2 hours 42 minutes
Hello and welcome back to the office. 3 65 migration primer course. My name's Jim Daniels and today will be going over model to preparation lesson to licensing.
So in today's lesson, we're going to go over what services are included with the core office. 3 65 licenses.
And we're also going to look at specific administrative roles within the office. 3 65 Much like everything in the Microsoft universe, you have to have a license.
Absolutely, you will not get the service. If you do, it will be a trial,
but you have to have a license to 3 65
The tenant in the community that you belong to were determined what licenses or available.
So that means government tenant, a government, a government tenant and government community will have a different licensing base as a commercial tenet and the regular commercial community
licenses determine what features each user has and what's available to them.
So the first thing we're gonna look at or the business licenses
the business license is only applicable organization. Up to 300 users
business essentials we can see from the table. You get exchange online, you get pretty much everything except the office desktop sweet
business business. You get one drop, you get officer line, you get the desktop sweet and you get a free version of teams.
This does not include exchange or SharePoint. Amman Business Premium.
You get the same exchange. Alana's Business Essentials. It's basically the same things. Business essentials with the addition of the office desktop Sweet.
Now let's look at the enterprise of licensing again. This is a very small snapshot. There are plenty of other licensing excuse that are out there, but before these or the most common,
So we're gonna look a F one,
which in the past was Kiosk one. It was a K one. This is intended mainly for your first line desk list type workers.
They get limited exchange online with no, only
they get access to SharePoint online. They get limited one draw for business. They get teams off with someone
They get the larger exchange online. SharePoint online full one drop of business Teens office, someone
e three. This is the more popular tear.
They get 100 gig of exchange align on limited archive.
They get SharePoint along the full version of one driver business teams office online, and they get the office desktop. Sweet
E five is a higher version of the three Get everything e three does. But in addition, you get some really neat features such as Power bi I,
um, you get a specialized analytics. You get a lot of security compliance features with the E five of the e three doesn't get again. We could do a complete 10 hour course just on office, resisted Bob Licensing. But for the purpose of this,
I know that the E one e three e five
and occasional kiosk desperate Caesar's those or the most popular enterprise of licensing for office
within the basis cues we can always add on Mawr services Power Bi I. If you don't have that e five and you want to take advantage of power bi, I you can. Out of the one
Microsoft Project, there's 45 different variations on project as a subscription model Vizier. There's two different video subscription license. One is online vizier, and the other is Oman. Busy Oh, plus full desktop vizier
as your 80 premium. This will bring in a lot of security features. It enhances your free as a rite of director. Remember that we talked about each office. 3 65 10 It gets his own version of Azure 80 for authentication and identification.
So as you're 80 premium, there's two different sets. P one p two actually adds and enhances the security features that you can do in the identity management.
In a possibility. Security is a suite that includes Azure 80 Premium.
You also get
a slew of extra features such as data classification, intelligent labeling, conditional access. Get a lot of
very nice security tools with that advanced threat protection.
This is Adam that you can get for exchange, and you can also get it for your Windows 10. Our Cross.
It is a next gen and type of protection. Again, we may do a whole entire another lesson on 80 p, and if we do, we can get really into the nitty gritty on that.
Here's an example of a user installation portal
within this. These are the options that a user has to install.
This right here shows a user that has a E three or e five because they have the option to install office.
They also had a vizier at all because they have that option as well. So as these license or a sign and propagated to those users, they'll have self service abilities to install software.
All right, so you need to have some strategies and license.
I tend to keep a certain number of unused licenses own hand,
especially E 35
They are awesome for troubleshooting and proof of concept. If you have a user that is 81 almost sudden, you need to put their mailbox on litigation hold
bump them up to the three license so you can apply the whole. If you need to troubleshoot something would work with a different licensing level. You have an extra one,
because in the enterprise, especially if you go through a partner
or a by board, it can take a little while to get extra license. So it's always good to have a few around just for troubleshooting and proof of concept. At least that way, there you can assign those licenses to the users
while you're waiting for the new part is to be approved and get into your licensing pool.
You can move users up. You can move them down.
machine license software. So what that is
that is the old M S I version of Microsoft Office. If you have F one kiosk
or if you have e one, remember those two skews don't get
the latest and the greatest downloaded desktop versions of the office suite. So
if you have those on a say, a shared computer,
you buy office 2016 2019. Whatever it is, you get a license for that machine, and then you can have your 10 desk. Lets users you don't utilize that same version of office
when their desk close. They could do everything except connect with our They can't connect with that stuff out what they can connect with. Exchange active sync for the mobile devices and they can connect with Web mail
but not desktop outlook.
All right, here's a quiz. We just kind of went over some of it. So I've been paying attention and should be fairly easy. Kiosk F Born desk lets users have access to
which of these
offer some line the office desktop, Sweet 50 gig mailbox or unlimited one drive storage.
I know what answer I would choose.
We'll see if we're on the same page
office. Oma remember Office Desktop Suite is E three and E five
50 gig mailbox that starts with the Iwan and progresses to 100 gig from there
and unlimited one drop stores. That source said. 81
Chaos Desk lets users they have a limited subset of email storage and also one drop storage.
Okay, let's get in the roles. So, first and foremost, if you have not seen Robin Hood men in tights,
you need to immediately pause this well, OK, finish the lesson, then pause it
and watch it. It's an amazing movie.
In the words of Little John,
the toll is a toll
in a rows of Rome.
We don't get no tolls, then we don't eat the roles
kind of silly on a. But
Microsoft is big into role based access control,
You have a role you assigned people in groups to it, and then those people assigned to that role have those functions at that role of outs. It's no different Officer 65. So let's go over some of the more common at minerals. Global admin. This is your God mood.
highest level managed. Everything reset everything.
This person craze, a major security risk that you have to mitigate. You do not want to give out global ad men's like Oprah gives out cars. Okay, you want to keep it to a minimum, keep it tight.
Billing admin. They purchasing the upgrade services.
A Man of service request,
Um, typically just may even be somebody from purchasing Audit if you have a treasurer in your organization.
If you use 1/3 party like a by board or e a contract, chances are your billing. Admin won't even be one of your employees. All of that will be outsource to that partner
help desk at man.
They can reset non administrative user password.
They can force a sign out, and they can manage service. Request
Add users. Groups. Reset non admin passwords.
Asylum license manage service request. So you're seeing a little thing with the help desk of these arrived man's. They can reset non administrative passwords.
I guess you can reset administrative passwords, global admin,
licensing, admin. They can assign a license edit user location because remember, you have to have a location identified to assign a license,
and they can also edit and create group based licensing
reports reader. They view all the activity reports that uses data sign in logs.
A lot of times, this is great. If you have a internal auditing,
you also have some additional roles. Exchange admin and SharePoint at me and teams that man service ad man again. As as it implies, the exchange at men is a global admit off the exchange environment, saying them with SharePoint admin.
They have the ability to edit everything in the exchange environment as well as everything in the SharePoint environment based on their role.
Know your role.
You wanna limit the number of global at Mons
you wanna practice least privileged access
assigned them the minimal role they need to do their job. That's just great security practice,
You implement additional security for users with administrative rose. So we talked before about the azar 80 premium.
Maybe you just want to purchase those for your administrative roles.
So if you have 20 users with office 3 65 administrative roles, maybe you want apply additional security on those 20 users. That's not a bad strategy. If you're titling, buzz it
out of the administrative role assignments on a regular basis. If it's every quarter this every six months, 12 months, however it be,
Please don't go over a year.
You should also have alert, set up for winsome eyes added or removed from certain roles, like a global admin.
All right, so to recap this lesson, we went over a lot
e one e three and E five or the common core office 3 65 licenses
each. LEISTON comes with its own available services.
Allah, cart and Adam. Licenses or available
administrative roles are assigned to users. They can also be a sign on a group basis. Each administrative role has its own administrative function.
So if you aren't sure what that role dictates, don't assign with someone until you know what power you're giving them.
So I want to thank everyone for joining me with this lesson, and I hope to see you here for the next one