User Management (the basics)
Overview
Office 365 includes a portal to manage your users and accounts. To access the portal, just log into http://portal.microsoftonline.com using your username and password. You’ll use this portal to manage your users. Note: If you are using directory sync, some of this information will need to be managed on-premise. This includes managing existing external contacts, distribution groups, security groups, user account creation, and user email addresses.
Basic User Management
Creating Users 1
Open Office 365 Admin Section Navigate to portal.microsoftonline.com and log in with your credentials. Select “Office 365” from the Admin menu.
2
Click to Add a User Click on the “+” button within users and groups.
3
Enter Basic Details Enter basic details for the user. The User Name section determines the user’s primary email address and their logon name. You can choose to make the user reset their password on first log in or not. You can also choose whether to use an automatically generated password or set one yourself, as well as what email address you would like the password to be sent to.
Reset Passwords You can reset the passwords for one or more users. This process provides you with a temporary password for each user. The user (or you on the user’s behalf) will need to log into the portal once using this password and set a permanent password before the user will be able to access services such as Outlook, Lync, or SharePoint.
1
Open Office 365 Admin Section Navigate to portal.microsoftonline.com and log in with your credentials. Select “Admin” from the App Drawer.
4
Reset Password Select the users you’d like to reset the password for in the “users and groups” section.
5
Send Email By default you will get an email with the user’s temporary password. You’ll also see the temporary password on the next page. You can also send this email to the user directly by entering their email address in this field. You also have the option of making the user reset their password on next log in or not.
6
Finish Write down the users’ temporary passwords. This password will need to be entered into Lync or Outlook before they will work.
Changing User Information You can change a user’s information, such as their name, display name, admin role, licensing, etc.
1. Open Office 365 Admin Section Navigate to portal.microsoftonline.com and log in with your credentials. Select “Admin” from the App Drawer.
2. Change User Info
Click “Users” and then “Active Users”. Click on the user whose information you would like to edit, then click “Edit” in the menu at the right.
3. Change User Info
4. Set Admin Role
You can change the name, display name, and user name of the user, as well as the domain name you want their email to be under.
5. Under “Roles” you can set an admin role for the user. Click the “Global admin” option to give them full admin control over your entire Office 365 instance. Click “Limited admin
access” to select specific parts of being an admin to assign to that user. 6. 7. Click the “Learn more about administrator roles” link to see a definition of each separate admin role.
8. Set Sign-in Status and External Admin Access
9. Under “Settings” you can set the sign-in status of the user, either letting them log in or blocking them from logging in. This can be very useful when handling terminated employees. 10.You can also assign administrative access to companies you support, if that is something necessary to your organization.
11.
Set User Licensing
12.Under “Licenses” you can assign any licenses you have available to the user. If you click the arrow next to the license name, you can choose the specific components included in that license to allow the user access to. 13.You can also click “Buy more licenses” to be taken to the “Purchase Services” page where you can buy more licenses.
14.
Set Up Multiple Email Addresses for User
Under “Email address” you can add alias email addresses for a user and set their primary
email address.
15.
Set Up Mailbox Permissions
Under “Mailbox permissions” you can allow other users to send email from this user’s mailbox. You can also set up other users to access this user’s mailbox as well as sending from it. Under “More mailbox permissions” you can allow other users to send email on behalf of this user’s mailbox.
Deleting Users Deleting a user marks the user and their Exchange mailbox as deleted. You have 30 days in which to restore the user and mailbox before the data is permanently deleted.
1
Open Office 365 Admin Section Navigate to portal.microsoftonline.com and log in with your credentials. Select “Admin” from the App Drawer.
7
Delete Users Click “Users” on the left hand side. Check the box next to the user(s) you’d like to delete. Then click “Delete” on the right hand side and confirm the deletion.
Restore Users 1.
Open Office 365 Admin Section Navigate to portal.microsoftonline.com and log in with your credentials. Select “Admin” from the App Drawer.
2.
Restore Users Click “Users” on the left hand side and then select “Deleted Users”. Check the box next to the user(s) you’d like to restore. Then click the “Restore users” button on the right. You will only be able to restore a deleted user within 30 days of deleting that user.
Advanced User Management
Changing Password Expiration Policy You can modify the global password expiration policy centrally in Office 365. In order to entirely disable password expiration you will need to configure each user individually via PowerShell (see below).
1
Open Office 365 Admin Section Navigate to portal.microsoftonline.com and log in with your credentials. Select “Admin” in the App Drawer.
3.
Open password settings Open the “passwords” tab within Service Settings on the left.
4.
Change settings Modify the settings. You can choose a number of days for expiration between 14 (2 weeks) and 730 (2 years). You can also select the checkbox under “Passwords never expire” to completely remove password expiration for all users. Users receive password expiration notices when they log into the Office 365 portal.
Turning off Password Expiration (PowerShell) Using PowerShell, you can turn off password expiration entirely for a particular user or all users.
1.
Connect with PowerShell Complete the steps in the Using PowerShell portion of this document to get connected to Office 365.
2.
Run the PowerShell Command Run the following command to turn off password expiration for a user. set-msoluser -UserPrincipalName
-PasswordNeverExpires $true
3.
Turning Off Password Expiration for All Users Run the following command to turn off password expiration for all users. Get-MSOLUser | Set-MsolUser -PasswordNeverExpires $true
Terminated Employees In the event of a terminated employee, there are a few ways to handle their Office 365 account.
Email Forwarding 1 Open Office 365 Admin Section Navigate to portal.microsoftonline.com and log in with your credentials. Select “Admin” from the App Drawer.
16.
Change User Info Click “Users” and then “Active Users”. Click on the user whose information you would like to edit, then click “Edit” in the menu at the right.
17. Set Email Address To Forward To
Under “Email address” you can set the email address you would like the terminated user’s mail to be forwarded to.
Mailbox Delegation 1 Open Exchange Admin Section Navigate to portal.microsoftonline.com and log in with your credentials. Select “Admin” from the App Drawer.
2 Open Exchange Admin Section Once in the Admin Center, click “Exchange” under “Admin” in the left menu.
18.
Open Mailbox Settings Click on “mailboxes” under the “recipients” section.
19.
Open Mailbox Settings Double click the mailbox of the terminated user to open the settings for their mailbox.
20.
Open Mailbox Delegation Click on “mailbox delegation” and scroll down to the “Full Access” section. Click the “+” to add a user, giving them full access to the terminated user’s mailbox. NOTE: Users you add will not be able to send mail as the terminated user, only open and view the contents of the mailbox.
21.
Select A User For Full Access Search for the user you would like to give full access to, double click on their name, and click “ok”. When this window closes, be sure to click “save” in the “mailbox delegation” menu.
Export the Mailbox If you just want to delete the terminated employee’s user account, but you need the mail, calendar, etc. from their mailbox, you can export it in a “.pst” file.
1 Open Outlook On the Desktop Click the “File” menu, click on “Open & Export,” and click “Other User’s Folder”.
22.
Select User To select a user, you can either just enter their name in the first screen, or click “Name…” to view your organizations entire directory. Select the terminated user’s account and click “OK”. The mailbox will appear in the left menu of Outlook.
23.
Export .pst File Click the “File” menu, click on “Open & Export,” and click “Import/Export”.
24.
Export .pst File
Select “Export to a file” and click “Next”.
25.
Export .pst File Select “Outlook Data File (.pst)” and click “Next”.
26.
Export .pst File Select the mailbox you would like to export from. Make sure to check “Include subfolders,” then click “Next”.
27.
Export .pst File Select the location you would like to export the file to. We recommend exporting to your desktop so the file can be found easily.
28.
Export .pst File You will have the option to set a password for the file. This is only necessary if there is sensitive information in the emails of the terminated user.
1 Export .pst File
29. 30.If all goes well, you will see a file called “backup”. 31. 32.You can now proceed to delete the user from your organization’s Office 365 directory.
33. Email Configuration
34. Overview
35.Email configuration in Office 365 occurs through the Exchange portion of the Office 365 control panel. Email configuration includes managing:
User Mailboxes: normal mailboxes associated with an individual user Shared Mailbox: mailboxes that are not associated with a particular user and do not count towards your user licenses. Used for collaboration. Resource Mailboxes: Used for calendar scheduling including rooms and equipment. Automatically accept and reject requests based on availability. Distribution Groups: Allows you to send emails to one email address and have those emails be distributed to many users or external contacts. External Contacts: Allows you to maintain an organization wide contact list, and to include individuals with external email address in distribution groups. Spam Settings: You can turn up and down spam filtering to meet your needs.
36. User Mailbox Configuration
37. Changing User’s Email Addresses 38.Users can have multiple email addresses associated with their mailbox. Email sent to these secondary email addresses will go to the user’s mailbox just like mail sent to the primary email address.
1.
39. Open Office 365 Exchange Section
41.Navigate to portal.microsoftonline.com and log in with your credentials. 42. 43.Select “Admin” from the App Drawer.
40.
2.
44. Open Office 365 Exchange Section
46.Once in the Admin Center, click “Exchange” under “Admin” in the left menu.
45. 3.
47. Open the User’s Mailbox Settings 48.
49.Double click on the user’s mailbox in the list to the left to view existing email addresses. 50. 51.You can remove email addresses (other than the user’s primary address) by using the “-“ button. 52.
4.
53. View the User’s Email Addresses
55. Click on the “email address” section on the left.
54. 5.
56. 57.
Add a new Email Address 58.
Use the “+” button (1) to add another email address. 59. 60. Make sure the “SMTP” radial is selected (2) and type in the new “Email” address (3). 61. 62. If you want to make this the primary email address for the account check the “make this the reply address” box (4).
63. Changing Mailbox Permissions 64.You can change permissions on the mailbox as a whole from the Exchange Control Panel. Note that users can also share individual folders (their inbox, calendar, or contact list) from within Outlook.
1.
65. Open Office 365 Exchange Section
67.Navigate to portal.microsoftonline.com and log in with your credentials. 68. 69.Select “Admin” from the App Drawer.
66.
2.
70. Open Office 365 Exchange Section
72.Once in the Admin Center, click “Exchange” under “Admin” in the left menu.
71. 3.
73. Open the User’s Mailbox Settings 74.
75.Double click on the user’s mailbox in the list to the left to view existing email addresses. 76. 77.You can remove email addresses (other than the user’s primary address) by using the “-“ button. 78.
4.
79.
Change Settings
80.
81. Open the “mailbox delegation tab.” Add and remove users from the three sections to manage permissions. 82. 83. Send As: Allows users to add this mailbox’s email address to their “From” drop down in Outlook and send messages from the mailbox. 84. 85. Send on Behalf Of: Similar to “Send As” except outbound messages say “on Behalf Of” rather than “from” the user. 86. 87. Full Access: Allows the user to open the mailbox in Outlook or Outlook Web Access. Users with “Full Access” permissions to a mailbox will automatically see that mailbox in local Outlook.
88. Setting Up Email Disclaimers 1 Open Office 365 Exchange Section
89.Navigate to portal.microsoftonline.com and log in with your credentials. 90. 91.Select “Admin” from the App Drawer
92. Open Office 365 Exchange Section
93.Once in the Admin Center, click “Exchange” under “Admin” in the left menu.
94.
Open the Mail Flow Tab
95.
Create Disclaimer
Click on “mail flow” within the Exchange admin center, then click the “+” dropdown menu. In the dropdown menu, click “Apply disclaimers…”
Enter a name for your disclaimer (i.e. Default Disclaimer). In the dropdown under “*Apply this rule if…” select “[Apply to all messages]” Click the “*Enter text…” link to type in what your disclaimer will say. Then click the “Select one…” to decide what happens if the disclaimer cannot be inserted. Click “save” when you have finished configuring your disclaimer.
Setting Up Skype for Business Software 1 Open Office 365 Admin Section Navigate to portal.microsoftonline.com and log in with your credentials. Select “Office 365 settings” from the gear icon menu.
2 Navigate to Software Click on “Software”.
3 Download Skype for Business Click on “Skype for Business” in the left menu, select your language, select either 32-bit or 64-bit by clicking “Advanced”, and then click “Install”. Run the file that downloads.
Shared Mailbox Configuration
Shared mailboxes are not associated with any particular user. They give you a place for multiple users to collaborate on email, calendars, and contacts. Shared Mailboxes are typically used for generic email addresses such as resumes@, info@, inquiries@, etc. Users with “Full Access” permissions to a shared mailbox will automatically see that mailbox in local Outlook.
Creating a Shared Mailbox 1.
Open Office 365 Exchange Section Navigate to portal.microsoftonline.com and log in with your credentials. Select “Admin” from the App Drawer.
2.
Open Office 365 Exchange Section Once in the Admin Center, click “Exchange” under “Admin” in the left menu.
3.
Open the Shared Mailbox Tab Click on the “shared” link within the “recipients” section of the Exchange admin center.
4.
Add the Mailbox Click the + button and give the mailbox a display name and email address. You can then set the following permissions: Send As: Allows users to add this mailbox’s email address to their “From” drop down in Outlook and send messages from the mailbox. Full Access: Allows the user to open the mailbox in Outlook or Outlook Web Access.
Managing Existing Shared Mailboxes You can manage existing shared mailboxes in the same way as standard mailboxes. Just double click on them from the list and modify the properties. Most properties are the same.
Resource Mailbox Configuration
Resource Mailboxes are used to track rooms and equipment. They can be invited to meetings in order to easily determine their availability.
Creating a Room Mailbox 1.
Open Office 365 Exchange Section Navigate to portal.microsoftonline.com and log in with your credentials. Select “Admin” from the App Drawer.
2.
Open Office 365 Exchange Section Once in the Admin Center, click “Exchange” under “Admin” in the left menu.
3.
Open the Resources Mailbox Tab Click on the “resources” link within the “recipients” section of the Exchange admin center.
4.
Add the Mailbox Click the + button and select the type of resource mailbox you’d like to add. Room Mailbox: Includes a location, phone number, and capacity to help you with scheduling. Equipment Mailbox: Only includes a name (i.e. Project A, Main Toyota Camry).
5.
Set Info & Delegation Complete the basic settings for the mailbox. Accept or decline automatically: Automatically determines availability and confirms if a slot is available. Select delegates: Allows you to specify a list of users that receive an email about each proposed appointment and can confirm or deny the appointment.
Managing Existing Resource Mailboxes You can manage existing resource mailboxes in the same way as standard mailboxes. Just double click on them from the list and modify the properties. Some advanced settings are only available when editing an existing mailbox (not when creating one). These include booking options that allow you to:
Allow or disallow repeating meetings Restrict scheduling to working hours Automatically decline appointments that are too far in the future Specify the maximum date in the future that can be scheduled Specify the maximum duration of a reservation Include an automated reply that is sent to a meeting organizer
Distribution Group Configuration
Distribution Groups provide your organization with an easy way to email multiple people with a single email address.
Creating a Distribution Group Please note that the process for creating a distribution group does not provide a way to change a setting that allows people outside your organization to email the distribution group. See “Managing Existing Distribution Groups” for instructions on making this change.
1.
Open Office 365 Exchange Section Navigate to portal.microsoftonline.com and log in with your credentials. Select “Admin” from the app drawer.
2.
Open Office 365 Exchange Section Once in the Admin Center, click “Exchange” under “Admin” in the left menu.
3.
Open the Groups Mailbox Tab Click on the “groups” link within the “recipients” section of the Exchange admin center.
4.
Add the Mailbox Click the + button and select the type of distribution group you’d like to add. Note: We will only cover standard Distribution Groups in this guide.
5.
Enter Basic Information Record the Display Name, Alias, and Email Address of the group.
6.
Add Owners Owners have control over the distribution group. They will receive notifications if someone wants to join and can manage the distribution group from their Outlook Web Access.
7.
Add members Members will receive email sent to this distribution group. You can add other distribution groups and external contacts as well.
8.
Set Group Options Indicate whether individuals in your organization can join and leave this distribution group on their own through Outlook Web Access.
Modifying a Distribution Group 1.
Open Office 365 Exchange Section Navigate to portal.microsoftonline.com and log in with your credentials. Select “Admin” from the App Drawer.
2.
Open Office 365 Exchange Section Once in the Admin Center, click “Exchange” under “Admin” in the left menu.
3.
Open the Distribution Group Click on the “groups” link within the “recipients” section of the Exchange admin center and then double click on the distribution group you would like to edit.
4.
Modifying Delivery Management One of the most common reasons to edit a distribution group is to allow external people to send email to this distribution group (i.e., info@). You can change this setting in the “delivery management” section.
5.
Setting Permissions Just like mailboxes you can give users the ability to send email that appears to come from the distribution group. Send As: Allows users to add this mailbox’s email address to their “From” drop down in Outlook and send messages from the mailbox. Send on Behalf Of: Similar to “Send As” except outbound messages say “on Behalf Of” rather than “from” the user.
Email Encryption
Email encryption provides added security for any sensitive information you may be sending with Office 365.
Setting Up Email Encryption 1 Open Office 365 Admin Section
Click the grid icon in the upper left, then click the “Admin” tile.
2 Open Rights Management Click on “Service Settings” then “Rights Management”. On the resulting screen, click “Manage”.
3 Activate Rights Management Click “activate” to turn on Rights Management for your Office 365 instance.
4 Run PowerShell Commands Connect to your Office 365 Admin account through PowerShell using the instructions found on page 45. Enter the following commands once connected: Set-IRMConfiguration -RMSOnlineKeySharingLocation “https://sprms.na.aadrm.com/TenantManagement/ServicePartner.svc”
Import-RMSTrustedPublishingDomain -RMSOnline -name "RMS Online" Test-IRMConfiguration -RMSOnline Set-IRMConfiguration -InternalLicensingEnabled $true
5 Open Office 365 Exchange Section
Navigate to portal.microsoftonline.com and log in with your credentials. Select “Admin” from the App Drawer.
6 Open Office 365 Exchange Section
96.
Open the Mail Flow Tab
97.
Configure Rights
Once in the Admin Center, click “Exchange” under “Admin” in the left menu.
Click on “mail flow” within the Exchange admin center, then click the “+” dropdown menu. In the dropdown menu, click “Apply rights protection to messages…”
First give your encryption rule a name, such as
Management
“Email Encryption”. Then, if you want every email within your organization to be encrypted, select “[Apply to all messages]” under “Apply this rule if…” (You can configure this to your company’s needs). If your company already has a preferred RMS template, click “*Select one…” Otherwise, select another message security type from the “Do the following…” dropdown menu. When you finish configuring your preferred security settings, click “save”.
Spam Control
The default Office 365 spam filtering is typically sufficient for most organizations. If you need to modify the default settings this section describes how. NOTE: We cannot help you fine tune spam filtering for your organization. Fine tuning spam is a trial and error process that requires fast identification of issues, which is difficult for us to do since we’re not on the ground in your organization.
Changing Malware Settings You can modify what Microsoft does with a message that has a virus.
1.
Open Office 365 Exchange Section Navigate to portal.microsoftonline.com and log in with your credentials. Select “Admin” from the App Drawer.
2.
Open Office 365 Exchange Section Once in the Admin Center, click “Exchange” under “Admin” in the left menu.
3.
View Malware Filter Settings Click on the “malware filter” tab within “protection.”
4.
Modifying Delivery Management Double click on the default filter to edit the options. By default the entire message is deleted with no notification to users. Use this screen to modify the default settings.
Changing Connection Filter Settings You can whitelist and blacklist IP addresses. This is particularly important if you are integrating with third-party services that need to be able to send email to users within your organization.
1.
Open Office 365 Exchange Section Navigate to portal.microsoftonline.com and log in with your credentials. Select “Admin” from the App Drawer.
2.
Open Office 365 Exchange Section Once in the Admin Center, click “Exchange” under “Admin” in the left menu.
3.
View Connection Filter Settings Click on the “connection filter” tab within “protection.”
4.
White and Black Lists Double click on the default filter to edit the options. You can add IP addresses or ranges to the whitelist and blacklist from this screen.
5.
Enable Safe List Microsoft can use lists provided by 3rd party organizations that track IP addresses that have high and low spam activity. You can use these lists to improve your spam filtering. Note that messages that are blocked by connection filters do not trigger a notification that a message was blocked.
Changing Content Filter Settings The content filter takes a look inside email messages to identify spam. Most content filter settings are turned off by default and need to be manually enabled.
1.
Open Office 365 Exchange Section Navigate to portal.microsoftonline.com and log in with your credentials. Select “Admin” from the App Drawer.
2.
Open Office 365 Exchange Section Once in the Admin Center, click “Exchange” under “Admin” in the left menu.
3.
View Connection Filter Settings Click on the “content filter” tab within “protection.”
4.
Modify Actions Double click on the default filter to edit the options. By default spam is directed to the user’s Junk Email Folder and maintained for 7 days. If you wish to modify these settings you can use the “actions” section of this screen.
5.
Modify International Spam Options If you do not typically receive email sent from other countries you can change the options in the “international spam” section.
6.
Modify Advanced Options Modifying the options in the “advanced options” screen can have a big impact on the amount of spam that makes its way to end users. For a full description of all of these options at the link below. http://technet.microsoft.com/enUS/library/jj200750(v=exchg.150) .aspx
Using PowerShell
Overview
Some features of Office 365 cannot be configured through the web interface. Configuration of these features requires the use of PowerShell. PowerShell is a command-line utility (text based) that provides tremendous flexibility and capabilities. Using PowerShell, it is possible to automate almost every aspect of Office 365 administration. Unfortunately, PowerShell is not focused on ease of use. PowerShell is a highly advanced and specialized tool that requires significant training and testing. This document is not intended to provide you with the information you will need to become a PowerShell expert. Instead, we will attempt to give you a few basic commands you can use to administer commonly used features. This section of the Admin Guide covers installing PowerShell and getting connected to Office 365 using PowerShell. The actual commands you will need are spread throughout this document in the appropriate section.
Installing & Configuring PowerShell
Please note that PowerShell does not come with every computer. You’ll need Windows 7 or Server 2008R2 or newer and then you’ll need to complete the following steps: 1. Turn on Windows PowerShell and .NET 3.5 2. Install PowerShell Modules 3. Turn On Remote Signed Execution
Step 1: Turn on Windows PowerShell and .NET 3.5 Most computers running Windows 7 or Server 2008R2 or newer come with PowerShell installed. If it is not available you can turn it on in the control panel.
1.
Open Windows Features From the Programs and Features section of Control Panel select “Turn Windows features on or off”
2.
Add .NET Turn on “.NET Framework 3.5.” NOTE: You do not need either Windows Communication Foundation features.
3.
Add PowerShell Add both PowerShell features and click “OK” to install.
Step 2: Install PowerShell Modules Download and install the appropriate bit-version (32 or 64) of the following software:
Microsoft Online Services Sign-In Assistant o http://www.microsoft.com/en-us/download/details.aspx?id=41950 Windows Azure AD Module for Windows PowerShell o http://technet.microsoft.com/library/jj151815.aspx#BKMK_Requirements o Direct 32bit Link: http://go.microsoft.com/fwlink/p/?linkid=236298 o Direct 64bit Link: http://go.microsoft.com/fwlink/p/?linkid=236297
Step 3: Turn on Remote Signed Execution 1.
Open PowerShell as Administrator (Windows 7)
For Windows 7 Right click on Windows PowerShell from your Start menu and left click on “Run as Administrator.”
2.
Open PowerShell as Administrator (Windows 8)
For Windows 8 Find Windows PowerShell from your programs menu and right click on the icon. Left click on “Run as Administrator” in the bottom bar that appears.
3.
Turn on Remote Signed Execution Run the following command and confirm the change by typing “Y” set-executionpolicy remotesigned
Connecting to Office 365
Every time you wish to run commands against Office 365, you’ll first need to connect to Office 365. You’ll need to complete these steps before running the other commands in this document. For reference, this entire set of commands is below. In the future you can just copy/paste the entire block into PowerShell.
import-module MSOnline $O365Cred = Get-Credential $o365Session = New-PSSession -ConfigurationName Microsoft.Exchange ` -ConnectionUri https://ps.outlook.com/powershell/ ` -Credential $o365Cred -Authentication Basic -AllowRedirection Import-PSSession $O365Session Connect-MsolService -Credential $O365Cred
1. Import the PowerShell Modules Run the following command to import the PowerShell modules and make them available once you’ve connected to Office 365. import-module MSOnline
2. Enter your Office 365 Credentials Run the following command to record your Office 365 credentials. Use your full email address and password: $LiveCred = Get-Credential
1
Create your Session Run the following command to create a new session that will be used to connect to Office 365. Note that the entire command needs to be entered as one line of text. Be careful when copy/pasting. $Session = New-PSSession -ConfigurationName Microsoft.Exchange -ConnectionUri https://ps.outlook.com/powershe ll/ -Credential $LiveCred -Authentication Basic -AllowRedirection
98.
Import the Session Import the session using the following command to get connected. Import-PSSession $Session
99.
Connect to Office 365 Run the following command to finish connecting to Office 365. Connect-MsolService -Credential $LiveCred
100. Finding the Right Command For a full list of available commands in Office 365, run the following command. Get-Command -module MSOnline
101. Some Common Commands All of these commands require an Excel spreadsheet with your organization’s users. “&C7&” and variations of this represent a cell in your Excel spreadsheet that contains the desired user's email address, so these commands will not
work without that information. Substitute the cell name (C7 for example) with the proper cell name in your spreadsheet. Make sure to leave the "&" symbols.
102. Reset User Password
103. Set Multiple Alias Accounts 104. Set Up Distribution Groups
105. Add Members to a Distribution Group
="Set-MsolUserPassword -UserPrincipalName " &C7& " -NewPassword '@password1' -ForceChangePassword $false " =CONCATENATE("Set-Mailbox ",A1," -EmailAddress ",A1,",",B1,",",C1,",",D1) ="New-DistributionGroup -Name '" &A3& "'-DisplayName '" &A3& "' -Alias '" &D3& "' -PrimarySmtpAddress " &C3 ="Add-DistributionGroupMember -Identity " &C64& " -Member " &D64 ="Add-DistributionGroupMember -Identity [email protected] -Member " &C2
106. Set Up Alias Mailboxes
="$Temp = Get-Mailbox -Identity " &C7 ="$Temp.EmailAddresses += ('smtp:"&C7&"@nationalitiesservice .org')" ="Set-Mailbox -Identity "&C7&" -EmailAddresses $Temp.EmailAddresses"
107. Set Ownership of Distribution Group to Single User
Set-DistributionGroup "Group Name" -ManagedBy "Admin Account" -BypassSecurityGroupManagerChec k
108. Remove Attachments as win.dat files 109. Change Calendar Permissions
110. Set Up Shared Mailbox 111. Get User Principle Names 112. Assign Location to Each User 113. Assign Licenses to Each User
Set-RemoteDomain Default -TNEFEnabled $false add-MailboxFolderPermission -Identity KlamathFallsCalendar:\Calendar -User KlamathFalls -AccessRights PublishingAuthor New-Mailbox -Name "Contoso Support" -Alias support –Shared = Get-MSOLUser | Out-File c:\userlist.txt ="Set-MsolUser -UserPrincipalName " &C7& " -UsageLocation US" Remove parentheses from below and fill with the domain that was used when signing up for the account.
="Set-MSOLUserLicense -UserPrincipalName " &C7&" -AddLicenses (domainusedforadminaccount):EXC HANGESTANDARD"
If you do not want to type in all this code every time you want to connect to Office 365, there is something called profiles that can make life a lot easier. When starting PowerShell it will run any commands it finds in a special document known as $profile. To create this file, you'll need to enter new-item -type file -path $profile -force in PowerShell. Then, to find where this document exists on your system, enter $profile. You can then open the document with a text editor and paste the commands above into this document. Now whenever you open PowerShell, it will automatically attempt to connect to Office 365, prompting you to enter your credentials.
Miscellaneous Administrative Tasks
Here are some optional tasks available to you as an administrator that you may find helpful.
Analytical Reports 1 Open Office 365 Admin Section Navigate to portal.microsoftonline.com and log in with your credentials. Select “Office 365” from the Admin menu.
2 Navigate to Reports Click on “Reports” in the left menu. From here you can view analytics on how your organization is using Office 365
3 Download Your Reports You can also download your reports as an Excel spreadsheet if you have Excel 2013.
Outlook for Mobile Devices 1 Open Office 365 Exchange Section Navigate to portal.microsoftonline.com and log in with your credentials. Select “Exchange” from the Admin menu.
114. Open Recipients Click on “recipients” in the left menu.
115. Mobile Devices Configuration Exchange ActiveSync and Outlook Web Access will be enabled by default for all users. In the Mobile Devices menu on the right you can disable these options if you do not want your users to be able to sync Outlook with their mobile devices or access Outlook Web Access.