You are on page 1of 55

User Management

(the basics)

Overview

Office 365 includes a portal to manage your users and accounts. To access the portal, just
log into http://portal.microsoftonline.com using your username and password. Youll use
this portal to manage your users.
Note: If you are using directory sync, some of this information will need to be
managed on-premise. This includes managing existing external contacts,
distribution groups, security groups, user account creation, and user email
addresses.

Basic User Management

Creating Users
1

Open Office 365 Admin Section


Navigate to
portal.microsoftonline.com and log
in with your credentials.
Select Office 365 from the Admin
menu.

Click to Add a User


Click on the + button within users
and groups.

Enter Basic Details


Enter basic details for the user.
The User Name section determines
the users primary email address
and their logon name.
You can choose to make the user
reset their password on first log in or
not. You can also choose whether to
use an automatically generated
password or set one yourself, as well
as what email address you would
like the password to be sent to.

Reset Passwords
You can reset the passwords for one or more users. This process provides you with a
temporary password for each user. The user (or you on the users behalf) will need to log
into the portal once using this password and set a permanent password before the user
will be able to access services such as Outlook, Lync, or SharePoint.

Open Office 365 Admin Section


Navigate to
portal.microsoftonline.com and log
in with your credentials.
Select Admin from the App Drawer.

Reset Password
Select the users youd like to reset
the password for in the users and
groups section.

Send Email
By default you will get an email
with the users temporary
password. Youll also see the
temporary password on the next
page.
You can also send this email to
the user directly by entering their
email address in this field.
You also have the option of
making the user reset their
password on next log in or not.

Finish
Write down the users temporary
passwords.
This password will need to be
entered into Lync or Outlook
before they will work.

Changing User Information


You can change a users information, such as their name, display name, admin role,
licensing, etc.

1. Open Office 365 Admin Section


Navigate to
portal.microsoftonline.com and log in
with your credentials.
Select Admin from the App Drawer.

2. Change User Info

Click Users and then Active


Users.
Click on the user whose information
you would like to edit, then click
Edit in the menu at the right.

3. Change User Info

4. Set Admin Role

You can change the name, display


name, and user name of the user, as
well as the domain name you want
their email to be under.

5. Under Roles you can set


an admin role for the user.
Click the Global admin
option to give them full
admin control over your
entire Office 365 instance.
Click Limited admin

access to select specific


parts of being an admin to
assign to that user.
6.
7. Click the Learn more about
administrator roles link to
see a definition of each
separate admin role.

8. Set Sign-in Status and External Admin


Access

9. Under Settings you can


set the sign-in status of the
user, either letting them log
in or blocking them from
logging in. This can be very
useful when handling
terminated employees.
10.You can also assign
administrative access to
companies you support, if
that is something necessary
to your organization.

11.

Set User Licensing

12.Under Licenses you can


assign any licenses you
have available to the user. If
you click the arrow next to
the license name, you can
choose the specific
components included in
that license to allow the
user access to.
13.You can also click Buy
more licenses to be taken
to the Purchase Services
page where you can buy
more licenses.

14.

Set Up Multiple Email Addresses for User

Under Email address you can


add alias email addresses for a
user and set their primary

email address.

15.

Set Up Mailbox Permissions

Under Mailbox permissions


you can allow other users to
send email from this users
mailbox.
You can also set up other users
to access this users mailbox as
well as sending from it.
Under More mailbox
permissions you can allow
other users to send email on
behalf of this users mailbox.

Deleting Users
Deleting a user marks the user and their Exchange mailbox as deleted. You have 30 days
in which to restore the user and mailbox before the data is permanently deleted.

Open Office 365 Admin Section


Navigate to
portal.microsoftonline.com and log
in with your credentials.
Select Admin from the App Drawer.

Delete Users
Click Users on the left hand side.
Check the box next to the user(s)
youd like to delete. Then click
Delete on the right hand side and
confirm the deletion.

Restore Users
1.

Open Office 365 Admin Section


Navigate to
portal.microsoftonline.com and log
in with your credentials.
Select Admin from the App Drawer.

2.

Restore Users
Click Users on the left hand side
and then select Deleted Users.
Check the box next to the user(s)
youd like to restore. Then click the
Restore users button on the right.
You will only be able to restore a
deleted user within 30 days of
deleting that user.

Advanced User Management

Changing Password Expiration Policy


You can modify the global password expiration policy centrally in Office 365. In order to
entirely disable password expiration you will need to configure each user individually via
PowerShell (see below).

Open Office 365 Admin Section


Navigate to
portal.microsoftonline.com and log
in with your credentials.
Select Admin in the App Drawer.

3.

Open password settings


Open the passwords tab within
Service Settings on the left.

4.

Change settings
Modify the settings. You can
choose a number of days for
expiration between 14 (2 weeks)
and 730 (2 years).
You can also select the checkbox
under Passwords never expire
to completely remove password
expiration for all users.
Users receive password
expiration notices when they log
into the Office 365 portal.

Turning off Password Expiration (PowerShell)


Using PowerShell, you can turn off password expiration entirely for a particular user or all
users.

1.

Connect with PowerShell


Complete the steps in the Using
PowerShell portion of this document
to get connected to Office 365.

2.

Run the PowerShell Command


Run the following command to turn off password expiration for a user.
set-msoluser -UserPrincipalName <fullemailaddressofuser>
-PasswordNeverExpires $true

3.

Turning Off Password Expiration for All Users


Run the following command to turn off password expiration for all users.
Get-MSOLUser | Set-MsolUser -PasswordNeverExpires $true

Terminated Employees
In the event of a terminated employee, there are a few ways to handle their Office 365
account.

Email Forwarding
1 Open Office 365 Admin Section
Navigate to portal.microsoftonline.com and
log in with your credentials.
Select Admin from the App Drawer.

16.

Change User Info


Click Users and then Active Users.
Click on the user whose information you
would like to edit, then click Edit in the
menu at the right.

17. Set Email Address To Forward


To

Under Email address you can set the


email address you would like the
terminated users mail to be forwarded to.

Mailbox Delegation
1 Open Exchange Admin Section
Navigate to
portal.microsoftonline.com and
log in with your credentials.
Select Admin from the App
Drawer.

2 Open Exchange Admin Section


Once in the Admin Center, click
Exchange under Admin in
the left menu.

18.

Open Mailbox Settings


Click on mailboxes under the
recipients section.

19.

Open Mailbox Settings


Double click the mailbox of the
terminated user to open the
settings for their mailbox.

20.

Open Mailbox Delegation


Click on mailbox delegation
and scroll down to the Full
Access section. Click the +
to add a user, giving them full
access to the terminated
users mailbox.
NOTE: Users you add will
not be able to send mail as
the terminated user, only
open and view the
contents of the mailbox.

21.

Select A User For Full Access


Search for the user you would
like to give full access to,
double click on their name,
and click ok.
When this window closes, be
sure to click save in the
mailbox delegation menu.

Export the Mailbox


If you just want to delete the terminated employees user account, but you need the mail,
calendar, etc. from their mailbox, you can export it in a .pst file.

1 Open Outlook On the Desktop


Click the File menu, click on Open &
Export, and click Other Users Folder.

22.

Select User
To select a user, you can either just enter
their name in the first screen, or click
Name to view your organizations entire
directory.
Select the terminated users account and
click OK.
The mailbox will appear in the left menu of
Outlook.

23.

Export .pst File


Click the File menu, click on Open &
Export, and click Import/Export.

24.

Export .pst File

Select Export to a file and click Next.

25.

Export .pst File


Select Outlook Data File (.pst) and click
Next.

26.

Export .pst File


Select the mailbox you would like to export
from.
Make sure to check Include subfolders,
then click Next.

27.

Export .pst File


Select the location you would like to export
the file to. We recommend exporting to
your desktop so the file can be found
easily.

28.

Export .pst File


You will have the option to set a password
for the file. This is only necessary if there is
sensitive information in the emails of the
terminated user.

1 Export .pst File

29.
30.If all goes well, you will see a file called
backup.
31.
32.You can now proceed to delete the user
from your organizations Office 365
directory.

33. Email Configuration

34. Overview

35.Email configuration in Office 365 occurs through the Exchange portion of the Office 365
control panel. Email configuration includes managing:

User Mailboxes: normal mailboxes associated with an individual user


Shared Mailbox: mailboxes that are not associated with a particular user and do
not count towards your user licenses. Used for collaboration.
Resource Mailboxes: Used for calendar scheduling including rooms and
equipment. Automatically accept and reject requests based on availability.
Distribution Groups: Allows you to send emails to one email address and have
those emails be distributed to many users or external contacts.
External Contacts: Allows you to maintain an organization wide contact list, and
to include individuals with external email address in distribution groups.
Spam Settings: You can turn up and down spam filtering to meet your needs.

36. User Mailbox Configuration

37. Changing Users Email Addresses


38.Users can have multiple email addresses associated with their mailbox. Email sent to
these secondary email addresses will go to the users mailbox just like mail sent to the
primary email address.

1.

39. Open Office 365 Exchange


Section

41.Navigate to
portal.microsoftonline.com and
log in with your credentials.
42.
43.Select Admin from the App
Drawer.

40.

2.

44. Open Office 365 Exchange


Section

46.Once in the Admin Center, click


Exchange under Admin in the
left menu.

45.
3.

47. Open the Users Mailbox


Settings
48.

49.Double click on the users


mailbox in the list to the left to
view existing email addresses.
50.
51.You can remove email addresses
(other than the users primary
address) by using the - button.
52.

4.

53. View the Users Email


Addresses

55. Click on the email


address section on the left.

54.
5.

56.
57.

Add a new Email Address


58.

Use the + button (1) to


add another email address.
59.
60. Make sure the SMTP
radial is selected (2) and type
in the new Email address
(3).
61.
62. If you want to make this the
primary email address for the
account check the make this
the reply address box (4).

63. Changing Mailbox Permissions


64.You can change permissions on the mailbox as a whole from the Exchange Control
Panel. Note that users can also share individual folders (their inbox, calendar, or
contact list) from within Outlook.

1.

65. Open Office 365 Exchange


Section

67.Navigate to
portal.microsoftonline.com and
log in with your credentials.
68.
69.Select Admin from the App
Drawer.

66.

2.

70. Open Office 365 Exchange


Section

72.Once in the Admin Center, click


Exchange under Admin in the
left menu.

71.
3.

73. Open the Users Mailbox


Settings
74.

75.Double click on the users


mailbox in the list to the left to
view existing email addresses.
76.
77.You can remove email addresses
(other than the users primary
address) by using the - button.
78.

4.

79.

Change Settings

80.

81. Open the mailbox


delegation tab. Add and
remove users from the three
sections to manage
permissions.
82.
83. Send As: Allows users to
add this mailboxs email
address to their From drop
down in Outlook and send
messages from the mailbox.
84.
85. Send on Behalf Of:
Similar to Send As except
outbound messages say on
Behalf Of rather than from
the user.
86.
87. Full Access: Allows the
user to open the mailbox in
Outlook or Outlook Web
Access. Users with Full
Access permissions to a
mailbox will automatically see
that mailbox in local Outlook.

88. Setting Up Email Disclaimers


1 Open Office 365 Exchange
Section

89.Navigate to portal.microsoftonline.com
and log in with your credentials.
90.
91.Select Admin from the App Drawer

92. Open Office 365 Exchange


Section

93.Once in the Admin Center, click


Exchange under Admin in the left
menu.

94.

Open the Mail Flow Tab

95.

Create Disclaimer

Click on mail flow within the Exchange


admin center, then click the +
dropdown menu. In the dropdown menu,
click Apply disclaimers

Enter a name for your disclaimer (i.e.


Default Disclaimer). In the dropdown
under *Apply this rule if select
[Apply to all messages]
Click the *Enter text link to type in
what your disclaimer will say. Then click
the Select one to decide what
happens if the disclaimer cannot be
inserted.
Click save when you have finished
configuring your disclaimer.

Setting Up Skype for Business Software


1 Open Office 365 Admin Section
Navigate to
portal.microsoftonline.com and log
in with your credentials.
Select Office 365 settings from
the gear icon menu.

2 Navigate to Software
Click on Software.

3 Download Skype for Business


Click on Skype for Business in the
left menu, select your language,
select either 32-bit or 64-bit by
clicking Advanced, and then click
Install.
Run the file that downloads.

Shared Mailbox Configuration

Shared mailboxes are not associated with any particular user. They give you a place for
multiple users to collaborate on email, calendars, and contacts. Shared Mailboxes are
typically used for generic email addresses such as resumes@, info@, inquiries@, etc.
Users with Full Access permissions to a shared mailbox will automatically see that
mailbox in local Outlook.

Creating a Shared Mailbox


1.

Open Office 365 Exchange Section


Navigate to
portal.microsoftonline.com and log
in with your credentials.
Select Admin from the App Drawer.

2.

Open Office 365 Exchange Section


Once in the Admin Center, click
Exchange under Admin in the
left menu.

3.

Open the Shared Mailbox Tab


Click on the shared link within the
recipients section of the Exchange
admin center.

4.

Add the Mailbox


Click the + button and give the
mailbox a display name and
email address. You can then set
the following permissions:
Send As: Allows users to add
this mailboxs email address to
their From drop down in
Outlook and send messages from
the mailbox.
Full Access: Allows the user to
open the mailbox in Outlook or
Outlook Web Access.

Managing Existing Shared Mailboxes


You can manage existing shared mailboxes in the same way as standard mailboxes. Just
double click on them from the list and modify the properties. Most properties are the
same.

Resource Mailbox Configuration

Resource Mailboxes are used to track rooms and equipment. They can be invited to
meetings in order to easily determine their availability.

Creating a Room Mailbox


1.

Open Office 365 Exchange Section


Navigate to
portal.microsoftonline.com and log
in with your credentials.
Select Admin from the App Drawer.

2.

Open Office 365 Exchange Section


Once in the Admin Center, click
Exchange under Admin in the
left menu.

3.

Open the Resources Mailbox Tab


Click on the resources link within
the recipients section of the
Exchange admin center.

4.

Add the Mailbox


Click the + button and select the
type of resource mailbox youd
like to add.
Room Mailbox: Includes a
location, phone number, and
capacity to help you with
scheduling.
Equipment Mailbox: Only
includes a name (i.e. Project A,
Main Toyota Camry).

5.

Set Info & Delegation


Complete the basic settings for
the mailbox.
Accept or decline
automatically: Automatically
determines availability and
confirms if a slot is available.
Select delegates: Allows you to
specify a list of users that receive
an email about each proposed
appointment and can confirm or
deny the appointment.

Managing Existing Resource Mailboxes


You can manage existing resource mailboxes in the same way as standard mailboxes. Just
double click on them from the list and modify the properties.
Some advanced settings are only available when editing an existing mailbox (not when
creating one). These include booking options that allow you to:

Allow or disallow repeating meetings


Restrict scheduling to working hours
Automatically decline appointments that are too far in the future
Specify the maximum date in the future that can be scheduled
Specify the maximum duration of a reservation
Include an automated reply that is sent to a meeting organizer

Distribution Group Configuration

Distribution Groups provide your organization with an easy way to email multiple people
with a single email address.

Creating a Distribution Group


Please note that the process for creating a distribution group does not provide a way to
change a setting that allows people outside your organization to email the distribution
group. See Managing Existing Distribution Groups for instructions on making this
change.

1.

Open Office 365 Exchange Section


Navigate to
portal.microsoftonline.com and log
in with your credentials.
Select Admin from the app drawer.

2.

Open Office 365 Exchange Section


Once in the Admin Center, click
Exchange under Admin in the
left menu.

3.

Open the Groups Mailbox Tab


Click on the groups link within the
recipients section of the Exchange
admin center.

4.

Add the Mailbox


Click the + button and select the
type of distribution group youd
like to add.
Note: We will only cover
standard Distribution Groups
in this guide.

5.

Enter Basic Information


Record the Display Name, Alias,
and Email Address of the group.

6.

Add Owners
Owners have control over the
distribution group. They will
receive notifications if someone
wants to join and can manage
the distribution group from their
Outlook Web Access.

7.

Add members
Members will receive email sent
to this distribution group. You can
add other distribution groups and
external contacts as well.

8.

Set Group Options


Indicate whether individuals in
your organization can join and
leave this distribution group on
their own through Outlook Web
Access.

Modifying a Distribution Group


1.

Open Office 365 Exchange Section


Navigate to
portal.microsoftonline.com and log
in with your credentials.
Select Admin from the App Drawer.

2.

Open Office 365 Exchange Section


Once in the Admin Center, click
Exchange under Admin in the
left menu.

3.

Open the Distribution Group


Click on the groups link within the
recipients section of the Exchange
admin center and then double click
on the distribution group you would
like to edit.

4.

Modifying Delivery Management


One of the most common reasons
to edit a distribution group is to
allow external people to send
email to this distribution group
(i.e., info@). You can change this
setting in the delivery
management section.

5.

Setting Permissions
Just like mailboxes you can give
users the ability to send email
that appears to come from the
distribution group.
Send As: Allows users to add
this mailboxs email address to
their From drop down in
Outlook and send messages from
the mailbox.
Send on Behalf Of: Similar to
Send As except outbound
messages say on Behalf Of
rather than from the user.

Email Encryption

Email encryption provides added security for any sensitive information you may be
sending with Office 365.

Setting Up Email Encryption


1 Open Office 365 Admin
Section

Click the grid icon in the upper left, then click


the Admin tile.

2 Open Rights Management


Click on Service Settings then Rights
Management. On the resulting screen, click
Manage.

3 Activate Rights Management


Click activate to turn on Rights Management
for your Office 365 instance.

4 Run PowerShell Commands


Connect to your Office 365 Admin account through
PowerShell using the instructions found on page
45.
Enter the following commands once connected:
Set-IRMConfiguration -RMSOnlineKeySharingLocation
https://sprms.na.aadrm.com/TenantManagement/ServicePartner.svc

Import-RMSTrustedPublishingDomain -RMSOnline -name


"RMS Online"
Test-IRMConfiguration -RMSOnline
Set-IRMConfiguration -InternalLicensingEnabled $true

5 Open Office 365 Exchange


Section

Navigate to portal.microsoftonline.com and log in


with your credentials.
Select Admin from the App Drawer.

6 Open Office 365 Exchange


Section

96.

Open the Mail Flow Tab

97.

Configure Rights

Once in the Admin Center, click Exchange under


Admin in the left menu.

Click on mail flow within the Exchange admin


center, then click the + dropdown menu. In the
dropdown menu, click Apply rights protection to
messages

First give your encryption rule a name, such as

Management

Email Encryption. Then, if you want every


email within your organization to be encrypted,
select [Apply to all messages] under Apply
this rule if (You can configure this to your
companys needs).
If your company already has a preferred RMS
template, click *Select one Otherwise, select
another message security type from the Do the
following dropdown menu.
When you finish configuring your preferred
security settings, click save.

Spam Control

The default Office 365 spam filtering is typically sufficient for most organizations. If you
need to modify the default settings this section describes how.
NOTE: We cannot help you fine tune spam filtering for your organization. Fine
tuning spam is a trial and error process that requires fast identification of
issues, which is difficult for us to do since were not on the ground in your
organization.

Changing Malware Settings


You can modify what Microsoft does with a message that has a virus.

1.

Open Office 365 Exchange Section


Navigate to
portal.microsoftonline.com and log
in with your credentials.
Select Admin from the App Drawer.

2.

Open Office 365 Exchange Section


Once in the Admin Center, click
Exchange under Admin in the
left menu.

3.

View Malware Filter Settings


Click on the malware filter tab
within protection.

4.

Modifying Delivery Management


Double click on the default filter
to edit the options.
By default the entire message is
deleted with no notification to
users. Use this screen to modify
the default settings.

Changing Connection Filter Settings


You can whitelist and blacklist IP addresses. This is particularly important if you are
integrating with third-party services that need to be able to send email to users within
your organization.

1.

Open Office 365 Exchange Section


Navigate to
portal.microsoftonline.com and log
in with your credentials.
Select Admin from the App Drawer.

2.

Open Office 365 Exchange Section


Once in the Admin Center, click
Exchange under Admin in the
left menu.

3.

View Connection Filter Settings


Click on the connection filter tab
within protection.

4.

White and Black Lists


Double click on the default filter
to edit the options.
You can add IP addresses or
ranges to the whitelist and
blacklist from this screen.

5.

Enable Safe List


Microsoft can use lists provided
by 3rd party organizations that
track IP addresses that have high
and low spam activity. You can
use these lists to improve your
spam filtering. Note that
messages that are blocked by
connection filters do not trigger a
notification that a message was
blocked.

Changing Content Filter Settings


The content filter takes a look inside email messages to identify spam. Most content filter
settings are turned off by default and need to be manually enabled.

1.

Open Office 365 Exchange Section


Navigate to
portal.microsoftonline.com and log
in with your credentials.
Select Admin from the App Drawer.

2.

Open Office 365 Exchange Section


Once in the Admin Center, click
Exchange under Admin in the
left menu.

3.

View Connection Filter Settings


Click on the content filter tab
within protection.

4.

Modify Actions
Double click on the default filter
to edit the options.
By default spam is directed to the
users Junk Email Folder and
maintained for 7 days. If you wish
to modify these settings you can
use the actions section of this
screen.

5.

Modify International Spam Options


If you do not typically receive
email sent from other countries
you can change the options in
the international spam section.

6.

Modify Advanced Options


Modifying the options in the
advanced options screen can
have a big impact on the amount
of spam that makes its way to
end users.
For a full description of all of
these options at the link below.
http://technet.microsoft.com/enUS/library/jj200750(v=exchg.150)
.aspx

Using PowerShell

Overview

Some features of Office 365 cannot be configured through the web interface. Configuration
of these features requires the use of PowerShell. PowerShell is a command-line utility (text
based) that provides tremendous flexibility and capabilities. Using PowerShell, it is
possible to automate almost every aspect of Office 365 administration.
Unfortunately, PowerShell is not focused on ease of use. PowerShell is a highly advanced
and specialized tool that requires significant training and testing. This document is not
intended to provide you with the information you will need to become a PowerShell expert.
Instead, we will attempt to give you a few basic commands you can use to administer
commonly used features.
This section of the Admin Guide covers installing PowerShell and getting
connected to Office 365 using PowerShell. The actual commands you will need
are spread throughout this document in the appropriate section.

Installing & Configuring PowerShell

Please note that PowerShell does not come with every computer. Youll need Windows 7 or
Server 2008R2 or newer and then youll need to complete the following steps:
1. Turn on Windows PowerShell and .NET 3.5
2. Install PowerShell Modules
3. Turn On Remote Signed Execution

Step 1: Turn on Windows PowerShell and .NET 3.5


Most computers running Windows 7 or Server 2008R2 or newer come with PowerShell
installed. If it is not available you can turn it on in the control panel.

1.

Open Windows Features


From the Programs and Features
section of Control Panel select Turn
Windows features on or off

2.

Add .NET
Turn on .NET Framework 3.5.
NOTE: You do not need either
Windows Communication
Foundation features.

3.

Add PowerShell
Add both PowerShell features and
click OK to install.

Step 2: Install PowerShell Modules


Download and install the appropriate bit-version (32 or 64) of the following software:

Microsoft Online Services Sign-In Assistant


o http://www.microsoft.com/en-us/download/details.aspx?id=41950
Windows Azure AD Module for Windows PowerShell
o http://technet.microsoft.com/library/jj151815.aspx#BKMK_Requirements
o Direct 32bit Link: http://go.microsoft.com/fwlink/p/?linkid=236298
o Direct 64bit Link: http://go.microsoft.com/fwlink/p/?linkid=236297

Step 3: Turn on Remote Signed Execution


1.

Open PowerShell as Administrator


(Windows 7)

For Windows 7
Right click on Windows PowerShell
from your Start menu and left click
on Run as Administrator.

2.

Open PowerShell as Administrator


(Windows 8)

For Windows 8
Find Windows PowerShell from your
programs menu and right click on
the icon.
Left click on Run as Administrator
in the bottom bar that appears.

3.

Turn on Remote Signed Execution


Run the following command and
confirm the change by typing Y
set-executionpolicy
remotesigned

Connecting to Office 365

Every time you wish to run commands against Office 365, youll first need to connect to
Office 365. Youll need to complete these steps before running the other commands in this
document.
For reference, this entire set of commands is below. In the future you can just copy/paste
the entire block into PowerShell.

import-module MSOnline
$O365Cred = Get-Credential
$o365Session = New-PSSession -ConfigurationName Microsoft.Exchange `
-ConnectionUri https://ps.outlook.com/powershell/ `
-Credential $o365Cred -Authentication Basic -AllowRedirection
Import-PSSession $O365Session
Connect-MsolService -Credential $O365Cred

1. Import the PowerShell Modules


Run the following command to
import the PowerShell modules and
make them available once youve
connected to Office 365.
import-module MSOnline

2. Enter your Office 365 Credentials


Run the following command to
record your Office 365 credentials.
Use your full email address and
password:
$LiveCred = Get-Credential

Create your Session


Run the following command to
create a new session that will be
used to connect to Office 365. Note
that the entire command needs to
be entered as one line of text. Be
careful when copy/pasting.
$Session = New-PSSession
-ConfigurationName
Microsoft.Exchange
-ConnectionUri
https://ps.outlook.com/powershe
ll/ -Credential $LiveCred
-Authentication Basic
-AllowRedirection

98.

Import the Session


Import the session using the
following command to get
connected.
Import-PSSession $Session

99.

Connect to Office 365


Run the following command to finish
connecting to Office 365.
Connect-MsolService -Credential
$LiveCred

100. Finding the Right Command


For a full list of available commands
in Office 365, run the following
command.
Get-Command -module
MSOnline

101. Some Common Commands


All of these commands require an
Excel spreadsheet with your
organizations users. &C7& and
variations of this represent a cell in
your Excel spreadsheet that
contains the desired user's email
address, so these commands will not

work without that information.


Substitute the cell name (C7 for
example) with the proper cell name
in your spreadsheet. Make sure to
leave the "&" symbols.

102. Reset User Password

103. Set Multiple Alias Accounts


104. Set Up Distribution Groups

105. Add Members to a Distribution


Group

="Set-MsolUserPassword
-UserPrincipalName " &C7& "
-NewPassword '@password1'
-ForceChangePassword $false "
=CONCATENATE("Set-Mailbox ",A1,"
-EmailAddress
",A1,",",B1,",",C1,",",D1)
="New-DistributionGroup -Name '"
&A3& "'-DisplayName '" &A3& "'
-Alias '" &D3& "'
-PrimarySmtpAddress " &C3
="Add-DistributionGroupMember
-Identity " &C64& " -Member " &D64
="Add-DistributionGroupMember
-Identity
allmacusers@capemaymac.org
-Member " &C2

106. Set Up Alias Mailboxes

="$Temp = Get-Mailbox -Identity "


&C7
="$Temp.EmailAddresses +=
('smtp:"&C7&"@nationalitiesservice
.org')"
="Set-Mailbox -Identity "&C7&"
-EmailAddresses
$Temp.EmailAddresses"

107. Set Ownership of Distribution Group


to Single User

Set-DistributionGroup "Group
Name" -ManagedBy "Admin
Account"
-BypassSecurityGroupManagerChec
k

108. Remove Attachments as win.dat


files
109. Change Calendar Permissions

110. Set Up Shared Mailbox


111. Get User Principle Names
112. Assign Location to Each User
113. Assign Licenses to Each User

Set-RemoteDomain Default
-TNEFEnabled $false
add-MailboxFolderPermission
-Identity
KlamathFallsCalendar:\Calendar
-User KlamathFalls -AccessRights
PublishingAuthor
New-Mailbox -Name "Contoso
Support" -Alias support Shared
= Get-MSOLUser | Out-File
c:\userlist.txt
="Set-MsolUser -UserPrincipalName
" &C7& " -UsageLocation US"
Remove parentheses from below and fill
with the domain that was used when
signing up for the account.

="Set-MSOLUserLicense
-UserPrincipalName " &C7&"
-AddLicenses
(domainusedforadminaccount):EXC
HANGESTANDARD"

If you do not want to type in all this code every time you want to connect to Office 365,
there is something called profiles that can make life a lot easier. When starting PowerShell
it will run any commands it finds in a special document known as $profile. To create this
file, you'll need to enter new-item -type file -path $profile -force in PowerShell. Then,
to find where this document exists on your system, enter $profile. You can then open the
document with a text editor and paste the commands above into this document. Now
whenever you open PowerShell, it will automatically attempt to connect to Office 365,
prompting you to enter your credentials.

Miscellaneous Administrative Tasks

Here are some optional tasks available to you as an administrator that you may find
helpful.

Analytical Reports
1 Open Office 365 Admin Section
Navigate to portal.microsoftonline.com and
log in with your credentials.
Select Office 365 from the Admin menu.

2 Navigate to Reports
Click on Reports in the left menu.
From here you can view analytics on how
your organization is using Office 365

3 Download Your Reports


You can also download your reports as an
Excel spreadsheet if you have Excel 2013.

Outlook for Mobile Devices


1 Open Office 365 Exchange Section
Navigate to
portal.microsoftonline.com and
log in with your credentials.
Select Exchange from the
Admin menu.

114. Open Recipients


Click on recipients in the left
menu.

115. Mobile Devices Configuration


Exchange ActiveSync and
Outlook Web Access will be
enabled by default for all users.
In the Mobile Devices menu on
the right you can disable these
options if you do not want your
users to be able to sync Outlook
with their mobile devices or
access Outlook Web Access.

You might also like