Microsoft 365 Administrator : MS-102

Explore what Microsoft 365 is, why Office 365 renamed, and how the suite bundles home, business, and enterprise plans with apps like Defender, OneDrive, SharePoint, and Teams.

Explore creating and managing a Microsoft 365 tenant and domains, including Azure Active Directory, onmicrosoft domains, domain verification via DNS, and branding in the admin center.

Explore how to monitor service health in Microsoft 365 using the admin center, health dashboards, and issue reporting, including uptime SLAs.

Monitor adoption and usage of microsoft 365 using the admin center’s usage and adoption reports. Turn on adoption score to benchmark against baselines and monitor teams, outlook, and office apps.

Learn to create and manage users and groups in Microsoft 365, including licensing, Exchange Online mailboxes, Teams access, guest and contact management, and template-based provisioning.

Manage and monitor Microsoft 365 license allocations in admin portal, tracking assigned vs purchased licenses. Use the auto claim policy to provision new hires and handle license requests and reallocations.

Master bulk user management by using dashboard view, CSV import, PowerShell, Azure AD Connect, or exchange migration to quickly create multiple Microsoft 365 users.

Manage roles and role groups in Microsoft 365, assign admin roles in the admin center and Exchange, apply least privilege, and use administrative units for access control with multi-factor authentication.

Configure delegation in Microsoft 365 via the exchange admin center, selecting send as, send on behalf, or read and manage full access, and follow best practices for departures.

Explore privileged identity management in Azure Active Directory to elevate user privileges just in time for defined dates, monitor assignments, and prevent privilege creep across Microsoft 365 and Azure resources.

Demonstrates how the free ID Fix tool prepares on-prem Active Directory for Azure Active Directory Connect cloud sync, scans for issues, and reveals a top-level domain .local problem.

Learn to implement Azure AD Connect Cloud Sync, install the provisioning agent, and configure a UPN suffix like acims365lab.com to synchronize on-prem AD with Azure AD, including password hash sync.

Highlight the shift from legacy AD Connect to Cloud Sync, emphasizing health monitoring, object limits (50,000 default), writable domain controllers, and security hardening.

Diagnose and resolve synchronization issues between on-premises Active Directory and Azure Active Directory using cloud sync, verify agents are running, enable configurations, and monitor logs for errors.

Explore nine authentication methods in Azure Active Directory, including passwordless options like Windows Hello for business, fido keys, and the authenticator app.

Enable self-service password reset in Azure Active Directory for all users via email or mobile. Administrators retain reset ability, and you can monitor registrations, successes, failures, and retry policies.

Learn to implement Azure AD password protection in Microsoft 365, enable the built-in banned-password list, add a custom forbidden-words list, and set enforce or audit mode with the on-prem agent.

Implement multi-factor authentication (MFA) in Microsoft 365 and understand why per-user MFA is deprecated. Security defaults in Azure Active Directory enforce MFA for admins and end users.

Learn to troubleshoot authentication in Microsoft 365 using Azure AD sign-in logs, sign-in diagnostics, and authentication method monitoring while managing hybrid environments, directory sync, and MFA registration.

Plan for identity protection in Microsoft 365 by leveraging auto-generated, expert-generated, and end-user generated insights. Use real-time risk evaluations and conditional access to secure access.

Configure Azure AD identity protection to detect user and sign-in risk and apply risk-based policies. Integrate with conditional access and note Entra ID naming and premium licensing (P1/P2).

Plan and implement conditional access policies using Azure Active Directory (Entra ID) and Defender tools to tailor grant and block decisions across devices, apps, and regions.

Learn to implement conditional access policies in Azure Active Directory, using user risk, MFA, and named locations. Create from scratch or templates, disable security defaults, test in report-only, then enable.

Explore Microsoft 365 Defender, a single-pane security suite that correlates alerts across endpoints, email, identities, and cloud apps, offering pre- and post-breach protection and automated remediation.

View your Microsoft 365 Secure Score in the Microsoft 365 Defender security center, compare it to industry averages, and follow step-by-step recommendations to strengthen identity, data, and apps security.

Explore how to respond to alerts in MS 365 Defender, distinguish alerts from incidents, review correlated investigations, and use Defender portals to monitor malware events and admin actions.

Explore how to access security and compliance reports in Microsoft 365 Defender. Know you need global or security admin permissions and the general, endpoints, email, and cloud apps categories.

Learn to use threat analytics in Defender for 365 to read latest threats, assess high impact and exposure, filter by threat tags, and apply recommended protections.

Explore how policies differ from rules in Microsoft 365 Defender, focusing on threat policies, impersonation protection, and the built-in configuration analyzer.

Learn to respond to threats identified in Defender for Office 365 by using Explorer to save queries, monitor Threat Tracker, and track trends for informed security actions.

Create and run campaigns in Microsoft 365 to detect sophisticated attacks across apps, and run simulated phishing training for employees with analytics and Microsoft Defender for Endpoint integration.

Unblock a restricted entity in Microsoft 365 Defender, learn why entities are restricted from sending email due to spam or breaches, and implement post-unrestriction security measures and alert policies.

Learn the basics of Microsoft Defender for Endpoint, including plan differences, antivirus, attack surface reduction, automated vs manual responses, and cross-platform coverage for Windows, macOS, Linux, iOS, and Android.

Learn how to onboard Defender for Endpoint across Windows, macOS, Linux, and servers using Intune, group policy, CM, Jamf, and Defender for Cloud.

Navigate Defender for Endpoint settings, including onboarding and offboarding scripts, device discovery, enforcement scope with Intune, alert thresholds, web content filtering, and integrations.

Explore Defender for Endpoint in the Microsoft 365 Defender console to view incidents, alerts, and vulnerability management insights that improve exposure score and secure scores.

Discover Microsoft Purview, a cross-cloud data governance and compliance tool that increases visibility, safeguards sensitive data, and enforces policies across Microsoft 365 and AWS.

Discover how Microsoft Purview classifies and protects sensitive information types, using built-in classifiers and customizable sensitivity labels across data sources like AWS S3.

Learn to implement retention and sensitivity labels in Microsoft 365, create and publish labels, and apply policies that govern data retention and automatic actions across Teams, OneDrive, and Exchange.

Implement data loss prevention for workloads with Microsoft Purview, using templates to scan Exchange, SharePoint, and OneDrive for credit card, bank account, and ABA data, with test mode before deployment.

Implement endpoint data loss prevention with Purview by enabling advanced scanning, classifiers, and endpoint controls through the compliance portal, with Intune enhancing security on Windows 10, Windows 11, and macOS.

Centralize data loss prevention alerts in Purview and the Microsoft 365 Defender incidents page to manage DLP events with a single pane of glass and improve compliance through governance roles.