© Copyright Microsoft Corporation. All rights reserved.

FOR USE ONLY AS PART OF MICROSOFT VIRTUAL TRAINING DAYS PROGRAM. THESE MATERIALS ARE NOT AUTHORIZED
FOR DISTRIBUTION, REPRODUCTION OR OTHER USE BY NON-MICROSOFT PARTIES.
Microsoft 365 Virtual Training
Day: Enable Hybrid Work with
Microsoft Teams
Get started with managing Microsoft Teams
 Explore Microsoft Teams

Module
Plan and deploy Microsoft Teams
agenda

Implement lifecycle management and governance

for Microsoft Teams
Lesson 1: Explore Microsoft Teams
The future of the
Collaborative Improved work/life
workplace is hybrid ideation boundaries

Bring remote teams together

Social connections Access to reliable

and support network and purpose-built
equipment/spaces

Increased movement Perception of non-verbal

and ergonomic furniture interactions and cues
Bridge the gap
across the hybrid
workplace
Overview of Microsoft Teams
Chats

Collaboration

Apps and workflows

Meetings

Calls

Secure and compliant

Overview of Microsoft Teams

Chats

Collaboration

Apps and workflows

Messaging

Meetings

Calls

Secure and
compliant
 Overview of Microsoft Teams
Chats

Collaboration

Apps and workflows

A team
Org-wide | Public | Private team
Meetings

Channels
Calls
Standard | Private | Shared channel*

Secure and
compliant

* Shared channel is in private preview as of July 2021. For the latest status, check the roadmap with the feature ID_70766.
Overview of Microsoft Teams

Chats

Collaboration

Apps and workflows

Meetings

Calls

Secure and
compliant
Overview of Microsoft Teams
Chats

Collaboration

Apps and workflows

Meetings

Calls

1:1/Group meeting Customer webinar Company townhall

Chats, sharing, collaboration Custom attendee registration Advanced production
Secure and
compliant
Overview of Microsoft Teams

Chats
Calls between Teams clients

Collaboration
Internet
( VoIP )

Apps and workflows

Meetings

Make and receive PSTN calls

Calls

PSTN
Secure and
compliant
Microsoft Teams integration with Microsoft 365
Microsoft 365 apps and services:
• Outlook
• SharePoint
• Yammer
• Forms
• Planner and Tasks
• Word, Excel, PowerPoint
• Viva
• Streams
• OneNote
• OneDrive
• Microsoft List
• Whiteboard
• …
Microsoft Teams integration with Microsoft Power Platform
Microsoft Teams
A range of endpoints for your custom solutions

Power Apps Power Automate Power Virtual Agents Power BI

Low code app development Workflow automation Intelligent virtual agents Business analytics

Microsoft Dataverse for Teams

Built-in, low-code data platform for Teams
Microsoft Teams integration with Microsoft Power Platform

Power Apps
A rapid low code development environment
for building custom apps for business needs.
• Embed a canvas or model-driven app as a tab
app in Teams channels.

• Pin a canvas app to the Microsoft Teams app

navigation bar as a Teams personal app.

• Create canvas apps using Power Apps app in

Teams.
Microsoft Teams integration with Microsoft Power Platform

Power Automate
Quickly automate intelligent, data-powered
workflows, from simple tasks to radical
transformations, improving agility and
productivity
• Create, manage, trigger flows in Teams

• Post messages to channels from a flow

• Streamline approval process in Teams

Microsoft Teams integration with Microsoft Power Platform

Power Virtual Agents

Easily create your own chatbots that answer
questions posed by other employees or team
members.
• Create, author, test, and publish chatbots directly
from Teams.

• Review and analyze the performance of the bot.

• Have bots take actions on someone's behalf.

Microsoft Teams integration with Microsoft Power Platform

Power BI
Seamlessly connect and transform data into
accessible visualizations, to make decisions
quickly and confidently.
• Create Power BI tab in Teams to make data-
driven decisions quickly.

• Embed interactive reports in Microsoft Teams

channels and chats.

• Get notifications in Teams about activity from

Power BI.
Microsoft Teams integration with Microsoft Power Platform (6/6)

Microsoft Dataverse for Teams

Provides storage, rich data types with
enterprise capabilities, and one-click solution
deployment.
• Apps - Create custom apps using Dataverse for Teams.

• Workflows - Build flows that are triggered when data

changes in Dataverse for Teams.

• Chatbots - Share expertise through FAQs and interact

with data in Dataverse for Teams.

• Dashboards - Users can explore and interact with their

data in Dataverse for Teams.
Microsoft Teams architecture
Microsoft Teams (not Skype hybrid) Dependent services

Exchange Online

SharePoint and
OneDrive

Skype
Microsoft Teams certified solutions

Microsoft 365 App compliance program

Microsoft Teams certified devices

Microsoft Teams connected contact center certification program

Microsoft Teams certified compliance recording

Microsoft certified session border controller (SBC)

Microsoft certified cloud video interop (CVI)

Lesson 2: Plan and deploy Microsoft Teams
Designate Teams admin roles
Designate administrators who need different levels of access for managing Microsoft Teams.

Role Can do these tasks

Manage the Teams service, and manage and create Microsoft 365
Teams Administrator
Groups.

Teams Device Administrator Manage devices configured for use with the Teams service.

Teams Communications Administrator Manage calling and meetings features within the Teams service.

Troubleshoot communications issues within Teams by

Teams Communications Support Engineer
using advanced tools.

Troubleshoot communications issues within Teams by

Teams Communications Support Specialist
using basic tools
Designate Teams admin roles

Global Admin can assign Teams admin

roles via following means:
• Microsoft 365 Admin Center
• Azure Active Directory Admin Center
• Azure Active Directory PowerShell for Graph
module

$userName="[email protected]"
$roleName="Teams Administrator"
$role = Get-AzureADDirectoryRole | Where {$_.displayName -eq
$roleName}

Add-AzureADDirectoryRoleMember-ObjectId $role.ObjectId -
RefObjectId (Get-AzureADUser | Where {$_.UserPrincipalName -eq
$userName}).ObjectID
Understand Teams management tools

Teams Admin Center

• https://admin.teams.microsoft.com
Teams PowerShell Module
• Mainly to automate processes
• PowerShell command :
Install-Module MicrosoftTeams
Connect-MicrosoftTeams
Graph APIs
• Cmdlets mainly used for bulk management
Teams Clients
Understand Teams management tools
Microsoft 365 Admin Center Azure Active Directory Admin Center
• https://admin.microsoft.com • https://aad.portal.azure.com/
• User management and usage reports • Groups, identity, licenses, and access across
Microsoft 365
Understand Teams management tools
Microsoft 365 Defender portal Microsoft 365 Compliance Center
• https://security.microsoft.com • https://compliance.microsoft.com
• Safe Attachments, Safe Links • DLP, Retention, eDiscovery
Plan for Teams rollout

Roll out Teams in stages

• Chat, teams, channels, & apps

• Meetings & conferencing

• Cloud voice

Get familiar with Teams

• Step 1: Create your first teams and channels

• Step 2: Onboard early adopters

• Step 3: Monitor usage and feedback

• Step 4: Start your organization-wide rollout

Plan for Teams rollout

Advisor for Teams

• Chat, teams, channels, and apps

• Meetings and conferencing

• Skype for Business upgrade

Microsoft FastTrack
• Provide guidance for planning,
delivery, and adoption of Microsoft
Teams
Plan for Teams adoption

Adoption plans can be simple to complex, depending on your environment. Initial steps are
identical across the board.

Phase 1 : Start Phase 2 : Experiment Phase 3 : Scale

• Get started • Create your champions program • Define outcome and success
• Understand teams and channels • Governance quick start • Optimize feedback and reporting
• Create your first teams • Define usage scenarios • Drive awareness and implement
• Assess cultural and • Onboard early adopters and training
organizational readiness gather feedback • Schedule service health reviews
• Onboard support
Plan for Teams licensing

Advanced features require an E5 plan and/or Microsoft Teams add-on licenses

additional add-on licenses.
• Microsoft 365 Business Voice

Microsoft Teams licenses • Audio Conferencing

• Teams license • Toll free numbers

• Teams (free) license • Phone System

• Calling Plans
Licensing for governance
• Microsoft Teams Rooms
Licensing for security and compliance
• Advanced Communications
Licensing for guest access
Deploy Microsoft Teams clients
Teams desktop clients
• Windows
• MAC
• Linux
Virtualized Desktop Infrastructure (VDI)
• Per-user installation (default)
msiexec /i <path_to_msi> /l*v <install_logfile_name> ALLUSERS=1
• Per-machine installation
msiexec /i <path_to_msi> /l*v <install_logfile_name> ALLUSER=1 ALLUSERS=1

Teams mobile clients

• Android
• iOS
Teams web clients
Client update management
• Teams clients are updated automatically
• Automatic updates is disabled for VDI per-machine installation
Monitor Microsoft Teams usage reports
Teams admin center
• Analytics & reports > Usage reports

Required roles
• Global admin
• Teams admin
• Skype for Business admin

Reports
• Teams usage reports
• PSTN reports
Date range
• Last 7 days, 30 days, and 90 days
Monitor Microsoft 365 usage reports
Microsoft 365 admin center
• Reports > Usage
• Cross-product view
Required roles
• Global admin role
• Reports reader role
• Product-specific admin role (Teams, SfB, SP, Exchange)

Microsoft Teams reports

• User activity
• Device usage
Date range
• Last 7 days, 30 days, 90 days, and 180 days
Interpret Microsoft Productivity Score
Score categories
People experiences
• Communication (100 points)
• Meetings (100 points)
• Teamwork (100 points)
• Mobility (100 points)
• Content collaboration (100 points)

Technology experiences
• Endpoint analytics (100 points)
• Network connectivity (100 points)
• Microsoft 365 Apps Health (100 points)

Total possible = 800 points

Lesson 3: Implement lifecycle management and governance for
Microsoft Teams
Plan for lifecycle management
Teams lifecycle stages Activities
• Stage 1: Beginning ▪ Create a team
• Stage 2: Middle ▪ Add team owners
• Stage 3: End ▪ Add team members
Beginning
▪ Add channels
Deletion of a team
▪ Add apps
• Guests
▪ Add connectors
Middle
• SharePoint
▪ Post messages to Teams
• Planner ▪ Remove members or owners
• Forms End ▪ Remove channels
• Power Automate ▪ Remove apps

• Power BI ▪ Archive teams

▪ Delete teams
• Dataverse for Teams
Automation throughout the lifecycle
Plan for Teams governance

• Group and team creation, naming, classification, and guest access

• Group and team expiration, retention, and archiving
• Group and team membership management
• Teams feature management
• Security and compliance
Plan for Teams governance
Who can Naming Configure Configure Use of
Seat policies Monitoring
create conventions guest access expiry templates

Prefix-suffix Manage who

Create site naming policies, Set expiration Teams Teams Admin
can add Retention
(SharePoint) fixed strings or duration templates Center
user attributes guest users

Custom Turn sharing Choose which SharePoint

Create team SharePoint
blocked option on or Groups policy eDiscovery Admin
(Teams) will apply to site designs
words off Center

Create shared Turn on or off Microsoft

guest access to Data Loss
library Themes 365 admin
group files and Prevention
(OneDrive) OneNote center

Configure Microsoft
Create group external
365 adoption
(Outlook) sharing for
SharePoint content pack

Groups
report
Manage Microsoft 365 Groups creation
Create a new Microsoft 365 group
• Use Microsoft 365 admin center
• Use PowerShell : New-UnifiedGroup

Upgrade a distribution list

• Use Exchange admin center
• Use PowerShell : Upgrade-DistributionGroup

Manage a Microsoft 365 group

• Use Microsoft 365 admin center
• Use PowerShell : Set-UnifiedGroup

Strategies for Microsoft 365 Groups creation

$AADSetting = Get-AzureADDirectorySetting
$AADSetting["EnableGroupCreation"] = $False
$AADSetting["GroupCreationAllowedGroupId"] = "<GroupName>"
Configure Microsoft 365 Groups expiration policy

A Microsoft 365 groups expiration policy can help

remove inactive groups from the system and make
things cleaner.
Groups expiration
• Delete associated services
• 30 days soft deletion ( restoration period )
Groups auto-renewal
• SharePoint | Outlook | Teams
Configure expiration policy
Notification to group owners
Configure Microsoft 365 Groups naming policy

Organizations can use a group naming policy to

enforce a consistent naming strategy for groups
created by users.
Naming policy features
• Prefix and suffix naming policy
• Blocked words
Configure or remove naming policy
• Use Azure AD admin center
• Use Azure AD PowerShell

Licensing requirements
User experiences
Manage user access with Azure AD access reviews

Access Reviews help users ensure that the right

people have the right access to the right
resources
• Ad-hoc or regular reviews for access
• Delegate reviews to specific admins
• Determine if users should have access
• Automate removing users’ access to resources
Plan policy assignment for users and groups

Types of policies Ways to assign policies

• Policy packages • Assign a policy/policy package directly to a user.
• Chat, teams, and channel policies ‒ Policy: Grant- cmdlet

• App policies ‒ Policy package: Grant-CsUserPolicyPackage

• Meeting policies • Assign a policy /policy package to a batch of users.

‒ Policy: New-CsBatchPolicyAssignmentOperation
• Voice and calling policies
‒ Policy package:
• Teams feature policy
New-CsBatchPolicyPackageAssignmentOperation
• Assign a policy /policy package to a group.
‒ Policy: New-CsGroupPolicyAssignment
‒ Policy package:
Grant-CsGroupPolicyPackageAssignment
Plan policy assignment for users and groups
Policy precedence
• User
Policy assigned to
the user
The policy directly assigned to a user takes precedence.
User
• Group
When no directly assigned policy, the policy with the
Policy inherited from
highest ranking assigned to a group that the user is a groups with the highest ranking
Groups
member of takes precedence.
• Org-wide
Policy inherited from
When no directly assigned nor group assigned policy, Org-wide policy
Org-wide
the user gets the global (Org-wide default) policy for
that policy type.
Create and manage policy packages
A policy package is a collection of predefined policies
and policy settings that you can assign to users who
have similar roles in your organization.
View policy packages
Create new or customize policy packages
Assign policy packages
• To one user
Grant-CsUserPolicyPackage

• To multiple users
New-CsBatchPolicyPackageAssignmentOperation

• To a group
Grant-CsGroupPolicyPackageAssignment
Manage Teams preview features using Teams update policies

Public preview is enabled on a per-user basis, and the

option to turn on public preview is controlled in an
admin policy.
Create a custom Update policy
Assign the custom Update policy
• Use Teams admin center
Use PowerShell:
Set-CsTeamsUpdateManagementPolicy

Enable public preview in Teams clients

Create and manage team templates
The types of team templates
• Base template
• Custom template

Teams template capabilities

• Template settings
• Channels, tabs, and apps

Create a template
• Create a brand new template
• Use an existing team as a template
• Start with an existing team template

Manage templates policies

• Control viewable and hidden templates
 Manage Microsoft Teams
Demo
• Prepare Teams admin roles and licenses
• Explore Teams management tools
• Create groups and teams
• Implement lifecycle management and
governance for Microsoft Teams
Prepare the environment for a
Microsoft Teams deployment
 Manage access for external users

Implement security for Microsoft Teams

Module
agenda
Implement compliance for Microsoft Teams

Plan and configure network settings for Microsoft Teams

Lesson 1: Manage access for external users
Overview of Azure Active Directory

Azure Active Directory (AAD) is Microsoft Azure’s

Azure AD - Contoso
cloud-based identity and access management
service. Identities

Features in Azure AD
• Authentication (employees sign-in to access resources)
• Single sign-on (SSO)
• Azure AD Business to Business (B2B)
Work with external users in Microsoft Teams
Azure AD - Fabrikam

Define external users

User B
• User A : Member user in your organization
• User B : Business account ( Azure AD account )
Azure AD - Contoso
• User C : Consumer email account (with Outlook.com,
Gmail.com, or others).
User C
User A ( Social identities )
• User D : Anonymous user without authenticating

User D
(Anonymous user )
Work with external users in Microsoft Teams
External access (federation) Guest access
• Enable access permission to an entire external domain • Gives access permission to an individual

• Allow find, call, chat, and set up meetings • Allow chat, teams, channels

Azure AD - Contoso Azure AD - Fabrikam

User B
Azure AD - Contoso Azure AD - Fabrikam User B (Guest)

User A

User A User B (External) User C (Guest)

User C
Manage access for external users
Manage access for external users through different admin centers at the organization level.
Admin Centers Description Settings

• Guest user access : properties and memberships of directory objects

Controls how users are invited to the directory and the guest • Guest invite settings
Azure AD
experience at the directory, tenant, and application level. • Enable guest self-service sign up via user flows
• Collaboration restrictions

• Let users add new guests to the organization

Microsoft 365 Controls guests and external sharing for Microsoft 365 Groups. • Let group owners add people outside your organization to groups
• Let group members outside your organization access group content

• External access
Controls experience in Teams for guests, external (federation),
Teams • Guest access (calling, meeting, and messaging)
and anonymous users
• Anonymous users’ meeting experience

Controls the content collaboration experience for guests and • External sharing
SharePoint
anonymous users • File and folder links
 Manage external collaboration in Azure AD

External collaboration settings in Azure AD

• Guest user access
• Guest invite settings
• Enable guest self-service sign up via user flows
• Collaboration restrictions
Configure external collaboration in AAD
• Use AAD admin center
User settings > Manage external collaboration settings
• Admin roles
Global Administrator, User Administrator, and Guest
Inviter.
Manage external collaboration in Microsoft 365

Sharing settings Microsoft 365 Groups

Microsoft 365 admin center > Settings > Microsoft 365 admin center > Settings >

Org Settings > Security & privacy tab > Sharing Org settings > Microsoft 365 Groups
Manage external access in Microsoft Teams

External access configurations

• Open federation
• Allow specific domains
• Block specific domains

Configure external access in Teams

• Use Teams admin center
Org-wide settings > External access
Manage guest access in Microsoft Teams

Guest access settings

• Calling
• Meeting
• Messaging

Configure guest access in Teams

• Use Teams admin center
Org-wide settings > Guest access
• Use PowerShell
Set-CsTeamsGuestCallingConfiguration
Set-CsTeamsGuestMeetingConfiguration
Set-CsTeamsGuestMessagingConfiguration
Set-CsTeamsClientConfiguration -AllowGuestUser $True
Manage file sharing in SharePoint and OneDrive

• Use SharePoint admin center

> Policies > Sharing

• OneDrive setting cannot be more permissive

than the SharePoint setting

• External sharing and advanced settings

‒ Anyone (includes anonymous users)

‒ New and existing guests

‒ Existing guests

‒ Only people in your organization

Lesson 2: Implement security for Microsoft Teams
Configure conditional access and MFA for Microsoft Teams
Enable Zero Trust with strong authentication and adaptive policies
Configure conditional access and MFA for Microsoft Teams
Multi-factor authentication Conditional Access policy enforcement
The process of prompting a user for an additional • Early-bound policy enforcement ( )
form of identification during sign-in. • Late-bound policy enforcement ( )
Configure Safe Attachments for Microsoft Teams

Safe Attachments help detect and block files that are

identified as malicious in Teams, SharePoint, and OneDrive.

Required roles:
• Global Administrator
• Security Administrator

Enable Safe Attachments

• Use Microsoft 365 Defender portal > Global settings
• Use PowerShell
Set-AtpPolicyForO365 -EnableATPForSPOTeamsODB $true
Set-SPOTenant -DisallowInfectedFileDownload $true
Configure Safe Links for Microsoft Teams

Safe Links help protect organization from malicious links

that are used in phishing and other attacks.

Safe Links settings for Microsoft Teams:

• Apply real-time URL scanning for suspicious links and links
that point to files
• Do not track user clicks
• Do not allow users to click through to original URL

Enable Safe Links for Teams

• Use Microsoft 365 Defender portal > Safe Links policies
• Use Exchange Online PowerShell
New-SafeLinksPolicy
Monitor security reports for Microsoft Teams

In Microsoft 365 Defender portal

• General security reports
‒ Identities
‒ Data
‒ Devices
‒ Apps

• Threat Protection Status report

• Threat Explorer
Lesson 3: Implement compliance for Microsoft Teams
Create and manage sensitivity labels

Sensitivity labels classify and

protect organization's data.

Apply sensitivity labels to

• Files & emails
• Groups & sites
• Azure Purview assets (preview)
Create and manage sensitivity labels

Sensitivity label settings for groups & sites:

• Privacy (public or private) of teams sites and Microsoft 365
groups
• External user access
• External sharing from SharePoint sites
• Access from unmanaged devices
• Authentication contexts (in preview)
Create and manage retention policies
Retention policies manage organization's data
effectively.
Retention locations for Teams
• Teams chats
• Teams channel messages (standard and private)
• SharePoint site ( files in channels)
• OneDrive accounts ( files in chats )
• Microsoft 365 groups
• Skype for Business

Teams requires a retention policy that's separate

from other workloads.
• Apply to entire organization
• Apply to specific users or teams
• Separate policies for chats and channel messages
Create and manage retention policies

Retention policy settings

• Retain-only : Retain content forever or for a specified
period of time.
• Delete-only : Delete content after a specified period of
time.
• Retain and then delete : Retain content for a specified
period of time and then delete it.
The principles of retention
Create retention policies
• Use Microsoft 365 compliance center
• Use PowerShell : New-RetentionCompliancePolicy
Create and manage DLP policies

DLP policies identify, monitor, and automatically

protect sensitive information across Microsoft 365
environment.

DLP policies for Microsoft Teams

Protect sensitive information in messages and documents

• Policy tip for sender

• Allow users to override a DLP policy
• Policy tip for recipients
Deploy communication compliance
Communication compliance helps minimize communication risks
by helping you detect, capture, and act on inappropriate messages
in your organization.

Configure policies
• Microsoft 365 compliance center > Communication compliance
Investigate
• Use alerts
• Manage issues
• Review document, user activity history
Remediate
• Resolve or tag a message
• Notify the user
• Report as misclassified
• Remove message in Teams
• Escalate to another reviewer or for investigation
Monitor
Enable scoped directory search
With Microsoft Teams scoped directory search, the
administrator can create virtual boundaries that
control how users communicate with each other
Teams admin center > Org-wide settings >Teams settings
within the organization.
• Prerequisite to use information barrier policy
• Scenarios
‒ Organization has multiple companies within a
single tenant, and you want to segment
searches by companies.
‒ School wants to limit chats between faculty and
students.
Create information barrier policy
Admins can configure Information barrier
policies to prevent individuals or groups from
communicating with each other.
• Searching for a user
• Adding a member to a team
• Starting a chat session with someone
• Starting a group chat
• Inviting someone to join a meeting
• Sharing a screen
• Placing a call
• Sharing a file with another user
• Access to file through sharing link
Create information barrier policy
Prerequisites for information barriers
Part 1 : Segment users in your organization
• A user must be in only one segment
• Each segment must have only one information barrier
• Assign users to a segment
New-OrganizationSegment
Each policy is one way only
Part 2 : Define information barrier policies
## Prevent Banker from communicating with Financial
• New-InformationBarrierPolicy
New-InformationBarrierPolicy -Name "Banker-Financial" -
• Block communications : -SegmentsBlocked AssignedSegment "Banker" -SegmentsBlocked "Financial" -
• Allow communications : -SegmentsAllowed State Inactive
Part 3 : Apply information barrier policies ## Prevent Financial from communicating with Banker
New-InformationBarrierPolicy -Name "Financial-Banker" -
• Set-InformationBarrierPolicy
AssignedSegment "Financial" -SegmentsBlocked "Banker" -
• Start-InformationBarrierPoliciesApplication
State Inactive
Conduct an eDiscovery investigation for Teams content
eDiscovery is the process of identifying and delivering electronic
information that can be used as evidence in legal cases.
Teams content location for eDiscovery
eDiscovery permissions
• eDiscovery Managers
• eDiscovery Administrators
eDiscovery solutions
• Content search
• Core eDiscovery Teams content Content location
• Advanced eDiscovery
1:1 or group chats Users' mailboxes
Core eDiscovery Workflow
Standard channel messages Group mailbox representing the team
• Create a Core eDiscovery case
• Create an eDiscovery hold Private channel messages Private channel members' mailbox

• Search for content in a case Files in standard channels SharePoint site used by the team
• Export content from a case
Files in private channels SharePoint site used by the channel

Private Content Users' OneDrive

Create and manage compliance recording policies
Compliance recording solution
• Record and capture calls and meetings
automatically.
• Recorders are automatically invited to participate
in conversations.
• Users can’t disable nor access the recording.
Configure compliance recording policy
New-CsOnlineApplicationInstance
Sync-CsOnlineApplicationInstance
New-CsTeamsComplianceRecordingPolicy
Set-CsTeamsComplianceRecordingPolicy
Grant-CsTeamsComplianceRecordingPolicy
Create security and compliance alerts for Microsoft Teams
Alert policies help administrators identify events
in their tenants that could indicate a security
breach, an abuse of administrative privileges or
other activities that require monitoring.
Lesson 4: Plan and configure network settings for Microsoft
Teams
Examine network requirements for Microsoft Teams
Teams network traffic Network optimization
• Data traffic • External Name Resolution

• Peer-to-peer real-time • Maintain session persistence

• Conferencing real-time • Validate NAT pool size

Network requirements • Routing to Microsoft data centers

• Intrusion Detection and Prevention Guidance
• Connectivity to Microsoft 365
• Configure split-tunnel VPN
• Domain name
• Implement QoS
• Available bandwidth
• Optimize WiFi
• Bypass proxy servers
Examine network requirements for Microsoft Teams
Bandwidth requirements (bitrate KB/s up/down)
Modality
Minimum Recommended Best performance

Audio - One-to-one 10/10 58/58 76/76

Audio - Meetings 10/10 58/58 76/76

Video - One-to-one 150/150 1,500/1,500 4,000/4,000

Video - Meetings 150/200 2,500/4,000 4,000/4,000

Screen sharing - One-to-one 200/200 1,500/1,500 4,000/4,000

Screen sharing - Meetings 250/250 2,500/2,500 4,000/4,000

Together Mode - One-to-one N/A N/A N/A

Together Mode – Meetings 1,000/1,500 1,500/2,500 2,500/4,000

Plan for network deployment using Network Planner
Network planner features
• Generate reports and calculate bandwidth requirements for
Teams usage
• Create representations of your organization using sites and
Microsoft recommended personas
Required roles
• Global Administrator,
• Teams Service Administrator
• Teams Communications Administrator

Create a custom persona

Build your plan
Create a report
Configure network ports and protocols for Microsoft Teams

All clients that use Office 365 cloud-based services, including

Microsoft Teams, need to connect to the Office 365
endpoints, which represent set of destination IP addresses, Scenario Source IP/Port Destination IP/Port
DNS domain names, and URLs for Office 365 traffic on the
Internet. Non-real-time Client IP Office 365

Office 365 endpoint change management traffic High ports 80, 443 TCP

• Use Web Service

Real-time media Client IP Transport Relays
• Use RSS feeds
traffic 50,000-50,059 UDP 3478-3481 UDP
• Use Power Automate
Implement Quality of Service (QoS)
Quality of Service (QoS) is a mechanism you use
to prioritize certain types of network traffic

Implement QoS
• Verify if a network is ready for QoS
• Select a QoS implementation method
• Choose initial port ranges for each media type
• Implement QoS in the Teams admin center
• Validate the QoS implementation
• Migrate a QoS solution to Teams
Assess network readiness using Microsoft 365 network connectivity test tool

Microsoft 365 connectivity test is a proof of concept (POC)

network assessment tool that runs basic connectivity tests
against your Microsoft 365 tenant and makes network
recommendations.
Run Microsoft 365 connectivity test tool
• https://connectivity.office.com

Network connectivity test results for Teams

• Media connectivity : Use UDP
• Packet loss : <1% during 15 s
• Latency : <100ms
• Jitter : <30ms

Share network connectivity test results

Monitor the Microsoft 365 network connectivity dashboard
Interpret network assessments
• Tenant network assessments
• Office location network assessments
• The network quality for Microsoft Teams is measured as UDP
latency, UDP jitter, and UDP packet loss.

Review network insights

Network assessment Expected user experience

100 Best

80 Meets recommendations

60 Acceptable

40 Users may experience issues

20 Users may complain

0 Network problems a common topic of discussion

 Prepare the environment for a Microsoft
Teams deployment
Demo • Manage guest access for Microsoft Teams
• Implement security for Microsoft Teams
• Implement compliance for Microsoft Teams
• Calculate Network capabilities
Manage chat, teams, channels, and apps in
Microsoft Teams
 Create and manage teams

Module Manage collaboration experiences for chat

agenda and channels

Manage apps for Microsoft Teams

Lesson 1: Create and manage teams
Create teams

Teams admin center

Teams client
• From scratch
• From a template
• From an existing group or team

PowerShell
New-Team

Microsoft Graph API

Create a team from existing resources
Microsoft 365 admin center SharePoint sites

Upgrade paths to create teams from an existing

resource
Distribution list → Microsoft 365 group → a team
Microsoft 365 group → a team
• Use Microsoft 365 admin center
• Use Teams client
• Use PowerShell: Get-UnifiedGroup
Teams client
SharePoint team site → a team
• Use SharePoint sites
Plan and create org-wide teams
Org-wide team
• Only global admins can create
• Limit to orgs within10,000 users
• Limit to 5 org-wide teams per tenant
• Owner - global admins and Teams admins
• Members - all active users

Create an org-wide team

• from scratch
• from an existing team (update Privacy level)
Manage teams
Teams overview grid
• Add, edit, archive, delete, search teams

Edit team
• team profile
• team members
• Conversations and channels’ settings
• Manage channels

Use PowerShell to manage teams

• Set-Team
• Remove-Team
Manage users in a team
Task Team Owner Team Member
Manage user roles Create team Yes No

Manage membership Leave team Yes Yes

Edit team name/description Yes No

• Use Teams admin center
Delete team Yes No
• Use Teams client Add standard channel Yes Yes
• Use PowerShell Edit standard channel name/description Yes Yes

Delete standard channel Yes Yes

Add-TeamUse
Add private channel Yes Yes

Edit private channel name/description No N/A

Delete private channel Yes No

Add members Yes No

Request to add members N/A Yes

Add apps Yes Yes

Configure dynamic membership
Dynamic membership enables to define members
of a Team by one or more rules that check for
certain user attributes in Azure AD.

Enable dynamic membership

• Use Azure AD admin center
• Use PowerShell

Create a dynamic membership rule

• Property – Operator - Value
Archive, restore, and delete a team
Archive a team
Restore an archived team
Delete a team
• Soft-deletion retains for 30 days
• Use Teams PowerShell
Remove-Team
Restore a deleted team
• Use Azure AD admin center
• Use PowerShell
Restore-AzureADMSDeletedDirectoryObject
Permanently delete a team
Lesson 2: Manage collaboration experiences for chat and channels
Manage public and private channels

Channel types
• Public channels
• Private channels

Manage channels in a team

• Add new channels
• Update name and description
• Delete channels
• Set-TeamChannel

Restore a deleted channel

Manage private channel creation

Org/Users level – Use Teams policies

• Use Teams admin center
• Use PowerShell
Set-CsTeamsChannelsPolicy
-AllowPrivateChannelCreation:$false

A team level – Use team’s settings

• Use Teams client
Configure Teams settings
Create and manage messaging policies

Messaging policy settings

Creating new messaging policies
Assign, modify, or delete existing policies
Use PowerShell
• New-CsTeamsMessagingPolicy
• Grant-CsTeamsMessagingPolicy
Manage channel moderation

Available restrictions with channel moderation

• Starting new posts in a channel
• Reply to existing channel messages
• Channel messages submitted by bots
• Channel messages submitted by connectors
Manage channel moderation
• Use Teams client
• Standard channels
Lesson 3: Manage apps for Microsoft Teams
Overview of Teams apps
Microsoft Bot Framework

Web Technologies
Tabs,
Personal Bots
Teams apps Apps
SharePoint
Framework (SPFx)
• Microsoft apps
Your custom app or
service
• Third-party apps Notifications Messaging
Power Platform
Extensions

• Custom apps Microsoft Teams

GitHub

Connectors Task
& Modules
Webhooks Microsoft Graph

Visual Studio + Visual Studio Code

Overview of Teams apps admin settings
Manage apps for your organization in Teams apps
in the admin center.

• Manage apps
• App permission policies
• App setup policies
• Custom apps uploads
• Microsoft Power Platform apps
( Build by your colleagues )
‒ Shared Power Apps
‒ Shared Power Virtual Agent Apps
Manage org-level app settings

Use Manage apps to view and manage all Teams

apps at tenant level (organization’s app catalog)

View all Teams apps in tenant app catalog

• About ( Certification, Status, etc )
• Permissions
• Settings
• Security and compliance
• Plans and pricing
Manage org-level app settings
Manage apps Org-wide app settings
• Allow and block apps • Third-party apps
• Manage app permissions and settings • Custom apps
• Add an app to a team
• Customize apps
Create and manage app permission policies
Use app permission policies to control what apps
are available at Teams user level.

Create and edit app permission policies

Assign an app permission policy to a user or users
• Use Teams admin center
‒ Teams apps > Permission policies > Manage users
‒ Users > Select users > Edit settings
• Use PowerShell
Grant-CsTeamsAppPermissionPolicy
Create and manage app setup policies
Use app setup policies to highlight the apps that
are most important for your users.

Create and edit app setup policies

• Installed apps
• Pinned apps

Assign an app setup policy to a user or users

• Use Teams admin center
‒ Teams apps > Setup policies > Manage users
‒ Users > Select users > Edit settings
• Use PowerShell
Grant-CsTeamsAppSetupPolicy
Manage custom apps uploads
Three components determine whether a user can upload a custom app to a team or personal apps :

Org-wide level User level A team level

• Teams admin center > Teams apps > • Teams admin center > Teams apps > • Teams client > Manage team > Settings
Manage apps > Org-wide app settings Setup policies > Member permissions
Publish custom apps to Microsoft Teams

Custom apps distribution methods

Distribution methods Descriptions

• Available to everyone
Teams app store
• https://appsource.microsoft.com/

• Available to users in your org

Tenant apps catalog
• Publish to org's app store

• Available to specific users in your org

Sideloading
• Test or debug with other developers

Publish custom apps to organization's app store

• Upload an app package as a Teams admin
• Approve custom apps submitted by users

Update custom apps

Customize the app store Teams app store page
• Organization logomark

Teams admin center

• Teams apps > Customize store

Custom apps page

• Organization logo
• Customize background
• Customize text color of organization name
 Manage teams and collaboration settings
for Teams
• Manage team resources
Demo • Configure channel and messaging policies
• Manage app settings
• Test configured policy settings
Manage meetings and virtual events in
Microsoft Teams
 Manage meetings and virtual events experiences
Module
agenda
Configure and manage Microsoft Teams devices
Lesson 1: Manage meetings and virtual events
experiences
Explore meetings and virtual events in Microsoft Teams

1:1/Group meeting Customer webinar Company townhall

Chats, sharing, collaboration Custom attendee registration Advanced production
Explore meetings and virtual events in Microsoft Teams

Teams Meetings

• Integrated chat, video, document

collaboration and apps

• Three types of meetings:

‒ Channel meeting

‒ Private meeting
Explore meetings and virtual events in Microsoft Teams
Webinars
• Attendee registration page
and email confirmations
• Integrate with Microsoft
Dynamics 365 Marketing
Explore meetings and virtual events in Microsoft Teams

Live events
• Event group roles

‒ Organizer

‒ Producer

‒ Presenter

‒ Attendee

• Production options

‒ Teams

‒ External app or device

Explore meetings and virtual events in Microsoft Teams

Live events
• Streaming platform

‒ Azure Media Services

‒ Azure Content Delivery Network (CDN)

• Enterprise Content Delivery Network (eCDN)

Configure meeting settings

Meeting settings:
• Participants (anonymous users)
• Email invitation (customization)
• Network settings

Configure meeting settings

• Use Teams admin center
Create and manage meeting policies
Create and manage meeting policies
Policy implementation types Policy precedence for per organizer and per user
implementation type:
• Per organizer
All meeting participants inherit the policy Meeting policies Use the feature

of the organizer.
Organizer Participants Organizer Participants
• Per user
Yes Yes
Only the per-user policy applies to restrict
certain features for the organizer and/or Yes No
meeting participants.
No No
• Per organizer and per user
Certain features are restricted for meeting No No
participants based on their policy and the
organizer's policy.
Configure Audio Conferencing
Ability to join a Teams meeting from a regular
phone and call out from a meeting to a phone
number
Core deployment decisions
• Audio conferencing licenses
• Conferencing bridges and phone numbers
‒ Shared phone numbers (Toll)
‒ Dedicated phone numbers (Toll and Toll-free)

• Default and alternate languages

• Conference bridge settings
• Dial-in phone number settings for users
• Communications Credits
Configure Audio Conferencing
Configure conference bridges
• Configure dedicated conference bridge numbers
‒ Get toll or toll-free numbers
‒ Assign to conference bridge
• Change the default conference bridge number
• Configure conference bridges settings
‒ Use Teams admin center
‒ Use PowerShell :
Set-CsDialinConferencingBridge
• Assign dial-in phone numbers for users
Configure live events settings
Live events settings:
• Support URL
• Use a third-party distribution provider
• SDN provider name
• Provider license key
• SDN API template URL

Configure live events settings

• Use Teams admin center
• Use PowerShell
Set-CsTeamsMeetingBroadcastConfiguration
Create and manage live events policies
Live events policies:
• Allow scheduling
• Allow transcription for attendees
• Who can join scheduled live events
• Who can record an event

Create and assign live events policies

• Use Teams admin center
• Use PowerShell
New-CsTeamsMeetingBroadcastPolicy
Grant-CsTeamsMeetingBroadcastPolicy
Live events across Microsoft 365
Produce using Teams

Presenter(s)

Schedule Going Live Cloud Network View

delivery delivery
Presenter 1 Presenter n (3rd party eCDN)
Organizer Producer Audience
Azure Media
Services

Produce using app/device

Organize Watch
Produce Content
Delivery
Producer
Network
Watch on desktop, web, mobile

RTMP Device
Lesson 2: Configure and manage
Microsoft Teams devices
Plan for Teams Rooms deployment
Understand your device setup and
Set standards based on room sizes
configuration

Plan for product delays Create a cabling diagram

Standardize room installation Don't forget training

Envision Onboard Drive value

Inventory
spaces
& plan Device Site Service Configuration Maintenance
capabilities selection Procurement readiness readiness & deployment Adoption & operations
Plan for Teams Rooms deployment
Understanding Meeting room uses
Meet and Present
• Spaces prioritize presentation and discussion
• Everyone involved in the discussion and able to see
and interact with shared content.

Meet and Co-create

• Less formal with a priority on co-creation
• The device can be mobile, encouraging users to
interact

Combination Meet and Present + Meet and Co Create

• Both types of rooms can handle both types of
experiences as needed.
• Rooms can also be designed to accommodate both
Select Microsoft Teams devices

Analyze spaces for Teams Rooms

• What type of furniture is in the room?

• What sort of materials are on the walls in the room?

• Are the walls made of glass?

• How bright or dark is the room?

• How large is the room?

• What kind of field of view should the camera have?

• How are you going to run cables to the table

microphones, cameras, and displays?
Select Microsoft Teams devices

Personal Devices
Document your meeting spaces
• What is the goal of this room?

• Will cables need to be run on top of the floor?

Audio & Video Teams Display Desk Phones
Peripherals
• Is there a physical whiteboard?

• Does the room have any apparent ambient noise

issues, such as a loud air conditioning unit? Teams Rooms

• Do you need to control external devices such as

lowering shades or turning on a projector?

• Can the walls support the display weight? Modular Integrated All-in-One
(Surface Hub)
Devices to meet the needs of any size or type of room
Microsoft Teams Rooms devices

Modular Integrated All-in-One

Individual Combined audio and video Complete audio, video, and

connected devices functions with separate display in a single unit
displays

✓ Teams Rooms on Windows ✓ Teams Rooms on Surface Hub

✓ Teams Rooms on Android

✓ Meet and Present ✓ Meet and Co-Create

✓ Meet and Present + Co-create

 Select Microsoft Teams devices
Example Spaces

Medium Conference Room Focus / Huddle Space

• Microsoft Teams Room • Microsoft Teams Room

• Single or dual display • Single or Dual display
• Surface Hub 2S side (50” or 85”* • Optimized For: Meet and Present
• Optimized for: Meet, Present, and Co-create
Select Microsoft Teams devices Surface Hub 2 Camera

Surface Hub
aka.ms/teamsdevices

Agile teamworking, co-create with Whiteboard,

Primary access to Office 365 content, 3rd party
focus applications, and Microsoft Teams meetings.
Mobile, uninterrupted teamwork

Configuration All-in-one

Displays 50-inch, 85-inch1; 4K+ resolution pen/touch screen

OS Windows 10 Team Microsoft Teams for

4K+ screen Surface Hub
Teams App Microsoft Teams for Surface Hub App
Select Microsoft Teams devices

Teams Rooms on Surface Hub

• Next generation of Teams on Surface Hub brings
your favorite features from the desktop experience,
into the meeting room

• Robust meeting controls and updated interface

• Easily access your Microsoft 365 files and present

confidently using PowerPoint Live.

• Rich whiteboarding capabilities with additional

updates coming later this year
 EXPERIENCE

Select Microsoft Teams devices

S

MODERN TOOLS Windows

FOR IT 10 Team
OS
ACCESSORIE
S
DEVICE Surface Teams
50” and Pen and Microsoft
85” 4K Endpoint
Camera Manager/MD
M
included Whiteboa
rd
Surface Hub 2S Stands
Steelcase Windows
A platform for collaboration and 3rd
AV Party
Update for
Business Office
Teams 365
Certifie
d
Microsoft Store Edge Web
Device
App
Suppor Management Apps
t
Microsof
t Store
Apps
Configure Microsoft 365 resource accounts for Teams Rooms
• Microsoft 365 resource accounts are mailbox
and Teams accounts that are dedicated to
specific resources, such as a room, projector,
and so on.
• Teams Meeting Room Licensing
‒ Microsoft Teams Rooms Standard
‒ Microsoft Teams Rooms Premium
• Create a resource account
‒ Use Microsoft 365 admin center
‒ Use PowerShell
New-Mailbox
Set-CalendarProcessing
Set-MsolUser
Set-MsolUserLicense
Remote provision and sign-in for new devices

• Add device MAC addresses

‒ Manually add a device MAC address
‒ Upload a file to add a device MAC address

• Generate a verification code

• Provision the device

• Sign in remotely
Remote provision and sign-in for new devices

Set up your Surface Hub

1. Initial screens
2. Enter device account info screen
3. Name this device : Friendly and Device name
4. Set up admins for this device screen
5. Set up admin account screen
 Microsoft Confidential
Teams Rooms Management
Teams Admin Center
Room System Heath
Call Quality

Self Managed
Monitoring & Alerting
Teams Settings & Policies

Partner Managed
Microsoft Endpoint Manager

Microsoft Managed
Policy Management
Device Compliance
Security

Teams Room Managed

Services
24X7 Monitoring and Operations
Managed Updates
Automated Remediation
Planning and Inventory
Multi-layer Security
Delegate Device Management to Microsoft Managed Services
Requirements:
• Teams Rooms Premium Licenses (Paid or Trial)
• Global Administrator for the first login on the portal
• Firewall and Proxy Configurations
Microsoft Teams Rooms - Managed Services
• 24x7x365 Monitoring and Operations
• Incident Management
• Managed Updates (OS, Applications, Firmware’s, Security)
• Room Planning and Inventory
• Room Standards
• Per site and device access control
• ServiceNow Export
• Delegated Partner Access
Delegate Device Management to Microsoft Managed Services

If you don’t own Premium licenses yet:

Start Your Trial for 90 days 100 devices
• You can head to
https://rooms.microsoft.com/premium
• Request your Trial license as Global Administrator of
your tenant
Roles and Permissions to Managed Services Portal

Roles
• Roles can be assigned to individual users in your O365
organization or to security groups that you already
created
• There are 3 default roles, and you can create your own
roles with specific permissions
• Each role can have multiple assignments, for example
New York Site Leads can only access and view rooms in
New York, and than New York Building 1 Technicians can
only see a segment of those rooms
• Managed Service Administrator has access to all rooms
and full permissions
Add Rooms to the Managed Service
Requirements
• Configure firewalls and proxies to allow traffic to the
documented URL’s on the Installation Guide

Steps
• Download the Installer
• Download the Key
• Read the Installation Guide
• Place the Installer and Key on the Teams Room

After installing go to the portal navigate to Rooms select

the new room and click Enroll
Incidents with the Managed Service

Incidents
• Incidents can be created both to report problems or
raise questions to the Managed Service Engineers
• Incident pane will aggregate per category all your
incidents, let you know what actions is Microsoft taking
on your devices and where you need to act.
• Information about incident criticality will also be shown
here
Follow-up on Incidents with the Managed Service

Incident Management
• Navigate to Incidents
• Select the Incident you want to get details
Manage devices in Microsoft Teams
Required admin roles
• Microsoft 365 Global admin
• Teams admin
• Teams Device admin
Manage phones, collaboration bars, Teams
displays, and Teams panels
• Change settings, device information
• Restart or manage software updates
• Upgrade Teams phones to Teams displays
• Assign or change configuration policies
• Add or remove device tags
• View device history and diagnostics
Manage devices in Microsoft Teams

Manage Teams Rooms

• Change settings on one
or more devices
• Restart devices
• View meeting activity
• View meeting details
Create and manage configuration profiles

Manage settings and features for Teams

devices in your organization
• General settings
• Device settings
• Network settings

Create a configuration profile

Assign a configuration profile
Manage Microsoft Teams device tags

Group, organize, and easily

manage the Teams devices
• Create, remove, or rename
device tags
• Add or remove tags on a
single or multiples devices
• Use filters to return devices
with a specific tag for bulk
actions
Troubleshoot Teams Rooms
Teams Rooms app issues Tools
• The Teams Room app is not up to date • Microsoft Teams Rooms recovery tool
• The resource account can’t sign into Microsoft • Azure AD sign-ins logs
Teams
Video display issues
• Video image is blurry, colors aren’t accurate, or it
just doesn’t look right
• Displays don’t turn on automatically
Network issues
• Video is choppy or low resolution, the resource
account keeps signing in and out, or audio has
echoes, stutters, or drops
General Issues
• Performance is poor
 Manage Teams meetings experiences
Demo
• Manage meetings and virtual events experiences
• Deploy Teams device profiles
Manage calling in Microsoft Teams
 Manage phone numbers

Module
Manage Phone System for Microsoft Teams
agenda

Troubleshot audio, video and client issues

Lesson 1: Manage phone numbers
Evaluate Microsoft Teams calling solutions
Calls between Teams clients
Basic telephony terminology
• Voice over Internet Protocol (VoIP) Internet
( VoIP )

• Public Switched Telephone Network (PSTN)

• Private Branch Exchange (PBX)

• Microsoft Phone System

• Session Initiation Protocol (SIP) trunks Make and receive PSTN calls

• Session Border Controller (SBC)

PSTN
Evaluate Microsoft Teams calling solutions
PSTN calling solutions in Teams

PSTN
Evaluate Microsoft Teams calling solutions
Phone System with Teams Calling Plans
• All-in-the-cloud voice solution

• Use when
‒ Calling Plan is available in your region.

‒ You do not need to retain your current PSTN Microsoft as

PSTN carrier
PSTN

carrier.

‒ You want to use Microsoft-managed access to

the PSTN.
Evaluate Microsoft Teams calling solutions

Phone System with Operator Connect

• Operator-managed voice solution

• Use when
‒ Microsoft Calling Plan isn't available in your
geographic location
SBCaaS PSTN
‒ Your preferred operator is a participant in the
Microsoft Operator Connect program.

‒ You want to find a new operator to enable

calling in Teams.
Evaluate Microsoft Teams calling solutions
Phone System with Direct Routing
• Connect your on-premises environment to Teams with your own PSTN carrier
• Use when
‒ You want to use Teams with Phone System.
‒ You need to retain your current PSTN carrier.
‒ You want to mix routing, with some calls going through Calling Plan, some through your carrier.
‒ You need to interoperate with third-party PBXs and/or equipment such us overhead pagers, analog devices,
and so on.

Phone
Certified Session Border #
Controller(s) Ranges
Internet PSTN
3rd Party Voice Apps Voice Trunk
(supported by certified SBC
Partners)
Get phone numbers

Things to consider:
• What types of phone numbers to get?
• How many phone numbers can you get?
• Do you want to get new phone numbers or
port existing numbers?
• What are supported ways to get phone
numbers in your country or region?
Get phone numbers
Each country or region has different instructions, types of phone numbers, and
rules/regulations for getting phone numbers to be used in Microsoft Teams.

Use Teams admin center Use Phone Number Support Center

• If using the Teams admin center is supported in • If get new phone numbers isn't listed in the Teams
Get new your country/region. admin center.
phone numbers
• If you need specific phone numbers or area codes.

• If your country or region is listed in the porting

Port existing wizard.

phone numbers • If you need to port 999 or fewer user numbers.
Get phone numbers
Use Teams admin center • Port existing phone numbers
• Get new phone numbers
Get phone numbers
Use Phone Number Service Center
• Create a new case
‒ Phone number ordering support
‒ Phone number porting requests
• Need a Letter of Authorization (LOA) for
porting existing phone numbers.
Manage emergency addresses

Emergency address association

• Caller’s address associated with the caller’s
phone number.
• Configurations vary among country and
regions.

Emergency address
• Emergency location
= Emergency address + Place (optional)
• Emergency address validation
• Emergency address geo codes
Manage phone numbers for users

Manage phone numbers

• Assign phone numbers
• Change a phone number
• Remove a phone number

Assign phone numbers

• Use Teams admin center
• Use PowerShell : Set-CsOnlineVoiceUser

Show phone numbers for users

• Teams client > Calls
Manage voice settings for users
Use Teams admin center Use Teams client
Lesson 2: Manage Phone System for Microsoft Teams
Explore Phone System
key features
• Auto attendants and call queues : route callers
to the appropriate person or department in your
organization.

• Cloud voicemail : supports voicemail deposits to

Exchange mailboxes only.

• Calling identity : display a detailed caller ID that

pulls information from the corporate directory
when calling from inside the company, showing
picture ID and job title instead of just a phone
number.
Plan and design call queues and auto attendants
Call queues Auto attendants
• A greeting message. • Deliver corporate or informational greetings.
• Music while people are waiting on hold. • Provide custom corporate menus.
• Redirection of calls to agents in mail-enabled • Search a directory for a name.
distribution lists and security groups. • Enable callers to reach or leave a message for a person in
• Configuration parameters such as queue maximum size, your organization.
timeout, and call handling options. • Support shared voicemail for callers to leave a message
• Shared voicemail for callers to leave a message for an for an organization.
organization. • Support multiple languages for prompts, text-to-speech,
and speech recognition.
• Support specifying holidays and business hours.
• Transfer calls to an operator, other users, call queues, and
auto attendants.
Plan and design call queues and auto attendants

Business decisions Technical decisions

• What languages do you need? • Agents' configuration
• Do you want to allow voice inputs from callers or only dialing ‒ Individual users
inputs? ‒ Distribution lists
• Do you need separate call routing for off hours or holidays ‒ Security groups, including mail-enabled security groups
• Do you want to allow agents in a call queue to opt out of taking ‒ Microsoft 365 Groups or Teams
calls? • Do you need to port existing phone numbers?
• Do you want agents in your call queues or your operator to have • Weather to use Conference mode?
a specific caller ID if they dial out? • Teams-only coexistence mode for Agents.
• Do you want to enable call parking and retrieval in your • Zero Licensing cost for nested auto attendants (no phone
organization to assist in call handoffs between people or number assigned)
departments?
• For the voice prompts, do you want to record your own or use
the system-generated voice?
Plan and design call queues
and auto attendants
Design call routing flow
• Work in a diagram
• Determine the auto attendants and call
queues
• Related requirements : service numbers,
licenses, and resource accounts

Auto Attendant Call Queue

Script for options.

User User User

Create and manage Teams resource accounts
Teams resource account is required for
each auto attendant or call queue.
• Create a resource account
• Assign a license
‒ Microsoft 365 Phone System - Virtual User
‒ Phone System

• Assign a service number

‒ Toll or toll-free service numbers
‒ Reachable directly by a service number
Configure call queues

Call overflow handling Call time out handling

Configure auto attendants
Create auto attendants - General info
• Operator
‒ No Operator
‒ Person in the organization
‒ Voice app
‒ External phone number
• Time zone
• Language
• Voice inputs
Configure auto attendants
Create auto attendants - Call flow
• First play a greeting message
• Then route the call
‒ Disconnect
‒ Redirect call
‒ Play menu options
▪ Set up the greeting and menu options.
▪ Set menu options
o Dial key
o Voice command
o Redirect to
▪ Directory search
 Configure auto attendants
Create auto attendants – Advanced settings
• Call flow for after hours
• Call flows during holidays
• Dial scope
• Resource account
Configure dial plans

Effective dial plans and scopes

• Service-scoped
• Service-scoped + Tenant Global-scoped
• Service-scoped + Tenant User-scoped
Plan for tenant dial plans
• Decide whether a custom dial plan is needed.
• Determine whether tenant global or tenant user
scoped dial plans are needed, or both.
• Identify valid number patterns for each required dial
plan.
• Develop an organization-wide scheme for naming
dial plans.
Configure dial plans
Configure a dial plan
• Name and description
• Dial plan details
‒ External dialing prefix
‒ Optimized device dialing
• Normalization rules
‒ use .NET Framework regular expressions
‒ 1 to 50 normalization rule per dial plan
Example

Rule name 4digitExtension

Description Translates 4-digit extensions.

Number pattern ^(\d{4})$

Translation +1425555$1

Example 0100 is translated to +14255550100

Create and manage calling policies

Create, edit, assign a custom calling policy

Calling policy settings
• Make private calls
• Call forwarding and simultaneous ringing to people in your organization
• Call forwarding and simultaneous ringing to external phone numbers
• Voicemail is available for routing inbound calls
• Inbound calls can be routed to call groups*
• Allow delegation for inbound and outbound calls*
• Prevent toll bypass and send calls through the PSTN
• Busy on Busy is available while in a call
• Allow web PSTN calling
• Allow music on hold (Set-CsTeamsCallingPolicy)
Create and manage call park policies
Call park enables users to place a call on hold and
retrieve the call later down the line.
Enable call park and retrieve
• Available in Teams Only deployment mode
• Enterprise Voice user
• When apply the same policy to a set of users, they can park
and retrieve calls among themselves.

Create and assign call park policies

• Use Teams admin center
• Use PowerShell
New-CsTeamsCallParkPolicy
Grant-CsTeamsCallParkPolicy
Create and manage caller ID policies
Use caller ID policies to change or block the
caller ID.
• Block the caller ID of incoming calls from being displayed.
• Let users override the settings in the policy regarding
displaying their number to callees or not.
• Set the caller ID to be displayed for users
• Choose a service number to replace the caller ID of users.

Create and assign caller ID policies

• Use Teams admin center
• Use PowerShell
New-CsCallingLineIdentity
Grant-CsCallingLineIdentity
Lesson 3: Troubleshot audio, video and client
issues
Troubleshoot Teams

Resources from Microsoft • Initial troubleshooting steps

• Use Help from Teams client • Common Teams issue
Troubleshoot Teams
Check client connectivity Tools for monitoring and troubleshooting
Scenarios require specific URLs and ports • Log files
• Authentication • Call Analytics
• Microsoft Teams client connectivity Related to specific calls and meetings.
• Collaboration • Call Quality Dashboard
• Media Network-wide view of call quality across organization
• Shared services • Direct Routing Health Dashboard
• Third-party integration Connection between Session Border Controller (SBC)
• Skype for Business interoperability and the Direct Routing interface
• Skype for Business client interoperability
Collect and identify logs
There are three types of log files automatically produced by the client that can be leveraged
to assist in troubleshooting Microsoft Teams
Debug Media Desktop
Web x - -
Windows x x x
Mac OSX x x x
Linux x x x
iOS/Android - - -

Collect debug logs

Keyboard shortcut Log file folder
Windows Ctrl + Alt + Shift + 1 %userprofile%\Downloads
Mac OSX Option + Command + Shift + 1 Downloads
Linux Ctrl + Alt + Shift + 1 ~/Download
Browser Ctrl + Alt + Shift + 1 prompted to save the debug log
Identify issues with call analytics

Connection performance to specific calls

and meetings.
Required permissions
• Teams Administrator
• Teams Communications Support Specialist
• Teams Communications Support Engineer

View the call analytics for a user

• Teams admin > Users > a user’s Meetings & calls
Identify issues with call analytics

Call analytics for calls

• Overview
• Advanced
• Debug

Communications Communications
Information
support engineer support specialist

Caller and recipient name All details shown. Names shown with exceptions.

Advanced tab All details shown. Information not shown.

Debug tab All details shown. Information not shown.

Identify issues with call analytics

Call analytics for meetings

• Timeline
• Participant details

Communications Communications
Information
support engineer support specialist

Participant names All details shown. Names shown with exceptions.

Participant count All details shown. All details shown.

Session details All details shown. Information shown with exceptions.

*Phone number shown with last three digits obfuscated.

Identify issues with Call Quality Dashboard

Call Quality Dashboard (CQD) is designed to help

Teams admins and network engineers optimize a
network.
Required permissions
• Global Administrator
• Global Reader
• Skype for Business Administrator
• Teams Service Administrator
• Teams Communications Administrator
• Teams Communications Support Engineer
• Teams Communications Support Specialist
• Reports Reader
Identify issues with Call Quality Dashboard

Summary Reports
• Overall Call Quality
• Server—Client
• Client—Client
• Voice Quality SLA

Detailed Reports
• Location-enhanced reports • Rate my call reports

• Reliability reports • Help desk reports

• Quality of experience reports • Client version reports

• Quality drill down reports • Endpoint reports

• Failure drill down reports • Detailed reports

Identify issues with the Direct Routing Health Dashboard

Overall health of the connected SBCs

• Direct Routing summary Teams admin center > Voice > Direct Routing
• SBC
• Network Effectiveness Ratio (NER)
• Average call duration
• TLS connectivity status
• SIP options status
‒ Active
‒ Warning, no SIP options
‒ Warning, SIP Messages aren't configured

• Concurrent calls capacity

 Manage calling in Microsoft Teams
Demo
• Set up a Calling Plan
• Manage phone system for Microsoft Teams
Thank You!