4. Referentes
4.1 Hades
4.1.3 Características de Roguelike
Scenario
Lucerne Publishing is now well into the Pilot Phase of its FastTrack deployment of Office 365 and Justin has tasked Heidi to review how administrator accounts are created. Also, because Lucerne Publishing is increasingly seeing its publications plagiarized or stolen outright, the company needs to implement RMS in Office 365 to protect its intellectual property. However, Justin is keen to see that they still have the ability to recover documents if required.
Objectives
To provide the students with practical experience of administering Office 365 administrator roles,
passwords and password policies, and rights management by using both the Office 365 admin center and Windows PowerShell.
Lab Setup
Estimated Time: 80 minutes Virtual machine: 20346A-LUC-CL1 Username: Student1
Password: Pa$$w0rd
In all tasks, where you see references to lucernepublishingXXX.onmicrosoft.com, replace the XXX with the unique Lucerne Publishing number that you were assigned when you set up your Office 365 account in Module 1, Lab 1B, Exercise 2, Task 2, High Level Step 2, Detailed Step 6.
Where you see references to labXXXXX.o365ready.com, replace the XXXXX with the unique
O365ready.com number you were assigned when you registered your IP address at www.o365ready.com in Module 1, Lab 1A, Exercise 1, Task 7, High Level Step 1 and Detailed Step 10.
Exercise 1: Manage Administrator Roles in Office 365
Scenario
Justin and Heidi have drawn up a list of the pilot users that they want to have administrative rights. Liane Martin is to be the password administrator, while Odessa Brunner is going to be the user management administrator.
In this exercise, Heidi assigns administrative rights to additional user accounts using both Office 365 admin center and PowerShell. She establishes the scope of the assigned rights and manages those accounts to meet the business needs of the organization.
The main tasks for this exercise are as follows:
1. Managing and Testing Administrator Roles in the Admin Center 2. Managing and Testing Administrator Roles in Windows PowerShell
Task 1: Managing and Testing Administrator Roles in the Admin Center 1. Log on to Office 365 as Heidi Leitner.
2. Create administrator roles as follows using [email protected] as the alternate email address:
o Mario Ledford – Billing administrator o Luc Cartier – Billing administrator
MCT USE ONL Y. STUDENT USE PROHIBITED
3-26 Administering Office 365
o Liane Martin – Password administrator
o Odessa Bruner – User management administrator 3. Log on to Office 365 as Liane Martin.
4. Reset Thomas Lanctot’s password.
5. Log on to Office 365 as Odessa Brunner.
6. Modify Thomas Lanctot’s user account settings as follows:
o Office number – 555-1234 o Set sign-in status - Blocked
7. Create, and then delete, the following user account:
o Alfredo Abner
Task 2: Managing and Testing Administrator Roles in Windows PowerShell 1. Open Windows PowerShell and connect to the MsolService. (Note: You will need to use the Lab
Answer Key detailed steps to complete this task.) 2. Create administrator roles as follows:
o Rick Torres – Service administrator o William Douglas – Billing administrator o Justin Muller – Global administrator
(Note: You will need to use the Lab Answer Key detailed steps to complete this task) 3. Verify the administrator roles.
(Note: You will need to use the Lab Answer Key detailed steps to complete this task)
4. Log in to Office 365 as [email protected] and change his temporary password to Pa$$w0rd. Then start a Windows Azure Active Directory PowerShell prompt and add rschmid to the Service Support Administrator role.
(Note: You will need to use the Lab Answer Key detailed steps to complete this task)
Results: The designated administrators have the access rights they require to carry out their roles.
Exercise 2: Configure Password Management
Scenario
Justin is concerned about the approach to password management in Office 365, as he does not want Office 365 password resets to be burdening the Helpdesk. He works with Heidi to find out directly how easy the process is for resetting passwords on his own account.
In discussions with Remi, Justin and Heidi, they have decided to implement the same password policy in Office 365 as they have in the internal network, which is a password lifetime of 90 days and a notification period of 14 days prior to the change. Heidi is tasked to set this policy up and to discover how the company can use PowerShell to set user passwords and manage user passwords.
The main tasks for this exercise are as follows:
1. Configuring the Password Expiration Policy
MCT USE ONL Y. STUDENT USE PROHIBITED
Managing Office 365 Identities and Services 3-27
2. Resetting an Administrator Password
3. Managing Passwords and Password Policy with Windows PowerShell
Task 1: Configuring the Password Expiration Policy 1. Log on to Office 365 as Heidi Leitner.
2. Modify the password expiration policy to set expiry to 60 days and notification of expiry to occur 7 days before.
Task 2: Resetting an Administrator Password
1. Configure an alternate email address for Justin Muller as follows:
o [email protected] (where [email protected] is the email address you used to sign up for the Office 365 trial in Module 1, Lab A, Exercise 1, Detailed Steps 7 and 8.)
2. Navigate to the Office 365 sign in page, and reset the administrator password for Justin Muller to Pa$$w0rd. Then sign in and sign out.
Task 3: Managing Passwords and Password Policy with Windows PowerShell 1. Open Windows PowerShell and connect to the MsolService. (Note: You will need to use the Lab
Answer Key detailed steps to complete this task).
2. Modify the company’s password expiration policy to expire passwords after 90 days and for
notification to occur 14 before that. (Note: You will need to use the Lab Answer Key detailed steps to complete this task.)
3. Reset Thomas Lanctot’s password. (Note: You will need to use the Lab Answer Key detailed steps to complete this task.)
4. Configure all users’ passwords to never expire. (Note: You will need to use the Lab Answer Key detailed steps to complete this task.)
Results: Lucerne Publishing administrators can reset their passwords and Heidi can now use PowerShell to set passwords and modify password policy.
Exercise 3: Administer Rights Management
Scenario
The COO of Lucerne Publishing, Jesse Wagner and her husband James, the CEO are both very concerned with the increasing attempts to plagiarize Lucerne Publishing’s content. Hence, there is considerable interest in how Office 365 implements RMS protection to complement the existing RMS environment that operates internally. Heidi decides to do some experimentation, working with Rick Torres to use the Office 365 admin console and PowerShell to configure RMS, then viewing the results of applying RMS policies.
The main tasks for this exercise are as follows:
1. Activating Rights Management in Office 365
2. Activating Rights Management with Windows PowerShell 3. Integrating Rights Management with Exchange Online 4. Integrating Rights Management with SharePoint Online
MCT USE ONL Y. STUDENT USE PROHIBITED
3-28 Administering Office 365
Task 1: Activating Rights Management in Office 365 1. Log on to Office 365 as Heidi Leitner.
2. Activate Rights Management in the admin center.
3. Deactivate Rights Management in the admin center.
Task 2: Activating Rights Management with Windows PowerShell 1. Download and install the Rights Management module for Windows PowerShell from
http://www.microsoft.com/en-us/download/details.aspx?id=30339.
2. Import the module and activate Rights Management. (Note: You will need to use the Lab Answer Key detailed steps to complete this task.)
Task 3: Integrating Rights Management with Exchange Online
1. Connect to Exchange Online with Remote PowerShell. (Note: You will need to use the Lab Answer Key detailed steps to complete this task).
2. Configure the key sharing location for RMS Online. (Note: You will need to use the Lab Answer Key detailed steps to complete this task).
3. Import the Trusted Publishing Domain from RMS Online. (Note: You will need to use the Lab Answer Key detailed steps to complete this task).
4. Enable IRM for Exchange Online. (Note: You will need to use the Lab Answer Key detailed steps to complete this task).
5. Test connectivity between Exchange Online and RMS Online. (Note: You will need to use the Lab Answer Key detailed steps to complete this task).
6. Send IRM protected emails.**
7. **See Instructor Note above
(Note: You will need to use the Lab Answer Key detailed steps to complete this task.) 8. Open IRM protected emails.**
9. **See Instructor Note above
(Note: You will need to use the Lab Answer Key detailed steps to complete this task.)
Task 4: Integrating Rights Management with SharePoint Online 1. Log in to Office 365 as Heidi Leitner, and open the SharePoint admin center.
2. Enable IRM for SharePoint Online and refresh IRM settings.
3. Apply IRM protection on a document library. (Note: You will need to use the Lab Answer Key detailed steps to complete this task.)
Results: Lucerne Publishing can better protect its confidential data throughout the organization.
MCT USE ONL Y. STUDENT USE PROHIBITED
Managing Office 365 Identities and Services 3-29
Lab Discussion Questions
In the PowerShell sections, why did you need to run two connection commands in this lab?
Connect-MSOL connects to Office 365, whereas the second connection is to Exchange Online.
What is the purpose of downloading
WindowsAzureADRightsManagementAdministration _x64.exe and importing the aadrm module?
The aadrm module provides the cmdlets for managing Active Directory Rights Management in Office 365.
WindowsAzureADRightsManagementAdministratio n_x64.exe contains this module.
MCT USE ONL Y. STUDENT USE PROHIBITED
3-30 Administering Office 365
Module Review and Takeaways
Having completed this module, you can now manage the Office 365 administrator roles, manage passwords and password policies, and administer rights management in Office 365.
MCT USE ONL Y. STUDENT USE PROHIBITED
4-1