MS-102 Bootcamp: Microsoft 365 Administrator

Select a suitable Microsoft 365 plan, create the tenant and global administrator account, add a custom domain, create licensed users, and configure Exchange Online, SharePoint Online, Teams, security and compliance.

Set up a Microsoft 365 tenant correctly to support productivity, collaboration, privacy, compliance, and security; manage subscriptions, licenses, domains, and Azure Active Directory for identity, access, and device management.

Sign in to the Microsoft 365 admin center, view service health incidents and advisories, customize email notifications, and understand status definitions to monitor and troubleshoot tenant issues.

Evaluate your organization's Microsoft 365 adoption with the Adoption Score, combining people experiences and technology experiences to reveal usage insights, peer benchmarks, and targeted actions.

Learn to provision and manage Microsoft 365 users with the admin center, csv bulk import, and Microsoft Graph PowerShell, including licenses, roles, and on-premises sync via Azure AD Connect.

Learn to add and manage guest users in a Microsoft 365 environment by configuring external collaboration in Azure Active Directory and assigning access to groups and applications.

Master Microsoft 365 license allocations by assigning or removing licenses for users through the admin center or PowerShell, with attention to usage location, grace period, and license plans.

Explore Microsoft 365 admin roles, their permissions in the admin center, and security guidelines for least permissive access, multifactor authentication, and role-based duties across Azure AD and Intune.

Outsource Microsoft 365 administration to a Microsoft partner via delegated administration, authorize the partner, and assign full administration or limited administration roles, and plan and audit roles.

Delegate the helpdesk role to regional specialists using administrative units in Azure Active Directory, restricting scope to regions, with management via the Azure portal, PowerShell, or the Microsoft Graph API.

Prepare on-premises Active Directory for identity synchronization to Microsoft 365 by cleaning up UPN suffixes and attributes and using the Microsoft 365 ID Fix tool.

Configure directory synchronization with Azure AD Connect to link on-prem identities to Azure AD, covering prerequisites, express vs custom setups, and features like password hash sync and writebacks.

Monitor on-prem identity infrastructure with Azure AD Connect Health and its agent on targeted servers, view alerts in the portal, and ensure reliable Microsoft 365 synchronizations.

Diagnose and resolve Azure AD synchronization issues by analyzing logs and using Azure AD Connect or Cloud Sync, and manage errors in the Microsoft 365 Admin Center.

Replace passwords with Windows Hello for Business, enabling sign-in via biometrics or pin. Admins configure policies for AD and Azure AD single sign-on and MFA, with biometric data stored locally.

Explore passwordless authentication with Microsoft Authenticator, using totp or push notifications for two factor authentication and protection against phishing and unauthorized access.

Empower users to reset or change passwords without helpdesk support using self-service password reset, register authentication methods, and receive notifications while integrating with on-prem directories and Azure AD policies.

Azure AD password protection detects and blocks weak passwords with global and custom banned lists. Enforces changes across cloud and on-prem AD with 1000 custom terms and spray protection.

Enhance security with multi-factor authentication requiring two methods, such as password plus a mobile device or biometric data, and explore conditional access in Microsoft 365.

Explore how to use Azure Active Directory sign-in logs to investigate authentication issues, filter by parameters, review authentication details and MFA status, and apply remediation steps.

Automate detection and remediation of identity-based risks with Azure AD Identity Protection, investigate risks via the portal, and export risk data for analysis and integration with Microsoft Sentinel.

Plan identity protection deployment by validating prerequisites, reviewing reports, and configuring conditional access with MFA registration, policy exclusions, named locations, and report-only mode for risk monitoring.

Learn how Azure AD conditional access uses if-then rules to control access with MFA, device compliance, and app management via Intune, Defender for Endpoint, and risk signals.

Assess your organization's security posture with Microsoft Secure Score in the Defender portal, review recommended actions by category (identity, device, apps, data), and implement steps to improve the score.

Learn to interpret correlated alerts and incidents in Microsoft 365 Defender, view the attack story, and coordinate containment, eradication, and recovery across devices, users, and mailboxes.

Configure Microsoft 365 Defender email notifications to alert staff about new incidents or updates, with granular controls for severity, sources, device groups, and recipients.

Protect email with Microsoft Defender for Office 365 using safe attachments, safe links, spoof intelligence, quarantine, and policies, with Plan 1 and Plan 2 offering automation, investigation, remediation, and education.

Explore how safe attachments in Defender for Office 365 scan email attachments in a virtual detonation environment, apply policies, grant permissions, and configure quarantine and redirects.

Safe Links scans hyperlinks in messages using Microsoft Defender for Office 365, rewrites URLs with a standard prefix, and enforces URL scanning policies that wait for scan results.

Discover spoof intelligence in Microsoft 365 Defender, which identifies spoofed senders to block phishing while allowing trusted senders, managed via the Defender portal with RBAC controls.

Run attack simulation training in Microsoft 365 E5 or Defender for Office 365 Plan 2 to test security policies, identify vulnerable users, and reinforce training before real threats.

Navigate to the Defender portal, create a custom quarantine policy, and configure access, notifications, and release actions before reviewing and applying it to the Defender for Office 365 environment.

Learn to assign quarantine policies within anti-phishing policies in Microsoft 365 Defender, enabling domains to protect, mailbox intelligence, impersonation and spoof intelligence, and selecting a quarantine policy during policy creation.

Learn to assign quarantine policies within anti-malware policies in the Microsoft 365 Defender portal by selecting existing policies or creating new ones and configuring protection and quarantine notifications.