Back Matter

Search in book...
Toggle Font Controls
Create new playlist

Name your new playlist

Playlist description (optional)
Sign In

Email address

Password

Forgot Password?

or

Continue with Facebook

Continue with Google
Sign Up

Full Name

Email address

Confirm Email Address

Password

or

Continue with Facebook

Continue with Google

Previous Chapter

8. Managing Office 365

Glossary

The following terms are mentioned in this book.

A record : Part of the Domain Name System (DNS). Normally, it returns a 32-bit IPv4 address.
AAAA record : Part of the Domain Name System (DNS). Normally, it returns a 128-bit IPv6 address.
AAD Connect : Tool that allows you to link an on-premises (or Azure) Active Directory service to Office 365. This allows seamless integration to Office 365 resources, such as password reset and password synchronization.
Active Directory (AD) : Database designed to store information about your Microsoft network environment, including users, groups, passwords, user contact information, and network configuration. It is normally replicated across your network.
AD FS : Active Directory Federation Services. This tool extends Active Directory to off-premises applications and systems (outside the firewall). AD FS allows single sign-on.
alias : An e-mail address that points to another e-mail address. People outside the system can e-mail to an alias address. You can have as many alias addresses as you want in Office 365.
app : A component of Office 365 business subscriptions. Apps have a single-purpose focus.
app store : An application-marketing place where applications may be purchased to extended Office 365. Apps may be added on a per-user or a company basis in Office 365.
autodiscover : Part of the Domain Name System (DNS). Autodiscover describes the name (IP address) of the location that a program such as Outlook can find the Exchange Server for a given e-mail account. Implemented as a CNAME record, it may have to be implemented on a DNS local server, as well as at the domain registrar. For Office 365, the initial Exchange Server address is autodiscover.outlook.com .
Azure: The Microsoft cloud platform that manages all computing activities for Microsoft. Office 365 and other third-party public clouds are cloud applications that are hosted in Azure.
BPOS : Business Productivity Online Standard Suite (the previous name and version of Office 365).
BYOD : Bring your own device. The user brings their own mobile device and connects it the work e-mail client using an MDM or MAM solution.
browser : Web browser, such as Internet Explorer, Firefox, Chrome, or Safari.
CISO: Chief information security officer.
cloud : Any off-premises remote servers connected by a network and hosted on the internet. Examples include Hotmail, Google Docs, Azure and Office 365.
Cloud App Discovery : An Azure service (part of Enterprise Mobility Suite) that deploys an agent on the user’s desktop to determine the applications being used. This tool is useful in determining which applications need to be included as a shared resource across Office 365 users.
cloud backup : A third-party service that backs up e-mail, OneDrive for Business, and SharePoint documents to a cloud service for recovery to Office 365.
Cloud PBX : The Skype for Business phone service that may or may not be integrated into a company’s office communications systems (or PBX). Cloud PBX may be deployed in hybrid or stand-alone mode in Office 365.
cloud solution provider : A Microsoft cloud partner that offers cloud solutions that include Office 365 for its customers. A CSP bills Office 365 services on behalf of its customers.
CNAME record : Part of the Domain Name System (DNS). The alias of one name to another.
coexistence : A type of migration, where the mail flow (via the MX record) remains through the original e-mail server as test groups are migrated to Office 365. Mail flow is redirected to Office 365 at the end of the migration.
compliance : A set of business policies that allows businesses to operate and meet local, state, federal, and international regulations on information sharing and business operations.
content type : Defines the attributes of a SharePoint list item, a document, or a folder. There is a content type per site collection. It could be considered as a “collection of columns for reuse” in other lists or document libraries. Content types are inherited.
core business software : The software that is the heart of the business. This could be the point-of-sale software for a retail store or the order-tracking system for a warehouse. This is the software that runs the business.
CSP : See cloud solution provider .
cutover : A type of migration, where the mail flow (via the MX record) is redirected to Office 365 for the entire organization at one time.
data loss prevention : A machine learning process that reviews all business communications based on a set of rules that can permit or block information to third parties. DLP is used to prevent the distribution of information to users outside of an organization.
Delve : A machine-learning tool that looks at all of the users’ business documents and organizes them in a way that is relevant to what is trending with users.
DirSync : Allows an Active Directory instance to be synchronized to another Active Directory instance. In the Office 365 world, an on-premises Active Directory is synchronized (now including passwords) to the Office 365 Active Directory for your tenant. This has been replaced by AAD Connect.
distribution groups : Lists of e-mail addresses. E-mailing to a distribution group (previously called a distribution list) sends the e-mail to each user in the group. A distribution group can be for internal e-mail only or available to the outside world.
DLP : See data loss prevention .
DNS : Domain Name System; also the protocol used by the Domain Name System. Used to look up additional information (or translate) a name to an IP address.
document : A Word, Excel, PowerPoint, or other type of file within a SharePoint document library. A document may have independent permissions.
document library : A set of documents within a SharePoint site. In many ways, a document library is a specialized list that contains the document and associated metadata. A document library is separate from a page but usually is displayed on a page. When you select and display a specific document library, the page ribbon shows actions that can be performed in the document library or the folders and documents within it, such as setting permissions or deleting an item. A document library may contain folders and documents.
document set : A feature in SharePoint Server 2013 that enables an organization to manage a single deliverable, or work product, that can include multiple documents or files. A document set is a special kind of folder that combines unique document set attributes—the attributes and behavior of folders and documents—and provides a user interface (UI), metadata, and object model elements to help manage all aspects of the work product.
domain name : Often referred to as “custom” or “vanity” domains, this is the name of an organization on the Internet, used for its e-mail and web site. A domain name is maintained (and reported to the rest of the world) by a domain registrar. Examples of domain names are kamind.net , microsoft.com , and getoffice365now.com .
domain registrar : An organization that maintains your domain information; example are eNom, Network Solutions, and GoDaddy. See also DNS.
EBS : Essential Business Server.
e-mail migration : The process of moving existing (historical) e-mail to a new e-mail service.
EMS : See Enterprise Mobility Suite.
Enterprise Mobility Suite: A suite of software from Microsoft that helps to manage and monitor user identity (access to cloud resources) and information rights (how those resources are used).
Essential Business Server : A configured three-server solution (Exchange, SharePoint, Systems Center) for companies with 75 to 400 employees. Microsoft canceled this offering on March 4, 2010. One of the factors was the cost per employee, as compared with the Microsoft cloud offering.
Exchange Federation : A mechanism for trust between Exchange servers.
Exchange Federation remote mailbox move : A form of e-mail migration between federated Exchange servers. In Office 365, this is normally between an on-premises Exchange server and the Office 365 Exchange server(s) of your tenant.
Exchange Online Protection (EOP) : A Microsoft service that filters incoming e-mail for spam and viruses. Formerly known as Forefront Online Protection for Exchange (FOPE), this service is included in the hosted Exchange area of Office 365. Several controls can be used to customize the service.
Exchange public folders : A method of sharing information within an organization, using Exchange Server as the database. Contrast this with SharePoint.
Exchange Server : A Microsoft services software product that receives, stores, and forwards e-mail (and other information, such as calendars, contacts, and folders) for an organization. A user typically sees the e-mail, calendar, and contacts through a client, such as Outlook, or through a web browser. Hosted Exchange servers are maintained by an external service, such as Office 365.
.exe file : Executable file. These cannot be stored (directly) in SharePoint; use a .zip file.
external contacts : Contact information about people outside an organization.
FastTrack: A service that speeds the onboarding and education of Office 365 customers on Office 365.
firewall : An appliance that monitors and inspects Internet traffic according to a set of rules that filer or block Internet communication and protects local computer resources from public (Internet) access.
folder : Similar to a folder on your PC and part of a SharePoint document library. Folders may have independent permissions. A folder contains documents.
FTP : File Transfer Protocol. When implemented by an FTP server, it is a method used to share files. There are security and usability issues. See SharePoint as an alternative.
governance : A set of business polices governing an organization’s actions. Governance can be internally driven or regulation driven.
hybrid coexistence : A type of migration. In the Office 365 context, an organization’s e-mail can be stored in the organization’s on-premises Exchange Server or the Office 365–hosted Exchange Server for the tenant. After establishing Exchange Federation, an administrator can move users’ e-mail boxes to and from the cloud.
immutability : The attribute of not being able to be changed. The preservation of data in its original form is “immutable” (cannot be changed) and is kept in a form that is electronically discoverable.
Intune: A device management tool that manages the company’s computing assets (phones, tables, laptops, Macs, or PCs). Intune is used to manage mobility devices’ access to company business information.
IP address : Internet Protocol address. This is the numeric address of a device or service.
KAMIND IT : IT cloud advisors (see www.kamind.com ).
legal hold : An action that is placed on a mailbox to meet compliance requirements for future discovery and searching.
list : A set of items within a SharePoint site. You can think of a list as a bunch of rows and columns with a data value potentially at the intersection, like a spreadsheet. There are specialized lists that have special properties. A list is distinct from a page but usually is displayed on a page. When you select and display a specific list, the page ribbon shows actions that can be performed on the list or items in it, such as setting permissions or deleting an item. Special list types include Task List and Calendar List.
Lync : See Skype for Business .
mail flow : How a particular piece of e-mail flows from the sender to the receiver. See also MX record .
MAM: See Mobile Application Management .
MDM: See Mobile Device Management .
metadata : Additional data stored about/with a SharePoint item; for example, the date and author of a document. This data is searchable.
Microsoft domain name : The prefix for .onmicrosoft.com . This is also the basis of your SharePoint site; for xxx.onmicrosoft.com , the SharePoint site is xxx.sharepoint.com . This cannot be changed, nor can it be moved between different Office 365 plans.
Microsoft online services : Services provided by Microsoft, including Office 365 and Windows Intune.
migration : Copying data (typically e-mail, calendar entries, and contacts) from your existing environment to Office 365.
Mobile Application Management : Links the mobile applications (like Microsoft Office applications) to Office 365 and Azure for application management. A MAM enrolled device protects company data and allows the company to remove the data from the device remotely without erasing the device.
Mobile Device Management : Links the mobile devices to Office 365 and Azure for hardware management. An MDM enrolled device protects company data and allows the company to remove the data from the device remotely.
MX record : Part of the Domain Name System (DNS). An MX record tells the outside world the location of your mail service (name or IP address).
Office 365 : The brand for the collection of Microsoft cloud services. Office 365 includes hosted Exchange e-mail, Lync Enterprise voice, SharePoint, and several software options. It is generally considered to be software-as-a-service.
Office 365 ProPlus : The current version of Office Professional, currently Office 2013. This is the full Office product and can be installed on up to five devices (under the same login), such as your work desktop, a laptop, a Mac, and a home computer.
Office 365 Wave 14 : A version first released in July 2012.
Office 365 Wave 15 : A version first released in March 2013.
off-premises : Often used as a synonym for cloud , this actually denotes hardware devices and software that are located outside of your company location (off-site).
on-premises : This generally refers to equipment, computing resources, or people who are located at a company location (as opposed to at home or on the road).
on-site : People or equipment that is located at a company location (as opposed to at home or on the road). Usually a synonym for on-premises.
OneDrive : The consumer version of OneDrive for Business. OneDrive is a file sync tool and does not incorporate version control or business data mining.
OneDrive for Business : Stores business documents in a structure manner that allows full searching and access using the Office 365 machine learning tools. The OneDrive for Business configuration maintains a version history of up to 500 copies of a document.
OneNote: A note-taking tool that allows any form of communications to be recorded in a business document called a notebook . Business communications include voice, typed and transcribed notes, pictures, and links to other business communications.
Outlook profile : Read by the Outlook client and contains the e-mail accounts that are to be included in this execution of Outlook.
OWA : Outlook Web App.
page : What you see with your web browser. You can have multiple pages within a site. Generally, a site presents a default page that users will think of as “the site.”
permissions : The “who can do it” aspect of SharePoint. Permissions are set on a site, list, document library, and so forth. Permission levels include None, Read, View, Contribute (Read and Write), and more. A particular user must have “permission” to do that activity on that item, for example, the ability to update the item.
pilot/test group : A group of users who are to be migrated. The first pilot/test group should include both raving fans and naysayers, and it should be designed to test a combination of user needs to ferret out issues early in a migration.
POP mail : Post Office Protocol mail. POP is a protocol (method) of transferring e-mail from an e-mail server to an e-mail client. In a practical sense, each e-mail client receives its own copy of the e-mail. The effect is that you must frequently delete an e-mail from each client after it has been received. Contrast this with Exchange Server, where e-mail is stored on the server and the protocol allows an action (such as deletion or movement to a folder) on an e-mail to be reflected immediately on Exchange Server.
Power BI: Organizes information contained in one or more spreadsheets in a visual manner to speed business decisions.
PST export/import : A PST file (the file extension for an Outlook personal information store file) stores e-mail on your computer. It can contain archived e-mails or current POP mail. Export is a process in Outlook that copies e-mail from a mailbox to a PST format file. In the context of Office 365, PST Import is the Outlook process that copies a PST file to the Office 365–hosted Exchange Server. It is a method of e-mail migration.
PSTN : Public Switch Termination Network. This is your traditional wired phone systems for homes or business.
push install : An automated installation that is set up by IT to push updates to the desktop, with no user interaction. Software updates are pushed and automatically installed.
S4B : See Skype for Business.
security group : A security group is a type of Active Directory object that can be used to grant permissions in SharePoint.
selective wipe : A security process where Intune (part of EMS) selectively wipes business information from a mobile device. This feature is part of a MAM and/or MDM deployment. .
SharePoint : Microsoft’s document storage and content management tool. SharePoint was first released in 2001. Originally, SharePoint was used as an enterprise’s on-premises intranet. SharePoint is fundamentally a web server that presents web pages to your browser (Internet Explorer, Firefox, Chrome, Safari, etc.). The SharePoint data (structure, permissions, sites, your documents, etc.) is hosted on SQL Server, which is maintained by Microsoft within its secure environment.
single sign-on : Lets users log in to an organization’s computing resources with a single ID, using Active Directory Federation Services (AD FS).
single-user identity : A service provided by EMS that allows Office 365 to manage third-party credentials such as Google Docs, Salesforce.com, and other cloud offerings using the users Office 365 credentials. This allows a single user login for all resources.
site : A collection of SharePoint “apps” and web parts (components), such as document libraries, lists, tasks, blogs, pictures, templates, and text that are presented to a user at a particular URL as a page. A site is within a particular site collection. An example is a project site.
site collection : A collection of SharePoint sites. With the Enterprise plan, you may have multiple site collections within your tenant. Site collections have sets of properties that are the same for all sites within a site collection; they may be different between site collections.
site contents : The contents of a SharePoint site. The site contents page shows lists, libraries, and other apps and subsites that are associated with this site. This page is a helpful reference to your site structure. Access to this screen appears as a link on a site page or as a drop-down choice under the “gear” icon at the top right of the screen. Only items that you have permission to see will show.
Skype for Business : A communications client tool included in Office 365 that supports text, voice, and video communication with a whiteboard, shared programs, PowerPoint, shared monitors, and polls to one or more people. It can be used for planned or ad hoc meetings, person-to-person communication, and remote support.
SPF record : Part of the Domain Name System (DNS). Sender Policy Framework is an e-mail system to help prevent e-mail spam. The SPF record (normally implemented as a TXT record) describes which hosts are allowed to send from the domain. In Office 365, the sender is spf.protection.outlook.com for your domain.
SRV record : Part of the Domain Name System (DNS). An SRV record describes the location (protocol and port) for a given service at a host. Office 365 Lync requires two SRV records for correct implementation.
SSO : Single sign-on provides a single sign-on to an organization’s computing resources, using Active Directory Federation Services (AD FS).
subsite : A SharePoint subsite is simply a site under (within) a site. You can nest sites until you confuse yourself.
SWAY : An Office 365 application that allows you to express your ideas across any device. SWAY is future replacement to PowerPoint for presentations and is included Office 365 business subscription with the Office component.
Teams : A software application that allows users to collaborate in a self-managed environment on Office 365.
tenant : Your Office 365 account, including hosted Exchange, Lync, SharePoint, and Office 365 Active Directory. The first account that you create when you first purchase Office 365 is the “owner” of your tenant. This account should be an admin account, not a person. This account does not normally require an Office 365 license. Relating to SharePoint, all of your site collections are within your tenant. You can have any number of domains within your tenant (with e-mail accounts), but you will have only one root SharePoint URL: https://xxxx.sharepoint.com .
TXT record : Part of the Domain Name System (DNS). A TXT record can contain any type of text. See SPF record . For Office 365, a TXT record is also used to prove domain ownership. (A specific TXT record is added by the domain registrar for your domain.)
two-factor authentication (2FA) : Part of EMS that manages access to Office 365 and Azure information resources. 2FA uses two parts of the security rule that includes something you know (knowledge), something you have (device), and something you are (bio). Typical 2FA uses a smartphone with a PIN that changes and a password to grant access to computing resources.
URL : Universal resource locator. The specific universal address for a web page, a URL is essentially a specific location within a domain within the World Wide Web. (This doesn’t necessarily mean you can see it from anywhere; there can be security restrictions.) Examples are https://kamindit.sharepoint.com .
virtualization : A server or desktop operating system running on a virtual host. The server or desktop operating systems are running in a hardware-agnostic mode because the hardware services are supplied by the virtual host.
web part : SharePoint components that can be inserted into a page (part of a site). Web parts are powerful and can interact with other sites and data outside of SharePoint.
web site : A SharePoint web site is a specialized site collection that can be seen by the outside world (public-facing) through a standard URL (such as www.kamind.com ). You may have only one web site within a tenant.
www record : Part of the Domain Name System (DNS). It provides the name or IP address of a web server for a given domain name.
Yammer : A business communication tool where the business information is owned by the company that allows users to express and share information in an unstructured manner. Yammer is sometimes referred to as the internal Facebook of the business. Yammer information is data mined by Delve for the internal use of the company.

Index

A

Admin center

Administer global functions

Administration center

administrator roles

billing administrator

configuration

administration roles

company options

deleting users

domains

external sharing

grouping licenses

license, assigning

license quantity, changing

multifactor authentication ( see Multifactor authentication)

open license key activation

open subscription activation and links

password expiration

password information

renaming user

restore deleted users

security groups

troubleshooting, domain

user information and E-mail address

user information, changing

functions

global administrator

licenses dashboard

logging administrator

new Office 365

One Drive for Business ( see One Drive for Business)

partner administrators

password administrator

service support administrator

Skype for Business ( see Skype for Business (S4B))

user management administrator

Administrator roles

Advanced Threat Protection (ATP)

Advance query strings (AQS)

Alias e-mail address

adding distribution group

distribution group, creation

grant permissions

group for external access, enabling

Outlook

restricting access, distribution group

Autodiscover

Azure Active Directory

Azure AD directory connector

Azure AD Identity Protection

AIP

alerts

Azure dashboard

enforce MFA

invalid access attempts

risk policy

weekly digest

Azure Advisor

Azure cloud solution provider (CSP)

Azure dashboard, favorites list

Azure Information Protection (AIP)

activation

Azure dashboard

CCPA

credit card protection

DLP

document classification

global policy

labels

parameters

sublabel functions

management tool

RMS tracking service

Security & Compliance Center

service

service testing

Word 2016

Azure Intune management portal

Azure security center

Azure security services

checklist

configuration

Advanced Threat Analytics

Azure Active Directory Identity Monitoring

Azure Active Directory in Office 365

Azure security center, loading

data collection options

e-mail notifications

Log Analytics

Log Analytics data collection

Log Analytics resource

payment tier

portal.azure.com

resource, creating

Windows Collection Agent on Desktop System

B

Billing administrator

BitTitan’s MigrationWiz tool

Bring Android to Work account

Business associates agreement (BAA)

Business data retention

C

Client apps, MDM

Android

conditional access

configuration policies

enrolling device

Google Play store

load app

company portal

managed app

protection policies

Cloud Application Security (CAS)

accessing

applications for security monitoring

connection

linking Azure services

status board

Cloud solution advisors

Cloud solution provider (CSP)

Company administrators

Compliance management

Compliance Manager

assessment, completing

business review

licensing/compliance partner

NIST 800-53 requirements

purpose

real-time assessment

regulations

Secure Score and

Compliant devices, Microsoft Intune

Configuration completion checklist

Corporate information security officer (CISO)

Corporate security officer (CSO)

Crypto-jacking

Cybersecurity

D

Data information protection

Data loss prevention (DLP)

Deep learning

Default compliance policy, MAM deployment

access controls

All users

application access

Azure Active Directory

CAS

compliance status

conditional access

enable policy

Outlook

PIN code

session controls

Default user role assignments

Delegated administrators

Delegate users

Deployment

Azure Active Directory

BitTitan’s MigrationWiz tool

cleanup operation

Cloud PBX (E5) option

cutover migrations

DNS trouble shooting

bulk add users

bulk-loading users

DNS records

onboarding users

domain validation

Add domain

add users and assign licenses

CNAME records

complete setup message

DNS configuration

DNS records

domain name

MxToolbox

ownership

records verification

SRV records

TXT record

E-mail migration ( see E-mail migration)

external devices

final check list

hybrid migrations

load users and assign licenses

Add each user

Bulk-add users

cutover migration

Enable Directory Synchronized users

hybrid migration

license assignment

Onboarding flow chart

migration plans

coexistence E-mail flow

configure desktop services

cutover migration and hybrid

exchange control panel

relay mail flow

shared domain

test groups

mobile device configuration

onboarding E-mail

BitTitan’s MigrationWiz

PST mail migration

PowerShell installation

process

purchasing Office 365 business

creation

Enterprise E3 trial account creation

subscription

trial subscription

validation

S4B

Service Administration software

Skykick migration tool

user portal

Yammer enterprise configuration

DeploymentPro

Device compliance, MDM

compliance policy

device policies

hardware deployment

iOS Policy

policy groups

test user

Device enrollment, MDM

Apple

Apple push certificate

Google

Google sign up

Office 365/Azure tenant

set up

terms and conditions

Windows enrollment

Device management

Directory synchronization

Distribution groups

creation

defining

external delivery, setting

interface

restricting access

types

DMARC/DKIM deployment

CNAME records for custom domains

DMARC Identifier in Office 154

e-mail analysis

mail flow

in Office 154

SPF records

DNS records

DNS troubleshooting

Document classification

Domain-based Message Authentication, Reporting and Configuration (DMARC)

Domain Keys Identified Mail (DKIM)

Domain management

Dynamics groups, EMS

Android devices

device groups

iOS device

manage devices

team groups

user group

Windows 10 devices

E

Electronic Discover Reference Model (EDRM) standard

E-mail encryption

AIP client

Azure Information Protection

custom HIPAA policy

Microsoft 365 E3/E5 suites

Office E3/E5 subscriptions

PII information

policy for execution

portal customization

properties

restricting access

Rights Management service

E-mail migration

AD connect synchronization migration

approaches

exchange server

methods

office 365

onboarding process

tool selection

Enterprise Exchange admin center

Enterprise Mobility & Security suite (EMS)

AIP ( see Azure Information Protection (AIP))

Azure AD Identity Protection

Azure-configured services

Azure dashboard

bad actors

components

E-mail encryption

identity management

Intune, Azure portal

layer

MAM deployment ( see MAM, Intune deployment)

manual encryption

MDM deployment ( see Mobile Device Management (MDM))

MDM process

Microsoft MDM

multifactor authentication ( see Multifactor authentication)

Password Smart Lock Protection

PIM ( see Privileged Identity Management (PIM))

smart lockout

Exchange admin center (EAC)

alias e-mail address

conference room, configuration

conference room, PowerShell modification

default user role

distribution groups

mail flow and mailbox features

new e-mail address

roles

Shared Mailbox

user E-mail account primary domain

Exchange administration functions

External sharing

calendars

settings

sites

teams

F

Fix Fee IT service

Front-line worker

G

General Data Protection Regulation (GDPR)

to businesses

control and notifications

CSO

for data management

IT training and responsibilities

personal privacy and individual rights

regulations

requirements

transparent privacy policies with data management

Global administrator

H

Health Insurance Portability and Accountability Act (HIPAA)

Hybrid configuration wizard

connector validation

downloading and installing

spam filter

Hybrid migration

deployment

exchange 2007

I, J, K

Identity management

Information security

Integrated systems editor (ISE)

Intelligent security

Intune MDM

Intune MDM/MAM solutions

L

Lateral attack

Legacy group interface

Litigation hold

Lock nonconditional access, MAM deployment

e-mail block

nonmanaged applications

notification

Exchange Active Sync connector

Microsoft Intune

Lockout threshold

Log Analytics

M

MAM, Intune deployment

Android application policy

app protection policy

block notification

default compliance policy ( see Default compliance policy, MAM deployment)

iOS Application policy

lock nonconditional access ( see Lock nonconditional access, MAM deployment)

Microsoft Authenticator

Outlook clients

rules

setup

test e-mail

test group

Windows 10 Application policy ( see Windows 10 Application policy, MAM deployment)

Windows Intune portal

Management score

Manual encryption

DLP rules

EAC

encrypted e-mail

Exchange transport mailbox rule

Outlook

setting overrides

transport rule, custom

MDM iOS devices staff

Meeting rooms

Microsoft 365 E5 subscriptions

Microsoft 365 security

Azure CSP subscription

breaches

classes of workers

E5 enterprise

E3 enterprise

Fix Fee IT service

F1 subscription

front-line worker

Microsoft 365 Business

Microsoft cloud partners

Microsoft Cloud Security

AIP

ATP

Azure Security Center

capabilities

CAS

e-mail gateway/ATP, exchange

for Enterprise Architects

Log Analytics

MDM and EMS

questions to IT staff

Windows 10 Defender Advanced Threat Protection

Microsoft Enterprise Mobility Suite

Microsoft Intune

compliance test

deploy MDM

deployment groups

All Users

Azure subscription

production

test

MDM authority

MDM/MAM enrollment URLs

update policy

Office Pro Plus

Office suite

Windows updates

Microsoft mail migration

Azure AD connect configuration

downloading

express installation

installation

local AD sync

options

steps

syncing the office 365 service

sync notification

systems

tool, selecting

Microsoft Partners

Microsoft security subscriptions

Microsoft threat detection map

Mobile Application Management (MAM)

Mobile Device Management (MDM)

company portal

conditional access

device compliance

device configuration

device enrollment

devices

MDM/MAM configuration

Microsoft Intune

mobile apps

noncompliant policy

test groups

Windows 10 devices

Multifactor authentication (MFA)

app access

app password

authenticating smartphones

Azure Multifactor

Azure password

deploy MFA

MFA

Microsoft authenticator

Office 365 tenant

secondary device

selecting users

setting new password

testing

cloud apps

conditional access

device platform

location

name location

policy name

users

testing service

user accounts

user credentials

user setting up

N

National Institute of Standards and Technology Cybersecurity Framework (NIST-CSF)

Network operations center (NOC)

O

Office 365 administration

administration center ( see Administration center)

Azure AD

Bing Places for Business

business administration functions

Compliance

configuration completion checklist

CRM

distribution group interface

EAC ( see Exchange admin center (EAC))

exchange administration functions

global administrator account

GUI interface

Power BI

PowerShell

assign license

audit logs verification

Autodiscover process

Azure PowerShell

commands

enable audit

environment

filtering e-mail

get Mailbox statistics

legal holds—with notice

mailbox

meeting room configuration

passwords forever

PowerShell installations

purges folder

review permission

sign error

Standard Header

user principal name

validating PowerShell commands

Winmail.dat problem

security configuration completion checklist

SharePoint

Skype for Business

Office 365 and Azure Service Trust Portal

Office 365 compliance

alert structure

Azure notification

customization

dashboard

highlighted alerts

Security & Compliance Center

types

best way

configuration

data governance

archaic journaling approach

archive policy

audit policy

description

information immutability

litigation hold

retention policy

document production

audit log search

Bates Express

content search

data, preview

exporting documents

placed on hold

Security & Compliance Center icon

reference links

retention policy

search and investigation

settings

threat dashboard ( see Threat dashboard)

trust center

Office 365 Security & Compliance Center

Office 365 security score, See Secure Score

Office 365 security, subscriptions

Office Pro Plus updates, EMS

All users group

license type

Office 365 account

Office deployment group

Office deployment software

update channels

OMA_URI

One Drive for Business

configuration and set up

device access control

device management and mobile policy

limits

sharing

usage

Open License key activation

Open Mobile Alliance Uniform Resource Identifier (OMA-URI)

Outlook client

P, Q

Partner administrators

Partnership model

Password administrator

Password policy

Password Smart Lock Protection

Power BI

PowerShell

audit command

audit logs

bulk-assign licenses

filtering e-mail

installation

legal holds—with notice

mailbox forwarders

mailbox permission command

meeting rooms

not remotely signed error

passwords forever

setting up teams and sharepoint

standard header

validating commands

Winmail.dat Problem

Privileged Identity Management (PIM)

Azure AD roles

Azure dashboard

Azure services

bad actor

identity verification

user roles

Product-focused solutions

PST mail migration

outlook, export

outlook, import

R

Room mailbox

S

Secure Score

administration center

comparison score

from Compliance Center

goal

increasing security score

Score Analyzer

target

Windows Security Center

deploying ( see Windows Advanced Threat Protection)

reviewing

Security

GDPR and privacy policies

to businesses

control and notifications

CSO

data management

IT training and responsibilities

personal privacy and individual rights

regulations

requirements

and hackers

AI tools

compliance

Microsoft Trusted Cloud ( see Microsoft Cloud Security)

offerings

Armor class

basic monitoring package

components

Fortress class

Shield class

Office 365 security score

Security & Compliance Center dashboard

Security & Compliance Center

Security configuration completion checklist

Security groups

Security operations center (SOC)

Service support administrator

Shared Exchange mailbox

options

outlook

PowerShell

smartphone and outlook

SharePoint PowerShell

Skykick migration tool

Skype for Business (S4B)

conferencing add-on

federation

licenses roles

voice

adding phone numbers

assigning emergency location

assigning phone numbers

call forwarding

number verification

options, setting

porting phones number

selecting phone number

teams admin center

Software-as-a-service (SaaS)

Staged migration/Test group

Support service records (SRV)

System Center Configuration Management (SSCM)

System health

T

Teams administration functions

Teams PowerShell

Threat dashboard

attacks

attacks against users

Attack Simulator option

campaign selection

distribution list

e-mail, customizing

executing campaign

offer customization

regulations

in Security & Compliance Center

web portal

Threat intelligence graph

U, V

User activation

User management administrator

W, X, Y, Z

Windows 10 Application Policy, MAM deployment

add a policy

add apps

advanced settings

All User policy

app protection policies

with enrollment

advanced settings

All User policy

Office Pro Plus

set up

WIP

protected apps

WIP

Windows 10 devices

deploying commercial ID

Data Collection and Preview Builds

enabling Telemetry

Group Policy, editing

uploading

OMA-URI

retrieving commercial ID

Log Analytics and Update management

from Update Compliance blade

Windows 10 Update Rings, EMS

Azure dashboard

configuration

device licenses

insiders group

Microsoft 365 E5

update channel options

update status

user devices

user licenses

Windows Advanced Threat Protection

ATP deployment

Azure Log Analytics

client software

cloud instance

data repository, set up

data retention preferences

installation process

organization’s data size

organization type

securitycenter.windows.com

Windows 10 environment

Windows Defender ATP

Windows Desktop Search (WDS)

Windows Information Protection (WIP)

Windows Intune

Azure Intune portal

cloud-based

computer adding

consistency

management console

vs . Microsoft Systems Center

reference links

self-service model

..................Content has been hidden....................

You can't read the all page of ebook, please click here login for view all page.

Table of Contents for Back Matter

Create new playlist

Sign In

Sign Up

Index

A

B

C

D

E

F

G

H

I, J, K

L

M

N

O

P, Q

R

S

T

U, V

W, X, Y, Z

Table of Contents for
Back Matter