Course outline

 

Lab description

The labs in this three-day course begin with an overview of the Exchange Online and Microsoft 365 admin portals, followed by creating and managing accounts related to users, resources, and contacts. You’ll manage address lists, address book policies, and role-based access control (RBAC) in Exchange Online, and then implement security features in Microsoft Entra ID. You’ll troubleshoot mail flow and implement message security and threat policies by using Microsoft Defender. Next, you’ll implement message compliance and lifecycle management by using Microsoft Purview. In the final lab, you’ll configure clients for Exchange Online.

 

Module 1 Overview of Exchange Online

In this module, you’ll explore the various services that Microsoft 365 provides. You’ll learn the

basics of Exchange Online and the administration tools you can use to manage this service.

 

Lesson 1 Introduction to Microsoft 365 services

·       What is Microsoft 365?

·       Overview of Microsoft 365 workloads

·       Overview of Microsoft 365 subscriptions

·       Provisioning a Microsoft 365 tenant

 

By completing this lesson, you’ll achieve the knowledge and skills to:

·       Describe Microsoft 365.

·       Describe key workloads running within Microsoft 365.

·       Describe Microsoft 365 subscriptions.

·       Explain how to provision a Microsoft 365 tenant.

 

Lesson 2 Introduction to Exchange Online

·       Overview of Exchange Online

·       How does Exchange Online compare to Exchange Server?

·       Key reasons to use Exchange Online

·       What is Exchange hybrid deployment?

·       Organization relationships in Exchange Online

 

By completing this lesson, you’ll achieve the knowledge and skills to:

·       Describe Exchange Online.

·       Explain how Exchange Online compares to Exchange Server.

·       Describe key reasons to use Exchange Online.

·       Describe an Exchange hybrid deployment.

·       Describe organization relationships in Exchange Online.

 

Lesson 3 Overview of Exchange Online administration tools

·       Microsoft 365 admin center

·       Exchange admin center

·       Managing Microsoft 365 and Exchange Online with PowerShell

 

By completing this lesson, you’ll achieve the knowledge and skills to:

·       Describe the Microsoft 365 admin center.

·       Describe the Exchange admin center.

·       Describe the Exchange Management Shell.

 

Lab Exploring Microsoft 365 and Exchange Online admin portals

·       Exercise 1: Provisioning a Microsoft 365 tenant

·       Exercise 2: Adding products and licenses to a Microsoft 365 tenant

·       Exercise 3: Reviewing Microsoft 365 and Exchange admin centers

·       Exercise 4: Managing Exchange Online with PowerShell

·       Exercise 5: Assigning product licenses to users

 

By completing this lab, you’ll achieve the knowledge and skills to:

·       Create an Office 365 E5 trial subscription.

·       Add licenses and products for additional features and cloud services.

·       Review the Microsoft 365 and Exchange admin centers.

·       Install Exchange Online PowerShell and run scripts.

·       Assign licenses to the users in your tenant.

 

Module 2 Managing Exchange Online recipient objects

 

Microsoft Exchange Online—the cloud version of the on-premises Microsoft Exchange Server—

provides similar features and benefits as the on-premises messaging platform. Exchange

Online supports numerous recipient object types, including mailboxes for users and resources,

both shared and linked mailboxes, and public folders. To provide users with a seamless

messaging experience, it’s important that you know how to create and manage the settings for

these recipient objects. Additionally, because address lists are an important part of an

organization’s messaging systems, you should learn how to create and manage address lists

and related policies.

 

Lesson 1 Exchange Online recipient objects

·       Overview of recipient object types in Exchange Online

·       Overview of user mailboxes

·       Overview of resource mailboxes

·       Overview of shared mailboxes

·       Overview of link mailboxes

·       Overview of mail contacts and mail users

·       Managing groups in Exchange Online

·       Overview of public folders

By completing this lesson, you’ll achieve the knowledge and skills to:

·       Identify the various recipient types in Exchange Online.

·       Describe user mailboxes.

·       Describe resource mailboxes.

·       Describe shared mailboxes.

·       Describe linked mailboxes.

·       Describe contacts and mail users.

·       Explain how to manage groups in Exchange Online.

·       Describe public folders.

 

Lesson 2 Creating and managing Exchange Online recipient objects

·       Creating and managing user mailboxes and mailbox settings

·       Creating and managing resource mailboxes

·       Creating and managing shared mailboxes

·       Creating and managing contacts

·       Creating and managing groups

·       Creating and managing public folders

 

By completing this lesson, you’ll achieve the knowledge and skills to:

·       Create and manage user mailboxes and mailbox settings.

·       Create and manage resource mailboxes.

·       Create and manage shared mailboxes.

·       Create and manage contacts.

·       Create and manage groups.

·       Create and manage public folders.

 

Lab A Creating and managing Exchange Online recipients

·       Exercise 1: Creating a new user mailbox

·       Exercise 2: Managing user mailbox settings

·       Exercise 3: Creating and managing groups by using the Exchange admin center

·       Exercise 4: Creating Exchange Resources and Contacts

·       Exercise 5: Validating Email Functionality

 

By completing this lab, you’ll achieve the knowledge and skills to:

·       Add new users to your Microsoft 365 tenant.

·       Modify mailbox settings.

·       Create a Microsoft 365 group, a distribution list, a dynamic distribution list, and a Mail- enabled security group.

·       Add additional Exchange recipients in your Microsoft 365 tenant.

·       Validate that email messages can be delivered successfully, and room resources work  as expected.

 

Lesson 3 Creating and managing email address lists and policies

·       Overview of address lists in Exchange Online

·       Creating and managing address lists

·       Creating and managing address books and address book policies

·       Configuring offline address books

 

By completing this lesson, you’ll achieve the knowledge and skills to:

·       Describe address lists in Exchange Online.

·       Create and manage address lists.

·       Create and manage address books and address book policies.

·       Configure offline address books.

 

Lab B Managing address lists and address book policies in Exchange Online

·       Exercise 1: Creating address lists

·       Exercise 2: Creating and assigning Address book policies

 

By completing this lab, you’ll achieve the knowledge and skills to:

·       Create address lists.

·       Create a custom address book policy.

 

Module 3 Managing administration in Exchange Online

In on-premises Active Directory environments, administrators use security groups to implement

delegated management. They add a user to a security group and specify a level of administrative permissions on an organizational unit (OU) by using the Delegate Control Wizard in Active Directory Domain Services (AD DS). Microsoft 365, and thereby Exchange Online, uses a slightly different process known as role- based access control (RBAC). In this module, you’ll learn about RBAC for Applications in Exchange Online, the Exchange Online permission model, and how to manage administrator roles and user roles in Exchange Online.

 

Lesson 1 Overview of Exchange Online administration

·       Overview of the Exchange Online permission model

·       Microsoft 365 or Office 365 permissions in Exchange Online

·       What is RBAC?

·       Implementing RBAC for Applications in Exchange Online

 

By completing this lesson, you’ll achieve the knowledge and skills to:

·       Describe the Exchange Online permission model.

·       Describe Microsoft 365 or Office 365 permissions in Exchange Online.

·       Describe RBAC.

·       Implement RBAC for Applications in Exchange Online.

 

Lesson 2 Managing administrator roles in Exchange Online

·       What are role groups and management role groups?

·       Built-in role groups in Exchange Online

·       Creating and managing role groups in Exchange Online

·       Feature permissions in Exchange Online

 

By completing this lesson, you’ll achieve the knowledge and skills to:

·       Describe role groups and management role groups.

·       Describe built-in role groups in Exchange Online.

·       Create and manage role groups in Exchange Online.

·       Implement feature permissions in Exchange Online.

 

Lesson 3 Managing user roles in Exchange Online

·       Overview of Exchange Online user roles

·       Implementing user roles with role assignment policies

·       Managing roles and role assignment policies

 

By completing this lesson, you’ll achieve the knowledge and skills to:

·       Describe Exchange Online user roles.

·       Implement user roles with role assignment policies.

·       Implement management role assignment policies.

 

Lab Managing role-based access control for administration in Exchange Online

·       Exercise 1: Reviewing and assigning Admin Roles in Microsoft 365

·       Exercise 2: Creating and managing role groups in Exchange Online

·       Exercise 3: Managing user roles with role assignment policies

 

By completing this lab, you’ll achieve the knowledge and skills to:

·       Review the built-in admin roles in Microsoft 365 and simplify role management.

·       Review role groups that are available specifically in Exchange Online and create a custom role group.

·       Create a custom role assignment policy and assign it to users.

 

Module 4 Managing authentication and security in Microsoft Entra ID

In this module, you’ll learn how to manage authentication and security options in Microsoft Entra ID. You’ll also learn how Exchange Online and Exchange Server use Microsoft Entra ID for authentication.

 

Lesson 1 Managing authentication and objects in

·       Microsoft Entra ID

·       Overview of Microsoft Entra ID

·       Authentication types with Microsoft Entra ID

·       Authentication methods in Microsoft Entra ID

·       Managing user objects and user settings in Microsoft Entra ID

·       Managing group objects and group settings in Microsoft Entra ID

 

By completing this lesson, you’ll achieve the knowledge and skills to:

·       Describe Microsoft Entra ID.

·       Describe the supported authentication types in Microsoft Entra ID.

·       Describe the authentication methods in Microsoft Entra ID.

·       Manage user objects and user settings in Microsoft Entra ID.

·       Manage group objects and group settings in Microsoft Entra ID.

 

Lesson 2 Implementing security in Microsoft Entra ID

·       What is MFA?

·       What is conditional access?

·       Creating conditional access policies

·       Overview of Privileged Identity Management

·       Implementing password protection

·       Implementing self-service password reset

·       Microsoft Entra ID security defaults

 

By completing this lesson, you’ll achieve the knowledge and skills to:

·       Describe MFA.

·       Describe conditional access and conditional access policies.

·       Create conditional access policies.

·       Describe PIM.

·       Implement password protection.

·       Implement SSPR.

·       Describe Microsoft Entra ID security defaults.

 

Lesson 3 Implementing authentication for Exchange Online clients

·       Authentication in Exchange Online

·       Authentication in Exchange hybrid deployments

·       Enabling hybrid modern authentication

 

By completing this lesson, you’ll achieve the knowledge and skills to:

·       Describe authentication in Exchange Online.

·       Describe authentication in Exchange hybrid deployments.

·       Describe how to enable hybrid modern authentication.

 

Lab Implementing authentication and security features in Microsoft Entra ID

·       Exercise 1: Managing objects and reviewing authentication methods in Microsoft Entra ID

·       Exercise 2: Configuring SSPR

·       Exercise 3: Enforcing multifactor authentication by using a conditional access policy

 

By completing this lab, you’ll achieve the knowledge and skills to:

·       Create new user and group accounts and review authentication methods and security defaults.

·       Configure and perform password resets.

·       Configure and validate MFA by using a conditional access policy.

 

Module 5 Managing mail flow in Exchange Online

It’s important that you understand how Exchange Online manages mail flow. This starts with configuring domains and connectors, including custom domain names. You’ll also need to know how to manage mail flow in hybrid contexts and create and manage mail flow rules. To be able to remediate problems with mail delivery, you must be familiar with monitoring and message tracing. In this module, you’ll learn how to manage and troubleshoot mail flow. You’ll also learn how to use Microsoft Service Health to monitor Exchange Online.

 

Lesson 1 Managing domains and connectors in Exchange Online

·       Configuring and managing SMTP domains for Exchange Online

·       Overview of remote domains

·       Overview of connectors

·       Configuring and managing connectors in Exchange Online

 

By completing this lesson, you’ll achieve the knowledge and skills to:

·       Configure and manage SMTP domains for Exchange Online.

·       Describe remote domains.

·       Describe connectors.

·       Configure and manage connectors in Exchange Online.

 

Lesson 2 Managing mail flow in Exchange Online

·       Overview of mail flow in Exchange Online

·       Managing mail flow in hybrid scenarios

·       Overview of mail flow rules

·       Configuring and managing mail flow rules

·       Using mail flow rules for specific scenarios

 

By completing this lesson, you’ll achieve the knowledge and skills to:

·       Describe mail flow in Exchange Online.

·       Manage mail flow in hybrid scenarios.

·       Describe mail flow rules.

·       Configure and manage mail flow rules.

·       Use mail flow rules for specific scenarios.

 

Lab A Managing mail flow for Exchange Online

·       Exercise 1: Configuring Connectors to manage mail flow

·       Exercise 2: Configuring Mail flow rules

·       Exercise 3: Validating mail flow rules

 

By completing this lab, you’ll achieve the knowledge and skills to:

·       Create new connectors to send and receive email.

·       Configure rules to redirect email, add email disclaimers, and configure rule application based  on email details.

·       Validate mail flow rules.

 

Lesson 3 Monitoring and troubleshooting mail flow in Exchange Online

·       Troubleshooting mail flow

·       Message tracing in Exchange Online

·       Exchange Online reporting

·       Monitoring Exchange Online with Microsoft Service Health

·       Alert policies and alerts in Exchange Online

 

By completing this lesson, you’ll achieve the knowledge and skills to:

·       Troubleshoot mail flow.

·       Implement message tracing.

·       Use reports in Exchange Online.

·       Monitor Exchange Online with Microsoft Service Health.

·       Describe alerts and alert policies.

 

Lab B Monitoring and troubleshooting mail flow

·       Exercise 1: Monitoring Exchange Health and mail flow

·       Exercise 2: Troubleshooting Exchange Online mail flow

 

By completing this lab, you’ll achieve the knowledge and skills to:

·       Review features used to monitor Exchange Online health and mail flow, and create an alert policy.

·       Troubleshoot Exchange Online mail flow by using the Microsoft Remote Connectivity Analyzer  and Message trace.

 

Module 6 Managing message security in Exchange Online

In this module, you’ll learn about email protection, threat protection, and message encryption. You’ll learn how to use tools such as Exchange Online Protection, Microsoft Defender, and Microsoft Purview to manage message security and encryption.

 

Lesson 1 Planning message security for Exchange Online

• Overview of Exchange Online Protection

 • Planning mail flow for Exchange Online Protection

 • How does email protection work?

 

By completing this lesson, you’ll achieve the knowledge and skills to:

·       Describe Exchange Online Protection.

·       Plan mail flow for Exchange Online Protection.

·       Explain how email protection works.

 

Lesson 2 Overview of the Microsoft Defender platform

·       What is Microsoft Defender?

·       Overview of Microsoft Defender for Office 365

·       How threat protection works in Microsoft Defender for Office 365

·       What is Microsoft Defender for Identity?

·       Attack simulation in Microsoft Defender for Office 365

 

By completing this lesson, you’ll achieve the knowledge and skills to:

·       Describe Microsoft Defender.

·       Describe Microsoft Defender for Office 365.

·       Explain how threat protection works in Microsoft Defender for Office 365.

·       Describe Microsoft Defender for Identity.

·       Describe attack simulation in Microsoft Defender for Office 365.

 

Lesson 3 Using Microsoft Defender for message security

·       Preset security policies in Exchange Online Protection and Microsoft Defender for Office 365

·       Managing and configuring anti-spam protection

·       Managing and configuring anti-malware protection

·       Managing and configuring spoofing protection

·       Managing and configuring phishing protection

·       Configuring Safe Attachments

·       Configuring Safe Links

·       Configuring connection filtering

·       Configuring outbound spam protection

·       Configuring quarantine and quarantine policies

 

By completing this lesson, you’ll achieve the knowledge and skills to:

·       Explain the preset security policies in Exchange Online Protection and Microsoft Defender for Office 365.

·       Manage and configure anti-spam protection.

·       Manage and configure anti-malware protection.

·       Manage and configure spoofing protection.

·       Manage and configure phishing protection.

·       Configure Safe Attachments.

·       Configure Safe Links.

·       Configure connection filtering.

·       Configure outbound spam protection.

·       Configure quarantine and quarantine policies.

 

Lab A Implementing message security with preset security policies

·       Exercise 1: Running an email attack simulation

·       Exercise 2: Configuring preset security policies

·       Exercise 3: Removing preset security policies

 

By completing this lab, you’ll achieve the knowledge and skills to:

·       Run email attack simulations and ensure the assignment of required Microsoft recommended training to users.

·       Review and configure preset security policies.

·       Turn off and disable preset security policies.

 

Lesson 4 Implementing message encryption in Exchange Online

·       How does message encryption work in Exchange Online?

·       Implementing message encryption in Exchange Online with Microsoft Purview

·       Managing message encryption

·       Managing advanced message encryption in Exchange Online

 

By completing this lesson, you’ll achieve the knowledge and skills to:

·       Explain how message encryption works in Exchange Online.

·       Implementing Microsoft Purview Message Encryption.

·       Manage message encryption.

·       Manage advanced message encryption in Exchange Online.

 

Lab B Configuring threat policies and Purview Message Encryption

Exercise 1: Creating a custom quarantine policy

Exercise 2: Configuring threat policies

Exercise 3: Configuring Microsoft Purview Message Encryption

 

By completing this lab, you’ll achieve the knowledge and skills to:

Create and configure custom quarantine policies and review quarantined messages.

Create policies for Anti-phishing, Anti-spam, Anti-malware, Safe Attachments, and Safe Links.

Validate that Purview message encryption is enabled and create a mail flow rule configured to apply encryption to senders.

 

Module 7 Implementing compliance in Exchange Online

Organizations that have compliance regulations must follow specific standards to protect their data and to manage the data lifecycle. Microsoft 365 includes a product named Microsoft Purview, which provides multiple functionalities that organizations can use to implement their compliance regulations. Microsoft datacenters are also compliant with many international industry standards that organizations are required to follow. This module explains how messaging administrators can help ensure that their organization’s data in Microsoft Exchange Online will be managed according to the compliance regulations.

 

Lesson 1 Implementing DLP in Exchange Online

·       Overview of DLP

·       How do DLP rules work?

·       DLP policy templates in Exchange Online

·       Creating DLP policies

·       Configuring and managing policy tips

 

By completing this lesson, you’ll achieve the knowledge and skills to:

·       Describe data loss prevention (DLP).

·       Describe how DLP works.

·       Manage DLP policy templates in Exchange Online.

·       Create DLP policies.

·       Configure and manage DLP policy tips.

 

Lesson 2 Implementing data lifecycle management in Exchange Online

·       Overview of data lifecycle management

·       Overview of Microsoft 365 retention policies

·       Creating and managing retention policies in Microsoft 365

·       Overview of retention policies in Exchange Online

·       Overview of Exchange Online journaling

 

By completing this lesson, you’ll achieve the knowledge and skills to:

·       Describe data lifecycle management.

·       Describe retention policies in Microsoft 365.

·       Create and manage retention policies in Microsoft 365.

·       Describe retention policies in Exchange Online.

·       Describe journaling in Exchange Online.

 

Lesson 3 Implementing information protection in Exchange Online

·       Overview of sensitive information types

·       What are sensitivity labels?

·       Creating and publishing sensitivity labels

·       Using sensitivity labels to apply encryption.

 

By completing this lesson, you’ll achieve the knowledge and skills to:

·       Describe sensitive information types.

·       Describe sensitivity labels.

·       Create and publish sensitivity label.

·       Use sensitivity labels to apply encryption.

 

Lesson 4 Implementing and managing eDiscovery for Exchange resources

·       Overview of Microsoft Purview eDiscovery

·       Overview of content search

·       Creating and running a content search

·       Previewing and exporting search results

·       Creating and managing eDiscovery holds for Exchange Online

 

By completing this lesson, you’ll achieve the knowledge and skills to:

·       Describe Microsoft Purview eDiscovery.

·       Describe Content Search.

·       Create and run Content Search.

·       Preview and export search results.

·       Create and manage eDiscovery holds for Exchange Online.

 

Lab A Implementing messaging compliance

·       Exercise 1: Protecting and classifying Exchange messages by using sensitivity labels

·       Exercise 2: Configuring Data Loss Prevention policies

·       Exercise 3: Creating and managing an eDiscovery case

 

By completing this lab, you’ll achieve the knowledge and skills to:

·       Create and publish sensitivity labels.

·       Create sensitive info types and Data loss prevention (DLP) policies.

·       Perform eDiscovery holds and searches.

 

Lesson 5 Auditing in Exchange Online

·       Overview of auditing reports in Exchange Online

·       Exporting mailbox audit logs

·       Running litigation hold reports

·       Running role group change reports

·       Managing administrator audit logs

 

By completing this lesson, you’ll achieve the knowledge and skills to:

·       Describe Auditing reports in Exchange Online.

·       Export mailbox audit logs.

·       Run litigation hold reports.

·       Run role group changes reports.

·       Manage administrator audit logs.

 

Lab B Message lifecycle management using archiving and retention.

·       Exercise 1: Enabling In-place archive for user mailboxes

·       Exercise 2: Configuring and publishing Microsoft 365 retention labels

 

By completing this lab, you’ll achieve the knowledge and skills to:

·       Enable in-place archive and validate the default messaging records management (MRM) retention policy setting.

·       Create and publish Microsoft 365 retention labels.

 

Module 8 Configuring clients for Exchange Online

Typically, users use both desktop and mobile devices, and platform-appropriate apps for

operating systems such as Windows, iOS, Android, and macOS. Users might also access their email from a web browser such as Microsoft Edge. In this module, you’ll learn how to configure Exchange Online to support the various client apps used by your users.

 

Lesson 1 Outlook clients for Exchange Online

·       Overview of Outlook for PC and Outlook for Mac

·       Outlook for iOS and Android clients

·       Overview of Exchange ActiveSync, POP3, and IMAP4 clients

·       Modern authentication with mobile clients

·       Securing Outlook for iOS and Android in Exchange Online

·       S/MIME for Outlook for iOS and Android in Exchange Online

 

By completing this lesson, you’ll achieve the knowledge and skills to:

·       Describe Outlook for PC and Outlook for Mac.

·       Describe Outlook for iOS and Android clients.

·       Describe Exchange ActiveSync, POP3, and IMAP4 clients.

·       Implement modern authentication with mobile clients.

·       Secure Outlook for iOS and Android in Exchange Online.

·       Describe S/MIME for Outlook for iOS and Android in Exchange Online.

 

Lesson 2 Configuring and using Outlook on the web

·       Outlook on the web in Exchange Online

·       Creating and managing Outlook web app policies in Exchange Online

·       Public attachment handling in Exchange Online

 

By completing this lesson, you’ll achieve the knowledge and skills to:

·       Describe Outlook on the web in Exchange Online.

·       Create and manage Outlook on the web policies in Exchange Online.

·       Manage public attachment handling in Exchange Online.

 

Lesson 3 Configuring and troubleshooting client access in Exchange Online

·       Overview of Remote Connectivity Analyzer

·       Client Access Rules in Exchange Online

·       Modern authentication for Outlook in Exchange Online

 

By completing this lesson, you’ll achieve the knowledge and skills to:

·       Use the Microsoft Remote Connectivity Analyzer.

·       Implement Client Access Rules in Exchange Online.

·       Describe modern authentication for Outlook in Exchange Online.

 

Lab Configuring clients for Exchange Online

·       Exercise 1: Configuring Outlook Web App Policies

·       Exercise 2: Managing Microsoft 365 app installations

 

By completing this lab, you’ll achieve the knowledge and skills to:

·       Create and configure Outlook Web App Policies.

·       Configure Microsoft 365 app installation options.