Index
A
AAD (Azure Active Directory)
Admin Center downloading module, 517–518
App and Attribute Filtering, 221–226
creating GPO for OneDrive for Business, 931–933
Duplicate Attribute Resiliency, 135–136
duplicating proxy addresses in synchronization process, 136–137
duplicating UserPrincipalName value in synchronization process, 138
express migration benefits, 576
managing contacts, 525
migrating to Office 365 and, 25–26
object types, 519
password authentication, 104
password synchronization, 191–193
synchronized identities, 91–92
AAD Connect
in Azure Active Directory Admin Center, 321
based on Microsoft Identity Manager, 77
controlling directory synchronization, 158
cutover Exchange migrations, 556
directory synchronization in Yammer, 983–984
directory synchronization process, 56, 283
documenter, 242
eliminating unneeded objects, 145–147
Exchange migration planning, 499
Exchange Online hybrid planning, 596
Exchange public folder migration, 652, 660–661
express migrations, 577, 586–587
forest and domain readiness for Office 365 deployment, 31–33
IDFix for synchronization errors, 502
installing and configuring AD FS, 111
interpreting synchronization status, 175
managing enterprise-wide synchronization using health dashboard, 164–170
managing enterprise-wide synchronization without using health dashboard, 170–175
monitoring informational events, 78–79
Password Hash Sync, 110
password synchronization, 105
staged migrations, 498
synchronization order, 160
Synchronization Rules Editor, 167–168
synchronization tool, 47
synchronized identities, 91–92
troubleshooting network connectivity and, 60–63
Writeback Sender Authentication, 507
AAD Connect installation
AAD App and Attribute Filtering, 221–226
AD forest credentials, 180–181
choosing authentication method, 191
choosing installation location, 187
comparing custom and express options, 177–179
Configuration Complete page, 186, 241–242
configuring password reset policy, 231–235
confirming AD UPN suffixes, 182–184
connecting to directories, 201–204
creating service account, 182
custom installation using SQL server, 188–189
custom join attributes, 213–215
determining when to synchronize, 250–251
Directory Extensions attribute sync, 238–240
Exchange hybrid deployment, 220–221
express installation, 179
federation using AD FS, 195–201
filtering users and devices, 218–219
Mail attribute, 212
Optional Features page, 220
overview of, 177
pass-through authentication, 193–195
password synchronization, 191–193, 226–228
precedence of synchronization rules, 242–250
Ready to configure page, 185
sAMAccountName and mailNickname attributes, 213
selecting existing service account, 189–191
SourceAnchor attribute, 215–218
staging mode and, 254
starting synchronization, 251–254
summary, 254
uniquely identifying users, 208–209
UserPrincipalName and SourceAnchor attributes, 205–208
acceptable use policy, Yammer Usage Policy, 947–948
AcceptMessagesOnlyFrom parameter, 688
access protocols, are not migrated, 512
access/access control
client access claim rules and regular expressions, 120–125
clients and, 112
configuring client access policies, 115–116
delegating tenant access, 16
device restrictions in OneDrive for Business, 929–930
enabling Client Access Policy claim types, 116–118
limiting client access based on group membership, 129–131
limiting client access based on IP address or department, 118–119
limiting client access by department, 125–129
location-based controls, 854–855
organization-wide device access settings, 401–403
to secondary administrator in OneDrive, 925–927
Skype for Business Online policies for external, 755
troubleshooting mailbox moves in Exchange Online hybrid, 644
troubleshooting public folder migration, 668
Account Activity, Yammer, 963
account selection page, Hybrid Configuration Wizard, 612–613
accounts. see also administrators; groups; service accounts
creating, 47
Exchange Online Account credential, 612–613
password requirements for Office 365 cloud accounts, 106
preparing user and group accounts, 34–35
Skype hybrid limitations, 814
users and account readiness for Office 365 deployment, 28–31
actions, transport rules, 692
activation
Mobile Device Management, 390–392
Rights Management Services, 696–698
Active Directory. see AD (Active Directory)
Active Directory Federation Services. see AD FS (Active Directory Federation Services)
Active Directory Lightweight Services (AD LDS), 202
Active Users
admin roles in service health, 481–482
identifying cloud users vs. synchronized users, 97–98
AD (Active Directory). see also AAD (Azure Active Directory)
AAD Connect object support, 188
connecting to User Profile, 868–869
connector space. see connectors
Exchange migration/on-premises environment, 499
forest and domain readiness for Office 365 deployment, 31–33
Group Writeback, 235
MailNickname attribute in, 30
multi-forest environments, 37
objectGuid/Office 365 ImmutableID, 504
password synchronization, 191–193
provisioning remote mailboxes, 725
proxyAddresses attribute in, 735–736
SamAccountName attribute in, 30–31
synchronization to Azure, 28
synchronized identities, 91–92
troubleshooting public folder migration, 667–668
UserPrincipalName attribute in, 29–30
viewing user sign-in status, 96
AD FS (Active Directory Federation Services)
Client Access Policy. see Client Access Policy
installing and configuring, 111
Skype for Business Online authentication, 759–760
soft lockout preventing DOS attacks, 807
AD LDS (Active Directory Lightweight Services), 202
Add-MailboxFolderPermission cmdlet, 682
addresses
email. see email addresses
Exchange Online migration planning, 505
forwarding addresses are not migrated, 512
global. see GAL (global address list)
proxy. see proxy addresses
Session Initiation Protocol, 735–738
Admin Centers. see also EAC (Exchange Admin Center)
Azure Active Directory, 320–323
Azure Information Protection, 286–287
Azure multifactor authentication service, 279–280
Bing Places For Business, 302
building with one cmdlet at a time, 516–517
Calendar service, 280
configuring DNS records, 49–55
configuring Yammer, 939
creating contacts, 542
Custom View option, 99
data location widget, 301
directory synchronization settings, 282–283
To-Do preview settings, 293–294
domains settings, 296
guest identities, 102
identifying cloud users vs. synchronized users, 97–98
Integrated Apps feature, 285
locating error objects, 141
Microsoft Teams, 287
Office 365 Groups, 288
Office Store, 289
OneDrive for Business, 315–316
Organization Profiles, 296–301
Partner Relationships page, 302
PowerApps, 317
removing mailboxes, 535
resetting passwords, 105
Security & Compliance Center, 318–320
Security & Privacy settings, 294–296
security and distribution groups, 528–530
service admin centers, 306–307
Services & Add-Ins page of Settings menu, 277–279
Sites settings, 290
Skype For Business, 291, 311–313
software download settings, 289
Sway, 293
viewing/adding subscriptions, 14–15
admin mobile app tools, 489
administration tasks, Skype for Business Online, 811
administration tasks, Yammer
networks. see Yammer, network administration
users. see Yammer, user administration
administrators
access for secondary administrator in OneDrive, 925–927
cutover Exchange migration requirements, 556
installation credentials and, 179–182
mobile app tools, 489
predefined user views for, 100
roles in service health, 481–483
staged Exchange migration requirements, 566
Admins screen, Yammer, 940, 945–947
ADMX/ADML (Office 2016 Administrative Template files), 803
Advanced eDiscovery
Advanced Options, spam filters, 708
Advanced Security Management
app permissions, 388
managing advanced alerts, 334–335
Productivity App Discovery, 478–480
Advanced Threat Protection. see ATP (Advanced Threat Protection)
Advanced Threats, Security & Compliance Center, 357–358
After Hours Call Handling page, Skype for Business Online, 778–779
alerts
health dashboard, 164
policies, 334
Security & Compliance Center, 319
AllBookInPolicy, calendar automation, 684–686
Allow page, spam filters, 708
AllRequestInPolicy, calendar automation, 685–686
AllRequestOutOfPolicy, calendar automation, 685–686
analytics
Alerts Dashboard, 327
health dashboards, 164
Threat Management Dashboard, 342–343
analytics, Yammer
content and security, 942, 981–982
Yammer Admin Center, 317
Android
Skype for Business for mobile clients, 801–802
anonymous senders, Office 365 groups and, 687–688
APNs (Apple Push Notifications), 393–397
App Launcher
defined, 857
Office 365 portal starting page, 262
SharePoint Hybrid, 861–862, 894–897
App Management service, in SharePoint Online Hybrid, 869–870
Apple Push Certificates Portal, 395–396
Apple Push Notifications (APNs), 393–397
Application Pool, configuring App Management service, 870
Application Proxy, AAD Admin Center, 321
apps
AAD App and Attribute Filtering, 221–226
Azure Active Directory Admin Center, 321
SharePoint Admin Center, 314
archives
enabling for all users, 431–432
enabling for individual users, 430–431
Exchange hybrid deployment and, 221
journal, 720
ATP (Advanced Threat Protection)
mail filtering, 348
Safe Attachments menu, 353–355
Threat Management Dashboard, 340
viewing threat status in dashboard, 357–358
attachments
Safe Attachments menu, 353–355
Yammer settings, 944
audience
managing user, 833
piloting OneDrive for Business for small group, 872–873
audio, Skype
configuring, 795
mobile client bandwidth and, 753–754
peer-to-peer VoIP, 731
planning connectivity, 743
troubleshooting connectivity, 745–747
Audited Controls, Security & Compliance Center, 365–366
auditing/audit logs
AAD Admin Center, 322
recording in SharePoint Hybrid, 893
security roles and capabilities, 336, 338
in SharePoint Online Hybrid, 857, 861, 893–894
sign-in and, 111
authentication
Azure multifactor authentication service, 279–280
configuring multifactor authentication, 397–400
configuring password reset policy, 232–235
connecting to Exchange Online, 553–555
DKIM (DomainKeys Identified Mail), 352–353
Exchange hybrid configuration, 19
free/busy and hybrid, 599
identity enforcement for Yammer, 974–979
installing and configuring AD FS, 111
pass-through authentication, 193–195
selecting method for AAD Connect install, 191
server-to-server, 871
in Skype for Business Online, 737–738, 758–760
UserPrincipalName attribute and, 134–135
AutoAccept, calendar automation, 684
Auto-Attendant, Skype for Business Online call routing, 775–776
Autodiscover, Exchange Online
advanced configuration, 500
cutover migration and, 556, 564
mail routing and, 24
migration planning, 499, 509–510
online hybrid public folders, 649
on-premises hybrid public folders, 646, 648
public folder migration, 650
staged migration requirements, 566
AutoMapping, 681
automatic updates, Windows Server Update Services, 75
AutoUpdate, calendar automation, 684
Azure
Active Directory. see AAD (Azure Active Directory)
copying PSTs to, 408
downloading Import/Export tool, 418
ExpressRoute connection between network and Azure cloud, 63
multifactor authentication service, 279–280
RMS (Rights Management Services), 286–287
viewing user sign-in status, 96
B
B2B (business-to-business) sites, 897–899
BadItemLimit, troubleshooting mailbox moves, 645
Exchange Online migration planning, 509
Skype for Business Online connectivity planning, 743
Skype mobile client and, 753–754
Bandwidth Calculator, Skype for Business Online, 743
batch, migration
cutover migrations, 564
Exchange Online hybrid, 628
express migrations, 578
managing with Protocol Agnostic Workflow, 639–640
onboarding. see onboarding, Exchange Online hybrid
staged migrations. see staged migrations
BCS (Business Connectivity Services), SharePoint
Admin Center, 314
defined, 827
limitations of hybrid version, 21
Best Practices Analyzer, Exchange Online migration, 502
Billing Administrator role, 16–18
Billing menu
Admin Center, 264
Billing Notifications page, 276
Bills page, 275
overview of, 274
Purchase Services page, 276
Subscriptions page, 274
Bing Places For Business, Settings menu, 302
Block page, spam filtering, 708
Block Users, Yammer, 964
blocks
managing IP filtering list, 702–703
senders, 221
BookInPolicy, calendar automation, 684–686
Bounced Emails, Yammer, 964–965
BPOSSModalityAll conferencing policy, managing SBO with Windows PowerShell, 793–795
Broadcast Meetings, Skype for Business Online, 786
browsers. see web browsers
Bulk Update Users, Yammer, 965–967
Business Connectivity Services. see BCS (Business Connectivity Services), SharePoint
business goals, planning SharePoint topology, 857–858
Business Hours Call Handling page, Skype for Business Online, 777–778
business-to-business extranets
defined, 857
hybrid, 862
SharePoint Online Hybrid, 897–899
C
CAC (Client Access Certificate), 759
cached data, troubleshooting during cutover migration, 809
cached URL, 497
calendars
Calendar service, 280
process information is not migrated, 512
Skype client features, 738, 760
Call Analytics, Skype for Business Online, 787
Call Quality dashboard (CQD), Skype for Business Online, 787
call queues, Skype for Business Online, 779–780
call routing, Skype for Business Online
After Hours Call Handling page, 778–779
Business Hours Call Handling page, 777–778
Dial Scope options, 779
Select Hours Of Operation page, 776–777
CAs (certification authorities), 19
CAS (client access servers)
mail routing and, 24
on-premises hybrid public folders, 648
cases, eDiscovery
closing, 478
creating and adding members, 463–465
managing, 336
catalogs, SharePoint store, 845, 847–848
Central Mail Transport (or Central Mail Flow), 701–702
centralized mail transport (CMT), 601–602
certificates
Exchange Online migration planning, 500–501
express migration requirements, 577
Hybrid Configuration Wizard, transport, 621, 624
Skype for Business Online authentication, 759
certification authorities (CAs), 19
character limitations in, 95
chat rooms, Skype for Business Online, 732
chat-based collaboration, Microsoft Teams for, 287
CIDR (classless inter-domain routing) blocks, managing IP filtering, 702–703
claims, client access
limiting access by department, 125–129
limiting access by group membership, 129–131
limiting access by IP address, 118–119
rules and regular expressions, 120–125
Classic Experience user interface, 850–851
classification of data
label policies, 380
overview of, 370
publishing labels for automatic application, 377–379
publishing labels for manual application, 374–376
Security & Compliance Center, 319
sensitive information, 380–381
Client Access Certificate (CAC), 759
AD FS feature, 111
claim rules and regular expressions, 120–125
limiting access based on IP address or department, 118–119
limiting access by department, 125–129
limiting by group membership, 129–131
overview of, 112
client access servers. see CAS (client access servers)
ClientPolicyDefault client policy, Skype for Business Online, 791–793
clients
installing Office Pro Plus software, 72–75
Microsoft Client Discovery Unified Export Tool, 458
Skype for Business. see Skype for Business Online client
Skype for Business Online network flow, 748–749
staged Exchange migration rules, 565
cloud
creating search service application, 879–880
creating user account, 47
determining icon color, 860
ExpressRoute connection between network and, 63
hybrid search. see searches, cloud hybrid
password requirements for cloud accounts, 106
uploading drive shipping page to, 423
cloud identities
adding custom view to Office 365 Users page, 98–100
creating using CSV import file, 94–97
identifying cloud users vs. synchronized users, 97–98
Office 365 Identity for Yammer, 983
overview of, 92
viewing with PowerShell, 100–101
CMT (centralized mail transport), 601–602
co-authoring
documents, 912
coexistence methodologies, Exchange Online, 497–498
collaboration
chat-based, 287
groups and, 288
with OneDrive for Business, 910–916
command logging, Exchange Admin Center, 309–311
Committed Enforcement, of identities, 977–978
company branding, 322
Complete-MigrationBatch command, troubleshooting public folder migration, 668
complexity, of passwords, 107–108
compliance
data loss prevention and, 713–718
eDiscovery and holds, 712
Exchange Admin Center, 308
journaling, 720
OneDrive for Business Admin Center, 316
retention tags and policies, 719–720
Security & Compliance Center, 304–305, 318–320
Skype for Business Online, 770
tools for, 712
Compliance Administrator role, 336, 338
concurrency values
migration velocity settings, 554–555
migration-service throttling, 590
conditions
transport rules, 690
conferencing, Skype for Business Online
Admin Center, 312
Configuration Complete page, AAD Connect, 186, 241–242
Configuration screen, Yammer, 940, 943–944
Configure Hybrid, SharePoint Online, 853–854
Configure Store Settings, 847–848
Configure Synchronization Connections, SharePoint Online, 868–869
Congratulations page, Hybrid Configuration Wizard, 623
Connect- EXOPSession command, PowerShell, 554
Connect-AzureAD cmdlet, 931–933
connection filter policy, for Allow List, 702
connectivity. see also networks/networking
Business Connectivity Services, 835–837
cloud Search to Office 365, 880–881
to Exchange Online PowerShell endpoint, 530–531, 553
ExpressRoute connectivity, 63
Remote Connectivity Analyzer, 559–563
User Profile synchronization, 868–869
connectivity, Skype for Business Online
hybrid requirements, 813
planning, 743
Connectivity Analyzer tool, Skype for Business Online, 786
Connect-MsolService cmdlet, 538
connectors
adding, 154
Exchange Online mail flow, 495–496
as holding location during sync, 146–147
Hybrid Configuration Wizard Receive, 620
Hybrid Configuration Wizard Send, 620–621
joins and, 155
multi-forest environments and, 156–158
object properties, 153
popular Team, 762
projection from connector space to metaverse, 147–148
provision of object from metaverse to connector space, 149–150
contacts
Azure Active Directory, 519
Exchange Online, 531
filtering, 218
managing, 687
content
create source for cloud hybrid search, 880–884
creating using Sway, 293
creating/running searches, 468–469
downloading search results, 456–459
exporting search results, 456–459, 469–472
placing hold on eDiscovery content, 466–468
restricting devices that synchronize OneDrive, 927–930
sensitive, 382
Yammer Admin Center, 316
Content and Security, Yammer
Data Retention, 981
Office 365 Identity enforcement, 974–979
Success page, 942
Content Search
exporting results, 456–459, 469–472
content types
configuring Records Management, 840–841
copy on-premises taxonomy to SharePoint Online, 888
Conversation History folder, 757–758
conversation settings, Skype for Business Online, 770
Copy-SPTaxonomyGroups command, 887–888
corrupted items error, public folder migration, 668
CQD (Call Quality dashboard), Skype for Business Online, 787
Crawling content, cloud searches, 882–883
Create A New Rule, transport rules, 690–693
Create Personal Site permission, OneDrive for Business, 872
CreateCloudSSA.PS1, 880
credentials
connecting to directories, 201
connecting to Exchange Online, 553
cutover Exchange migration and, 558–559
Hybrid Configuration Wizard, 612–613
staged Exchange migration and, 568–570
cross-premises access, Exchange Online hybrid, 596–597
CSV files
creating cloud identities, 94–97
onboarding in Exchange Online, 629
staged Exchange migration, 566–568, 574–575
troubleshooting mailbox moves, 644
Yammer Export Data archive, 980–981
cumulative updates, Exchange Online migration, 501
custom installation, AAD Connect
AAD App and Attribute Filtering, 221–226
choosing authentication method, 191
choosing installation location, 187
Configuration Complete page, 241–242
configuring password reset policy, 231–235
connecting to directories, 201–204
determining when to synchronize, 250–251
Directory Extensions attribute sync, 238–240
Exchange hybrid deployment, 220–221
filtering users and devices, 218–219
Mail attribute, 212
Optional Features page, 220
pass-through authentication, 193–195
password synchronization, 191–193, 226–228
precedence of synchronization rules, 242–250
sAMAccountName and mailNickname attributes, 213
selecting existing service account, 189–191
SourceAnchor attribute, 215–218
staging mode and, 254
starting synchronization, 251–254
uniquely identifying users, 208–209
UserPrincipalName and SourceAnchor attributes, 205–208
Custom View dialog box, adding custom view to Users page, 98–100
cutover migrations, Exchange Online
decision process and key concepts, 552–555
decommissioning on premises, 564–565
message sizes/attachments in, 504–505
migration and coexistence technologies, 497–498
post-migration steps, 564
requirements, 556
using Exchange Admin Center, 556–559
cutovers, Skype for Business Online
troubleshooting, 809
D
dashboards
managing enterprise-wide synchronization with health dashboard, 164–170
managing enterprise-wide synchronization without health dashboard, 170–175
service health v1 view, 483–487
service health v2 view, 487–488
Skype For Business Admin Center, 767–768
dashboards, Security & Compliance
anti-malware, 351
Content Search dashboard, 456
Data Governance, 404
Reports For Download dashboard, 361–362
Retention dashboard, 435
Safe Links dashboard, 356
Service Assurance dashboard, 362–363
Supervision dashboard, 442
Threat Explorer, 344
Threat Management Dashboard, 340–343
data
classification of. see classification of data
eDiscovery. see Search & Investigation menus
loss prevention. see DLP (Data Loss Prevention)
Security & Compliance Center, 319, 369
troubleshooting cached, in cutovers, 809
data governance
configuring retention policies, 432–433
configuring supervision policies, 441–444
copying PSTs to Azure, 408
copying PSTs to hard drive, 419–421
creating retention policies, 435–440
dashboard for, 404
downloading PST import tool, 418–419
drive shipping import jobs, 417
network import process, 406–408
preparing PST import mapping file, 409–410
retention policies by content types, 433–434
reviewing supervised content, 445–450
reviewing supervision reports, 451–452
using PST import file for assigning PSTs to users, 421–429
data location widget, 301
Data Loss Prevention. see DLP (Data Loss Prevention)
data migration
express migrations, 578–579, 589
overview of, 269
setup options, 303
data policies, Flow Admin Center, 318
Data Retention, Yammer, 981
data uniqueness
duplicating attribute values in synchronization process, 135–136
duplicating proxy addresses in synchronization process, 136–137
duplicating UserPrincipalName value in synchronization process, 138
overview of, 134
proxy addresses and, 135
reviewing/locating tenant errors, 140–144
summary, 144
technical notification of duplication, 138–140
UserPrincipalName attribute, 134–135
DAuth (Delegated Authentication), 599–600
deactivate user accounts, Yammer
after receiving bounced emails, 964–965
debugging, AD FS debug log, 123
decision process, mailbox migration, 552–555
decommissioning
cutover Exchange migrations, 564–565
hybrid environment after migration, 674–675
staged Exchange migrations, 575–576
decryption, transport rule for, 699
Delegated Authentication (DAuth), 599–600
delegation, Exchange Online
cross-premises access and, 596–597
migration planning, 507
Delete Message, spam filtering, 708
Deleted Users, removing/restoring users, 267–269
delivery restrictions, managing, 687–688
Delve, SharePoint Online, 824–825
departments, limiting client access by, 118–119
deploying Office 365. see also setup, Office 365
additional Office 365 plans, 13–14
built-in administrative roles, 16–18
comparing Office 365 Business with Office 365 Enterprise, 10–13
delegating access to tenants, 16
directory requirements, 28
load balancers, network configurations, proxy servers, and firewalls, 26–28
mail routing requirements, 24
multi-forest environments and, 37
physical Exchange server infrastructure requirements, 23
preparing user and group accounts, 34–35
proxy address and domain requirements, 25–26
public folders in Exchange infrastructure, 26
syncing users and moving services, 42
upgrades and updates and, 37–38
user preparedness, 35
user synchronization requirements, 28–31
viewing tenant name in Exchange Online, 5–6
viewing tenant name in Office Online, 9
viewing tenant name in Office Pro Plus, 9
viewing tenant name in OneDrive for Business, 7–8
viewing tenant name in SharePoint Online, 7
viewing tenant name in Skype for Business, 8
viewing/adding subscriptions, 14–15
deploying OneDrive for Business
access for secondary administrator, 925–927
disable provisioning, 917
restrict devices that synchronize content, 927–930
deployment
Exchange Deployment Assistant, 514
Exchange Online concepts, 495–498
Design screen, Yammer, 940, 944
Device Access
restrictions in OneDrive for Business, 929–930
Device Management
managing mobile devices. see MDM (Mobile Device Management)
security roles and capabilities, 336, 338
device security policies
blocking Exchange ActiveSync for unsupported devices, 403–404
organization-wide access settings, 401–402
devices
managing mobile. see MDM (Mobile Device Management)
that synchronize content, 927–930
Dial Scope options, call routing, 779
dial-in conferencing, Skype for Business Online
Admin Center, 312
Dial-In Users section, 783
overview of, 732
user options, 771
using Microsoft Bridge, 781–783
DIG tool, troubleshooting federation, 773–774
directories
checking for errors, 29
Exchange hybrid configuration, 19
forests and domain readiness for Office 365 deployment, 31–33
Office 365 deployment requirements, 28
proxy addresses and, 135
reviewing/locating tenant errors, 140–144
user and group account readiness for Office 365 deployment, 34–35
UserPrincipalName attribute, 134–135
users and account readiness for Office 365 deployment, 28–31
Directory Extensions attribute sync, 238–240
Directory Integration, Yammer, 967
directory synchronization
with AAD Connect tool, 56
connector space as holding location during sync, 146–147
duplication of attribute values, 135–136
duplication of proxy addresses, 136–137
duplication of UserPrincipalName values, 138
error events, 81
events, 79
filtering unneeded objects, 145–147
inbound synchronization rules, 147, 149
interpreting synchronization status, 175
managing enterprise-wide synchronization with AAD Connect health dashboard, 164–170
managing enterprise-wide synchronization without AAD Connect health dashboard, 170–175
outbound synchronization rules, 149
projection from connector space to metaverse, 147–148
provision of object from metaverse to connector space, 149–150
settings from Services & Add-Ins page, 282–283
staged Exchange migrations, 565
synchronization order, 160
DirSync Status Summary page, 141–143
disabled users, preparing user accounts for Office 365 deployment, 34
Disposition Management, security roles and capabilities, 336
distinguished names, object, 154
distribution groups
configuring moderation for, 688
dynamic, 533
Exchange Online, 532
managing, 687
distributions lists
groups and, 269
DKIM (Domain Keys Identified Mail)
Exchange Admin Center, 309–311
Exchange Online migration planning, 511
managing transport, 706
DLP (Data Loss Prevention)
activating device management, 390–392
compliance and reporting, 713–718
configuring Apple Push Notification service, 393–397
configuring device security policies, 401–404
configuring multifactor authentication, 397–400
Exchange Online migration planning, 508
Security & Compliance Center, 319
security roles and capabilities, 337–338
sensitive information types in, 380
DMARC record, Exchange Online migration, 511
DNS LOOKUP, troubleshooting federation, 773–774
DNS records
configuring MDM domains, 392–393
configuring public records, 48–55
cutover migration, 564
deploying Skype for Business Online, 809
DKIM (Domain Keys Identified Mail), 352–353
Exchange Online hybrid, 19, 597
Exchange Online migration planning, 510–511
express migration requirements, 577
Skype for Business Online, 739–740
Skype hybrid deployment, 813
staged Exchange migration, 575
troubleshooting cutover migration, 810
updating domains in hybrid configuration, 726
DNS servers, 742
documentation, managing SBO with Windows PowerShell, 790
documents
coauthoring, 912
configuring redirection in OneDrive, 919–925
creating DLP Policy rule for fingerprinting, 713–718
retention policies, 434
sharing, 911
Documents folder, 919–925, 931–933
Domain Ownership page, Hybrid Configuration Wizard, 616–618
domains
AAD Admin Center, 322
Exchange cutover migration, 555–556
Exchange Online migration planning, 505, 510–511
Exchange staged migration, 565–566
express migration requirements, 577
Hybrid Configuration Wizard, 604, 615–618
migrating mailboxes to Office 365, 25–26
Office 365 deployment requirements, 32
pass-through authentication and, 194
post-migration public folders, 666
restricting devices that synchronize OneDrive content, 927–930
settings, 296
sign-in and email personalization, 49–54
troubleshooting AAD Connect installation, 202
troubleshooting mailbox moves, 642–643
typical single-domain forest, 145
updating in hybrid configuration, 726
downloads, software download settings, 289
downtime
express migrations minimizing, 577
for service incidents, 485
drive shipping
assigning PSTs to users, 421–429
copying PSTs to hard drive, 419–421
downloading PST import tool, 418–419
import jobs, 417
Duplicate Attribute Resiliency, AAD (Azure Active Directory), 135–138
dynamic distribution groups, Exchange Online, 506, 533
dynamic groups, group-based licensing, 83–84
E
EAC (Exchange Admin Center)
Calendar service and, 280
creating contacts, 687
cutover Exchange migration, 555–559
distribution groups, 687
executing migrations through web browsers, 552–553
installing Exchange Online PowerShell, 553–554
mail-enabled users, 540–541, 686
managing Exchange hybrid, 19
staged Exchange migration, 565, 567–572
troubleshooting cutover migration, 559–563
viewing DLP policies in, 718
EAPs (email addressing policies), 25–26
ECT (external content type), Business Connectivity Services, 836
Edge, 458
edge transport servers, 601, 619
eDiscovery
assigning permissions, 462
closing cases, 478
compliance and reporting via, 712
creating case and adding members, 463–465
creating/running content search, 468–469
Export Tool, 459
exporting results of content search, 469–472
managing cases, 336
placing hold on content, 466–468
security roles and capabilities, 338–339
eDiscovery Administrator role, 338–339
eDiscovery Manager role, 338–339
Edit My Profile, SharePoint Online, 832–833
Edit Profile permission, OneDrive for Business, 872
comparing UPN with email address, 35–37
DLP policies, 382
migrating email messages, 52
post-migration public folders, 667
sign-in and email personalization, 49
tenant name in Exchange Online, 5–6
Yammer email log, 944
Yammer network notification settings, 943–944
email addresses
EmailAddressPolicyEnabled attribute, 505, 643
SMTP address, 737–738, 804–805, 807
email addressing policies (EAPs), 25–26
Email Invitation tab, Yammer Directory Integration, 967
EmailAddresses attribute, SMTP address, 683–684
EmailAddressPolicyEnabled attribute, Exchange Online, 505, 643
Enable-RemoteMailbox cmdlet, 725
encryption
Exchange Online migration planning, 508
passwords, 192
endpoints, migration
concept of, 554
configuring express migration, 580
connecting to PowerShell, 518, 531
cutover migration, 561
Exchange Online hybrid, 625–628
Exchange Web Services, 500
express migration, 578
list of hybrid, 509
managing, 510
onboarding in Exchange Online, 632
public folder migration, 658–659
troubleshooting connectivity, 559–563
troubleshooting cutover migration, 560
End-User Spam Notifications, 710–711
Enter On-Premises Account Credentials, 558–559
enterprise
AAD Admin Center, 321
managing synchronization with health dashboard, 164–170
managing synchronization without health dashboard, 170–175
social collaboration settings, 851
Enterprise Administrator, 181–182
enterprise search, SharePoint Online, 826
environment variable, 920–921, 924
EOP (Exchange Online Protection)
hybrid networking, 602
staged migration, 575
Yammer External Messaging, 972
equipment mailboxes, 269–270, 531
errors
directory synchronization, 81
examining with health dashboard, 165–168
handling with Hybrid Configuration Wizard, 603
interpreting synchronization status, 175
reviewing/locating tenant errors, 144
troubleshooting export errors, 173–175
validation check for syntax errors, 424
ETRs (Exchange transport rules), Yammer External Messaging, 972–974
events
directory synchronization, 79–81
password synchronization, 79–80
EWS (Exchange Web Services)
Exchange hybrid configuration, 19
express migration requirements, 577
migration planning, 505
exceptions, transport rules, 690, 692
Exchange Admin Center. see EAC (Exchange Administrative Center)
Exchange Best Practices Analyzer, 502
Exchange Deployment Assistant, 514
Exchange Management Shell
checking certificate for migration, 501
offboarding in Exchange Online hybrid, 641–642
post-migration steps for cutover migration, 564
on-premises hybrid public folders, 649
Exchange Online
AD versions/configuration, 499
Admin Center. see EAC (Exchange Admin Center)
coexistence strategies, 497–498
compliance and reporting, 712–720
data labels, 370
enabling federation trust prior to running Hybrid Configuration Wizard, 609–610
licensing plans, 10
mail routing, 495–496, 508–509
management, 677
managing hybrid environments, 725–726
managing mail-enabled users, 539–540
managing organization relationships, 720–724
managing organization sharing policies, 724–725
moving mailboxes to/from, 624
permissions and delegation, 507
post-migration public folders, 665–667
PowerShell. see Windows PowerShell
public folders, 508
spam and malware filtering, 706–712
tag management, 719
things that do not migrate, 512–513
transport. see transport management
versions, service packs, updates, and rollups, 501–502
Exchange Online deployment requirements
load balancers, network configurations, proxy servers, and firewalls, 26–28
mail routing, 24
physical Exchange server infrastructure, 23
proxy addresses and domains, 25–26
public folders, 26
Exchange Online hybrid
AAD Connect, 596
Autodiscover, 596
completing batch mailbox moves, 636–638
completing user within batch, 638–640
creating mailbox batch, 629–634
decommissioning hybrid environment, 674–675
features, 19
free/busy and hybrid authentication, 599–600
general planning, 596
mailbox migration batches, 628
mailbox migration endpoints, 625–628
mailbox moves, 624
monitoring batch mailbox moves, 634–636
offboarding mailboxes, 641–642
Office 365 Hybrid Configuration Wizard. see Hybrid Configuration Wizard
online public folders, 649–650
planning cross-premises access and delegation, 596–597
planning DNS records, 597
planning email address policies/proxy addresses, 597–598
planning mail transport, 601–602
planning message sizes, 601
planning networking, 602
planning public folders, 602
post-migration configuration, 665–667
on-premise public folders, 646–649
Protocol Agnostic Workflow, 639–640
public folder migration, 650–665
server versions, 598
troubleshooting mailbox moves, 642–645
troubleshooting public folders, 667–670
Exchange Online Protection. see EOP (Exchange Online Protection)
Exchange Remote Connectivity Analyzer, 514
Exchange Server Deployment Assistant, 598
Exchange servers
decommissioning hybrid environment, 674–675
Exchange 2007/2010 public folder migration, 651–660
Exchange 2013/2016 public folder migration, 660–665
versions, 598
Exchange transport rules (ETRs), Yammer External Messaging, 972–974
ExchangeGuid property, 641–642, 644
expiration, password policies, 107
export/exporting
eDiscovery Export tool, 459
examining errors, 170
retention policy tags, 513
security roles and capabilities, 337
troubleshooting errors, 173–175
Export-TransportRuleCollection, 704–705
express installation, AAD Connect
comparing with custom installation, 177–179
Configuration Complete page, 186
confirming UPN suffixes, 182–184
creating service account, 182
Ready to configure page, 185
express migration, Exchange Online
decision process and key concepts, 552–555
installing and configuring, 578–589
limitations, 578
external access, Skype for Business Online, 773
external communications
Setting up Skype for Business Online tool for, 787
Skype for Business Online user options, 770, 772
external content type (ECT), Business Connectivity Services, 836
External Messaging, Yammer, 972–974
External Networks, Yammer, 936, 948–951
F
Farm Administrator account, 887–888
Fast Track Network Analysis tool, 747–748
federated connectivity, Skype for Business Online, 731–732
federation. see also identities
deploying Skype for Business Online, 808–809
identity federation (Single Sign-On), 109–111
overview of, 82
Skype for Business Online, 772–773
Skype hybrid configuration, 814
Federation Trust page, Hybrid Configuration Wizard, 614–615
Fiddler, 62
File Attachment setting, Yammer, 944
files
CSV files. see CSV files
determining sync client via names of, 860
peer-to-peer Skype for Business Online transfers, 731
shared files/folders in OneDrive, 911
SharePoint Online capacity limits, 820–821
filters/filtering
AAD App and Attribute Filtering, 221–226
audit log searches, 461
data prior to import, 414–416, 427–429
eliminating unneeded objects, 145–147
synchronization rules related to, 220, 249
viewing alerts, 329
fingerprinting, in DLP policies, 713–718
firewalls
AD FS infrastructure, 110
configuring, 55
Exchange hybrid configuration, 19
Exchange Online migration planning, 509
Office 365 deployment requirements, 27–28
troubleshooting cutover migration, 810
First Release access, Office 365 Hybrid Configuration Wizard, 603
folders
configuring document redirection, 925
sharing with OneDrive, 911
Follow People permission, OneDrive for Business, 872
forests
Exchange hybrid configuration, 19
GAL synchronization, 212
LDAP read permissions and, 203
multi-forest environments, 37, 156–158
Office 365 deployment requirements, 32
pass-through authentication and, 194
precedence of synchronization rules, 242–250
single-domain forest, 145
FQDN (fully qualified domain name)
Hybrid Configuration Wizard, 622
troubleshooting cutover migration, 559–560
troubleshooting federation, 773–774
free/busy requests
Exchange Online hybrid planning, 599–600
Hybrid Configuration Wizard and, 604, 616
Full Hybrid Configuration, 585
fully qualified domain name. see FQDN (fully qualified domain name)
G
GAL (global address list)
Exchange hybrid deployment and, 220
locating user, 164
migrating to Office 365, 40–41
synchronization (GalSync), 212
Gathering Configuration Information page, Hybrid Configuration Wizard, 613–614
Get Link button, OneDrive document and folder sharing, 911
Get-AzureADUser cmdlet, 524
Get-DynamicDistributionGroup cmdlet, 550
Get-Mailbox-SoftDeletedMailbox cmdlet, 536
Get-MessageTrace cmdlet, 703
Get-MsolAccountSku cmdlet, 522
Get-MsolGroup cmdlet, 530
Get-MsolRoleMember cmdlet, 767
Get-MsolService cmdlet, 539
Get-MsolUser-ReturnDeletedUsers cmdlet, 536
Get-OrganizationRelationship cmdlet, 722–723
global administrators
credentials, 201
installation requiring, 179–180
Global Experience Version Settings, SharePoint Online, 851
gMSA (group Managed Service Account), 199–200
GPOs (Group Policy objects)
automating installation of Office Pro Plus, 76
creating for OneDrive for Business, 931–933
graphical user interface (GUI), Skype for Business Online, 758
group admin role, Yammer, 937–938
group mailboxes, Exchange Online, 531
group Managed Service Account (gMSA), 199–200
Group Policy
configuring document redirection, 919–925
Group Policy Management console, 920
Group Policy objects. see GPOs (Group Policy objects)
GroupMailbox parameter, 539
groups. see also distribution groups
administrative roles in Skype for Business, 766–767
creating distribution groups, 546–548
creating Office 365 groups, 548–550
disabling OneDrive provisioning, 931–932
Exchange Online migration planning, 506
limiting client access based on group membership, 129–131
managing from Admin Center, 543–546
managing security and distribution of, 542–543
piloting OneDrive for Business for small user, 872–873
preparing for Office 365 deployment, 34–35
specifying names during custom install, 190–191
Yammer collaboration, 937
Groups menu, Admin Center, 264, 269
guest accounts
adding guest users, 267
capabilities of, 102
GUI (graphical user interface), Skype for Business Online, 758
H
hard drives. see also drive shipping
SATA or SAS drives for drive shipping, 417
health dashboard, AAD Connect
alerts, 164
export errors, 170
managing enterprise-wide synchronization, 164–170
notifications, 170
sync errors, 169
troubleshooting export errors, 173–175
Health menu, Admin Center, 265, 305
help
Office 365 portal starting page, 263
Organization Profiles, 300–301
HTML, Safe Links menu, 356–357
HTTP, Autodiscovery, 497
HTTPS, Autodiscovery, 497
hybrid
cloud searches. see searches, cloud hybrid
Exchange Online. see Exchange Online hybrid
federated search, 878
OneDrive for Business. see OneDrive for Business
SharePoint Online. see SharePoint Online Hybrid
Skype. see Skype hybrid
Hybrid Configuration Wizard
account selection, 612
Client Access Server roles, 595
edge transport servers and, 619
enabling Central Mail Transport, 702
enabling Exchange federation trust prior to, 609–610
Exchange Online Account credential, 612–613
features selection, 585
free/busy and hybrid authentication, 599
Gathering Configuration Information, 613–614
Hybrid Configuration page, 618–619
Organization FQSN, 622
on-premises Exchange server, 611
rating, 583
Receive Connector Configuration, 620
saved credentials, 613
selection options, 609
Send Connector Configuration, 620–621
Transport Certificate, 621
updating domains, 726
Hybrid Domains page, Hybrid Configuration Wizard, 624
Hybrid Features page, Hybrid Configuration Wizard, 613–616
hybrid migrations
vs. cutover migrations, 555
Exchange Online, 498
Hybrid Configuration Wizard and, 505
message sizes/attachments in, 504–505
Hybrid Picker, SharePoint Online
Configure Hybrid page, 853
configuring App Launcher, 894–897
enabling auditing, 894
I
ICE (Interactive Connectivity Establishment) protocol, Skype for Business Online, 734
identities
authentication, 104
client access policies and rules, 112, 115–116, 120–125
enabling Client Access Policy claim types, 116–118
identity federation (Single Sign-On), 109–111
limiting client access by department, 125–129
limiting client access by group membership, 129–131
limiting client access by IP address, 118–119
overview of, 91
IDFix tool
checking for directory errors, 29
detecting mail-enabled public folders, 508
installing and troubleshooting on-premises directories, 64–71
migration planning, 502
overview of, 63
for public folders, 651
IE (Internet Explorer), 56–58, 458. see also web browsers
IM. see instant messaging
import/importing
copying PSTs to Azure, 408
copying PSTs to hard drive, 419–421
downloading Import/Export tool, 418–419
drive shipping import jobs, 417
network import process, 406–408
preparing PST Import mapping file, 409–410
retention policy tags, 513
using PST import file for assigning PSTs to users, 421–429
Import-RetentionPolicyTags.ps1 script, 513
Import-TransportRuleCollection, 704–706
inactive mailboxes, Exchange Online, 531
InactiveMailboxesOnly parameter, Get-Mailbox cmdlet, 539
Inbound (receive) Connectors, Exchange Online mail flow, 496
inbound synchronization rules, directory synchronization, 147–149
Incidents dashboard, Security & Compliance Center, 347–348
IncludeInactiveMailboxes parameter, Get-Mailbox cmdlet, 540
InfoPath forms, SharePoint, 314, 830
Information Management Policy Settings, Records Management, 841–842
Information Protection Settings, rights management, 696
Information Rights Management (IRM), 851–853
infrastructure, Skype hybrid, 812–813
inheritance, Yammer Admins screen, 945–947
in-policy requests, calendar automation, 684
Install-Module AzureADPreview, OneDrive for Business, 931–933
instant messaging
disabling saving history, 757–758
Skype for Business Online, 730
third-party Skype clients, 753–754
INSUFF_ACCESS_RIGHTS error, troubleshooting mailbox moves, 644
Integrated Apps feature, 285
Integrated Windows Authentication (IWA), 871
internal networks, Yammer, 936
International Spam settings, 708
investigation. see Search & Investigation menus
invitations, Skype for Business Online meetings, 783–785
Invite Guests, Yammer, 960–961
iOS
Skype for Business for mobile clients, 801–802
IP addresses, limiting client access by, 118–119
IP range restrictions, Yammer, 970–971
IRM (Information Rights Management), 851–853
IWA (Integrated Windows Authentication), 871
J
joins
directory synchronization, 155–160
journaling, compliance and reporting via, 720
journaling retention tags, 513
K
keywords
identifying and protecting sensitive data, 381
performing content search, 455
placing hold on eDiscovery content, 466–468
Yammer Monitor Keywords, 969–970
L
labels
in classification of data, 370–372
comparing with retention policies, 440–441
policies, 380
publishing for automatic application, 377–379
publishing for manual application, 374–376
sensitive information types in, 380
LargeItemLimit, mailbox moves, 645
latency, Skype for Business Online, 742–744
launch page, Hybrid Configuration Wizard, 610–611
LDAP (Lightweight Directory Access Protocol), 202–203
libraries, SharePoint, 851
Licenses page, Billing menu, 275–276
licensing
AAD Admin Center, 321
AAD Premium, 170
configuring App Management service, 869–870
configuring message encryption, 695
creating Azure AD user, 520–522
creating cloud identities, 94
cutover migrations, 564
deploying Skype for Business client, 797
Office Pro Plus, 14
OneDrive for Business, 823
RMS (Rights Management Services), 286–287
Skype for Business Online, 749–750
staged migrations, 575
viewing users in Skype for Business Online, 769–770
Yammer, 826
Lightweight Directory Access Protocol (LDAP), 202–203
links
joining linked mailboxes, 211–212
publishing in Office Client, 835
lists, SharePoint, 851
Litigation Hold, inactive mailboxes and, 434
load balancing
AD FS infrastructure, 111
Exchange Online migration planning, 509–510
requirements for Office 365 deployment, 27
location
Skype for Business Online usage by, 795–796
locks, public folders, 668
logon/logoff
comparing UPN with email address, 35–37
scripts, 76
Skype for Business client, 803–807
Yammer user sessions, 963
logs/logging, Hybrid Configuration Wizard, 603
lookups, free/busy, 496–497, 509
Lync client, Skype for Business Online, 751
M
Mac OS X, OneDrive sync client for, 864–866
Exchange hybrid configuration, 19
Exchange Online settings, 285–286
Mail attribute, 212
mail property, mail-enabled user, 686
mail transport
Exchange Online hybrid, 602
Mailbox Replication Service. see MRS (Mailbox Replication Service)
Mailbox Replication Service (MRS or MRS Proxy), 576
mailboxes
archive mailboxes, 429
cleaning up prior to Office 365 deployment, 38–39
completing batch moves, 636–638
configuring with Autodiscover, 496–497
enabling archive for all users, 431–432
enabling archive for individual user, 430–431
Exchange hybrid configuration and, 19
Exchange hybrid deployment and, 221
hiding SupervisoryReview mailbox, 450
migrating to Office 365, 24, 40–42
migration decision process and key concepts, 552–555
migration planning, 503–504, 506
migration types, 551
monitoring batch moves, 634–636
moving to/from Exchange Online, 624
MRS (Mailbox Replication Service), 23
Office 365 deployment requirements, 24–25
proxy address and domains in migration of, 25–26
PST Import Service for migration, 551
recipient types, 25
reviewing supervised content, 445–450
room and equipment mailboxes, 269–270
synchronization order, 160
troubleshooting moves, 642–645
types in Exchange Online, 531–532
mail-enabled security groups, Exchange Online, 532
mail-enabled users (or mailusers)
Exchange Online, 532
in Exchange Online hybrid, 644
mail-enabled vs. mailbox, 506
public folder migration, 508, 677–678
public folder post-migration, 666
staged Exchange migration, 574
mailNickname attribute
in Active Directory, 30
custom installation of AAD Connect, 210, 213
IDFix, 502
MailTips, Hybrid Configuration Wizard, 604
maintenance, planned for service incidents, 484
malware
blocking message attachments, 693–695
configuring filter policies, 706–707
Manage Licenses, apps, 846–847
Manage Social Tags And Notes, SharePoint Online, 835
management pack, System Center Operations Manager, 490
mapping generator, in public folder migration, 656–657
masthead image, Yammer design, 944
MaxConcurrentIncrementalSyncs, 554–555, 590
MaxConcurrentMigrations, 554–555, 590
MBX roles, Exchange Online hybrid configuration, 19
MDM (Mobile Device Management)
configuring, 389
configuring Apple Push Notification service, 393–397
configuring device security policies, 401–404
configuring multifactor authentication, 397–400
Exchange Admin Center and, 309–311
Skype for Business mobile clients using, 753
meetings, Skype for Business Online
broadcast, 786
general user settings, 770
installing Skype Meeting add-in, 801
using Microsoft Bridge, 781–783
Message Center, 305–306, 485–487
messages
sizes in migration planning, 504–505, 601
tracking, 604
messaging services. see Exchange Online; Skype for Business Online
metadata, configuring in SharePoint Online Hybrid, 864–865
metaverse
defined, 147
joins and, 155
multi-forest environments and, 157–158
object properties, 247
projection from connector space to, 148
provision of object from metaverse to connector space, 149–150
user and mailbox objects joining, 159–160
MFA (multifactor authentication)
installing and configuring AD FS, 111
preventing DOS attacks, 807
Microsoft Azure. see Azure
Microsoft Client Discovery Unified Export Tool, 458
Microsoft Federation Gateway, 511
Microsoft Identity Manager (MIM), 77
Microsoft Outlook. see Outlook
Microsoft Remote Connectivity Analyzer. see Remote Connectivity Analyzer
Microsoft Teams
for chat-based collaboration, 287
migration, Exchange Online
bandwidth and firewalls, 509
certificates, service packs, and rollups, 500–501
cutover migration. see cutover migrations, Exchange Online
DLP (Data Loss Prevention), 508
domains and proxy addresses, 505
endpoints, 554
EOP (Exchange Online Protection), 508–509
express migration. see express migration, Exchange Online
hybrid migrations. see hybrid migrations
PST Import Service, 551
recipients, 503
SSL offloading, 502
staged migration. see staged migrations
tenant transport settings, 704
updates, 503
migration, Yammer network, 951–957
MigrationProvisioningPermanentException, 567
MIM (Microsoft Identity Manager), 77
mobility
Azure Active Directory Admin Center, 322
device restrictions in OneDrive, 930
managing mobile clients, 803
mobile phones, 772
policies, Skype for Business Online, 795
Skype for Business mobile clients, 753–754, 801–802
ModeratedBy parameter, distribution groups, 688
moderation, configuring for distribution group, 688
ModerationEnabled parameter, distribution groups, 688
Modern Authentication, 758
modern groups. see unified groups
Monitor Apps, 848
Monitor Keywords, Yammer, 969–970
monitoring
app configuration, 848
Exchange migration batches, 634–636
sensitive data, 969
staged migration process, 572–574
MRS (Mailbox Replication Service)
express migration benefits, 576
migrating mailboxes to Office 365, 23, 40
MRSProxy (Mailbox Replication Service Proxy) traffic
Hybrid Configuration Wizard and, 595, 604
SSL offloading not supported for, 502
troubleshooting mailbox moves, 645
msExchMailboxGuid, 589
msExchRecipientDisplayType property, mail-enabled user, 686
msExchRecipientTypeDetails property, mail-enabled user, 686
msExchRequireAuthToSendTo, 507
MSOnline PowerShell module. see also PowerShell
connecting to MSOnline, 100
displaying cloud users, 101
group-based licensing, 85
identifying guest accounts, 102–103
msRTCSIP-* attributes, SIP addresses when using SBO, 736–737
multifactor authentication, MFA (multifactor authentication)
multi-forest environments, 37, 194
MX (mail exchange) records
DNS migration planning, 511
mail routing and, 24
mail transport planning, 601
My Site Settings, User Profiles page, 834–835, 926–927
My Sites, SharePoint Online, 865–866
My Sites URL, OneDrive for Business, 873–874
N
names
invalid characters, 31
synchronizing users to Azure, 28–31
NAT (network address translation), 510, 734–735
Navigation pane, Yammer, 940
NDRs (non-delivery reports), 711
NetMon tool, troubleshooting connectivity, 60–63
network address translation (NAT), 510, 734–735
Network Name field, Yammer network, 943
Network Performance Assessment, 743–744
Network section, Yammer
Design screen, 944
External Networks Settings screen, 948–951
Network Migration screen, 951–957
NetworkAssessmentTool.exe, troubleshooting connectivity, 745–747
networks/networking. see also connectivity
configuration requirements for Office 365 deployment, 27
device restrictions in OneDrive, 929
networks/networking, Exchange Online
hybrid, 602
networks/networking, Skype for Business Online
optimizing connectivity, 744–745
overview of, 738
planning connectivity, 743
troubleshooting connectivity, 745–748
New Experience user interface, 850–851
New Migration Batch Wizard, 557–562, 567–572
New Network Checklist, Yammer Success page, 942
New User dialog box, 93
New-AcceptedDomain cmdlet, 726
New-Mailbox cmdlet, 534
New-MalwareFilterPolicy cmdlet, 694
New-MoveRequest cmdlet, 645
New-RemoteMailbox cmdlet, 725
Newsfeeds, integrating Yammer into SharePoint Online, 826
New-TransportRule cmdlet, 693, 704–705
NewUserPrincipalName parameter, mailboxes, 538
next-generation sync client, accessing OneDrive sync client for Windows, 859–864
No Such Request Exists, troubleshooting public folder migration, 669
non-delivery reports (NDRs), 711
non-English bulk updates, Yammer, 966
Non-Owner Mailbox Access Report, 712
notifications
AAD Admin Center, 322
AAD Connect health dashboard, 170
Billing Notifications page, 276
for meetings in Microsoft Bridge, 782
Office 365 portal, 262
OneDrive for Business Admin Center, 316
O
OAuth (Open Authorization)
free/busy and hybrid configuration, 599
manual configuration, 600
server-to-server authentication, 871
troubleshooting, 600
objects
AAD Connect support for, 188
in Azure AD, 519
directory structure and, 133
distinguished names, 154
managing groups, 525–530, 542–550
managing users, 519–524, 539–541
metaverse object properties, 247
Metaverse Search option, 172–173
multi-forest environments and, 156–158
object writeback, 507
user and mailbox objects joining metaverse, 159–160
viewing object details, 169
ObjectSID/msExchMasterAccountSID, user matching, 210–211
offboarding, Exchange Online hybrid, 641–642
Office 365 Education
additional Office 365 plans, 13
viewing/selecting tenants for Office 365, 10–13
Office 365 groups. see also groups
and anonymous senders, 687–688
Exchange Online migration planning, 507
overview of, 288
as unified (modern) groups, 532
Writeback Sender Authentication, 507
Office 365 Identity for Yammer, 974–979, 982–984
Office 365 Nonprofit, 13
Office 365 portal
Bing Places For Business, 302
Calendar service, 280
data location widget, 301
Data Migration page, 269
Directory Synchronization settings, 282–283
To-Do preview settings, 293–294
Domains settings, 296
Exchange Admin Center, 307–311
groups, 288
Groups menu, 269
Health menu, 305
information protection, 286–287
installing Office Pro Plus software, 72–75
Integrated Apps feature, 285
Microsoft Teams, 287
multifactor authentication service, 279–280
Office Store, 289
OneDrive for Business Admin Center, 315–316
Organization Profiles, 296–301
Partner Relationships page, 302
PowerApps Admin Center, 317
Reports settings, 290
Security & Compliance Center, 318–320
Security & Privacy settings, 294–296
service admin centers, 306–307
Services & Add-Ins page of Settings menu, 277–279
Settings menu, 277
SharePoint Admin Center, 313–315
Sites settings, 290
Skype For Business Admin Center, 311–313
Skype For Business settings, 291
software download settings, 289
Sway, 293
viewing subscription and licensing information, 15
Office 365 Worldwide, 612
Office Deployment Tool, 801
Office Online
tenant names not visible in, 9
Office Pro Plus
automating installation, 75–76
tenant names not visible in, 9
upgrades, 37
Office ProPlus
deploying Skype for Business client, 798–801
media, 263
Office Store, 289
Office versions, upgrades and updates and, 37–38
Offline Storage Folder (OST), 556
onboarding, Exchange Online hybrid
completing user within batch, 638–639
migrating to Exchange Online, 628–629
OneDrive for Business
accessing sync client for Mac OS X, 864–866
accessing sync client for Windows, 859–864
data labels, 370
deploying with Group Policy, 916–925
disabling provisioning, 931–932
granting access to secondary administrator, 925–927
permissions, 463
piloting for small group, 872–873
redirecting to Office 365, 873–877
restricting devices that synchronize content, 927–930
SharePoint Online and, 823, 858–859, 871–878
show/hide Sync button, 850
site configuration, 872
site permissions, 872
site prerequisites, 871
sync client capacity limits, 821
user experience interface, 850
viewing tenant name in Office 365, 7–8
online hybrid public folder deployment, 649–650
Online Meetings, Skype for Business Online, 312, 783–786
online services, Microsoft options, 258
on-premises
Exchange Online account, 612–613
hybrid public folder deployment, 646–649
post-migration public folders, 666–667
Skype for Business Online, 732–733, 775, 811–816
Open Authorization. see OAuth (Open Authorization)
Org Chart, Yammer, 944
Organization Management role, 339
Organization Profiles
help desk information, 300–301
organization information, 297
organizational units. see OUs (organizational units)
organizations
FQDN (fully qualified domain names), 622
Skype for Business Online policy settings, 757–758
Skype for Business Online user options, 771–773
OST (Offline Storage Folder), 556
.OST (Outlook data file), 565
OUs (organizational units)
precedence of synchronization rules, 242
readiness for Office 365 deployment, 31–33
outbound (send) connectors, 496
outbound synchronization rules, 149
Outlook
reviewing supervised content from Outlook desktop, 445–450
Outlook Anywhere
cutover migration, 556
online hybrid public folders, 650
on-premises hybrid public folders, 646
public folder migration, 650, 658–659
staged migration requirements, 566, 571
Outlook data file (.OST), 565
Outlook Web Access, 604
Outlook Web App
reviewing supervised content, 445
Skype for Business Online client, 751–752
out-of-policy requests, calendar automation, 684
owner access, OneDrive, 925–927
P
parallel batches, express migration, 578
parent network, Yammer migration, 951–952, 954–955
partner of record, subscriptions and, 274–275
Partner Relationships page, Settings menu, 302
pass-through authentication, 193–195
Password Administrator role, 17–18
password synchronization
from Active Directory to Azure Active Directory, 191–192
custom installation of AAD Connect, 226–228
pass-through authentication as alternative to, 193
scope, 192
Password Writeback
configuring password reset policy, 231–235
overview of, 228
requirements, 228
passwords
AAD Admin Center, 322
authentication of identities, 104–106
configuring reset policy, 231–235
connecting to Exchange Online, 554
cutover migrations, 556
directory synchronization and, 499
encrypting, 192
logging on to Skype for Business client, 805–806
recovering deleted user mailbox, 536–537
resetting, 105
Security & Privacy settings, 294–296
staged migrations, 567, 568–569
Yammer Security Settings for policies, 972
PAW (Protocol Agnostic Workflow), 639–640
PBX (Public Branch Exchange), 775
peer-to-peer, Skype for Business Online
communications, 731
network flow, 749
People area, User Profiles page in SharePoint Online, 831–833
performance
assessing connectivity, 743–744
permissions
assigning for administrators, 45–47
assigning for eDiscovery, 462
backing up, 597
Business Connectivity Services and, 836–837
configuring App Management service, 869–870
configuring hybrid taxonomy, 887
cutover migrations, 556
disabling OneDrive provisioning, 931–932
Exchange Admin Center, 308
Exchange Online cross-premises access and, 596–597
Exchange Online migration planning, 507
managing user profiles, 833
modifying for shared files/folders, 911
OneDrive for Business, 463, 872
overview of, 336
password synchronization, 192–193
on-premises hybrid public folders, 646
public folder migration, 650–651
Security & Compliance Center, 319
security roles and capabilities, 336–340
service accounts, 203
SQL administrative (SQL SA), 189
staged migrations, 566
Phone Numbers section, Skype for Business Online, 775
piloting Skype for Business Online, 796–797
Plan for Change, service health notifications, 486–487
planned maintenance, for service incidents, 484
platforms, Skype for Business, 732
policies
access. see access/access control
blocking message attachments, 695
challenges of using PowerShell, 790
configuring device security policies, 397–400
configuring password reset policy, 231–235
default alert policies, 334
enabling Client Access Policy claim types, 116–118
Exchange Online hybrid planning for email address, 597–598
label, 380
limiting client access based by IP address, 118–119
limiting client access by department, 125–129
limiting client access by group membership, 129–131
managing alerts, 332
managing user profiles, 833
Skype for Business Online, 754–758
portal. see Office 365 portal
post-migration configuration, 651, 665–667
PowerApps, Admin Center, 317
PowerShell. see Windows PowerShell
precedence, of synchronization rules, 242–250
predicates, inspecting message attachments, 700–701
Premium license, Azure Active Directory, 170
presence indicators, Skype for Business Online
overview of, 730
user options for organization, 772
working with SMTP, UPN and SIP, 737
presentations, Sway for content creation, 293
Preservation Lock, SEC Rule 17a-4 compliance, 437–439
Prevent or Fix Issues, service health notifications, 487
privileges, administrator, 45–47, 945–947
Productivity App Discovery, 478–480
products, setup options, 302
Profile Fields, Yammer, 968–969
profiles
cutover migration, 564
express migrations, 576
managing organization profiles, 833
managing user profiles, 830–835
organization profiles. see Organization Profiles
user profiles. see User Profiles page, SharePoint Online
projection
from connector space to metaverse, 148, 152
defined, 147
promoted sites, configuring, 835
properties
mail-enabled user, 686
Protocol Agnostic Workflow (PAW), 639–640
protocols, Skype for Business Online
provision, of object from metaverse to connector space, 149–150
provisioning, disabling in OneDrive for Business, 931–932
proxies
Exchange Online migration planning, 510
SBO network requirements, 743–744
Skype for Business Online and, 743–744
troubleshooting issues during cutover, 810
proxy addresses
adding to user mailbox, 683–684
data uniqueness and, 135
duplication in synchronization process, 136–137
Exchange Online hybrid deployment, 220
Exchange Online hybrid planning, 597–598
Exchange Online migration planning, 505
notification of duplication, 138–140
troubleshooting export errors, 173–175
requirements for Office 365 deployment, 27–28
proxyAddresses attribute, SIP addresses when using SBO, 735–736
PsPing, 743
PSRemoting, PowerShell, 198–199
PST files
copying to Azure, 408
copying to hard drive, 419–421
downloading PST import tool, 418–419
preparing for import, 406
preparing PST Import mapping file, 409–410
using PST import file for assigning PSTs to users, 421–429
PSTN (public switched telephone network)
extending Skype for Business Online, 732
Skype for Business Online on-premises, 775
Skype for Business Online Voice section, 774–775
usage details in SBO Reports section, 788
Public Branch Exchange (PBX), 775
public folder migration
Exchange Online 2007 or 2010, 651–660
Exchange Online 2013 or 2016, 660–665
planning, 508
post-migration configuration, 665–667
public folders
Exchange Admin Center, 309
Exchange Online, 531
Office 365 deployment requirements, 26
post-migration configuration, 665–667
retention policies, 434
public switched telephone network. see PSTN (public switched telephone network)
public websites, Resources menu, 272–274
PublicFolder parameter, 539
Publish Links to Office Client Applications, 835
publishing labels
Purchase Apps link, SharePoint Online, 845–846
Purchase Services page, Billing menu, 276
Push Notification Service, 772
Push Notification service, 393–397
Q
quarantine
enabling, 711
Security & Compliance Center, 357
Quarantine Message, 708
R
read-only domain controllers (RODCs), 499
Ready for Update page, Hybrid Configuration Wizard, 622–623
Ready to configure page, AAD Connect, 185
Receive Connector Configuration page, Hybrid Configuration Wizard, 620
Receive Connectors, Exchange on-premises, 496
Receive-As permission
cutover migrations, 556
staged migrations, 566
recipients
automatic calendar processing, 684–686
cutover migrations, 557
Exchange Online concept of, 495
mailbox recipient types, 25
mail-enabled users, 686
migration planning, 503
safe, 221
staged migrations, 567
Record Conversations and Meetings, Skype for Business Online settings, 770
records
security roles and capabilities, 337
Records Center, configuring records management, 839–842
Records Management, SharePoint Online, 838–843
Recycle Bin, 434
redirection
configuring OneDrive documents for, 919–925
from OneDrive for Business to Office 365, 873–877
RegEx (regular expressions), client access claim rules, 120–125
registration, domain, 555, 565
regular mailboxes, 531
relationships, organization, 721–724
release preferences, Organization Profiles, 297–298
Remote Connectivity Analyzer
cutover migrations, 564
defined, 514
Skype for Business Online, 786
troubleshooting cutover migration, 559–563
remote mailboxes
provisioning, 725
remote Office 365 Message Encryption rule, 699–700
Remove - Mailbox cmdlet, 535
Remove-DynamicDistributionGroup, 550
Remove-MsolUser cmdlet, 519–520, 524
Reports section, Skype for Business Online, 788–789
reports/reporting
Admin Center, 303
available for download, 320
eDiscovery and holds, 712
journaling, 720
managing scheduled reports, 360–361
Reports For Download dashboard, 361–362
Reports menu, 265
retention tags and policies, 719–720
reviewing supervision reports, 451–452
Security & Compliance Center, 304–305, 358–360
settings in Admin Center, 290
Skype For Business Admin Center, 312–313
tools for, 712
troubleshooting cutover Exchange migration, 561–563
RequestInPolicy, calendar automation, 685–686
RequestOutOfPolicy, calendar automation, 685–686
RequireSenderAuthenticationEnabled parameter, security and distribution groups, 529
resource mailboxes, 534
ResourceDelegates, calendar automation, 685–686
resources
Azure Active Directory. see AAD (Azure Active Directory)
Exchange Online. see Exchange Online
health-based throttling, 591
overview of resource types, 515–517
Resources menu
Admin Center, 264
public websites section, 272–274
room and equipment mailboxes, 269–270
Restore-MsolUser cmdlet, 538–539
ResultsAnalyzer.exe, 746
retention policies
comparing with labels, 440–441
sensitive information types in, 380
Reviewer role, security roles and capabilities, 339
rights
troubleshooting mailbox moves in Exchange Online hybrid, 644
RMS (Rights Management Services)
Azure Information Protection, 286–287
configuring message encryption, 695–698
security roles and capabilities, 337
RMSOnlineKeySharingLocation, 697
RODCs (read-only domain controllers), 499
role groups, creating in Azure AD, 525–528
roles
admin roles in service health, 481–483
administrative roles in Skype for Business, 766–767
assigning eDiscovery permissions, 462
folder permissions and, 682–683
on-premises hybrid public folders, 646
security roles and capabilities, 336–340
Web Application Proxy server role, 195–199
Yammer administrative rights and, 937–938
rollout, deploying Skype for Business Online, 808
rollups, Exchange Online migration planning, 501
room lists, as type of distribution group, 533
routing
post-migration public folders, 666
S
Safe Attachments menu, 353–355
SamAccountName attribute, 30–31, 213
Sarbanes-Oxley Act, 432
SAS (shared access signatures)
copying PSTs to Azure, 408
for drive shipping, 417
storage blob, 405
SATA drives, for drive shipping, 417
SBO. see Skype for Business Online
SCCM (System Center Configuration Manager), 75–76
SCL (spam confidence level)., 708
scope, malware filter setting, 706–707
SCP (service connection point)
autodiscover lookup, 496
cutover migration, 564
staged migration, 575
scripts, public folder migration, 651–652, 661
SDKs (software development kits), 732
Search & Investigation menus
assigning permissions, 462
closing eDiscovery case, 478
creating eDiscovery case and adding members to, 463–465
creating/running content search, 468–469
exporting results of content search, 469–472
exporting/downloading results of content search, 456–459
overview of, 453
performing content search, 453–456
placing hold on eDiscovery content, 466–468
Productivity App Discovery, 478–480
reviewing case in Advanced eDiscovery, 473–477
Search Administration, SharePoint Online, 843–844
searches. see also eDiscovery
configure on-premises results, 884–886
creating/running content search, 468–469
exporting results of content search, 469–472
hybrid options, 826
metaverse Search option, 171–173
from Office 365 portal starting page, 263
security roles and capabilities, 337
SharePoint Admin Center, 314
SharePoint Online enterprise, 826
SharePoint Online Hybrid, 857, 859–861
supported in two-way SharePoint topology, 21
searches, cloud hybrid
configure Office 365 for SharePoint Online, 879
connect cloud Search service app to Office 365, 880–881
create cloud Search service application, 879–880
create content source, 881–884
on-premises to display results, 884–886
SEC (Security Exchange Commission), 433, 437–439
Secure Sockets Layer. see SSL (Secure Sockets Layer)
Secure Store management page, SharePoint Online, 844
security
alerts, 333
configuring password reset policy, 232–233
cutover migration requirements, 556
Microsoft Bridge settings, 782–783
roles and capabilities, 336–340
Security & Privacy settings, 294–296
working with SMTP, UPN and SIP in SBO, 738
Security & Compliance Center
alert policies, 334
auditing sharing activities, 849
core functions, 369
data classification. see classification of data
data governance. see data governance
data loss prevention. see DLP (Data Loss Prevention)
DKIM (DomainKeys Identified Mail), 352–353
managing scheduled reports, 360–361
permissions, 336
Quarantine, 357
Reports For Download dashboard, 361–362
retention policies, 719
Safe Attachments menu, 353–355
search and investigation. see Search & Investigation menus
security roles and capabilities, 336–340
Service Assurance dashboard, 362–363
Service Assurance settings, 366–367
threat management, 340
Threat Management Dashboard, 340–343
viewing DLP policies, 718
Security Administrator role, 337, 339
Security Exchange Commission (SEC), 433, 437–439
security groups, creating in Azure AD, 529–530
security policies
blocking Exchange ActiveSync for unsupported devices, 403–404
configuring device security policies, 397–400
organization-wide device access settings, 401–402
Security Reader role, 337, 340
Select Hours Of Operation page, Skype for Business Online, 776–777
Send Connector Configuration page, Hybrid Configuration Wizard, 620–621
Send Connectors, Exchange on-premises, 496
Send To connection, records management, 842–843
Send-As permissions
granting, 681
post-migration public folders, 667
public folder migration, 654–655, 662
senders
managing delivery restrictions, 687–688
safe, 221
Send-On-Behalf permissions
granting, 681
post-migration public folders, 667
public folder migration, 655, 662–663
sensitive information/data
adding templates to custom policy, 378
identifying and protecting, 381
monitoring, 969
Server Resource Quota, Site Collections in SharePoint Online, 829–830
servers
edge transport, 619
Exchange infrastructure requirements, 23
express migration requirements, 577
federation requirements, 195
Office 365 deployment requirements, 26–27
selecting for Hybrid Configuration Wizard, 611
server-to-server authentication, SharePoint Online Hybrid, 871
service accounts
creating, 182
permissions, 203
service admin centers. see Admin Centers
Service Assurance
security roles and capabilities, 338, 340
Service Assurance User role, 340
service connection point. see SCP (service connection point)
service health
admin mobile app tools, 489
Health menu options, 305
status page, 488
summary, 491
System Center Operations Manager management pack, 490
service locator records. see SRV (service locator) records
service packs, migration planning, 501
services
moving to Office 365, 42
Security & Compliance Center, 320
SharePoint Online capacity limits, 820–822
troubleshooting issues during cutover, 809
Services & Add-Ins page
Azure multifactor authentication service, 279–280
Calendar service, 280
Directory Synchronization settings, 282–283
Services Administrator role, 17–18
Session Details (preview), SBO Reports section, 788
Session Initiation Protocol. see SIP (Session Initiation Protocol)
Session Traversal Utilities for NAT (STUN) protocol, 734–735, 814
sessions, Yammer Account Activity, 963
Set Metadata Store Permissions button, Business Connectivity Services, 836
Set-DynamicDistributionGroup cmdlet, 550
Set-HostedContentFilterPolicy cmdlet, 711
Set-Mailbox cmdlet, 539
Set-MalwareFilterPolicy cmdlet, 694
Set-MsolUser cmdlet, 519–520, 524
Set-MsolUserLicense cmdlet, 87
Set-OrganizationConfig cmdlet, 669
Set-OrganizationRelationship cmdlet, 500
Settings icon, Office 365 portal, 262–263
Settings menu
Azure Information Protection, 286–287
Azure multifactor authentication service, 279–280
Bing Places For Business, 302
Calendar service, 280
data location widget, 301
Directory Synchronization, 282–283
Integrated Apps feature, 285
Microsoft Teams, 287
Office 365 Groups, 288
Office Store, 289
Organization Profiles, 296–301
overview of, 277
Partner Relationships page, 302
Reports, 290
Services & Add-Ins page, 277–279
SharePoint Online options, 849–853
Sites, 290
Skype For Business, 291
Software Download, 289
Sway, 293
setup, Office 365
activating Office Pro Plus suite, 76–77
assigning administrators, 45–47
automating software installation, 75–76
configuring federation, 82
configuring firewalls, 55
configuring proxy servers, 55–59
configuring public DNS records, 48–55
ExpressRoute connectivity, 63
installing Office Pro Plus software, 72–75
monitoring informational events, 78–81
setting up subscription, 43–45
synchronizing users to AAD, 77–78
troubleshooting connectivity, 59–63
Setup menu
Admin Center, 265
Data Migration, 303
overview of, 302
Products page, 302
Share button, sharing documents/folders with OneDrive, 911
shared access signatures. see SAS (shared access signatures)
shared domains, Hybrid Configuration Wizard, 615–616
shared mailboxes
Exchange Online, 531
Groups menu options, 269
licenses not required for, 534
SharePoint
Office 365 licensing plans, 10
SharePoint Foundation Subscription Settings service, 870
SharePoint Online
Admin Center, 517
Business Connectivity Services, 835–837
data labels, 370
hybrid mode, 827
Infopath page, 830
managing, 828
overview of, 819
Search Administration, 843–844
Secure Store, 844
Site Collections page, 828–830
viewing tenant name in Office 365, 7
SharePoint Online Hybrid
App Management service, 869–870
business-to-business extranet, 897–899
defined, 827
determining if architecture is right for you, 863
managed metadata service, 864–865
OneDrive for Business and hybrid sites, 871–877
one-way inbound topology, 20–21
one-way outbound topology, 20
searches. see searches, SharePoint Online Hybrid
server-to-server authentication, 871
SharePoint Foundation Subscription settings, 870
two-way topology, 21
SharePoint Store apps
Purchase Apps link to, 845–846
sharing
documents/folders, 911
OneDrive for Business and, 315, 930–931
Security & Privacy settings, 296
SharePoint Online and, 314, 848–849
Show Or Hide Options, SharePoint Online, 849
signatures, DomainKeys Identified Mail, 352–353
sign-in. see also logon/logoff
AD FS and, 111
authentication and, 91
comparing UPN with email address, 35–37
viewing user sign-in status, 96
sign-in address, Skype for Business client, 803, 805–806
SIP (Session Initiation Protocol)
deploying using cutover, 808–809
logging on to Skype for Business client, 803–804
matching SMTP and UPN with, 737–738, 807
Skype for Business Online, 733–734
Skype hybrid connectivity requirements, 814
troubleshooting federation, 773–774
Site Collection Administrator, 925–927
Site Collection, SharePoint Online
store management, 850
site mailboxes, Exchange Online, 531
Site Pages, SharePoint Online, 851
Site Settings, 841–842, 912–914
sites
performing site operations from Resources menu, 270–272
SharePoint Admin Center, 314
Sites settings page, 290
survey, 743
SKUs (stock-keeping units), 274, 289
Skype for Business Online
Admin Center, 311–313, 517, 767–768
differences from consumer Skype, 733
differences with on-premises Skype, 732–733
External Communications, 815
licensing and client types, 749–754
licensing plans, 10
Network Assessment Tool, 745–747, 787
settings, 291
understanding, 729
viewing tenant name in Office 365, 8
Skype for Business Online client
basic and full client, 751
features that do not work with, 798
for many different platforms, 732
policies, 755
Skype for Business Online, configuring
Broadcast Meetings, 786
Dial-In Users, 783
inside Windows PowerShell, 789–796
Skype for Business Online, deploying
administering, 811
integration with on-premises Skype, 811–816
managing clients, 803
rollout deployment, 808
Skype for Business client, 797–801
testing Skype for Business Online tenant, 810–811
Skype for Business Online, network requirements
optimizing connectivity, 744–745
overview of, 738
planning connectivity, 743
troubleshooting connectivity, 745–748
Skype hybrid
connectivity requirements, 813
DNS settings, 813
federation configuration, 814
online or hybrid user account limitations, 814
overview of, 812
required infrastructure, 812–813
Skype Meeting add-in, 752–753, 801
Skype on-premises, 732–733, 796
smart cards, 111
SMTP
EmailAddresses attribute, 684
logging on to Skype for Business client, 804–805
matching SIP and UPN with SMTP address, 737–738, 807
social collaboration, SharePoint Online
enterprise settings, 851
social tags/note settings, 835
SOCKS (Socket Secure) proxy, 744
SoftDeleted state, mailboxes, 535–537
SoftDeletedMailbox parameter, Get-Mailbox cmdlet, 539
software
automating installation of Office Pro Plus software, 75–76
download settings, 289
installing Office ProPlus media, 263
installing Office ProPlus software, 72–75
software development kits (SDKs), 732
SourceAnchor attribute
changing, 216
custom installation of AAD Connect, 205–208, 215–218
spam
outbound filtering, 709
spam confidence level (SCL)., 708
SPF record
migration planning, 511
staged migration, 575
SQL Server Express
creating SQL database files, 185
custom installation of AAD Connect, 188–189
SQL Server (full version), 188–189
SRV (service locator) records
Autodiscover lookup, 497
Skype for Business Online requirements, 738
troubleshooting cutover issues, 810
troubleshooting federation, 774
SSL (Secure Sockets Layer)
certificates, 195
express migration requirements, 577
migration planning, 502
staged migrations
decision process and key concepts, 552–555
decommissioning on premises, 575–576
express migrations vs., 576
monitoring process of, 572–574
requirements, 566
using Exchange Admin Center, 567–572
staging mode, custom installation of AAD Connect, 254
stale users, preparing user accounts for Office 365 deployment, 34
status page, Office 365 Service Health, 488
Stay Informed, service health notifications, 487
stock-keeping units (SKUs), 274, 289
storage
files for meeting invites, 785
OneDrive for Business Admin Center, 315
Streaming Video Service option, SharePoint Online, 851
STUN (Session Traversal Utilities for NAT) protocol, 734–735, 814
subscriptions
SharePoint Online capacity limits, 820–821
troubleshooting public folder migration, 668
Subscriptions page, Billing menu, 274
subsidiary networks, Yammer network migration, 951–952
subsites, SharePoint Online capacity limits, 821
supervision policies
reviewing supervised content, 445–450
reviewing supervision reports, 451–452
Supervisory Review role
hiding Supervisory Review mailbox, 450
Outlook Web App, 445
security roles and capabilities, 338, 340
Support menu, Admin Center, 264, 276–277
Sway, for content creation, 293
sync clients
capacity of, 821
multiplatform sync client in OneDrive for Business, 315
OneDrive for Business for Mac OS X, 908
OneDrive for Business for Windows, 903–904
for SharePoint, 851
synchronization. see also directory synchronization; password synchronization
determining when to synchronize, 250–251
examining sync errors with AAD Connect health dashboard, 169
examining sync errors with health dashboard, 166
express installation of AAD Connect, 184–185
filtering rules and, 220
global address list (GalSync), 212
Hybrid Configuration Wizard, 586–587
OneDrive for Business, 850
precedence of synchronization rules, 242–250
restricting devices that synchronize OneDrive content, 927–930
SharePoint Online capacity limits, 821
Sync Client for SharePoint, 851
of user profiles, 869
of users during Office 365 migration, 42
of users to Azure Active Directory, 77–78
Synchronization Rules Editor, AAD Connect, 167
synchronized identities
identifying cloud users vs. synchronized users, 97–98
Office 365 Identity for Yammer, 983
viewing user sign-in status, 96
syntax errors, validation check, 424
System Center Configuration Manager (SCCM), 75–76
System Center Operations Manager, management pack for Office 365, 490
T
targetAddress property, mail-enabled user, 686
TargetApplicationUri, organization relationship, 723
TargetAutodiscoverEpr, organization relationship, 723–724
TargetAutodiscoverEpr parameter, Autodiscover, 500
TargetOwlURL, organization relationship, 724
TargetSharingEpr, organization relationship, 724
TargetSharingEpr parameter, Autodiscover, 500
taxonomy, SharePoint Online Hybrid
configure with Hybrid Picker, 888–892
copy on-premises taxonomy, 887–888
defined, 857
overview of, 861
update term store permissions, 887
TCP
connectivity requirements, 814
express migration requirements, 577
Skype for Business requirements, 741–742
teams
telemetry, Hybrid Configuration Wizard and, 603
telephony, Skype for Business Online, 774–775
templates, creating transport rules, 690–693
Temporary 7-Day Enforcement, identity enforcement, 977–978
tenants
configuring password reset policy, 231–235
delegating access to, 16
proxy address matching, 505
reviewing/locating errors, 140–144
viewing tenant name in Exchange Online, 5–6
viewing tenant name in Office Online, 9
viewing tenant name in Office Pro Plus, 9
viewing tenant name in OneDrive for Business, 7–8
viewing tenant name in SharePoint Online, 7
viewing tenant name in Skype for Business, 8
Term Store, SharePoint Online, 837–838, 887
testing
during cutover, 810
latency, 743
tenants, 810
themes, Organization Profiles, 298–299
third-party apps
Integrated Apps feature, 285
Microsoft Bridge, 781
Yammer, 944
threats
DKIM (DomainKeys Identified Mail), 352–353
managing, 340
Quarantine, 357
Safe Attachments menu, 353–355
Security & Compliance Center, 319
Threat Management Dashboard, 340–343
throttling, migration performance and, 590–591
Timer service account, SharePoint Online Hybrid, 887
TLS (Transport Layer Security), 744
To-Do, preview settings, 293–294
Tools page, Skype for Business Online, 786–788
topologies
public folder, 646
SharePoint Online Hybrid, 20–21
traces
AD FS debug log, 123
troubleshooting network connectivity, 59–63
transport certificate, Hybrid Configuration Wizard, 621, 624
Transport Layer Security (TLS), 744
transport management
Central Mail Transport, 701–702
DKIM, 706
inspecting message attachments, 700–701
migration of collections, 704–706
migration of settings, 704
transport rules
are not migrated, 513
components of, 690
create message encryption, 698–700
inspecting message attachments, 700–701
migration of collections, 704–706
require approval for messages sent to user, 688–689
Traversal Using Relays around NAT (TURN) protocol, Skype for Business Online, 735
AAD Connect installation, 202
cutover issues, 809
Exchange 2013/2016 public folder migration, 665
OAuth configuration, 600
OneDrive for Business, 932–933
organization relationships, 723
on-premises directories, 64–71
public folder migration, 667–670
Skype for Business Online administrator sign-in, 786
Skype for Business Online connectivity, 745–749
Skype for Business Online deployment, 809–810
Yammer network migration, 957
Trust Documents, Security & Compliance Center, 364–365
trusted host locations, in My Site Settings, 835
Trusted Publishing Domain, Rights Management Services, 698
TTL (time-to-live), cutover deployment, 809
TURN (Traversal Using Relays around NAT) protocol, Skype for Business Online, 735
TXT record, Hybrid Configuration Wizard, 616–618
U
UAT (User Acceptance Testing) plan, Skype for Business Online tenant, 811
UDP
Skype hybrid connectivity requirements, 814
unified groups
as distribution lists, 530
Exchange Online, 532
Unified Messaging, 556
unique identity, for users, 208–209
unplanned downtime, service incidents and, 485
updates
of domains in hybrid configuration, 726
Hybrid Configuration Wizard, 622–624
migration planning, 503
upgrades, deploying Office 365 and, 37–38
upgrades, Office 365 deployment, 37–38
UPN (User Principal Name)
comparing with email address, 35–37
confirming AD UPN suffixes, 182–184
logging on to Skype for Business client, 804–805
matching SIP and SMTP with, 737–738, 807
troubleshooting AAD Connect installation, 202
using IDFix for invalid characters in, 502
URLs
Autodiscover lookup using cached, 497
viewing tenant name in OneDrive for Business, 7–8
viewing tenant name in SharePoint Online, 7
viewing tenant name in Skype for Business, 8
Usage location, Skype for Business Online, 795–796
Usage Policy settings, Yammer, 941, 947–948
use cases, testing Skype for Business Online tenant, 810
User Acceptance Testing (UAT) plan, Skype for Business Online tenant, 811
user accounts. see also accounts
preparing for Office 365 deployment, 34–35
Skype hybrid limitations, 814
user authentication
access policies, 112
client access claim rules and regular expressions, 120–125
configuring access policies, 115–116
enabling Client Access Policy claim types, 116–118
identity federation (Single Sign-On), 109–111
limiting client access based on group membership, 129–131
limiting client access based on IP address or department, 118–119
limiting client access by department, 125–129
overview of, 104
user experience interface
Admin Center, 851
OneDrive for Business, 850
SharePoint lists and libraries, 851
user ID
creating, 44
User Management Administrator role, 16–18
User Principal Name. see UPN (User Principal Name)
User Profiles
access for secondary administrator in OneDrive, 926–927
configuring in SharePoint Online Hybrid, 866–869
SharePoint Admin Center, 314
User Profiles page, SharePoint Online
My Site Settings area, 834–835
user throttling, migration performance and, 590
UserPrincipalName attribute
custom installation of AAD Connect, 205–208
duplication in synchronization process, 138
logging on to Skype for Business client, 804–805
matching SIP and SMTP with, 737–738, 807
pass-through authentication and, 194
technical notification of duplication, 138–140
using IDFix for invalid characters in, 502
users
AAD, 519
admin roles in service health, 481–483
estimating number of public folders, 657
limiting scope of eDiscovery searches, 464–465
locating in Office 365 GAL, 164
mail-enabled. see mail-enabled users
managing in Azure Active Directory, 519–524
Office 365 deployment requirements, 28–31
onboarding in Exchange Online hybrid, 630–631, 638–640
preparedness for Office 365 deployment, 35
require approval for messages sent to, 688–689
restricting delivery for, 687–688
SharePoint Online capacity limits, 821
syncing users, 42
troubleshooting username, 202
Yammer, 937. see also Yammer, user administration
Users Blocked report, Skype for Business Online, 788
Users menu
contacts, 267
Guest Users, 267
Users page, Office 365, 98–100
Users section, Skype for Business Online
dial-in conferencing, 771
external communications, 770
Users section, Yammer Success page, 941
V
Verified Admin, Yammer, 937–938, 945–947
Version History, document, 912–914
versions
Active Directory, 499
Exchange Server, 598
Global Experience Version Settings, 851
Hybrid Configuration Wizard and, 603
preparing on-premises environment, 501–502
public folders, 646
SharePoint Online capacity limits, 821
Skype for Business Online on-premises support, 732
video
configuring Skype for Business Online, 795
Skype for Business Online user settings, 769–770
Skype mobile client bandwidth, 753–754
streaming, 851
virtual private network (VPN) users, 742
voice mail, Exchange Online hybrid, 221
Voice over IP (VoIP) peer-to-peer communication, 731
voice policies, Skype for Business Online, 755, 756
Voice section, Skype for Business Online, 774–775
VoIP (Voice over IP) peer-to-peer communication, 731
VPN (virtual private network) users, 742
W
WAP, AD FS infrastructure, 110
warnings
configuring documents redirection in OneDrive, 924
directory synchronization, 80–81
Web Application Proxy server role, 195–199
web browsers
cutover migration using EAC, 556–559
Export download tool support, 458
managing migrations using EAC, 552–553
setting up proxy servers and, 56–58
Web conferencing, Skype for Business Online, 731
web services, Exchange Web Services, 505
websites
performing site operations from Resources menu, 270–272
Welcome Message tab, Yammer Directory Integration, 967
whitelisting, spam filter settings, 708
Wi-Fi networks, connectivity planning, 743
Windows OSs
accessing OneDrive sync client for, 859–864
setting up proxy servers and, 56–58
Windows Phone, Cortana service, 281–282
Windows PowerShell
activating Rights Management Services, 697–698
administrative roles in Skype for Business, 766–767
automating repetitive tasks, 309–311
batch migrations, 638
blocking message attachments, 694
building Admin Center, 516–517
configuring OAuth, 600
connecting to Exchange Online, 530–531, 552–553
creating Azure AD users, 521–522
creating contacts, 687
creating mail-enabled users, 540–541
creating security groups, 529–530
creating transport rules, 693
creating user mailboxes, 538–539
cutover migration, 555
Hybrid Configuration Wizard commands, 594, 613–614
locating error objects, 143–144
management endpoints, 333
managing Azure AD users, 519–524
managing Skype for Business Online, 789–796
migrations in Exchange Online hybrid, 624, 642
offboarding in Exchange Online hybrid, 641–642
profiles and functions, 518–519
public folder migration in Exchange 2007/2010, 657–659
public folder migration in Exchange 2013/2016, 663–664
public folder post-migration, 667
public folders online hybrid, 650
public folders on-premises hybrid, 647–649
recovering deleted mailbox, 535–537
removing mailboxes, 535
reviewing supervised content, 446–450
SharePoint Foundation Subscription Settings service, 870
staged migration, 565
troubleshooting cutover migration, 560
viewing cloud identities, 100–101
viewing DLP policies, 718
working with Skype for Business Online policies, 755–757
Windows Server Update Services (WSUS)
automatic updates, 75
managing updates, 38
writeback
Writeback Sender Authentication, groups, 507
WSUS (Windows Server Update Services)
automatic updates, 75
managing updates, 38
X
XML file, Autodiscover lookup, 497
Y
Yammer
Content and Security tasks. see Content and Security, Yammer
directory synchronization, 984
governance and security, 936
overview of, 935
SharePoint Online and, 825–826
Yammer, network administration
Design, 944
Yammer, user administration
Account Activity, 963
Block Users, 964
Directory Integration, 967