Microsoft 365 Identity And Services (Exam MS-100)

Explore Exchange Online in Microsoft 365, including recipient types and shared mailboxes, anti-malware and anti-spam protections, and online archive access with high availability.

Create a resource mailbox (room mailbox) in Exchange Online to reserve conference rooms or equipment. Configure booking options, capacity, location, email, and auto or delegated approval for reservations.

Create a shared mailbox in Exchange Online to host a generic address without a license; assign full access, send as, or send on behalf, plus aliases and mailtips.

Create mail contacts in the Exchange admin center to share external addresses via the global address list. After creation, add more details; you can import from CSV with PowerShell.

Create a mail user in the Exchange Admin Center for external recipients. Provide an Office 365 login ID and password without a license to access a shared mailbox.

Discover how Exchange Online Protection filters inbound mail for spam and malware using spam confidence levels, anti-phishing, and anti-malware, with outbound controls and an SLA for known viruses.

Customize malware filters in Exchange Online Protection via the Exchange Admin Center, including setting notifications, per-recipient rules, and filter priority, with the default filter always remaining.

Configure the Exchange connection filter to manage spam by using allow and block IP lists, including CIDR blocks, and enable the safe list to bypass safe sender lists.

Configure spam filters in exchange online protection by creating a custom international spam filter, adjusting actions for high confidence spam, and managing blocklists, allowlists, and language or country-based rules.

Configure the outbound spam filter in protection settings and customize notifications for spam messages. Choose to copy or alert on blocked senders, and note the default filter cannot be deleted.

Explore quarantine management across exchange admin center and the security and compliance center, releasing or removing messages, previewing headers, and reporting a false positive to Microsoft for malware or spam.

Learn to create and apply retention policies in Exchange Online using default, folder, and personal retention tags, and understand tag precedence that directs archive or delete actions.

Learn to create and apply Exchange Online retention policies with tags to organize mail for individual users, and distinguish them from security and compliance center policies that enforce retention.

Learn how SharePoint Online provides a managed web app with site collection management, encryption in transit and at rest, data loss prevention, two-stage recycle bins, malware engines, and virus definitions.

learn how to create and manage site collections in SharePoint online, choosing templates like team or communication sites, configuring admin settings, and recovering deleted sites within 93 days.

Learn to use term store taxonomy to standardize metadata in SharePoint Online document libraries. Create term sets and terms, apply them to columns to improve filtering and consistency.

Manage SharePoint search by converting crawled properties to managed properties, and bubble second- and third-level authoritative pages to the top while demoting blogs and less relevant results.

Explore SharePoint Online settings in the admin center, manage storage automatically or manually, control user site creation, and set default timezones while navigating new and classic admin experiences.

Configure tenant- and site collection level external sharing in SharePoint Online, controlling guest access via azure active directory, domain restrictions, and link-based sharing with view or edit rights.

Protects data at rest with BitLocker in SharePoint and OneDrive for Business, and secures data in transit with SSL encryption and 2048-bit keys, including IPsec for inter-data-center transfers.

Learn how data loss prevention in SharePoint protects and recovers deleted items via the local and site collection recycle bins, versioning, and point-in-time recovery.

protect your SharePoint online environment from malware with a multi-layered system using multiple antivirus engines, retroactive virus tagging, rapid definition deployment, and real-time threat response.

Teams serves as a chat-based hub for teamwork, with channels, persistent chats, and Office 365 group integration, plus SharePoint, Exchange mail, connectors, bots, and Planner.

Use the Teams admin center to manage Teams, channels, and devices, set cloud PBX and E911 locations, and configure org-wide messaging and external access policies.

Flow enables no-code workflow automation in Microsoft 365, letting you automate tasks such as saving email attachments to OneDrive and tracking leads. Use templates or build multi-step flows with connectors.

Explore Microsoft Sway, a free Office 365 app that lets you create web presentations by combining text, pictures, multimedia, and videos without coding.

Discover how Planner enables task assignment and workflow visibility within a project, and how adding a Planner tab to Teams keeps the team aligned and on schedule.

Explore Microsoft 365 ProPlus, a click-to-run suite with Word, Excel, PowerPoint, OneNote, and InfoPath, plus Office Online, Mac 2016 integration, rights management, encryption, and co-authoring.

Explore Microsoft 365 install options, including click-to-run packaging and Office deployment tool deployments with Intune. Activation requires internet; licenses cover five devices per user, with reduced functionality mode when offline.

Configure user-driven installations from the Microsoft 365 admin center by adjusting office software download settings, selecting 64-bit or 32-bit options, and choosing monthly or six-month update cycles.

Learn to execute a managed Office deployment using the Office deployment tool, create a shared deployment folder, configure a deployment XML for Office 365 ProPlus, and export settings.

Download Office Deployment Tool bits to a central repository with a configuration.xml, then push them to users via GPO using setup.exe /download and /configure.

Understand how Office 365 ProPlus updates are delivered—from the internet or a central share—and how feature and quality updates with monthly and semi-annual channels shape 18-month support.

Collects centralized telemetry data to inventory office versions and add-ins, enabling testing of upgrades to Office Pro Plus. Analyzes usage patterns and stability issues to minimize user impact during rollout.

Install and configure Office telemetry to collect data from clients, deploy agents for older versions, route data to a shared folder, and view insights through the telemetry dashboard and database.

Explore how workplace analytics uses digital exhaust from emails and calendars to map collaboration patterns to business results, using Power BI dashboards and custom reports.

Explore the Microsoft global fiber network, its private high-bandwidth, low-latency architecture, and peering with 2500+ ISPs to optimize Microsoft 365 access with MSN.net routing for better user performance.

Estimate your Microsoft 365 bandwidth needs by analyzing user counts, office locations, and service usage, then use Microsoft calculators to extrapolate pilot results to the whole organization.

Explore how to test and diagnose your existing network and Office 365 connectivity using the remote connectivity analyzer and SaRA, including outlook connectivity, server discovery, and log analysis.

White-list Office 365 URLs and IPs to bypass filtering and scanning. Avoid outbound proxy authentication for 365 domains, minimize NAT device port usage, and route via nearby peering locations.

Plan your mail migration to Microsoft 365 by selecting cutover, staged, or hybrid approaches based on user count, exchange version, and connectivity, while updating the MX record to route mail.

Plan where files live across SharePoint online, OneDrive for Business, and team sites, and use the SharePoint migration tool to move on premises data to OneDrive in Office 365.

Plan your Microsoft 365 authentication strategy by comparing cloud-only accounts, on-premises directory synchronization with password hash or pass-through authentication, and federated single sign-on with AD FS.

Discover how Microsoft 365 modern authentication uses OAuth access tokens and multi-factor authentication to replace basic authentication, with automatic support in Exchange Online, SharePoint Online, and Teams.

Discover how Microsoft 365 identities serve as the gateway to your data and how multi-factor authentication strengthens security by requiring something you know, something you have, or something you are.

Explore how Microsoft 365 uses role-based access control to assign predefined roles like Global Administrator, Exchange Administrator, SharePoint Administrator, and Teams Administrator to manage services and security.

Assign user roles in the Microsoft 365 admin center by selecting users, opening profiles, and choosing global or service-specific roles such as Exchange, SharePoint, and Teams.

Plan your Microsoft Teams environment by mapping data and real-time traffic between Office 365 and Teams, keep ports open, and apply up-to-date URL/IP whitelisting with bandwidth guidance.

Compare Microsoft 365 business and enterprise subscriptions, from Office Essentials to E5, highlighting Intune device management, identity and access management with Azure Active Directory P1/P2, and advanced security features.

Add custom domains to Microsoft 365 to replace the default onmicrosoft.com domain, manage subdomains, and host DNS records, noting DNS propagation can take up to 72 hours.

Add a custom domain in the Microsoft 365 admin center, verify ownership with a TXT or MX DNS record, and allow for DNS propagation before saving.

Configure DNS records for Microsoft 365, including a-records for AD FS, alias or CNAME, MX, SPF, autodiscover, and SIP/federation records for hybrid setups or Skype for Business.

Configure DNS records for Microsoft 365 to enable email delivery, device registration, and auto discover for Outlook, including MX, CNAME, TXT, and service locator records.

Monitor Microsoft 365 service health and incident statuses, including investigating, service degradation, and service interruption, view history, and access post-incident reports and status pages to understand outages and recovery.

Learn to access and customize Microsoft 365 reports in the admin center and Security & Compliance Center, view usage, activations, top senders, and schedule monthly email reports.

Form a cloud incident response plan that confirms impact, checks relevance by region, requests an estimated restoration, and activates offline workarounds such as local OneDrive sync until services recover.

Open a service request in the Microsoft 365 admin center, describe the issue, attach up to five files or screenshots, and submit for a 14-minute initial support contact.

Explore the Microsoft 365 user identity types—cloud identities, synchronized identities via Azure AD Connect, and federated identities—and how on-premises and cloud authority affect authentication, licensing, and tokens.

Create and manage Microsoft 365 user identities through the admin portal or bulk CSV uploads, assign licenses and roles, set passwords, and ensure regional privacy compliance.

Modify user properties including username, groups, roles, and contact information in the Microsoft 365 admin center. Use paid Azure AD to license by group and automate via directory synchronization.

Delete a user to reclaim the license and remove their mailbox and OneDrive access. Recover within 30 days from Deleted users, or perform a hard delete with PowerShell.

Explore Microsoft 365 admin roles, including global administrator, billing administrator, Exchange administrator, helpdesk administrator, service administrator, and user management administrator, and learn how to assign them via the admin portal.

Explore Microsoft 365 groups, including Office 365 groups and distribution lists. Learn to manage mail-enabled and security groups in the Exchange admin center, and explore dynamic distribution lists.

Privileged identity management enables just-in-time administrative access by elevating eligible users from standard to admin, with multi-factor authentication verification, time-limited access, activity tracking, and access reviews.

Configure cloud-based password policies in Microsoft 365 for cloud-only accounts, choosing non-expiring or expiring passwords, set 14–730 day ranges, and enable 1–30 day reset reminders and self-service resets.

Activate and enforce multi-factor authentication in the Microsoft 365 admin center, configure authentication methods (phone, text, authenticator app), and manage app passwords and device caching.

Enable self-service password reset in Azure Active Directory with optional writeback for synced identities. Configure groups and authentication methods (Authenticator, email, SMS, calls, security questions) in the Azure portal.

Enable Azure AD access reviews to audit permissions, groups, apps, and roles; automatically revoke access after no response, with periodic reviews and premium P2 or E5 licensing.

Discover three single sign-on options for Microsoft 365—AD FS, Azure AD Connect with password hash synchronization, and pass-through authentication with seamless SSO, enabling one-time login to Sharepoint and Teams.

Synchronize on-premises Active Directory with Azure Active Directory using Azure AD Connect to sync users, groups, and contacts, with optional password hash synchronization or without, and OU or attribute filtering.

Prepare your on-premises directory for Azure AD Connect by upgrading domain controllers to 2008 R2 and ensuring 64-bit sync server, then clean up UPNs with idFix and exclude disabled users.

Learn how Azure AD Connect supports multi-forest deployments by synchronizing on-premises directories with Azure AD, using a single active sync server and per-forest autodiscover and certificates.

Install and configure Azure AD Connect to synchronize on-premises Active Directory with Azure AD, including download, prerequisites, custom settings, domain filtering, and initial synchronization options.

Enable and monitor directory synchronization with azure ad connect, configure connectors and ous, perform initial and delta syncs via powershell, and review logs to confirm idle status.

Configure Azure AD Connect Health to monitor synchronizations, set alerts, and connect health agents for on-premises AD DS and AD FS from the Azure portal; learn license requirements.

Understand federated identity, establishing trust between an on-premises identity provider and a resource provider to enable single sign-on to Microsoft 365 without password synchronization.

Explore how Active Directory Federated Services enables single sign-on to cloud resources through federated trust, token exchanges, and redirects between on-prem ADFS and the Microsoft Online Federation Server.

Identify prerequisites for setting up Active Directory Federated Services with Azure AD, including directory sync, required certificates, domain functional level, and database options, and automatic certificate rollover every 12 months.

Install and configure Active Directory Federation Services on Windows Server 2016, including role installation, SSL certificate setup, group managed service accounts, and KDS root key preparation.

Install and configure the web application proxy to let external users obtain tokens from the ADFS server without direct internet exposure, using remote access, federation service name, and certificate.

Launch the Azure AD Connect wizard to convert a domain from managed to federated. Configure AD FS and federation settings to enable federated authentication for the lab domain.

Switch between federated and managed domains using Azure AD Connect and password synchronization, then set the MSOL domain authentication to convert to a managed domain and restore cloud access.

Use the Azure Active Directory application proxy to expose on-premises apps. Connect through an outbound call to Azure, and deploy a Windows Server connector and external endpoint.

Learn the prerequisites for Azure AD application proxy: paid AD edition, connector on Windows Server 2012 R2+, same-domain single sign-on, and outbound ports 80 and 443.

Learn to install and register an Azure AD Application Proxy connector from portal.azure.com, configure credentials, expose an application, and manage it via enterprise applications for secure remote access.

Explore how to publish enterprise software as a service with Azure Active Directory, configuring enterprise applications, assigning apps to users, and enabling single sign-on via the MyApps panel.

Enable single sign-on for cloud apps with Azure AD passthrough authentication, verify on-premises credentials without password sync via Azure AD Connect, and ensure high availability with additional agents.

Explore the Microsoft Power Platform, a no-code and low-code suite with Power Apps, Power Automate, Power BI, and Power Virtual Agent for integrated apps, automation, admin center management, and insights.

Build custom business apps with Power Apps by dragging data from Common Data Service, SharePoint, or Excel, using canvas, model-driven, or portal apps, with no coding required.

Create a Power App from data in a SharePoint inventory list, connect to cloud data services, and preview a mobile app for employees to view and update stock without coding.

Power Automate is an online workflow service that automates workflows across apps and services with connectors, triggers, and actions, enabling approvals, notifications, data collection, and cross-service file replication.

Create automated flows with Power Automate using templates or from scratch, linking triggers to actions such as migrating from box to OneDrive for Business.

Explore how Power BI connects to numerous data sources, builds visualizations, reports, and dashboards, and shares insights across desktop, service, and mobile workflows.

Power Virtual Agents enables no-code bot creation via a graphical interface, empowering subject matter experts to build and monitor chatbots with out-of-the-box connectors and bot actions.

Sign in to Power Virtual Agents, create a store bot with English, build topics from trigger phrases and responses, publish to a website, and monitor analytics to improve.