Student Lab Manual

MS500.1x: Managing your Microsoft 365

Identity environment

Lab Scenario
You are the security administrator for Adatum Corporation, and you have Microsoft 365 deployed in a
virtualized lab environment. In this lab, you will set up and manage your Microsoft 365 identity
environment.

Lab - Managing your Microsoft 365 Identity environment

- Exercise 1: Setting up your lab environment

▪ Task 1 - Obtain your Office 365 credentials
▪ Task 2 - Create a Microsoft 365 tenant account

- Exercise 2: Managing your Microsoft 365 identity environment using

the Microsoft 365 admin center
▪ Task 1 - Create user accounts
▪ Task 2 – Edit Microsoft 365 users
▪ Task 3 – Verify user settings
▪ Task 4 – Create security groups and add users to each group
▪ Task 5 – Manage security groups

- Exercise 3: Assign service administrators

▪ Task 1 – Install Microsoft Azure Active
▪ Task 2 – Assign service administrators in the Microsoft 365
admin center
▪ Task 3 – Verify service administration

Page 1
WARNING – Be prepared for UI changes
Given the dynamic nature of Microsoft cloud tools, you may experience user interface (UI) changes that
were made in the Office 365 tenant following the development of this training content that do not
match up with lab instructions presented in this lab manual.

The Microsoft Learning team will update this training course as soon as any such changes are brought to
our attention. However, given the dynamic nature of cloud updates, you may run into UI changes before
this training content is updated. If this occurs, you will have to adapt to the changes and work through
them in the labs as needed.

Page 2
Lab 1: Managing your Microsoft 365 Identity environment
In this lab, you must create a tenant account in Office 365 to set up an integrated environment.

Exercise 1: Setting up your lab environment

Task 1 - Obtain Your Office 365 Credentials
Once you launch the lab, a free trial tenant will be automatically created for you to access Azure in the
Microsoft Virtual Lab environment. This tenant will be automatically assigned a unique user name and
password. You must retrieve this user name and password so that you can sign into Azure within the
Microsoft Virtual Lab environment.

1. On the XtremeLabs Online menu bar at the top of the screen, click on the Files drop-down arrow.
2. Click on O365 Credentials. A window will open with your credentials.
3. This is the user name and password you will need to sign in to Azure. Keep this page open as you will
need the information later.
4. When the lab directs you to sign in to the Azure portal at https://portal.azure.com, you will sign in
using the credentials you obtained in this task.

Task 2 - Create the tenant account

1. At the top of the screen, click the Virtual machine drop-down field and select LON-DC1.
2. On the VM titled LON-DC1, you are already logged on as the adatum\administrator account.
3. Open Internet Explorer. Navigate to Tools > Internet Options > Security tab.
4. In the Internet zone, click Custom Level. Scroll down and under the Downloads section, you must
enable the File download setting.
5. Then in the Trusted Sites zone, you need to add the following sites:
• https://outlook.office365.com/
• https://outlook.office.com/
• https://portal.office.com/
6. In Internet Explorer, sign in to Office 365 by navigating to https:\\portal.office.com and logging in
with the O365 Credentials (username and password) that you retrieved in the prior task.
7. On the Stay signed in? page, click Yes to stay signed in.
8. Close the window and sign out.

Page 3
Exercise 2: Managing your Microsoft 365 identity
environment using the Microsoft 365 admin center

Task 1: Create user accounts

1. On LON-CL1, verify that you signed in as ADATUM\holly with the password: Pa55w.rd
2. Open Internet Explorer, and then browse to https://portal.office.com/.
3. Sign in as admin@<your tenant here>.onmicrosoft.com, with the password Pa55w.rd.
4. Navigate to the Active Users list.
5. Create a new user account with the following attributes:
• First name: Holly
• Last name: Dickson
• Display name: Holly Dickson
• Username: holly2
• Password: Select Let me create the password and enter a password of Pa55w.rd. Uncheck
Make this user change their password when they first sign in.
• Role: Global administrator
• Product licenses: Select Office 365 Enterprise E5.
• Click Add.
6. Repeat the prior step, adding user records for the following users (for the Username, use the
user’s first name). These users should be configured as User role only:

• Christie Thomas
• Amy Santiago
• Sallie McIntosh
• Francisco Chaves
7. After the last user is added, mark Send password in email and click Send email and close.

Task 2: Edit Microsoft 365 users

1. In the admin center, in the Active Users list, select Francisco Chaves.
2. Edit Francisco’s Contact Information by typing Accounts in the Department text box.
3. Edit Francisco’s Sign in status by selecting the Block the user from signing in option.
4. Close the browser.

Task 3: Verify user settings

1. On LON-CL1, open the browser, and then browse to https://portal.office.com/.

Page 4
2. Sign in as Francisco@<your tenant here>.onmicrosoft.com with the password Pa55w.rd.
3. Verify that you cannot sign in and that the message states that your account has been locked.
Close the browser.
4. Open the browser, and then browse to https://portal.office.com/.
5. Sign in as holly2@<your tenant here>.onmicrosoft.com with the password Pa55w.rd.
6. On the Office 365 portal, click Admin.
7. Navigate to the Active Users list and select Francisco Chaves.
8. Click Unblock sign in.
9. Change his sign-in status to Allow this user to sign in. Close the browser.
10. Open the browser, and then browse to https://portal.office.com/.
11. Sign in as Francisco@<your tenant here>.onmicrosoft.com with the password Pa55w.rd.
12. Verify that you can now access the Office 365 portal. Hint: You might have to clear browser
history to get Francisco to sign-in.
13. Close the browser.

Task 4: Create security groups and add users to each group

1. On LON-CL1, open a browser, and then browse to https://portal.office.com/.
2. Sign in as Holly2@<your tenant here>.onmicrosoft.com, with the password Pa55w.rd.
3. In the admin center, navigate to Groups and add a group with the following attributes:
• Type = Security
• Name = Sales
• Description = Sales department users
4. After adding the group, add Amy Santiago and Christie Thomas as members.
5. Add another group record with the following attributes:
• Type = Security
• Name = Accounts
• Description = Accounts department users
6. After adding the group, add Francisco Chaves and Sallie McIntosh as members.

Task 5: Manage security groups

1. In the Office 365 admin center, verify that you can see the following groups:
• Sales
• Accounts

2. Add the Holly Dickson to the Sales group.

3. Open the Sales details page and ensure that Holly Dickson appears in the Members list.

Page 5
4. Delete the Sales group.
5. Navigate to the list of Active users.
6. Confirm that Amy Santiago's account still exists in the list of active users even though the group
she was a member of has been deleted.
7. Close the browser.

Page 6
Exercise 3: Assign service administrators

Task 1: Install Microsoft Azure Active Directory

1. On LON-CL1, open a browser, and browse to http://aka.ms/t01i1o
2. Under Microsoft Online Services Sign-In Assistant for IT Professionals RTW, click Download.
3. Select the en\msoidcl_64.msi check box, and then click Next.
4. Wait for the download to finish.
5. When the download finishes, click Run.
6. In the Microsoft Online Services Sign-in Assistant Setup wizard, click I accept the terms in the
License Agreement and Privacy Statement, and then click Install.
7. In the User Account Control dialog box, click Yes.
8. On the Completed the Microsoft Online Services Sign-in Assistant Setup Wizard page, click Finish.
9. Close the browser.
10. On LON-CL1 click on Start and type Windows PowerShell. Right-click and choose Run as
administrator.
11. At the prompt, type Install-Module MSOnline command and press ENTER.
12. If prompted to install the NuGet provider, type Y and press ENTER.
13. If prompted to install the module from PSGallery, type Y and press ENTER.

Task 2: Assign service administrators in the Microsoft 365 admin

center
This task does not use Windows PowerShell, but it does set up your service administrators so that you
can manage them in the next task using PowerShell.

1. On LON-CL1, open a browser, and then browse to https://portal.office.com.

2. Sign in as Holly2@<your tenant here>.onmicrosoft.com, with the password Pa55w.rd.
3. Click Admin.
4. Navigate to the list of Active users and select Francisco Chaves.
5. Assign Francisco to the Customized administrator and then Billing administrator roles and enter
[email protected] as his Alternate email address. Click Save.

Page 7
6. Repeat these steps for Amy Santiago. Assign Amy to the Customized administrator and Password
administrator roles and enter [email protected] as her Alternate email address. Click Save.
7. Repeat these steps for Christie Thomas. Assign Christie to the Customized administrator and User
Management administrator roles and enter [email protected] as her Alternate email address. Click
Save.
8. Close the browser.

Task 3: Verify service administration

1. On LON-CL1, open a browser, and then browse to https://portal.office.com.
2. Sign in as Amy@<your tenant here>.onmicrosoft.com , with the password Pa55w.rd.
3. On the Office 365 portal, click Admin.
4. Navigate to the Active Users list.
5. Select Sallie McIntosh. Note that you cannot perform any administrative tasks.
6. Reset Sallie’s password by click Reset password button. Since Amy is the password administrator,
she can reset other users’ passwords.
7. Create a new password and write down the temporary password here for future reference, and
then click Send email and close.
8. Close and reopen the browser, and then browse to https://portal.office.com.
9. Sign in as Christie@<your tenant here>.onmicrosoft.com, using the password Pa55w.rd.
10. In the Office 365 portal, click Admin.
11. If asked about update your admin contact information, click on the Cancel button to skip this
request.
12. In the Office 365 admin center, navigate to the Active Users and select Amy Santiago.
13. Update Amy’s Contact information by changing her Office Phone to 555-1234 and click Save, click
Close.
14. Change Amy’s sign-in status to Block the user from signing in. Click Save. Click Close.
15. Add a new user account with the following attributes:
• First name: Chris
• Last name: Breland
• Display name: Chris Breland
• Username: Chris
• Product license: Windows 10 Enterprise E3 is turned On (enabled)

16. After adding Chris’ user account, you should delete the user account.
17. Close the browser.

End of lab

Page 8