Office 365 Best Practices

facebook.com/perficient twitter.com/Perficient_MSFTlinkedin.com/company/perficient

Perficient is a leading information technology consulting firm serving clients throughout

North America.

We help clients implement business-driven technology solutions that integrate business

processes, improve worker productivity, increase customer loyalty and create a more agile

enterprise to better respond to new business opportunities.

About Perficient

• Founded in 1997

• Public, NASDAQ: PRFT

• 2013 revenue ~$375 million

• Major market locations throughout North America• Atlanta, Boston, Charlotte, Chicago, Cincinnati, Cleveland,

Columbus, Dallas, Denver, Detroit, Fairfax, Houston, Indianapolis, Los Angeles, Minneapolis, New Orleans, New York City, Northern California, Philadelphia, Southern California, St. Louis, Toronto and Washington, D.C.

• Global delivery centers in China, Europe and India

• >2,100 colleagues

• Dedicated solution practices

• ~90% repeat business rate

• Alliance partnerships with major technology vendors

• Multiple vendor/industry technology and growth awards

Perficient Profile

BUSINESS SOLUTIONSBusiness IntelligenceBusiness Process ManagementCustomer Experience and CRMEnterprise Performance ManagementEnterprise Resource PlanningExperience Design (XD)Management Consulting

TECHNOLOGY SOLUTIONSBusiness Integration/SOACloud ServicesCommerceContent ManagementCustom Application DevelopmentEducationInformation ManagementMobile PlatformsPlatform IntegrationPortal & Social

Our Solutions Expertise

Our Microsoft Practice

Shalini PasupnetiPresenter Shalini Pasupneti is a Solution Architect in Perficient'sMicrosoft infrastructure practice focusing on Exchange and Office 365. Recently, she’s been guiding global and mid-size companies in their transition to Office 365. She holds an MCITP in both Exchange and Office 365.

Our Speaker

• Global Office 365 Partner of the Year

• Exchange Partner of the Year

• Central Region Award for Office 365

• Heartland Partner Award for Office 365

• Microsoft Partner Advisory Council Member

• 2010 Microsoft Central Partner of the Year Online Services

• 300,000+ users migrated to the cloud

• Office 365 Author and MVP

• 130,000 blog site visits per month

Office 365 Expertise

Recognition for Excellence

What is Office 365?

Latest productivity services in Microsoft’s public cloud + the latest apps

• Exchange Online: 50GB per mailbox

• Options for mail archiving, encryption, DLP, RMS

• Exchange Online: 100s of Millions of mailboxes

• Up to 25TB SharePoint Online storage per tenant

• 25GB SharePoint storage per user

• Cloud App Model to run customized apps

Office 365 Features

Flexible tools to do your best work, across devices

Office 365 Cost Comparison

Office 365 Customer Satisfaction Rollercoaster

12 | Microsoft Confidential

ExchangeIMAPLotus NotesGoogle

LargeMediumSmall

In-CloudOn-PremisesSingle Sign-On

DirSyncManual/Bulk Provisioning

SimpleRich

Self serve or Admin DrivenFeatures by user typeCloud or on-premises tools

Organization Readiness

• Office 365 On Ramp Tool• Active Directory Readiness

• Topology• IdFix• AdModify

• Exchange Remote Connectivity Analyzerhttps://www.testexchangeconnectivity.com

http://www.stevieg.org/tag/exchange-environment-report/

• Identifies and remediates AD object issues that will fail Windows Azure AD DirSync

• Built on analysis of DirSync daily error volumes and is targeted at fixing the majority of errors quickly

• Provides a data grid with the ability to scroll, sort and edit

• Suggested fixes are provided for known errors

• Customer change confirmation change and undo/rollback functionality

IdFix DirSync Error Remediation Tool

Client Readiness• Do client desktops meet the minimum

requirements?

• What options exist for remediation?

• What version of Office and IE are in use today?

• What applications are in use today in the

organization?

• Is there software deployment solution in place to

deploy necessary Office 365 patches?

• Admin and help desk training

Identity Options

Identity Options

• Okta• Pingfederate• Azure ADFS• Multifactor Authentication

• Phonefactor• RSA

IMAP migrationSupports wide range of email platformsEmail only (no calendar, contacts, or tasks)Cutover Exchange migration Good for fast, cutover migrationsNo Exchange upgrade required on-premisesStaged Exchange migrationNo Exchange upgrade required on-premisesIdentity federation with on-premises directory

Hybrid deploymentManage users on-premises and onlineEnables cross-premises calendaring, smooth migration, and easy off-boarding

Source Platforms vs. Migration Options

3rd Party Migration Tools

• Binary Tree• Domino, Exchange• CMT for Coexistence• E2E

• Dell (previously Quest)• Domino, Google • On Demand Migrator • Notes Migrator For Exchange (NME)

• MigrationWiz• Domino, Zimbra, Tenant• Web based tool

• Metalogix• SharePoint

Migration solutions

Cutover

Staged

Hybrid

small medium LargeOrganizationalsize in users

<1 week 2 weeks 3 weeks several monthsTime for migration incl. planning

none mailflow/GALSync free/busy, archive in cloudFeatures

How to Pick A Migration Solution

Hybrid Features

Hybrid Deployment

• Verify domains• Add all SMTP domains as verified domains before synchronizing• Cannot be removed until all synchronized objects are no longer using

the domain as a proxy address or UPN• Unverified SMTP domains cannot exist as proxy addresses for

migrating mailboxes

• Plan UPN suffix• Verify on-premises user objects have a value (not null) for UPN suffix

and that it is correct• The default routing domain (e.g. contoso.onmicrosoft.com) is used for

Office 365 UPN suffix if the on-premises UPN suffix does not contain a verified + public routable DNS domain (e.g. cannot use *.local)

Deployment Considerations

Deployment Considerations• Complete Active Directory cleanup work before implementing DirSync

• Especially if importing data from a 3rd party LDAP directory into Active Directory

• Enable Dirsync ahead of deploying it on-premises• Plan ahead for DirSync quota increase

• Could become a deployment blocker. Don’t wait until 11th hour to request.

• Enable Directory Synchronization ahead of DirSync server deployment (activation can take up to 24 hours to complete)

• Unless you don’t want to use DirSync at all• Understand how “soft match” works• Dirsync scoping and moving objects• ADFS certificate autorollover• Throttling policies • Consider Exchange schema extensions for non-Exchange AD environments

Hybrid Deployment Considerations

• On premises Exchange accessibility externally• EWS – URLs, authentication• Autodiscover• MRS Enabled

• Certificates• Internet Proxy• Hybrid Wizard• Public Folders

PowerShell is Your Friend!

• Mailbox usage and size statistics reports• Mailboxes with large items• License users in bulk• Delegate users• Migration statistics

• Get-connectionbyclienttypedetailreport• Get-stalemailboxreport• Get-lastlogonstats

Mailbox Migration Script$LiveCred = Get-Credential$Session = New-PSSession -ConfigurationName Microsoft.Exchange -ConnectionUrihttps://ps.outlook.com/powershell/ -Credential $LiveCred -Authentication Basic -AllowRedirectionImport-PSSession $SessionImport-Module msonlineConnect-MsolService -Credential $LiveCred$exCred = Get-Credential$RemoteHostName = "mail.company.com"$e3opt = new-msollicenseoptions -accountskuid “company:enterprisepack" -disabledplans "MCOSTANDARD","RMS_S_ENTERPRISE"$license = “company:enterprisepack“$batch = Read-Host "Enter UNIQUE name for this migration batch:“$UserList = import-csv c:\userlist.csv

foreach($line in $UserList){Set-msoluserlicense -userprincipalname $line.userprincipalname -licenseoptions$e3optNew-MoveRequest -identity $line.userprincipalname -Remote -RemoteHostName$RemoteHostName -RemoteCredential $exCred -TargetDeliveryDomain‘company.mail.onmicrosoft.com' -BadItemLimit '100' -Confirm: $false -batchname$batch -warningaction silentlycontinue -suspendwhenreadytocomplete| Out-Null}

Management• Reports• Auditing

• Distribution Lists• Onboarding/Off boarding

changes

• Cogmotive• 365 command

Role groups define high-level job functions

End-user role assignment policies for self-service

Who What WhereDelegate multiple roles

Limit the scope of the role assignment; e.g., “Legal Department” or “Asia Offices

Assign task-, action-, or feature-based permissions

Role Based Access Control

Service Health Communications

• Sensors deployed in corporate LAN • Actively track performance metrics including logon, message transfer,

network response times

Monitoring - Exoprise

Microsoft sets the rhythm and cadence of upgrades

Notice at about 4 weeks and exactly 2 weeks priorMust postpone at least 7 days prior to upgrade

Upgrade Timing & Communication

SharePoint Hybrid Scenarios That Make Sense bit.ly/1mD2T7M

Connect with Perficient