Microsoft 365 Administrator Essentials MS-102

Module 1Configure your Microsoft 365 Experience

• Configure your Microsoft 365 experience.
• Manage your tenant subscriptions in Microsoft 365
• Integrate Microsoft 365 with customer engagement apps.
• Complete your tenant configuration in Microsoft 365

Module 2Manage users, contacts, and licenses in Microsoft

• Determine the user identity model for your organization.
• Create user accounts in Microsoft 365
• Manage user acc ount settings in Microsoft 365
• Manage user licenses in Microsoft 365
• Recover deleted user accounts in Microsoft 365
• Perform bulk user maintenance in Azure Active Directory
• Create and manage guest users.
• Create and manage contacts.

Module 3Manage groups in Microsof t 365

• Examine groups in Microsoft 365
• Create and manage groups in Microsoft 365
• Create groups in Exchange Online and SharePoint Online

Module 4Add a custom domain in Microsoft 365

• Plan a custom domain for your Microsoft 365 deployment.
• Plan the DNS zones for a custom domain.
• Plan the DNS record requirements for a custom domain.
• Create a custom domain in Microsoft 365

Module 5Configure client connectivity to Microsoft 365

• Examine how automat ic client configuration works.
• Explore the DNS records required for client configuration.
• Configure Outlook clients.
• Troubleshoot client connectivity.

Module 6Configure administrative roles in Microsoft 365

• Explore the Microsoft 365 permission model.
• Explore the Microsoft 365 admin roles.
• Assign admin roles to users in Microsoft 365
• Delegate admin roles to partners
• Manage permissions using administrative units in Azure Active Directory
• Elevate privileges using Azure AD Privileged Identity Management

Module 7Manage tenant health and services in Microsoft 365

• Monitor the health of your Microsoft 365 services.
• Monitor tenant health using Microsoft 365 Adoption Score
• Monitor tenant health using Microsoft 365 usage analyti cs.
• Develop an incident response plan.
• Request assistance from Microsoft

Module 8Deploy Microsoft 365 Apps for enterprise

• Explore Microsoft 365 Apps for enterprise functionality.
• Explore your app compatibility by using the Readiness Toolkit
• Complete a self - service installation of Microsoft 365 Apps for enterprise.
• Deploy Microsoft 365 Apps for enterprise with Microsoft Endpoint Configuration
• Manager
• Deploy Microsoft 365 Apps for enterprise from the cloud.
• Deploy Microsoft 365 Apps for enterpr ise from a local source.
• Manage updates to Microsoft 365 Apps for enterprise.
• Explore the update channels for Microsoft 365 Apps for enterprise.
• Manage your cloud apps using the Microsoft 365 Apps admin center.

Module 9Analyze your Microsoft 365 workplace data usi ng

• Microsoft Viva Insights
• Examine the analytical features of Microsoft Viva Insights
• Create custom analysis with Microsoft Viva Insights
• Configure Microsoft Viva Insights
• Examine Microsoft 365 data sources used in Microsoft Viva Insights
• Prepare organizat ional data in Microsoft Viva Insights

Module 10Explore identity synchronization

• Examine authentication options in Microsoft 365
• Examine provisioning options in Microsoft 365
• Explore directory synchronization.
• Explore Azure AD Connect

Module 11Prepare for identity synchroniz ation to Microsoft

• Plan your Azure Active Directory deployment.
• Prepare for directory synchronization.
• Choose your directory synchronization tool.
• Plan for directory synchronization using Azure AD Connect
• Plan for directory synchronization using Azure AD Connect Cloud Sync
• Implement directory synchronization tools.
• Configure Azure AD Connect prerequisites.
• Configure Azure AD Connect
• Monitor synchronization services using Azure AD Connect Health
• Configure Azure AD Connect Cloud Sync prerequisites.
• Configure Azure AD Connect Cloud Sync

Module 12Manage synchronized identities

• Manage users with directory synchronization.
• Manage groups with directory synchronization.
• Use Azure AD Connect Sync Security Groups t o help maintain directory
• synchronization.
• Configure object filters for directory synchronization.
• Troubleshoot directory synchronization.

Module 13Manage secure user access in Microsoft 365

• Manage user passwords.
• Enable pass - through authentication.
• Enable multi - fa ctor authentication.
• Explore self - service password management.
• Implement Azure AD Smart Lockout
• Implement entitlement packages in Azure AD Identity Governance
• Implement conditional access policies.
• Create and run an access review.
• Investigate authentication issues using sign- in logs.

Module 14Examine threat vectors and data breaches

• Explore today's work and threat landscape.
• Examine how phishing retrieves sensitive information.
• Examine how spoofing deceives users and compromises data security.
• Compare spam and malwa re.
• Examine how an account breach compromises a user account.
• Examine elevation of privilege attacks
• Examine how data exfiltration moves data out of your tenant.
• Examine how attackers delete data from your tenant.
• Examine how data spillage exposes data out side your tenant.
• Examine other types of attacks.

Module 15Explore the Zero Trust security model

• Examine the principles and components of the Zero Trust model.
• Plan for a Zero Trust security model in your organization
• Examine Microsoft's strategy for Zero Trust networking.
• Adopt a Zero Trust approach.

Module 16Explore security solutions in Microsoft 365

• Defender
• Enhance your email security using Exchange Online Protection and Microsoft
• Defender for Office 365
• Protect your organi zation's identities using Microsoft Defender for Identity
• Protect your enterprise network against advanced threats using Microsoft
• Defender for Endpoint
• Protect against cyber - attacks using Microsoft 365 Threat Intelligence
• Provide insight into suspicious activity using Microsoft Cloud App Security

Module 17Examine Microsoft Secure Score

• Explore Microsoft Secure Score
• Assess your security posture with Microsoft Secure Score
• Improve your secure score.
• Track your Microsoft Secure Score history and meet your goals.

Module 18Examine Privileged Identity Management

• Explore Privileged Identity Management in Azure AD
• Configure Privileged Identity Management
• Audit Privileged Identity Management
• Explore Microsoft Identity Manager
• Control privileged admin tasks using Privileged Access Management

Module 19Examine Azure Identity Protection

• Explore Azure Identity Protection
• Enable the default protection policies in Azure Identity Protection
• Explore the vulnerabilities and risk events detected by Azure Identity Protection
• Plan your identit y investigation.

Module 20Examine Exchange Online Protection

• Examine the anti - malware pipeline.
• Detect messages with spam or malware using Zero- hour auto purge.
• Explore anti - spoofing protection provided by Exchange Online Protection
• Explore other anti - spoofing protection.
• Examine outbound spam filtering.

Module 21Examine Microsoft Defender for Office 365

• Climb the security ladder from EOP to Microsoft Defender for Office 365
• Expand EOP protections by using Safe Attachments and Safe Links
• Manage spoofed intelligence.
• Configure outbound spam filtering policies.
• Unblock users from sending email.

Module 22Manage Safe Attachments

• Protect users from malicious attachments by using Safe Attachments
• Create Safe Attachment policies using Microsoft Defender for Of fice 365
• Create Safe Attachments policies using PowerShell.
• Modify an existing Safe Attachments policy.
• Create a transport rule to bypass a Safe Attachments policy.
• Examine the end- user experience with Safe Attachments

Module 23Manage Safe Links

• Protect users from malicious URLs by using Safe Links
• Create Safe Links policies using Microsoft 365 Defender
• Create Safe Links policies using PowerShell.
• Modify an existing Safe Links policy.
• Create a transport rule to bypass a Safe Links policy.
• Examine the end- user experi ence with Safe Links

Module 24Explore threat intelligence in Microsoft 365

• Defender
• Explore Microsoft Intelligent Security Graph
• Explore alert policies in Microsoft 365
• Run automated investigations and responses.
• Explore threat hunting with Microsoft Threat Protection
• Explore advanced threat hunting in Microsoft 365 Defender
• Explore threat analytics in Microsoft 365
• Identify threat issues using Microsoft Defender reports.

Module 25Implement app protection by using Microsoft

• Defender for Cloud Apps
• Explore Microsoft De fender Cloud Apps
• Deploy Microsoft Defender for Cloud Apps
• Configure file policies in Microsoft Defender for Cloud Apps
• Manage and respond to alerts in Microsoft Defender for Cloud Apps
• Configure Cloud Discovery in Microsoft Defender for Cloud Apps
• Troubleshoot Cloud Discovery in Microsoft Defender for Cloud Apps

Module 26Implement endpoint protection by using Microsoft

• Defender for Endpoint
• Explore Microsoft Defender for Endpoint
• Configure Microsoft Defender for Endpoint in Microsoft Intune
• Onboard devices in Microsoft Defender for Endpoint
• Manage endpoint vulnerabilities with Microsoft Defender Vulnerability
• Management
• Manage device discovery and vulnerability assessment.
• Reduce your threat and vulnerability exposure.

Module 27Implement threat protection by using Microsoft

• Defender for Office 365
• Explore the Microsoft Defender for Office 365 protection stack.
• Investigate security attacks by using Threat Explorer
• Identify cybersecurity issues by using Threat Trackers
• Prepare for attacks with Attack simulation training.
• Microsoft 365 Administrator Essentials
• 5 Da ys Instructor - led, Hands - on Course M-1 02
• I ntroduction
• This course covers the following key elements of Microsoft 365 administration: Microsoft
• 365 tenant management, Microsoft 365 identity synchronization, and Microsoft 365
• security and compliance.
• In Microsoft 365 tenant management, you learn how to configure your Microsoft 365
• tenant, including your organizational profile, tenant subscription options, component
• services, user acco unts and licenses, security groups, and administrative roles. You then
• transition to configuring Microsoft 365, with a primary focus on configuring Office client
• connectivity. Finally, you explore how to manage user- driven client installations of
• Microsoft 365 Apps for enterprise deployments.
• The course then transitions to an in- depth examination of Microsoft 365 identity
• synchronization, with a focus on Azure Active Directory Connect and Connect Cloud Sync.
• You learn how to plan for and implement each of these directory synchronization options,
• how to manage synchronized identities, and how to implement password management in
• Microsoft 365 using multifactor authentication and self - service password management.
• In Microsoft 365 security management, you begin examining the common types of threat
• vectors and data breaches facing organizations today. You then learn how Microsoft 365’s
• security solutions address each of these threats. You are introduced to the Microsoft
• Secure Score, as well as to Azure Active Directory Identity Protection. You then learn how
• to manage the Microsoft 365 security services, including Exchange Online Protection,
• Safe Attachments, and Safe Links. Finally, you are introduced to the various reports that
• monitor an organization’s security health. You then transition from security services to
• threat intelligence; specifically, using Microsoft 365 Defender, Microsoft Defender for
• Cloud Apps, and Microsoft Defender for Endpoint.
• Once you have this understanding of Microsoft 365’s security sui te, you then examine the
• key components of Microsoft 365 compliance management. This begins with an overview
• of all key aspects of data governance, including data archiving and retention, Microsoft
• Purview message encryption, and data loss prevention (DLP). You then delve deeper into
• archiving and retention, paying particular attention to Microsoft Purview insider risk
• management, information barriers, and DLP policies. You then examine how to implement
• these compliance features by using data classification and sensitivity labels.