How to enable and configure Microsoft Teams for your users 5/27/2018 4:42 PM BRK2294 How to enable and configure Microsoft Teams for your users Thomas Binder Senior Program Manager Dan Stevenson Principal Group Program Manager © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Key learnings Start Microsoft Teams today, it is easy! Tech Ready 15 5/27/2018 Key learnings Start Microsoft Teams today, it is easy! Full experience requires Exchange Online, SharePoint Online, OneDrive for Business Leverage settings to meet your business requirements Network should be optimized for real-time communications © 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

In order to enable Teams… No further action required Obviously there is some fine print  Infrastructure dependencies Licensing Configure Teams Client Network planning

About Dan dansteve @microsoft.com Me Since 2003 Bellevue Dublin Taipei Cambridge Ohio My kids Product Group @danspot

About Thomas tbinder @microsoft.com Me Since 2007 IT Pro Readiness Vienna, Austria IT Pro Readiness My daughter Product Group

Infrastructure dependencies

Office 365 and Microsoft Teams Office 365 is the universal toolkit for the modern workplace. Teams is the hub for teamwork in Office 365.

High Level Architecture 5/27/2018 4:42 PM High Level Architecture Key Microsoft Teams Teams Web Desktop iOS App Android App Windows Phone App Skype services Electron Azure and O365 calling SERVICES Companions Web Settings and O365 access Messaging Audio / video Telemetry Notes Files Files Other Workloads OneNote WAC OneDrive for business SharePoint Experimentation Teams services Chat & Presence services Next Gen Calling AAD Most recent files MRU Identity Calendar Exchange PSTN Search Extensibility Session: BRK3071 “Get an overview of Microsoft Teams architecture” Connectors Notification Hub Firehose Listener Email Service SMTP © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

High Level Architecture 5/27/2018 4:42 PM High Level Architecture Key Identities are stored in Azure Active Directory Allows single sign on Optional: Modern Authentication Microsoft Teams Teams Web Desktop iOS App Android App Windows Phone App Skype services Electron Azure and O365 calling SERVICES Companions Web Settings and O365 access Messaging Audio / video Telemetry Notes Files Files Other Workloads OneNote WAC OneDrive for business SharePoint Experimentation Teams services Chat & Presence services Next Gen Calling AAD Most recent files MRU Identity Calendar Exchange PSTN Search Extensibility Connectors Notification Hub Firehose Listener Email Service SMTP © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

High Level Architecture 5/27/2018 4:42 PM High Level Architecture Exchange Online Group mailbox and calendar per team Meetings are pushed to Exchange calendar Exchange calendar synced to team calendar Exchange on-premises limits Cannot create or view meetings* Cannot modify profile picture Cannot configure connectors Doesn’t allow compliance archiving of private chats Key Microsoft Teams Teams Web Desktop iOS App Android App Windows Phone App Skype services Electron Azure and O365 calling SERVICES Companions Web Settings and O365 access Messaging Audio / video Telemetry Notes Files Files Other Workloads OneNote WAC OneDrive for business SharePoint Experimentation Teams services Chat & Presence services Next Gen Calling AAD Most recent files MRU Identity Calendar Exchange PSTN Search Extensibility Connectors Notification Hub Firehose Listener Email Service SMTP * Exchange 2016 CU3 and above supported © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

High Level Architecture 5/27/2018 4:42 PM High Level Architecture SharePoint Online SharePoint site for each team Dedicated folder per channel Used for files shared in channels SharePoint on-premises limits: Not possible to share files Key Microsoft Teams Teams Web Desktop iOS App Android App Windows Phone App Skype services Electron Azure and O365 calling SERVICES Companions Web Settings and O365 access Messaging Audio / video Telemetry Notes Files Files Other Workloads OneNote WAC OneDrive for business SharePoint Experimentation Teams services Chat & Presence services Next Gen Calling AAD OneDrive for Business For files sent during private chat Requires SharePoint license Most recent files MRU Identity Calendar Exchange PSTN Search Extensibility Connectors Notification Hub Firehose Listener Email Service SMTP © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

For optimal user experience All identities present in the Azure Active Directory for O365 All user mailboxes are homed in Exchange Online All users are assigned and enabled with SharePoint license All users enabled for OneDrive for Business

Licensing for Microsoft Teams Infrastructure  Licensing Configuration Clients Team Network Summary Licensing for Microsoft Teams

Microsoft Teams Office 365 commercial suites Office 365 Education O365 Business Essentials O365 Business Premium O365 Enterprise E1, E3, E5 Existing O365 Enterprise E4 purchased before its retirement Office 365 Education O365 Education O365 Education Plus O365 Education E5 Existing O365 Education E3 purchased before its retirement Government Not available to Government customers at this time

Session: BRK4000 “Learn about enterprise security and compliance with Microsoft Teams” Compliance Licensing Teams IP Capability Business Essentials Business Premium E1 E3 E5 Archive -*  In-Place eDiscovery - Advanced eDiscovery Legal hold Compliance Content search Auditing and reporting Conditional Access and MAM** * Exchange Online Archiving can be purchased as an Add-On ** Requires Active Directory (AAD) Premium subscription

Active Directory (AAD) Premium Active Directory (AAD) Premium subscription required for some advanced features Conditional Access and Mobile Application Management (MAM) Allow/deny list for guest access (currently in Preview) Group Expiration

Audio Conferencing (Preview) Session: BRK4333 “Understand meetings in Microsoft Teams” Audio Conferencing (Preview) Follows Skype for Business licensing model Phone system coming soon will do the same Dial-in license Included in qualifying Office 365 E5 subscriptions Requires Skype for Business Plan 2 Can be purchased as add-on for other subscriptions License only required for the meeting organizers Dial-out and toll-free phone numbers Requires Communications Credits Audio Conferencing available in several countries http://aka.ms/AudioConferencingCountries

Configure Microsoft Teams

O365 Admin Portal Teams specific settings Additional settings All settings can be adjusted from O365 Admin Center Experience settings are at the tenant level or user type Microsoft Teams is enabled for all tenants by default Additional settings Azure Active Directory SharePoint Skype for Business

Configure: Tenant settings

5/27/2018 4:42 PM O365 Admin Portal © Microsoft Corporation. All rights reserved.

5/27/2018 4:42 PM O365 Admin Portal © Microsoft Corporation. All rights reserved.

General Tenant Level Settings

Email Integration

Apps

Configure: User type settings

Settings by user/license type

Custom cloud storage

Teams and channels

Calls and Meetings

Messaging

Enable/Disable user licenses Users > specific user > Product Licenses > Edit

Configure: Guest Access

About Guest Access Allows business guests to join specific teams enable collaboration with users with external organizations External team members are granted access to participate in channels, conversations, chats, files, meetings, OneNote and apps. Based on Azure AD account Controlled by Teams and Azure AD settings Block/allow list in Preview Will require Azure AD subscription Disabled by default

Turn on Guest Access

Control adding guest users

Control adding guest users

Configuration: Additional O365 settings

Limit Group Creation Control who can create groups by specifying a security group Also impacts who can create teams Set policy with PowerShell More info at https://aka.ms/CreateO365Groups

Group Expiration Requires Azure Active Directory (AAD) Premium Administrator can specify expiration period 180, 365 or custom number of days Group owner will get email before expiration to renew group Notifications sent 30, 15 and 1 day before expiration Administrator can recover group up to 30 days Coming soon: renewal in Teams

Group Naming Policies Specify prefix, suffix, and forbidden word list Configure via PowerShell More info at https://aka.ms/GroupNamingPolicy $Setting = Get-AzureADDirectorySetting -Id (Get-AzureADDirectorySetting | where -Property DisplayName -Value "Group.Unified" -EQ).id $Setting["PrefixSuffixNamingRequirement"] = "Grp_ [GroupName]_[Country]" $Setting["CustomBlockedWordsList"]="Payroll,CEO,HR" Set-AzureADDirectorySetting -Id (Get-AzureADDirectorySetting | -DirectorySetting $Setting

Data Classification Classify your data Settings stored in Azure AD Configure via PowerShell More info at https://aka.ms/Data-Classification Support for default policies coming in the future

Recommended settings Area Open Managed Restricted Team creation All employees Subset e.g. full-time employees or managers Or a self-service portal Only IT staff Fun features Enabled, Giphy to moderate Enabled, Giphy to moderate, modulate per team Disable giphy and stickers Bots, apps Enabled, allow side loading Enabled, restricted list, no side loading No apps/bots Guest access Enabled, open Enabled, only team owners can add AAD allow list IT managed, AAD allow list Messaging All enabled Owner can delete messages, members cannot Some users do not get chat

Clients

Clients Web clients Desktop and mobile clients https://teams.microsoft.com Edge, Chrome (latest), Firefox (latest), Internet Explorer 11+ Offers to install desktop client and mobile apps Desktop and mobile clients https://teams.microsoft.com/downloads Windows 7+, Mac OSX 10.10+, Android 4.4+, iOS 10+, Windows Mobile 10+ Windows Store app under development Mobile clients available via app stores

Mobile device management Intune-based Mobile Application Management Supported on iOS and Android Requires Active Directory (AAD) Premium Conditional access can be enforced via Intune Policies such as PIN based access Restriction on cut/copy/paste Restrict data transfer to other apps Encrypt app data …

Client Updates All clients will auto-update Release notes As often as once a week Desktop client will update during inactive hours Release notes In client: chat with T-Bot and go to “release notes” tab Web: http://aka.ms/TeamsReleaseNotes

Team settings

Settings managed on a per-team basis Team owners can control member permissions and content settings Most behaviors are scoped just to Teams scenarios

Team: Picture/avatar

Team: Member settings

Team: Guest settings and @mentions/@team

Team: Fun controls (giphy, memes, stickers)

Network planning

Disclaimer

Network paths with Teams Usually, Office 365 application communicate only to the cloud Teams (and Skype for Business) For real time communication, we will keep traffic locally if possible 1:1 media traffic will flow peer-to-peer Cloud can relay traffic if required Real time media prefers UDP over TCP Session: BRK4004 “Understanding Media Flows in Microsoft Teams and Skype for Business”

Networking requirements Session: BRK3029 “Demystifying internet connectivity to Skype for Business Online and Microsoft Teams” Networking requirements Allow required connections Include all IPs, FQDNs and ports UDP is important for real time media https://aka.ms/Teams-IPs-Ports Allow local internet breakouts Avoid proxy servers Plan network connectivity For bandwidth and quality Session: BRK2031 “Real Time Communications with Network Planner”

Summary and resources

Key learnings & calls to actions Tech Ready 15 5/27/2018 Key learnings & calls to actions Start Microsoft Teams today, it is easy! Full experience requires Exchange Online, SharePoint Online, OneDrive for Business Leverage settings to meet business requirements Network should be optimized for real-time communications Enable and configure Microsoft Teams today Drive adoption Session: BRK3006 “Drive successful adoption of Microsoft Teams” © 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Related sessions – coming up “Real Time Communications with Network Planner BKR2031, Wednesday, 3:15 PM “Understand meetings in Microsoft Teams” BRK4333, Thursday 9:00 AM “Understanding Media Flows in Microsoft Teams and Skype for Business” BRK4004, Thursday 12:30 PM “Troubleshooting Microsoft Teams” BRK3026, Thursday, 3:15 PM “Learn about enterprise security and compliance with Microsoft Teams” BRK4000, Friday 12:45 PM “Real Time Communications with Network Planner” BRK2031, Friday 12:45 PM

Related sessions – recordings “Drive successful adoption of Microsoft Teams” BRK3006 “Get an overview of Microsoft Teams architecture” BRK3071 “Understand meetings in Microsoft Teams” BRK3333 Demystifying internet connectivity to Skype for Business Online and Microsoft Teams BRK3029

Resources to Learn More 5/27/2018 4:42 PM Resources to Learn More https://aka.ms/SuccessWithTeams Your hub for all things Microsoft Teams including vision, practical onboarding guidance, success stories, and support. https://FastTrack.microsoft.com Assistance for customers to realize their vision with Microsoft cloud services Resource Link Office Blog https://aka.ms/OfficeBlog Office Roadmap https://aka.ms/OfficeRoadmap Product Help Known Issues List https://aka.ms/TeamsSupport https://aka.ms/TeamsKnownIssues Team Developer Hub https://TeamsDeveloper © Microsoft Corporation. All rights reserved.

Please evaluate this session Tech Ready 15 5/27/2018 Please evaluate this session From your Please expand notes window at bottom of slide and read. Then Delete this text box. PC or tablet: visit MyIgnite https://myignite.microsoft.com/evaluations Phone: download and use the Microsoft Ignite mobile app https://aka.ms/ignite.mobileapp Your input is important! © 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

5/27/2018 4:42 PM © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.