringring or https://phoneregistration.microsoft.com

2. Select the Use manager approval link below the Next button

3. Follow the prompts to enter your mobile device information and create a PIN and then select Submit

Note: Your manager will receive an email to approve your request. This request must be approved by your manager
before proceeding to the next step.
Step 1.2 Setting up Two-Factor Authentication
With your device registration request approved, you can continue setting up two-factor authentication on your mobile device.
Follow the steps below.

Step 2: Configure Two-Factor Authentication on your mobile device (This can be performed on any internet facing device.)

1. Download Microsoft Authenticator app from your app store

2. Select Add account (or select the three dots icon and then Add account)

3. Choose Work or school account and follow the prompts

Please note:

If your Microsoft Authenticator app shows an old account, you should remove it before adding your new one.

For IOS: Select the three lines icon on the left > Edit Accounts > select the red circle icon on the left to remove the account.

For Android: Select the click three dots on the right > Edit Accounts > Select the red X on the right to remove the account.
Step 2. Setting up your MSFT PC
Step 2.1 Two possible paths for MSFT device set-up
If provided a Microsoft device, you may see one of two set-up screens. We have a separate guide for each experience, so follow the steps
for your device shown below

Set-up screen 1: If your starting screen says, “Let’s start with region,”
your device is part of the AutoPilot program. Your setup guide is
available at http://aka.ms/APSetupPC or by scanning the QR code at
the right.

Note: You will be automatically prompted to join Azure Active Directory during this
process and do not need to complete the steps on the next slide. AutoPilot QR Code
Step 2.1 Two possible paths for MSFT device set-up
Set-up screen 2: If your starting screen says, “Let’s get started,” and displays
your keyboard language setting, the setup guide for your device is available
at SetupNewPC or by scanning the QR code at the right.

All other PCs QR Code

Note: If you are working remotely, follow the additional instructions below to join your device to
Azure Active Directory to access internal websites like HRWeb and other Microsoft resources.
Note: An internet connection will be required

Step 1: Change the local administrator password Step 2: Join the Azure Active Directory

1. From the Windows start menu, type and then select Computer 1. From the Windows start menu, type and then select Access work or school
Management 2. Select Connect and choose Join this device to Azure Active Directory
2. Select Local Users and Groups in the left navigation pane and open the 3. Enter your Microsoft corporate email address in the [email protected]
Users folder format and select Next
3. Right-click on Administrator 4. Choose Sign in with a username and password instead and enter your
4. Choose Set Password and then select Proceed Microsoft alias and password when prompted
5. Enter a new, strong password for the local administrator account 5. Select Sign in with your phone for two-factor authentication and
authenticate from your mobile device
6. Select Join and then Done
Step 3. Be productive anywhere
On any MSFT or non-MSFT device!
Step 3.1 Connecting remotely to Microsoft resources
For when you are not at a Microsoft location you can connect to our virtual private network (VPN) to access Microsoft resources.
MSFTVPN is our VPN solution for remote connectivity on MSFT Windows 10 devices.​​

Connect to MSFTVPN

1. From the Windows start menu, type and then select VPN
Settings

2. Select MSFTVPN and choose Connect

Note: If you do not see an option for MSFTVPN on your new device, do not
to worry. An automatic process will push the latest version to your device for
you. This process may take up to 24 hours. https://aka.ms/remoteaccessfaq
for more details.

For tips and best practices for working remotely, visit: https://aka.ms/FlexibleWorkLearningResources
Step 3.2 Access MSFT resources from any (non-MSFT) device using
Windows Virtual Desktop (WVD)
If you do not yet have a dedicated MSFT device, you can still access MSFT resources via your own personal device via WVD. Follow
these steps below WVD allows you to easily and securely access corporate applications, data, and resources from any device, anywhere.

Follow the instructions below to start using WVD!

1. Go to aka.ms/installwvdclient to find and install the Microsoft Remote Desktop client app for your device; when
installed, open this app.*

2. On the let's get started screen, login with your [email protected] account and password, followed by your
Phone Authentication PIN.

3. After a few seconds, you will see CSEO WVD Icons. Select a vDesktop icon to the closest region to you. You may
be asked again to login with account and password, and Phone Authentication PIN.

4. After a one-time setup completes in 30-60 seconds, a virtual desktop appears. Open the Start menu to find apps
like Outlook for corporate email, Edge to access internal websites, Teams for calls and meetings, and other apps
for business.

5. When you first login to Outlook or other Office apps, you may be asked to activate a license. Use your
[email protected] account to complete this step.

For windows users: If the Use This Account Everywhere On Your Device screen appears, uncheck Allow my
organization to manage my device and select This app only.

*Any non-FTE (vendor) users will need to request enrollment at https://aka.ms/JoinWVDEnterprise

For additional tips and FAQs for CSEO WVD vDesktop, visit: aka.ms/CSEOwvdFAQ
Step 3.3 Get your key Microsoft productivity apps
When your device is ready, you’re connected to the Microsoft network, and you have two-factor authentication set up, it’s time to get
productive! In addition to the Office applications (Word, Excel, PowerPoint, etc.) that you can find on your Start menu, here are a few of the
key productivity apps you’ll need:

Microsoft Teams
1. From the Windows start menu, type and then select Microsoft Teams
2. In the bottom left of the side bar, select Get app
3. Get tips and best practices for working remotely in Teams

OneDrive at Microsoft http://onedrive.microsoft.com

1. From the Windows start menu, type and then select OneDrive
2. Enter your Microsoft corporate email address and choose Sign in
3. Select the folders you want to sync to your PC

Outlook https://Outlook.office365.com/owa/microsoft.com
1. From the Windows start menu, type and then select Outlook
2. At the welcome screen, select Yes to add an email account and choose Next
3. Approve the two-factor authentication request on your mobile device
4. Enter your Microsoft corporate email address and network password, then choose Next and then Finish
OneDrive – enable automatic back-up of your files
OneDrive at Microsoft allows you to store all the files on your device’s desktop and in the documents and pictures folders
safely and securely in the cloud. You’ll be able to easily access and share files from any device, anytime, without having to
ever worry about losing your work.
Your IT department highly recommends you sign-up now for automatic back-up of all your files to OneDrive. If you miss
this opportunity, you will need to go through a manual process later to enable OneDrive back-up.

Click on the button below to get started. It’s the simple and easy way
to join your Microsoft colleagues in seamless, productive collaboration.

Sign-up Now

After you sign-up, within 24 hours you will see a prompt

on your device to start the automatic file sync.

.​​
 Setting up your MAC
Getting started on a Mac

Other useful
Connect remotely to Microsoft resources and get core productivity apps

access guides
Working from your mobile device (optional)
Be productive when you don’t have your PC

Get help when you need it

Helpdesk contact information
Other helpful resources
Setting up your Mac device
Getting started on a Mac
If you will be using a Mac device for your work, you will need to install the Company Portal app and enroll the device
in Intune to access Microsoft resources.

1. Visit https://aka.ms/cpweb 6. Open Finder and run the Company Portal app. Sign in using
your Microsoft credentials and
2. Select the three lines icon (hamburger) in the upper left and authenticate using two-factor authentication on
choose Devices your mobile device
3. Select the gray bar that says, “Tap here to tell us which
device you’re using or add a new device” to download the
Company Portal app Finder

7. Select Begin and follow the prompts to enroll your device in

Intune

8. Your device will automatically sync with Intune to install

access certificates along with the management profile

9. When prompted, allow access to the device keychain again

4. When the download is complete, open the install package and approve the management profile in System Preferences
and launch the Company Portal application > Profiles > Approve button
5. Enter the administrator credentials for the Mac device and
allow the Company Portal app access to the device keychain,
when prompted
Connect remotely to Microsoft resources on a Mac
A virtual private network (VPN) is used to access Microsoft resources when you are not at a Microsoft location. Devices using
VPN are required to be managed by Intune. ​You can also find the instructions below on our VPN for Mac page.

1. Download the Mac GlobalProtect agent from https://aka.ms/macvpninstall

2. Open GlobalProtect to begin installation process and select Continue on the Introduction screen
3. On the Installation Type screen, choose GlobalProtect > Continue > Install
4. When prompted, enter your password and select Install Software
5. When complete, you will receive a system pop-up to allow Palo Alto Network from System Preferences > Security & Privacy
6. Select Open Security Preferences, choose Allow and then Close
7. Select the GlobalProtect icon in your task bar. Enter portal address msftvpn-alt.ras.microsoft.com and choose Connect
8. When prompted to sign in, choose Sign in with a username and password instead. Provide your password and choose Sign in
9. When you receive the second authentication prompt, choose Sign in with your phone or token device and then approve the two-factor
authentication request on your mobile device
10. You should see that GlobalProtect is now connected.
Get core productivity apps for a Mac
Here are a few of the core productivity apps you’ll need:

Office apps (Word, Excel, PPT, etc)

https://portal.office.com/OLS/MySoftware.aspx

Microsoft Teams app

https://teams.microsoft.com/download

Configure Microsoft email on Outlook for Mac

1. In Outlook, select Outlook > Preferences > Accounts > Add
Email Account
2. When prompted for your username, enter your full Microsoft
email address in the [email protected] format
3. Choose Add Account > Connect
4. Enter your network password and choose Sign in
5. Approve the two-factor authentication request on your mobile
device and then close the Add Accounts window
6. Your account (mail, calendar, contacts) will show up under the
name of the mailbox you added
Working from your mobile device
(optional)
Be productive when you don’t have your PC
For many people, working from a mobile device helps them be their most productive. Visit the Modern Access page to learn more
and to determine if it’s right for you. To easily enable and configure your phone, scan the appropriate QR codes for your device to
install Company Portal and then download Outlook, Microsoft Teams, and other Microsoft mobile applications. (Turn on your device’s
camera to scan QR codes)

For Android devices For iOS devices

Intune Company Portal Intune Company Portal

Microsoft Teams Microsoft Teams

Microsoft Outlook Microsoft Outlook

Get help when you need it
 Support Contact Information
Global Helpdesk Support Tech Link Location
If you require assistance, please visit Tech Link and AV Link Support requiring on-site
aka.ms/techweb where you can find options to presence will vary by site depending on site closure.
engage our Global Helpdesk (GHD) 24 X 7 based on Please visit Tech Link site for status of locations or
your location. on-site support near you.

Password Reset - aka.ms/sspm

Phone Registration – aka.ms/ringring

Tips and tricks for working remotely

aka.ms/FlexibleWorkLearningResources

Please visit aka.ms/WorkFromHome for instructions

on how to get connected via VPN remotely and
other best practices that will help you stay
connected and productive.
TechWeb
https://aka.ms/TechWeb

Visit our home page:

Insightful guidance

Frequent updates

Mobile-friendly

Alerts for ongoing

issues
Get Support - Online
Open a ticket on Service Now

Request assistance with an

issue you are having at
TechWeb > Create a Helpdesk ticket
or visit:
https://microsoft.service-now.com/
An incident record will be
created and managed through
to successful resolution with the
ServiceDesk.
Get Support - In Person
Get support from our friendly technicians at your local Tech Link

Walk-in service
Hardware and software
AV Link

Note: check link for hours of operations

Work Smart

aka.ms/WorkSmart

Free training
(FTEs and Vendors)

Online sessions
(30 min to 1 hour)

On-Demand sessions

Tips & Tricks

Beyond Technical Support
Learning Portal
For Microsoft employees: find required training and other learning
opportunities at http://aka.ms/learning

Security Foundations

Privacy 101

LinkedIn Learning
Navigate your
employee life
from one place.
US FTEs, get MyHub today!

aka.ms/AboutMyHub NOTE: Some sites/links are not available in every country/region

Helpful Links
https://aka.ms/mssites

Note: some sites are not available in all countries/regions nor for all
Data storage and governance
https://aka.ms/classification

Represents data that is non-business related and does

Non-Business not belong to Microsoft.

Public Represents data designed for public consumption.

Represents business data which is NOT meant for

(personal data) General public consumption.

Represents sensitive business data which could cause

Confidential business harm if over-shared.

(corporate data) Highly Represents very sensitive business data which would
Confidential certainly cause business harm if over-shared.
Privacy and data protection

• Enables you to apply specific access permission to

documents, workbooks, and presentations to prevent
Information Rights
unauthorized forwarding, printing, or copying.
Management (IRM)
• You can also use IRM to set expiration dates after which files
no longer are available or usable.

BitLocker Drive • Protects data on your computer by preventing unauthorized

access to your hard drive.
Encryption & BitLocker
to Go • BitLocker To Go prevents unauthorized access to portable
drives such as USB drives (thumb drives).

Take the Privacy 101 training to learn more (Mandatory)

Appropriate Usage
Policy
Monitoring is in place for
email, internet & voicemail

Only used for breach of Policy

http://aka.ms/mspolicy
Glossary – Using a personal device
You can use a personal device to access corporate resources. Accessing the company network from any device requires that the
device be managed by Microsoft Intune​. With Intune, you will have the ability to register your devices from anywhere in the
world. Using only the prescribed prerequisites, you can gain access to the Microsoft corporate network quickly.
When enrolling your device in Intune, you will have access to apps found in the Company Store, or other locations. Your
devices will be configured to access WIFI or a virtual private network (VPN) server based on your profile.

Microsoft Intune enables:

Enforcement of device encryption on your device to prevent unauthorized access.
Enforcement of a 6-digit PIN or strong password.
Requirement of a specific inactivity timeout period.
Pushing VPN and wireless settings and certificates to your device.
Ability to wipe the device remotely, based on corporate policy.

Microsoft Intune enrollment does not enable:

Tracking or locating your device on a map.
Visibility to private data contained in SMS, text, videos, pictures, files, phone call logs, personal applications, or messaging
services.
Reading or accessing the contents of personal or corporate email accounts. If necessary, as part of the selective wipe process,
corporate email accounts can be deleted by Microsoft Intune to remove corporate email account settings and email messages
Again, Welcome to Microsoft!