Overview
This Microsoft 365 Technical Fundamentals course is a comprehensive, hands-on program designed to equip IT professionals with the core technical skills needed to administer and support Microsoft 365. Over five days, delegates will gain a deep understanding of Microsoft 365’s core backend services, including Entra ID, Exchange Online, SharePoint, Microsoft Teams, and Purview Compliance. The course covers the foundational elements of Microsoft 365, from licensing and setup to advanced configuration and security best practices, ensuring participants are well-prepared to manage and troubleshoot essential aspects of the Microsoft 365 environment.
Each delegate is provided with their own 30-day Microsoft 365 enterprise tenancy. This individual tenancy environment allows delegates to complete hands-on labs with real-world scenarios, giving them valuable practice with administration tasks in a controlled, isolated setting. Delegates will learn by doing, setting up users, configuring multi-factor authentication, managing permissions, and more, using the same tools they’ll encounter in live environments.
As the course progresses, delegates will dive into user and group management, hybrid identity configurations with Entra Connect and administrative roles, equipping participants to support a hybrid identity module. Additional modules on Microsoft Teams, SharePoint, Exchange Online and centralized Office app deployments, provide delegates with insights into how to effectively manage collaboration tools, focusing on best practices in Microsoft Teams policy management, security, external sharing, and Microsoft Team & SharePoint Site structure.
Finally, the course explores critical compliance and monitoring capabilities within Microsoft 365, helping delegates understand Microosft Purview data protection tools, including content search, DLP, retention policies, auditing, and alerting. The focus on security and monitoring ensures participants have the knowledge needed to maintain compliance and proactively monitor the health of the organization’s Microsoft 365 services. By the end of the course, delegates will be capable of confidently supporting and administering Microsoft 365 environments, troubleshooting common issues, and contributing to a more secure, collaborative, and efficient workspace.
Prerequisites
Important This course may require the use of Multifactor Authentication (MFA). Please read this page and download the Microsoft Authenticator app (or similar app) prior to attending the course:
https://www.qa.com/resources/faqs/mfa-requirements/
Please see the below Microsoft article for further information on reasons for the MFA requirement:
Before attending this course, students must have:
- An understanding of core technical concepts, DNS, Networking, Entra ID, Identities, User Accounts
Instructors will demonstrate features throughout the event. Optional lab exercises are available for students to complete using a commercial Microsoft 365 tenancy provided for each student free of charge by QA. This tenancy lasts for 30 days.
Delegates will learn how to
Delegates will learn how to effectively manage Microsoft 365's core components to support user productivity and maintain security - including the following
- Manage Microsoft 365 Core Components: Effectively administer Entra ID, Exchange Online, SharePoint, and Microsoft Teams using both Graphical tools and PowerShell
- Manage Users and Groups: Create, modify, and delete users and groups, assign licenses, and manage password policies.
- Understand and Implement Hybrid Identity: Understand an deploy a hybrid identity model using Entra Connect or Entra Cloud Sync
- Secure the Microsoft 365 Environment: Implement multi-factor authentication, conditional access, and other security best practices.
- Deploy and Manage Microsoft 365 Apps: Deploy and manage Microsoft 365 Apps, including Office applications, on various platforms.
- Configure Exchange Online: Manage mailboxes, distribution groups, and mail flow rules, as well as implement email security and compliance features.
- Collaborate with Microsoft Teams: Manage teams, channels, and meetings, and configure collaboration policies.
- Manage SharePoint Online: Create and manage sites, libraries, and lists, and configure permissions and external sharing.
- Protect Data with Microsoft Purview: Implement data loss prevention policies, content search, retention policies, and auditing.
- Monitor and Troubleshoot Microsoft 365: Use Microsoft 365 admin tools to monitor service health, troubleshoot issues, and optimize performance
Using a Microsoft 365 enterprise tenancy provided by QA for each delegate as part of the course, delegates will be able to explore these tasks in a real-world, isolated environment, practicing skills critical for supporting live deployments with structured hands on lab
By the end of the course, participants will understand how to set up core Microsoft 365 and Purview features. This course empowers delegates with the essential technical knowledge and confidence to support a secure, efficient, and collaborative Microsoft 365 environment.
Outline
Module 1 – Microsoft 365 Technical Fundamentals
Overview
What is Microsoft 365?
- Office 365 vs Microsoft 365
- Office 365 and Microsoft 365 Confusion
Microsoft 365 is Evergreen
Microsoft 365 Message Centre
Microsoft 365 Release Preferences
Benefits of Microsoft 365
Microsoft 365 requirements
Microsoft 365 Core Components
- Entra ID
- Microsoft 365 apps for Business/Apps for Enterprise
- Exchange Online
- Sharepoint Online
- Microsoft Teams
- Purview/Compliance/Security
- Microsoft Information Protection
Microsoft 365 additional Components
Microsoft 365 Subscriptions
Microsoft 365 license resources
Microsoft 365 add-on services
Microsoft 365 subscription features
Microsoft 365 Signup Process
Microsoft 365 Administration Tools
- Microsoft 365 Admin Center
- Other Microsoft 365 Admin Centers - Optional
- Entra ID
- Microsoft Compliance Center
- Endpoint Manager
- Exchange Online Admin Center
- Microsoft PowerApps and PowerAutomate Admin Center
- Office Configuration Admin Center
- Microsoft Stream Admin Center
- Microsoft Search & Intelligence Admin Center
- Microsoft 365 Defender Portal
- SharePoint Online Admin Center
- Teams Admin Center
- Viva Engage Admin Center
Microsoft 365 PowerShell
- Entra ID
- Exchange Online PowerShell V2
- SharePoint Online
- Microsoft Teams
- Microsoft Security and Compliance PowerShell
Overview of Microsoft 365 Administrator Roles
- Microsoft 365 Admin Roles
- Relationships between Entra ID Administrative Roles
- Custom Role Groups
Entra ID Privileged Identity Management (PIM)
Entra ID Access Reviews
Microsoft 365 Privileged access management
Configure and enable Microsoft 365 Privileged access management
Microsoft 365 Domains
- Adding a custom domain
- Custom Domain Considerations
Required Microsoft 365 DNS Records
Microsoft 365 Network Requirements
- Microsoft 365 URLs and IP address ranges
- Additional Network Considerations
- Microsoft 365 Network Connectivity Tools
- Microsoft 365 network connectivity test tool
- Microsoft Remote Connectivity Analyzer
Lab – Using Edge Profiles
Lab – Using Chrome Profiles
Lab – Sign up for an Office 365 trial
Lab – Microsoft 365 PowerShell
Lab – Adding a custom domain
Module 2 Managing Microsoft 365 Users and Groups
Entra ID and Zero Trust
Entra ID Editions
Entra ID Security Defaults
Microsoft Identity Models
- Cloud-only Identity Model
- Hybrid Identity Model
Creating cloud user accounts
- Creating User Accounts via the GUI
- Bulk Import Users using a CSV file
- Create an Entra ID User using PowerShell
- Create a user using Entra ID v1 PowerShell
- Create a user using Entra ID v2 PowerShell
- Create a user using Microsoft Graph Powershell
Create and use a template to add users
Managing User Accounts
Managing Entra ID Account Passwords
- Resetting Passwords
- Force Password Change for all users in Microsoft 365
Entra ID Self Service Password Reset (SSPR)
Deleting User Accounts
Steps to take when a user leaves the business
Restoring user accounts
Entra ID Password Protection
Multi-factor Authentication
Multi-factor Authentication in Microsoft 365
Software Requirements for MFA in Microsoft 365
Security Defaults
Setting up Multi-Factor Authentication in Microsoft 365
MFA with conditional access
- Signals (conditions)
- Decisions (actions)
- GPS Named Location MFA control
- Conditional Access Filters for devices
- Conditional Access Report Only mode
- Conditional Access What if
- Entra ID Sign-in Logs – conditional access policy
- Conditional Access enforced MFA
MFA Enrolment User Experience
MFA Authentication App
MFA Number Matching and Additional Context
Creating and Configuring Groups
- Microsoft 365 Group building blocks
- Guest access in Microsoft 365 Groups
- Controlling Microsoft 365 Group Guest access
- Controlling Microsoft 365 Group Guest Access
- Microsoft 365 Groups PowerShell management
- Controlling Microsoft 365 Group Creation
- Obsolete Microsoft 365 Group expiration and removal
- Microsoft 365 Group governance
Distribution groups
Mail enabled security groups
- Create a new mail-enabled security group using PowerShell
Creating Dynamic Groups – Entra ID Admin Center
Creating dynamic distribution groups in Exchange Online
Group naming policies
Lab - Creating and managing users
Lab – Admin roles
Lab – Self-service password reset
Lab – Conditional Access
Lab – Multifactor authentication
Lab - Creating and managing groups
Module 3 – Implementing Directory Synchronization
Hybrid Identity Overview
Hybrid Authentication Methods
- Password Hash Synchronization (PHS)
- Pass-through Authentication (PTA)
- Federated Authentication
Authentication Method Selection
Entra Connect
Installing Entra Connect
- Entra Connect Prerequisites
- Entra ID
- On-Premises Active Directory
- PowerShell execution policy
- SQL Server used by Entra Connect
- Accounts
- Network Connectivity
Entra Connect Supported Topologies
Entra Connect Express vs Custom installation
- Instructor Walkthrough Demo Express Installation
- Instructor Walkthrough Demo Custom Installation
Entra Connect sync: Scheduler
Monitoring and Troubleshooting Entra Connect
Real World Entra Connect Monitoring and Troubleshooting
- Microsoft 365 admin center notifications
- Entra ID Admin Center Status
- Windows Entra ID PowerShell
- Synchronization Service Manager
- Windows Server Event Logs
Entra Connect Health
Entra Connect synchronization errors
- Identity synchronization and duplicate attribute resiliency
- Troubleshooting Sync Errors Key Point
- Entra Connect Admin Agent
Entra Connect: Staging server and disaster recovery
Entra Connect cloud sync
- Installing Entra Connect Cloud Sync
- Entra Connect Cloud Sync Configuration
- Entra Connect Cloud Sync Single Sign-On
- Entra Connect Cloud Sync Troubleshooting
Lab – Entra Connect
Lab – Entra ID Connect
Module 4 – Microsoft 365 Apps
Microsoft 365 Apps
Available Office Applications for End Users
- Microsoft 365 for the Web (Microsoft 365 Online)
- Microsoft 365 Mobile Apps
- Microsoft 365 Apps for Mac
- Microsoft 365 Apps for Business/Enterprise
Overview of Microsoft 365 Apps
- Microsoft Apps Common Features with Office 2021
- Microsoft 365 Apps Differentiating Features
- Microsoft 365 Apps Licensing
- Microsoft 365 Apps Deployment
- Application Compatibility
User Self Service Deployment
- Administration of Self Service installations
Removing Microsoft 365 Apps License
Organization Office installation options
Centralized Microsoft 365 Apps Deployments
- Installing the ODT
- ODT components
- ODT Modes
- ODT Configuration Files
Office Customization Tool
Managed Microsoft 365 Apps using Policies
- Microsoft 365 Apps Group Policies
- Office cloud policy service
- Policy Precedence
Microsoft 365 Apps Updates
- Administrator Control of Microsoft 365 App Updates
- Microsoft 365 Admin Center
- Group Policy
- ODT
- Apps Admin Center Servicing Profile
Monitoring
- Apps Inventory
- Security Update Status
- Apps Health
Lab - Deploying Microsoft 365 Apps
Module 5 – Exchange Online
Introduction
Exchange Online service overview
Exchange Online limits
Exchange Online Admin Center
Exchange Online Permissions
Exchange Online PowerShell
Requirements for using PowerShell to manage Exchange Online
- Connecting to PowerShell Endpoints
- Connecting to Exchange Online using PowerShell
- Exchange Online PowerShell v2 Module
Administering Exchange Online Recipients
Recipient types
- Mailboxes
- Create a mailbox using Exchange Online Powershell
- Deleting and Restoring Mailboxes
- Soft deleting User Mailboxes
- Hard-deleted user mailboxes
- Microsoft 365 Inactive Mailboxes
- Restoring user mailboxes
- Configuring mailboxes
- Mailbox Settings
Mailbox e-mail addresses
Exchange Online Plus addressing/Subaddressing
Default message size restrictions
Creating and configuring resources
- Configuring Resources using Powershell
- Creating a room distribution group
Creating and configuring contacts
Creating and configuring shared mailboxes
Creating and configuring address lists and address book policies
- Address lists
- Offline address books
- Custom address lists
- Managing address lists
- Address book policies
Exchange Online mail flow
- Mail Flow Rules
- Creating Mail Flow Rules
Exchange Online Message tracing
Accepted domains
Remote domains
Connectors
Mail Flow Exchange Online Alert Policies
Mail Flow Reports and Insights
Controlling automatic external email forwarding
- Email forwarding rule alerts
- Exchange Online Auto Forwarded Message Reports
Preset Security Policies
Configuration analyzer
Lab – Exchange Online Powershell
Lab – Configuring mailboxes and email addresses
Lab – Creating other recipient objects
Lab – Exchange Online RBAC
Lab – Mail Flow rules and message trace
Module 6 – Microsoft Teams
Overview of Teams
- Microsoft Teams Features & Licensing
- Microsoft Teams limits
- Teams Components
- Microsoft Teams and Channels
- Where is Team content stored
- Teams Meeting Recordings
- Controlling Teams Creation and Expiration
- Clients for Microsoft Teams
Administering Teams
- Microsoft Teams Admin Roles
- Microsoft Teams Administrative tools
- Microsoft Teams Admin Center
- Microsoft Teams Powershell
- Microsoft Teams Settings and Policies
- Teams Settings
- Teams Policies
- Microsoft Team Policy Precedence
- Policy Packages
- Managing Microsoft Teams
- Microsoft Team Templates
- Managing Teams Meetings
- Teams Meeting Settings
- Meeting Policies
- Meeting Policies PowerShell
- Managing Microsoft Teams Messaging
Managing Access to Teams
- Teams Roles
- Dynamic Microsoft Team Membership
Microsoft Teams External Collaboration
- External Access vs Guest Access
- Microsoft Teams External Access
- Microsoft Teams Guest Access
- Additional Guests Considerations
- Microsoft Teams Guest access management
- Enabling Guest Access with Windows PowerShell
- Specific Team Guest Permissions
- Adding Guests to a Team
- Microsoft 365 Guest Management
Lab - Managing Microsoft Teams
Module 7 – Sharepoint Online Sites and Navigation
Introduction
Sharepoint Online service overview
SharePoint Online Features
Isn’t SharePoint just a part of Microsoft Teams?
SharePoint Six Pillars
Sharepoint Online Updates
- SharePoint “What's New” Site
- SharePoint Intrazone
- SharePoint Pitstop - Monthly 9
SharePoint Online Administration Tools
- SharePoint Online Admin Centre(s)
- SharePoint Online Management Shell
- SharePoint PnP
SharePoint Sites
Modern Team Sites
Modern Communication Sites
Sharepoint Online Subsites
Deleting and restoring Modern Sites
Hub Sites
- Hub Site Benefits
- Configuring Hub Sites
- Associating Sites to a Hub Site
- Hub Site Approval Flow (PowerAutomate)
- Parent Hub Association
- Hub Site Features
- Hub Site Permissions
- Hub Site Limitations
Comparison of Associated hub sites and Associated (non hub) sites
When to create a new site
Site Collection Administrators
Site Collection Quotas
Deciding between a Single Site Collection vs Multiple Site Collections
Site Architecture and Navigation Relationship
SharePoint Online Site Navigation
- Modern Team Site Navigation
- Team Site Navigation Switcher
- Modern Communication Site Navigation
- Cascading vs Mega Menu Navigation
- WebPart Navigation Options
- Highlighted Content Webpart
- SharePoint App Bar and Global Navigation
Lab – SharePoint Online PowerShell and PnP
Lab – Creating and managing sites
Lab – Creating and managing sites using PowerShell
Lab – Managing SharePoint navigation
Lab – SharePoint search driven navigation
Module 8 – Sharepoint Online Permissions and External Sharing
Lesson 1: Sharepoint Permissions
- Sharepoint Permissions vs M365 Group Security
- SharePoint Team Sites
- Access Requests
- Member Sharing options
Lesson 2: Sharepoint Sharing
- SharePoint Sharing
- Sharing a Site
- Sharing a Document Library/List
- Sharing a Folder or Items
- Item QR Codes
Lesson 3: Advanced Permissions (When things get messy)
- Permission levels
- Bespoke Permission Levels
- Granting Explicit Permissions
- Permission Inheritance
- Breaking Inheritance
- Broken inheritance visibility
- Enabling and Disabling Permission Inheritance
Lesson 4: SharePoint Groups
- Creating additional Sharepoint Groups
- Sharepoint Group Owners
- SharePoint Group Best Practice
- Recommended Sharepoint Group Model
- Special SharePoint Groups
Lesson 5: Granting and Managing Permissions
- Checking Permissions
- Modifying and Removing Permissions
- Sharepoint Permissions via PowerShell
Lesson 6: Sharepoint Permissions Best Practice
- SharePoint Site Security Key Summary
SharePoint External Sharing
- Authenticated External User sharing
- Authenticated External User Link Management
- Anonymous Access Links
SharePoint Online External sharing administration
- Tenant Level External Sharing Administration
- Entra B2B One Time Passcodes for Guest Users
- Pre-Creating Guest Users
Advanced settings for external sharing
File and Folder Links
Outlook External Sharing Link Features
Site Collection External Sharing Options
PowerShell for External Sharing
SharePoint Online External Sharing Alerts, Auditing and Reporting
Lab – SharePoint permissions
Lab – SharePoint external sharing
Module 9 – Microsoft 365 Purview
Lesson 1: Introduction
- What is Microsoft 365 Purview?
- Microsoft’s commitment to compliance
- Microsoft Shared Responsibility Model
- Microsoft CyberSecurity Reference Architecture (MCRA)
- Microsoft’s Information Protection Model
Lesson 2: Microsoft 365 Security and Compliance Administration Tools
- Admin centers for security and compliance
- Microsoft Purview Administrative Roles
- Microsoft Purview PowerShell
Lesson 3: Microsoft 365 Data Loss Prevention
- Introduction to Data Loss Prevention policies
- Components of DLP Policies
- Creating DLP Policies
- Document fingerprinting
- Custom DLP Policies
- DLP Policy Locations
- DLP Policy Settings
- DLP Conditions/Exceptions
- DLP PowerShell
- DLP Activity Explorer
- DLP alerts
Lesson 4: Retention Policies
- Introduction
- Retention policy data behaviour
- Creating retention policies
- Adaptive vs static retention policies
- Adaptive scopes
- Retention policy locations
- Teams retention policy considerations
- Retention options
Lesson 5: Microsoft 365 Content Search
- Introduction
- Content Search Security
- eDiscovery Administrators and eDiscovery Managers
- Custom eDiscovery Managers
- Configure security filtering for content search
- Content Search Limits
- Creating a content search
- Content Search for Microsoft Teams
- Search for Teams chat data for on-premises users
- Targeted collection search
- Condition card builder and KQL editor
- Preview sample search results
- Search statistics
- PowerShell Content Search
- Export content search results
- Unindexed items in content searches
- Differences between estimated and actual search results
- De-duplication in Content search results
- Searching for and Purging Email Messages in a Microsoft 365 Organization
- Using content search to search the mailbox and OneDrive for Business site for a list of users
Lesson 6: Microsoft 365 Auditing and Alerts
- Introduction
- Audit log permissions
- Running an audit log search
- Viewing audit log search results
- Exporting audit log search results
- Audit log retention policies
- Microsoft 365 alerts
- Compliance Manager and compliance score
- Compliance Manager automated testing
- Microsoft Regulations and Assessments
Lab 9.1 – Data Loss Prevention
Lab 9.2 – Retention Policies
Lab 9.3 – Microsoft 365 Auditing
Lab 9.4 – Alerts
Lab 9.5 – Secure Score
Module 10 – Microsoft 365 Monitoring and Support
Microsoft 365 Monitoring and Support
Microsoft 365 Troubleshooting Fundamentals
Microsoft Support and Recovery Assistant
Microsoft 365 Health Reports
Microsoft 365 Status Twitter Feed
Microsoft 365 Troubleshooting Guide
Microsoft 365 Community
Microsoft 365 Technical Support
Microsoft Support SLA’s
Frequently asked questions
How can I create an account on myQA.com?
There are a number of ways to create an account. If you are a self-funder, simply select the "Create account" option on the login page.
If you have been booked onto a course by your company, you will receive a confirmation email. From this email, select "Sign into myQA" and you will be taken to the "Create account" page. Complete all of the details and select "Create account".
If you have the booking number you can also go here and select the "I have a booking number" option. Enter the booking reference and your surname. If the details match, you will be taken to the "Create account" page from where you can enter your details and confirm your account.
Find more answers to frequently asked questions in our FAQs: Bookings & Cancellations page.
How do QA’s virtual classroom courses work?
Our virtual classroom courses allow you to access award-winning classroom training, without leaving your home or office. Our learning professionals are specially trained on how to interact with remote attendees and our remote labs ensure all participants can take part in hands-on exercises wherever they are.
We use the WebEx video conferencing platform by Cisco. Before you book, check that you meet the WebEx system requirements and run a test meeting (more details in the link below) to ensure the software is compatible with your firewall settings. If it doesn’t work, try adjusting your settings or contact your IT department about permitting the website.
How do QA’s online courses work?
QA online courses, also commonly known as distance learning courses or elearning courses, take the form of interactive software designed for individual learning, but you will also have access to full support from our subject-matter experts for the duration of your course. When you book a QA online learning course you will receive immediate access to it through our e-learning platform and you can start to learn straight away, from any compatible device. Access to the online learning platform is valid for one year from the booking date.
All courses are built around case studies and presented in an engaging format, which includes storytelling elements, video, audio and humour. Every case study is supported by sample documents and a collection of Knowledge Nuggets that provide more in-depth detail on the wider processes.
When will I receive my joining instructions?
Joining instructions for QA courses are sent two weeks prior to the course start date, or immediately if the booking is confirmed within this timeframe. For course bookings made via QA but delivered by a third-party supplier, joining instructions are sent to attendees prior to the training course, but timescales vary depending on each supplier’s terms. Read more FAQs.
When will I receive my certificate?
Certificates of Achievement are issued at the end the course, either as a hard copy or via email. Read more here.