OSP312 Office 365 Deployment Ben Walters Jeff Medford Mark Rhodes 1/17/2019 10:40 AM OSP312 Office 365 Deployment Ben Walters Jeff Medford Mark Rhodes Yoni Kirsh © 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Introducing the new Office 365 Microsoft Office365 1/17/2019 Introducing the new Office 365 Devices Fast and fluid experience with touch, pen, mouse & keyboard Immersive touch-optimized Windows 8 apps Support for Windows Phone, iOS & Android phones Cloud Office as a cloud service, roaming, always up to date New cloud app development model Enterprise-grade reliability and standards Social Newsfeeds & microblogging, extend with Yammer Pervasive social capabilities across Office Multiparty HD video & Skype federation Control DLP, data retention & unified eDiscovery Reimagined deployment model for Office apps Common management experience across Office 365 © 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Microsoft Office Productivity Essential for business of all sizes Comprehensive tools To do your best work Enterprise-grade cloud services Dynamic workplace Making sense of it all Merging home & work Natural expression Responsible organization

Experience value early TechReady 16 1/17/2019 Office 365 Deployment Pilot Deploy Enhance 1 2 3 Experience value early New cloud experience Real world benefits Broad production use Full feature value Meet your needs Exchange, SharePoint & Lync Online, Office ProPlus, WA Active Directory © 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

First use in hours, onboarding in days TechEd 2013 1/17/2019 10:40 AM First use in hours, onboarding in days Exchange, SharePoint, Lync, Office 365 ProPlus, WA Active Directory Pilot Deploy Enhance 1 2 3 Full Office 365 service Pilot in hours Persist to deployment User led migration Core onboarding Deploy in days Companywide cloud use IT led migration Optional integration Extend in weeks Meet business needs Customized to landscape What Office 365 service Exchange, SharePoint, Lync, Office Web Apps, Office 365 ProPlus, Mobile What All pilot features + Shared namespace, simple coexistence, external sites What Deploy + Federation, hybrid delegation, and more How Office 365 service Service domain Cloud identity Web client How Pilot + IT led migration * Customer domain Directory sync How Deploy +* Configure adv. features Federated identity Exchange hybrid Corporate app store Office client Self service Password sync Admin migrations OnRamp SharePoint hybrid Lync hybrid 3rd party migration tools Pilot complete Deploy complete Adopt new features © 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

1: Pilot Experience Setup on day 1 Full use of the service Microsoft Office365 1/17/2019 1: Pilot Experience Setup on day 1 Full use of the service User driven pilot Pilot setup continues to step 2 deploy Limited on-premises requirements Sign-on Pilot the service quickly User signs into Office 365 with a Cloud ID (jane@contoso.onmicrosoft.com) Mail Pilot the new Exchange mailbox New mailbox in the cloud Inbox content populated via Connected account User sends/receives email as Jane@contoso.com User PST import option for additional content migration (mail/calendar/contacts) Collaboration Pilot the new collaboration tools Run online meetings with any user with computer & app sharing, video conferencing, and PC-to-PC calling Collaborate using SharePoint Online team site and newsfeeds Easily store files in the cloud with SkyDrive Pro and share file with external users Clients Office across multiple devices Access the service via a browser - Office Web Apps across devices and platforms – no client required User self-install of Office 365 ProPlus side-by-side with existing Office client installations Mobile Experience Office anywhere Mobile connectivity options are built into the service – just start connecting devices Connect to Office 365 via mobile devices with Exchange Active Sync for mail Platform specific mobile apps bring best experience where it makes sense - i.e. OneNote, Lync Administration Control & manage your pilot Centralized administration from the Office 365 admin center in the service. Online management centers for Exchange, SharePoint, and Lync. Service health dashboard to monitor service maintenance and incidents. Service use reporting available in the service admin center including service activity. © 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

TechEd 2013 1/17/2019 10:40 AM Demo © 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

2: Deploy Experience – what’s added Microsoft Office365 1/17/2019 2: Deploy Experience – what’s added Setup in days Adds on-premises integration Pilot user and info is sustained IT driven migration Mail migration that best fits environment Sign-on Integrated identity management Sign-on with the same user and password as on premises Mail Integrated mail flow and migration Global address list Full mail content migration – mail, calendar, contacts From EX 2010 Mail Servers Managed mail moves (MRS) Free/busy cross premises Use existing OST From EX 2007/03 Mail Servers Staged mail migration New mail file download From Others User migration (PST import) or IMAP Migration New mail file Collaboration Sharing and working with others Lync business partner federation Site governance and provisioning support Setup of Apps for Office corporate app catalog Clients IT managed client productivity Office 365 ProPlus deployed to user desktop via IT process Mobile Managed mobile connectivity Send and receive mail from mobile device as on-prem email Administration Control & monitor Data loss prevention configuration (limited) Exchange Online Protection mail protection configuration (limited) © 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Optimized onboarding path Pilot Source Pilot Deploy Enhance Cloud ID PST Connected account Self service Migration PST import tool IMAP migration IT Driven Pilot users use the service in about an hour Start with a clean mailbox or with their own data

Optimized onboarding path Deploy Cloud identity Source Pilot Deploy Enhance Self service PST Migration Shared namespace PST import tool IMAP migration IT driven Deploy quickly using cloud identity Option to expedite with use of a new or shared namespace with limited GAL

Optimized onboarding path Deploy Synchronized identity Source Pilot Deploy Enhance Enhance IT driven Hybrid migration Hybrid servers Migration Use the service within weeks post-introduction of hybrid servers Complete GAL availability

Onboarding Tools and Resources Engineering service adoption enhancements

IdFix

IdFix-Dirsync error remediation tool TechEd 2013 1/17/2019 10:40 AM IdFix-Dirsync error remediation tool Identifies and remediates AD object issues that will fail Windows Azure AD Dirsync Built on analysis of Dirsync daily error volumes and is targeted at fixing the majority of errors quickly Provides a datagrid with the ability to scroll, sort and edit Suggested fixes are provided for known errors Customer change confirmation change and undo/rollback functionality Available for download from TechNet © 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

IdFix-Dirsync error remediation tool TechEd 2013 1/17/2019 10:40 AM IdFix-Dirsync error remediation tool Across all objects: Well know exclusions (“Admini*”, “CAS_{“, etc.) Distinguised name contains “\OACNF:” isCriticalSystemObject Looks for invalid characters, checks length constraints, format and duplicate values across: c, co, displayName, givenName, Mail, mailNickName, proxyAddress, sAMAccountName, sn, targetAddress, userPrincipalName © 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

IdFix Tool

TechEd 2013 1/17/2019 10:40 AM Demo © 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

3: Enhance- What’s added Adds scenarios Extended durations Customer specific implementation Ability to add to deployed clients at point in the future Sign-on Advanced integration Single sign-on / ADFS 3rd Party identity providers – “Works with program” Mail Advance migration scenarios Notes migrations Hybrid Exchange for 2007 or 2003 Collaboration Advanced integration and solution building Lync or SharePoint hybrid SharePoint solutions – including BCS, Duet, etc. Clients Advanced client management capabilities Virtual desktop and virtual application scenarios Mobile Connect to the service Blackberry Enterprise Sever integration Administration Leverage advanced service controls Data loss prevention configuration Exchange Online Protection mail protection configuration

Windows Azure Active Directory Directory store Authentication platform Windows Azure Active Directory

Core identity scenarios with Office 365 Cloud Identity Windows Azure Active Directory no integration to on-premises directories On-Premises Identity Dirsync & Password Sync* Directory & Password Synchronization Integration without federation Windows Azure Active Directory Federated Identity On-Premises Identity Federation Single federated identity Windows Azure Active Directory Directory Sync

Cloud Identity Windows Azure Active Directory Authentication OAuth2 SAML-P WS-Federation Metadata Graph API Authentication Office 365 Admin Portal Office Activation Service Authorization Exchange Mailbox Access … Spreadsheet CSV Import

Directory & Password Sync Windows Azure Active Directory OAuth2 SAML-P WS-Federation Metadata Graph API Authentication Office 365 Admin Portal Office Activation Service Authorization Exchange Mailbox Access … On Premises DirSync Active Directory

Scoping & filtering for Synchronization Microsoft Office365 1/17/2019 Scoping & filtering for Synchronization Customers can exclude objects from synchronisation Scoping can be done at multiple levels Additional filtering capabilities will become available with the O365 Connector. © 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Directory Synchronization Options DirSync Office 365 Connector PowerShell & Graph API Suitable for Organizations using Active Directory (AD) Provides best experience to most customers using AD Supports Exchange Co-existence scenarios Coupled with ADFS, provides best option for federation and synchronization Supports Password Synchronization with no additional cost Does not require any additional software licenses Suitable for large organizations with certain AD and Non-AD scenarios Complex multi-forest AD scenarios Non-AD synchronization through Microsoft premier deployment support Requires Forefront Identity Manager and additional software licenses Suitable for small/medium size organizations with AD or Non- AD Performance limitations apply with PowerShell and Graph API provisioning PowerShell requires scripting experience PowerShell option can be used where the customer/partner may have wrappers around PowerShell scripts (eg: Self Service Provisioning)

Federated Identity Windows Azure Active Directory On Premises OAuth2 SAML-P WS-Federation Metadata Graph API Authentication Office 365 Admin Portal Office Activation Service Authorization Exchange Mailbox Access … Active Directory Federation Services One way trust Active Directory DirSync On Premises

Federation options ADFS Works with AD Suitable for medium, large enterprises including educational organizations Recommended option for Active Directory (AD) based customers Single sign-on Secure token based authentication Support for web and rich clients Microsoft supported Active Auth (Phone Factor) can be used for two factor auth Works for Office 365 Hybrid Scenarios Requires on-premises servers, licenses & support * Broader SAML implementations will be supported in 1H CY2013

Microsoft Online Services Identity federation Authentication flow (passive/web profile) Customer Microsoft Online Services User Source ID Logon (SAML 1.1) Token UPN:user@contoso.com Source User ID: ABC123 Auth Token UPN:user@contoso.com Unique ID: 254729

Microsoft Online Services Identity federation Authentication flow (MEX/rich client profile) Customer Microsoft Online Services User Source ID Logon (SAML 1.1) Token UPN:user@contoso.com Source User ID: ABC123 Auth Token UPN:user@contoso.com Unique ID: 254729

Microsoft Online Services Identity federation Active flow (Outlook/Active Sync) always external Customer Microsoft Online Services User Source ID Logon (SAML 1.1) Token UPN:user@contoso.com Source User ID: ABC123 Auth Token UPN:user@contoso.com Unique ID: 254729 Basic Auth Credentilas Username/Password

Client access control with SSO Limit access to Office 365 based on network connectivity (internet versus intranet) Block all external access to Office 365 Block all external access to Office 365 except Exchange Active Sync Block all external access to Office 365 except browser-based applications such as OWA or SharePoint Online http://technet.microsoft.com/en- us/library/hh526961(WS.10).aspx

Multi-Factor Authentication TechEd 2013 1/17/2019 10:40 AM Multi-Factor Authentication For DirSync Options : Azure Multi-Factor Authentication will work For SSO : Azure Multi-Factor Authentication Server must be installed onto ADFS Proxy Server © 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

TechEd 2013 1/17/2019 10:40 AM Office 365 Adapter Allows for DirSync and ADFS Capabilities without capital investment in your data center http://www.microsoft.com/en-au/download/confirmation.aspx?id=38845 © 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Resources Learning TechNet Developer Network 1/17/2019 10:40 AM Resources Learning Sessions on Demand http://channel9.msdn.com/Events/TechEd/Australia/2013 Virtual Academy http://www.microsoftvirtualacademy.com/ TechNet Developer Network Resources for IT Professionals http://technet.microsoft.com/en-au/ Resources for Developers http://msdn.microsoft.com/en-au/ © 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

TechEd 2012 1/17/2019 10:40 AM Keep Learning Keep up to date with all the latest Office 365 information at http://ignite.office.com Get on top of your pilot using the FastTrack deployment process http://fastTrack.office.com Trial Office 365 http://office.microsoft.com © 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

1/17/2019 10:40 AM © 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION. © 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.