Office 365 E5 and Skype for Business Licensing

Frequently Asked Questions

FIELD AND PARTNER USE
LAST UPDATED: NOVEMBER 2, 2015

Contents
Office 365 E5 ..................................................................................................................................................... 1
Upgrade to E5 Promo ....................................................................................................................................... 7
Skype for Business ............................................................................................................................................ 8
PSTN Conferencing and Calling Services ........................................................................................................... 9
Feature Details ................................................................................................................................................ 13
Customer Lockbox ...................................................................................................................................... 13
Office 365 Equivio Analytics for eDiscovery ............................................................................................... 17
Advanced Threat Protection ....................................................................................................................... 20
Power BI Pro ............................................................................................................................................... 23
Delve Analytics ............................................................................................................................................ 24
DLP and Encryption ..................................................................................................................................... 24
Meeting Broadcast ...................................................................................................................................... 24
Skype for Business Cloud PBX ..................................................................................................................... 25
Skype for Business PSTN Conferencing ....................................................................................................... 25

Office 365 E5
1. What is Office 365 E5?
Office 365 E5 is a new suite offering that includes new feature value across three categories of investments in
Real-time Communications, Analytics and Advanced Security. Features across the categories are listed below:

Real-time Communications Cloud PBX, PSTN Conferencing, Skype Meeting Broadcast and PSTN
Calling as an add-on based on availability

Analytics End User Analytics with Power BI and Organizational Analytics with Delve Analytics
Advanced Security Office 365 Equivio Analytics for eDiscovery, Secure Attachments and Safe URLs
with Advanced Threat Protection, and Access Control with Customer Lockbox

FAQ | Office 365 E5 and Skype for Business Disclosure

 2. What are the new features that will be available across the Office 365 Suites?
Highlighted in orange below, you will see all the new features across our enterprise suites.

*Toll-free and International Dial-out conferencing capabilities may incur additional per minute consumption
charges when available. Customers can disable this feature to avoid additional billing.
**$24 includes both International and Domestic calling plans. Domestic only calling plans are available for
$12. Tax is included in price in USA. Add-On price to E1 & E3 is $32, which includes Cloud PBX

3. Why would a customer select E5 instead of E3; what is the value prop for E5?
With Office 365, Microsoft delivers the most comprehensive, most secure cloud for productivity and
communications. E5 customers gets Cloud PBX and PSTN conferencing, End User and Organizational
Analytics while getting unprecedented control over their data with Access Control, and Advanced Threat
Protection.

4. What is the Partner value prop for E5?

With E5, partners can build new service business lines around voice and analytics, upsell their customers on
PSTN Conferencing as well as acquire new customers showcasing advanced threat protection.

1. Upsell your customers on Cloud PBX with on-premise PSTN connectivity and PSTN Conferencing as
well as new organizational analytics.
2. Convert new customers to the cloud with advanced threat protection

3. Build new service business around voice, modern meetings, and business analytics

5. Is there anything new in E1 and E3?

Yes, new feature value will be added into E1 and E3. For E1, we will be adding Skype Meeting Broadcast to
enable E1 customers to host every kind of meeting from 1:1, 1:Many, to 1:Thousands. In addition, we will be
adding Work Management to provide light-weight project management capabilities for teams. For E3, we
will be expanding Data Loss Prevention and Encryption across both the Skype for Business and SharePoint

FAQ | Office 365 E5 and Skype for Business Disclosure

 Online workloads. Availability dates for DLP and Encryption in Skype for Business and SharePoint Online will
be communicated at a later date.

6. When and where will Office 365 E5 be available?

E5 will be available on December 1, 2015 in the following programs and geographies:

*E5 will not be available for GCC or EDU customers at launch on 12/1. Availability of E5 for both GCC and
EDU will be shared at a later date.

7. When will pricing information for E5 and the component standalone in E5 become
available?
E5 pricing was released on Price List Preview on November 1, 2015 and is now available. See below for
additional details.

FAQ | Office 365 E5 and Skype for Business Disclosure

 *For geographies and programs where PSTN Conferencing is not available, Office 365 E5 will be offered at a
reduced price of $33 (Commercial) and $28.05 (Government)

**Dial-out conferencing capabilities may incur additional per minute consumption charges. Customers can
disable these features to avoid additional billing.

***Includes both International and Domestic calling plans. Domestic only calling plans are available for $12
Commercial and $10.50 Gov. Tax is included in price.

8. Will E5 be available to Government and Government Community Cloud (GCC)

customers?
Yes, E5 is planned to be available to Government customers at launch on 12/1. However, Office 365 E5 will
not be available to GCC customers at launch on 12/1. The availability in GCC will be announced at a later
date.

9. Will E5 be available in Education?

E5 will not be available on 12/1 for Education. We will announce availability for education at a later date.

10. What is going to happen to E4?

E4 will be sunset June 30th, 2016 in all channels. Customers should continue using the Office 365 plan they
are using today. When customers plans come up for renewal prior to June 30th, 2016, they should renew to
their current plan or transition into E5 or into E3 with Skype for Business Plus CAL subscription.

E4 will appear on the Price List until June 30th, 2016.

11. What will the transition options be for E4 customers?

Existing customers will be able to step up to E5 following our standard licensing motion for upgrades via
step-up SKUs that charge the difference between what the customer currently has and E5 as the step-up
price to E5. They will also have the option of just adding Cloud PBX on top of E3.

For customers who wish to maintain their current licensing position, they will be able to renew into E3 and
the Skype for Business Plus CAL (or renew with E4 prior to June 30th, 2016). In this particular scenario, there
will be a user subscription license (USL) version of Skype for Business Plus CAL that customers can add to

FAQ | Office 365 E5 and Skype for Business Disclosure

 their existing E3 subscription.

Prices reflect the incremental cost of customers transitioning from E4 to either E3 with Cloud PBX or E5

E4 customers can also maintain current licensing position by having E3 + On-Prem PBX
E4 will remain on the Price List until June 30th, 2016

12. What is the path for an E4 customer who wants Cloud PBX with E5?
Purchase the from E4 Step-up SKU to E5.

13. How can I upgrade to E5?

Existing Office 365 customers will be able to upgrade to E5 following our standard licensing motions. EA
customers can upgrade via step-up SKUs that charge the difference between what the customer currently
has and E5 as the step-up price to E5. Add-on SKUs will also be available with customers who are
maintaining on-prem licenses with SA.

FAQ | Office 365 E5 and Skype for Business Disclosure

 14. Will Small Business customers be able to purchase E5?
Yes, similar to E3 all customers will be able to purchase E5, but there will not be a new premium SKU specific
for small business.

15. What is the path for an E4 customer who is not interested in moving to Cloud PBX?
Renew into E3 and Skype for Business Plus CAL.

16. What if a customer wants just a few of the new capabilities in E5, yet is content
with their current E1 or E3 coverage?
The new capabilities that are included in E5 can also be added at standalone prices to E1 and E3. See table
in question 6 above.

17. What if I purchase E5 but only want some of the components that are included?
E5 provides the best value for our customers and while each of the components will be available for
customers to leverage at any point, the use of those components are at the customers discretion, enabling
them to choose the options that best fits their needs.

18. Will the Adoption Offer apply specifically for the new Skype for Business
workloads?
Yes.

19. How does E5 fit into the ECS model?

ECS customers will be able to purchase an E5 add-on for $15 which credits the price they have paid for
Office 365 E3.

20. Do E5 and Cloud PBX come with dual-access rights?

Yes. E5 and Cloud PBX come with dual-access rights to on premise servers and cloud services rights.

21. What Enterprise Service Offerings are available in support of E5?

Microsoft Services has offerings to help our customers get their Office 365 platforms up and running quickly
and help drive value and usage of the communications platform. Current offerings aligned to E5 include:

FAQ | Office 365 E5 and Skype for Business Disclosure

 Skype for Business Foundations designs and implements an enterprise communications
environment aligned to your customers workstyle, user base, and business needs. Enterprises can
make use of rich collaboration features, both on premises and in the cloud, to deliver a consistent
communications experience for all employees. This offer helps your customer to make use of recent
Office 365 Enterprise E5 features such as Skype broadcast meetings, cloud conferencing, and cloud
private branch exchange (PBX).

Data Visualization Jumpstart demonstrates the power of the Microsoft Power BI and Datazen
toolset for discovering data, creating compelling visualizations, and sharing insights. The jumpstart
is meant to deliver quick value to customers by using their own data with familiar tools.
Additionally, our domain experts in MCS, Premier, and Adoption Services are able to support Skype for
Business, Power BI and Security solutions.

22. How can I find more information on these Microsoft Services?

Leverage Domain Experts in Cloud Productivity Services across Office 365, Social, Enterprise
Communications, and Adoption Services. Business Productivity Domain and Adoption Services resources
with deep expertise and that are part of the Neptune Partner Program can help with Vision Setting, Business
Outcome Selling, Solution and Adoption Acceleration. Locate a resource at: http://aka.ms/servicesconnect.

Find All Cloud Productivity and Adoption Services Offer Information: http://aka.ms/portfolio-cp.

Upgrade to E5 Promo
23. What is the Upgrade to E5 Promo?
All existing EA/EAS Office 365 E3, E4, and ECS customers will be able to take advantage of a 15% discount on
Office 365 E5 Step-up and Office 365 E5 Add-on SKUs. Standard waterfall pricing level discounts will apply.

24. When will the offer be available?

The Upgrade to E5 Promo will be available for customers concurrent with the E5 launch on December 1st,
2015. It will run through the end of the fiscal year on June 30th, 2016.

25. What eligibility requirements must the customer meet?

The customer must purchase a minimum of 250 Office 365 E5 Step-up or Add-on seats and be an existing
Office 365 E3, E4, and ECS, EA/EAS customer.

26. What is the benefit of this promo?

By locking in the best pricing for your customers, you will be able to ensure that they upgrade to the highest
quality Office 365 experience and take advantage of the premium value of advanced security, analytics, and
cloud voice that is included in the suite.

FAQ | Office 365 E5 and Skype for Business Disclosure

 Skype for Business
27. What is Cloud PBX?
With Cloud PBX (PBX: Private Branch Exchange), users can make calls to, and receive and transfer calls from
phones, mobiles, tablets and PCs from nearly anywhere with internet access. IT administrators can manage
users for communications in the Office 365 administrator portal. Companies can take advantage of existing
telephony infrastructure (i.e. traditional PBX systems or on-premises SIP trunks). With our Cloud PBX,
customers can eliminate separate PBX systems.

28. What is PSTN Conferencing?

PSTN Conferencing (PSTN: Public Switched Telephone Network) allows meeting attendees to dial-in to
Skype meetings from virtually any device. Meeting organizers can also dial-out to attendees to connect
them to the audio portion of the meeting. Companies can consolidate conferencing solutions and simplify
operations while reducing complexity and support costs for IT while enabling employees to work from
virtually anywhere.

29. What is PSTN Calling?

PSTN Calling provides domestic and international calling plans with Skype for Business. This allows
organizations to subscribe to calling plans from Office 365, using existing phone numbers or getting new
ones.

30. When and where will PSTN Conferencing and PSTN Calling be available?
PSTN Conferencing and PSTN Calling, as well as the inclusion of PSTN Conferencing in E5, are subject to
geographical and channel availability. Initial availability for select geographies and licensing programs, as
noted below, will be on December 1, 2015. Additional availability dates will be announced at a later time.

PSTN Conferencing
Tolled Dial-in numbers* will be available in the following countries and territories on December 1, 2015:
Argentina, Australia, Austria, Belgium, Brazil, Canada, Chile, China, Colombia, Costa Rica, Czech Republic,
Denmark, Estonia, Finland, France, Germany, Hong Kong, Hungary, India, Ireland, Israel, Italy, Japan, Mexico,
Netherlands, New Zealand, Norway, Philippines, Poland, Portugal, Romania, Russia, Singapore, Slovak
Republic, Slovenia, South Africa, South Korea, Spain, Sweden, Switzerland, Taiwan, Thailand, Turkey, UK, US.
PSTN Calling
PSTN Calling will only be available in the US at launch on December 1, 2015.

For more information, please refer to the International Availability of Microsoft Online Services page on
Office.com.

31. Can I upgrade to PSTN Conferencing and PSTN Calling on E1 and E3?
Yes, customers with E1 and E3 will be able to upgrade to PSTN Conferencing and Cloud PBX + PSTN Calling
as standalone offers.

32. What options does a customer have in order to get PSTN calling with Cloud PBX?
Based on channel and geographic availability, customers can choose to buy Microsoft PSTN Calling as an
add-on to Cloud PBX in Office 365. In addition, customers can take advantage of their existing telephony

FAQ | Office 365 E5 and Skype for Business Disclosure

 infrastructure through traditional PBX systems or on-premises SIP trunks offered through their local/regional
telco, along with Cloud PBX in E5 or Cloud PBX standalone.

33. What licensing, if any, is required for Skype Meeting Broadcast public webinars?
Attendees do not need to have a license to attend a Skype Meeting Broadcast. However, if the organization
wants the attendee to be authenticated, then a Skype for Business license is required.

34. Are there any pre-requisites that need to be purchased and provisioned before a
customer can use Cloud PBX, PSTN Conferencing or PSTN Calling?
Yes, in order to use these services, customers must have purchased and have Skype for Business Plan 2
deployed as a standalone or as a component of Office 365 E1, E3, or E5 suites. To use PSTN Calling,
customers must also purchase Cloud PBX or E5 (which includes Cloud PBX functionality) as a pre-requisite.

35. Can a customer who has Skype for Business on-prem use PSTN Conferencing and
PSTN Calling through a hybrid model?
E5 and Cloud PBX customers will be able to connect their existing PSTN service provider with Microsofts
cloud-based call control. Scenarios are based on whether a customer already has a Skype for Business Server
deployed. Customers with an existing Skype for Business Server deployment can configure it to connect to
Cloud PBX functionality which is covered under existing Server licensing. For customers without an existing
server, they can leverage a minimal Skype for Business Server deployment with four preconfigured Virtual
Machines that are deployed on customer owned Windows Servers. Skype for Business Server roles in VMs
are not paid roles and are licensed for use with Cloud PBX.

36. Does Microsoft have plans to become a Telco?

To the extent our new Skype for Business offering includes features that are subject to telecom regulation,
Microsoft will ensure those features comply with the applicable regulations. With regard to our long-
provided communications capabilities, such as the Skype consumer offerings available in the market today
from Skype.com, we have no plans to change or add features that would result in subjecting Skype to
telecom regulation. Moreover, the mere fact that Microsoft will offer an enterprise communications
capability that includes regulated features does not in any way change the regulatory status of our other
communications products, including Skype.

37. Is Microsoft competing with Network Operators?

We have existing relationships with network operators through managed services, and we are expanding
those to managed networks. With these new services, we continue to deepen our partnerships with network
operators across the managed services portfolio for dedicated deployments. In addition, we are expanding
our partnerships to include network connectivity services; customers will soon have the option of purchasing
Operator services to directly connect their corporate WAN networks to Office 365 and Skype for Business
through Azure ExpressRoute for Office 365.

PSTN Conferencing and Calling Service Details

38. What are the PSTN Conferencing Features?
Skype for Business PSTN Conferencing will include the following features, subject to timing concerns called out in
the following section:

FAQ | Office 365 E5 and Skype for Business Disclosure

 Tolled Dial-in: This feature enables invitees to meetings organized by a user licensed for PSTN Conferencing
to join the audio portion of the meeting by dialing a PSTN number and entering a conference passcode.
There are limits on the use of this feature designed to prevent abuse and/or fraud.

Dial-out: This feature enables attendees of meetings organized by a user licensed for PSTN Conferencing to:

Dial out to other users from the meeting

Transfer an in-progress meeting to a PSTN endpoint from within the meeting

At meeting join, dial out to a PSTN endpoint

At meeting join from a mobile client, dial out to the mobile phone

Dial out calls can be domestic or International

Toll-free dial in: This feature enables attendees of meetings organized by a user licensed for PSTN
Conferencing to join meeting by dialing a toll-free number and entering a pin. Toll-free PSTN numbers can
either be domestic or international

39. What is included within the PSTN Conferencing and Calling service plans? What is
additional paid based on consumption?
Tolled Dial-in conferencing and domestic dial-out conferencing services are both included in the PSTN
Conferencing service plan. While both services do not have a pre-defined limit, there will be usage limits
designed to limit abuse and/or fraud and to protect the performance of the service. The details of these
limitations will be published on November 1, 2015.

In addition, there are two PSTN Conferencing features that will become available once they can be
supported by consumption billing: International Dial-out and Toll-free dial-in. Note that neither of these
features will be available with PSTN Conferencing until consumption billing is enabled later in H1 CY2016.

For PSTN Calling plans, inbound domestic calls, outbound domestic calls, and international calls are included
with the service in accordance with our excessive use limit policy. If the customer exceeds the excessive use
limits, the excess minutes will be billed on a per-minute basis.

40. What are the excessive use limits for PSTN Calling and PSTN Conferencing?
The total minutes of use for the excessive use threshold is calculated at the tenant level based on the
number of users licensed for the tenant. For PSTN Calling, excessive use is defined as follows:
For Domestic PSTN Calling plans, each licensed user is allocated 3,000 domestic dial-out minutes
that are pooled at the tenant-level.

For International PSTN Calling plans, each licensed user is allocated 3,000 domestic dial-out
minutes and 600 international dial out minutes that are pooled at the tenant-level.

For PSTN Conferencing Tolled Dial-in and Domestic Dial-out, there is no excessive use limit, only
limits designed to protect against fraud and abuse of the service and to protect the performance of
the service.
There will be a period of time between GA (12/1/15) and the availability of consumption billing (H1 CY2016)
where customers will be made aware of their overages via reporting but they will not be charged for their
PSTN Calling or Conferencing overages under the excessive use limits. This will serve as an important
opportunity to estimate future billing overage charges.

41. What if a customer exceeds the PSTN Calling excessive use threshold?
When a customer exceeds the PSTN Calling excessive use threshold, which is the culmination of all users
allocated minutes that is pooled at the tenant-level, during the period between GA (12/1/15) and the

FAQ | Office 365 E5 and Skype for Business Disclosure

 availability of consumption billing (H1 CY2016), the overage will be reported to the customer. After the
availability of consumption billing, the customer will be charged for their usage that goes above and beyond
the tenant-pooled limits.

42. What if an individual users usage went above the allocation limit in a monthly
period, will the customer be charged?
Not necessarily overage charges are only applied if the customers overall usage in a monthly period
exceeds the tenant-pooled limits. If an individual user goes beyond their user limit of 3,000 Domestic
minutes, for example, but the overall tenant-pooled limit threshold wasnt breached, then no, the customer
will not be charged for any overages.

43. When will these features be available?

Not all of the PSTN Conferencing and Calling features will be available at GA; others will launch with the
availability of consumption billing in H1 CY2016.

Available at GA (12/1/15) Available with Consumption Billing (H1 CY2016)

PSTN Conferencing PSTN Conferencing

Tolled Dial-in Conferencing Available in 45 International Dial-out
countries Domestic Toll-free
Dial-out Conferencing Domestic calls only International Toll-free

PSTN Calling
Domestic Calling
International Calling

44. What services will incur consumption billing and which will not?
PSTN Services Subscription Consumption Rates Apply

Tolled Dial-in Conferencing Included* -

Dial-out Conferencing - Domestic Included* -

Dial-out Conferencing - International - Per minute

Toll-free Conferencing Domestic - Per minute

Toll-free Conferencing International - Per minute

PSTN Calling Inbound calls Included* -

Per minute charge on excess use

PSTN Calling Outbound calls (Domestic) Included**
of tenant pooled minutes

Per minute charge on excess use

PSTN Calling Outbound calls (Intl) Included**
of tenant pooled minutes

*Tolled Dial-in Conferencing and PSTN Calling inbound calls be included in the subscription though there
will be terms of service designed to prohibit fraud and abuse and to protect the performance of the service.
**PSTN Calling plans will be subject to excessive use limits of 3,000 minutes per user for Domestic calling
and 600 minutes per user of International calling. Minutes will be pooled at the tenant-level and excess use
charges will be incurred and billed by the minute when the usage limits are exceeded.

FAQ | Office 365 E5 and Skype for Business Disclosure

 45. What are the rates that customers will be billed based on consumption?
Initial per-minute pricing will be published one month prior to GA of consumption billing. Customers and
partners will need to reach out to their account executive representative at that time to ascertain the most
current rate plans.

46. Will the per-minute pricing be published in the Customer Pricing Sheet?
No. We want the latitude to drive our customers price for PSTN Services down over the term of our
customer contract. Therefore, the CPS will not lock in multi-year per minute pricing.

47. Where will we sell PSTN Conferencing at launch on 12/1?

On December 1, 2015, PSTN Conferencing will be for purchase by EA Direct customers with enrollment bill-
to addresses located in the following countries and territories:

Belgium, Canada, Denmark, Finland, France, Germany, Italy, Netherlands, Norway, South Africa, Spain,
Sweden, Switzerland, United Kingdom, and United States (continental US, Alaska, and Hawaii).

For more information, please refer to the International Availability of Microsoft Online Services page on
Office.com.

48. Where will PSTN Conferencing Tolled Dial-in numbers be able to be provisioned at
launch on 12/1?
PSTN Conferencing Tolled Dial-in numbers will be available in the following countries and territories on
December 1, 2015:

Argentina, Australia, Austria, Belgium, Brazil, Canada, Chile, China, Colombia, Costa Rica, Czech Republic,
Denmark, Estonia, Finland, France, Germany, Hong Kong, Hungary, India, Ireland, Israel, Italy, Japan, Mexico,
Netherlands, New Zealand, Norway, Philippines, Poland, Portugal, Romania, Russia, Singapore, Slovak
Republic, Slovenia, South Africa, South Korea, Spain, Sweden, Switzerland, Taiwan, Thailand, Turkey, UK, US.

49. What will be the experience for customers who will not get a local PSTN
conferencing tolled dial-in number, but will be provisioned with the service?
Users licensed to use the PSTN Conferencing service who do not have a local tolled PSTN dial in number will
be able to invite others to Skype meetings and have a local PSTN dial in number available to them in their
local area if they are located in the same local geography as a dial in number. If not, these invitees can
connect to audio using VoIP from their PC, tablet, or mobile phone or by dialing a number in a relatively
inexpensive international geography. The organizers who do not have a local dial in number will have the
same choice of options-- connecting to audio using VoIP from their PC, tablet, or mobile phone or by dialing
a number in a relatively inexpensive international geography.

50. How will customers pay for their consumption charges for PSTN Conferencing and
PSTN Calling?
Upon GA of our consumption billing capability, customers will be able to fund an account with Microsoft
from which the relevant consumption-based charges will be deducted. Customers will have the option of
setting the initial funding amount, funding from an EA agreement (if an EA customer) or other funding
instrument if not an EA customer, determining if the funding will be automatically or manually renewed
when the account hits customer defined limits, and reporting on the use of this account.
Additional details will be published closer to the H1 CY2016 GA date.

FAQ | Office 365 E5 and Skype for Business Disclosure

 51. Will customers be able to track their usage?
Yes. Usage reporting will be available via the Skype for Business Admin Center.

52. What will the limitation be that mitigate instances of fraud and/or abuse of the
conferencing and calling services that are included in plans?
Details on these limitations will be published on November 1, 2015, though these will change over time and
as our technology and ability to identify fraud and abuse and / or identify issues that impact service
performance mature.

53. Will we ever have calling plans that are billed strictly based on usage?
Future calling plans are not covered in this document.

54. Do the EA VL Discounting levels apply to subscription pricing?

Yes, EA VL discounting levels and pricing waterfalls apply to subscription pricing.

55. Are the prices for PSTN services tax inclusive?

In the United States the prices for PSTN services are tax inclusive. In the other December 15, 2015 launch
countries the prices for these services are tax exclusive.

Feature Details

Customer Lockbox
Description: Customer Lockbox ensures that no one at Microsoft can access customer content to perform a service
operation without the customers explicit approval. Customer Lockbox brings the customer into the approval
workflow for such access to customer content. As customers move data to Office 365, they may be concerned about
access to their data in the service by the service provider. In the rare cases, when a Microsoft employee needs access
to customer content to perform a service operation, Customer Lockbox provides customers with the ability to
approve or reject requests for access.

Resources
Announcing Customer Lockbox for Office 365 Blog Post

FAQ | Office 365 E5 and Skype for Business Disclosure

 56. Why did Microsoft build Customer Lockbox?

Microsoft employees do not have standing access to any service operation. All access is obtained through a
rigorous access control technology called Lockbox. Lockbox enforces access control through multiple levels
of approval within Microsoft, providing just-in-time access with limited and time-bound authorization. In
addition, all access control activities in the service are logged and audited. We built Customer Lockbox to
bring customers into the Lockbox approval process and to provide the customer with explicit control over
access to their content, in case a Microsoft employee needs access for an elevated service operation. We
recognize that providing customers with visibility into actions taken on their content and control over access
to their content in Office 365 are necessary to earn customer trust.

57. What is customer content?

Customer content is the data created by users of Office 365 Services. Examples of customer content include:
E-mail body or e-mail attachments
SharePoint site contents
Information in the body of a SharePoint file
Skype for Business Presentation File body
IM or Voice Conversations
Customer generated blob or structured storage data (e.g., SQL Containers)
Customer-owned security information (e.g., certificates, encryption keys, passwords)
Inferences, and all subsequent inferences, if customer content remains

For additional details on customer content within Office 365, see the Office 365 Trust Center.

58. How does Microsoft ensure that a member of its staff does not access customer
content in Office 365 applications?

Microsoft implements extensive preventative measures through access control systems, and detective
measures to identify and address attempts to circumvent the access control systems. Office 365 operates
with the principles of least privilege and just-in-time access. Therefore, no Microsoft personnel have
permission to access customer content on an ongoing basis. If permission is granted, it is for a limited
duration.

Office 365 uses an access control system called Lockbox to process requests for permissions that grant the
ability to perform operational and administrative functions within the service. An operator must request
access to customer content using Lockbox, which then requires a second person to take action on the
request (e.g., approve it) before access is granted. That second person cannot be the requestor and must be
designated to approve access to customer content. Only if the request is approved does the operator
acquire temporary access to customer content. Once the elevation period expires the access is revoked by
Lockbox.

59. Under what circumstances do Microsoft engineers need access to my content?

The most common scenario where Microsoft engineers may need to access customer content is when the
customer makes a support request that requires access for troubleshooting. A foundational principle of
Office 365 is that we should be able to operate our service without Microsoft personnel having access to
customer content, and nearly all service operations performed by Microsoft are fully automated and the
human involvement is highly controlled and abstracted away from customer content. What we aspire to
achieve across all of our cloud services is that we never have access to customer content to support the
service until the customer approves a specific request that allows Microsoft personnel such access. The

FAQ | Office 365 E5 and Skype for Business Disclosure

 ability to offer Customer Lockbox is a reflection of our engineering progress and we aspire to make
Customer Lockbox available across additional cloud services in the future.

60. Who is notified when there is a request to access my content?

In the initial release of Customer Lockbox, members of the tenants Compliance Center Admins and Tenant
Admins groups are notified. The list of tenant designees who are notified is the same as the list of approvers
of Customer Lockbox requests.

61. Who can approve or reject these requests in my organization?

Customers control membership of the groups that can approve or reject Customer Lockbox requests.

62. How do I opt-in to Customer Lockbox?

In the initial release, the tenant administrator can enable and configure Customer Lockbox using Remote
PowerShell commands.

63. How are Customer Lockbox requests handled by customers?

In the initial release, we plan to offer customers the option of using either Remote PowerShell or the Office
365 Admin Center to manage Customer Lockbox requests.

64. Is Customer Lockbox available to all Office 365 customers?

Our plan is to make Customer Lockbox available to Office 365 enterprise service families, as described here.

65. If a customer only licenses some of their users on Customer Lockbox, will the non-
licensed users also receive Customer Lockbox?
Users must be licensed for Customer Lockbox to ensure that they will receive the feature. For customers
who license Customer Lockbox for a subset of users, Microsoft does not commit to providing Customer
Lockbox access control approval requests for the users who are not licensed. Customers should license any
users for whom they want Customer Lockbox.

66. Can Microsoft modify the list of approvers for my tenant? If not, how is it
prevented from happening?
The Tenant Admin group is an identity within Azure Active Directory that is solely managed by the customer.

67. What if I need more information on the content access requests to approve it?
Each Customer Lockbox request will contain an Office 365 service request number that you can reference
when you contact Microsoft Support Services for additional details.

68. What happens if I dont respond to a Customer Lockbox request in a timely

manner?
Customer Lockbox requests have a default lifetime of 12 hours, after which they expire and cannot be acted
upon.

69. When a Customer Lockbox request is approved, how long are the permissions
valid?
The maximum period for permissions granted following a Customer Lockbox approval is currently 4 hours.
The engineer may request a shorter period as well.

FAQ | Office 365 E5 and Skype for Business Disclosure

 70. How can I get a history of all content access requests?
Log entries for Customer Lockbox will be made available via the Office 365 Compliance Center Activity Feed
and reporting in the Office 365 Admin Center.

71. How do I correlate the content access requests with the access logs that I have?
The Compliance Center Activity Feed will contain log activities of Customer Lockbox. Customers can cross-
reference the email approval notifications received by Tenant Admins and Compliance Center admins with
the log data received via the Activity Feed API.

72. What happens to requests that occur (or remain in the system) after I have
terminated Office 365 services?
Customer Lockbox requests have a validity of twelve (12) hours. Requests that are not acted on within 12
hours expire and cannot be approved.

73. What does Microsoft do in case the customer rejects a Customer Lockbox request?
If a customer rejects a Customer Lockbox request no access to customer content will occur. If a tenant user
was experiencing a service issue that required Microsoft to access customer content in order to resolve the
issue (though such circumstances are rare) then the service issue might persist, and Microsoft would inform
the customer of this outcome.

74. How do I know that Microsoft will not bypass Customer Lockbox in order to access
my content without my knowledge or approval?
Upholding privacy through transparency and control are fundamental principles of Microsoft cloud services.
Customer Lockbox is a manifestation of these principles. We will include in our audit logging features the log
data for Customer Lockbox, including logging for actions related to the configuration of Customer Lockbox.
Disabling Customer Lockbox for your tenant will also be captured in the audit logs.

75. With Customer Lockbox, will Microsoft be able to guarantee that it will not have to
turn my data over to a government or a third party?
No. Customer Lockbox was not designed with this in mind, and security features are not intended to
undermine our legal obligations. In the very rare case that we receive a valid legal demand for customer
content belonging to an enterprise, we would have to comply with it. However, our policies and practices
related to third party requests are described in our contracts. We only disclose customer content to a third
party when we are legally required to do so. Each request is reviewed by experienced Microsoft attorneys,
and access to the data is only requested/approved when a determination has been made that we are legally
required to respond. Even then, we always attempt to redirect the third party to obtain the data from you.
We also periodically publish detailed information about the requests we receive from law enforcement
agencies around the world. Those reports show that only an extremely small percentage a fraction of one
percent of our customers are ever the subject of a government demand for information, and the numbers
are even smaller in the context of our enterprise services. Our interests are completely aligned on this
subject Microsoft has no reason to comply with a third party request for customer content unless legally
required to do so.

FAQ | Office 365 E5 and Skype for Business Disclosure

 76. With Customer Lockbox, can Microsoft guarantee that its access for purposes of
responding to a law enforcement or other third party request will always appear in
the logging feature, and that it will be flagged for the administrators attention?
No. Customer Lockbox was designed to provide our customers with greater control over their data and
transparency into who is accessing it to perform a service operation. When it comes to third party requests
for customer content, our policies are very clear. We always attempt to redirect the third party to you the
customer to obtain the information, and we always provide our customers with prompt notice of such
requests, except when legally prohibited from doing so.

77. What is the timeline for Customer Lockbox availability in Office 365?
Customer Lockbox is expected to be available for Exchange Online in Q4 of CY 2015, and for SharePoint
Online in Q1 of CY 2016.

Office 365 Equivio Analytics for eDiscovery

Description: Microsoft Office 365 enables in-place, predictive eDiscovery, increasing relevancy while decreasing cost
and risk. Integration of the Equivio Analytics predictive coding and machine learning platform increases relevance by
identifying themes, near duplicates and providing new generation clustering. This accelerates the eDiscovery process
by eliminating the need to move data around so that you can get to the most relevant data much faster. Moreover,
since youll no longer need to ship massive volumes of data out of the organization as part of an outsourced process,
it remains constantly protected by Microsofts stringent cloud security. All of this saves you time and money while
also reducing your overall risk.

Resources:
Microsoft Ignite Series eDiscovery Redefined: Real Time and In-Place

78. What are the benefits of Equivio?

A large amount of documents for eDiscovery are duplicates or email threads where only one item or the
changes between documents needs to be reviewed to get the full context. Equivio can help eliminate this
data or give you analytics so the similar documents can be reviewed in context in eDiscovery review tools.
This makes document review faster and more effective.

With predictive coding you train the system what relevant data you are looking for and then use that to
make informed decisions about what to review based on the relevance of the documents.

With Equivio you will be able to use themes and search to analyze your data and get insights into how the
data is organized.

79. How does Equivio work with other eDiscovery applications?

Equivio data is exported in a processed format with a load file that has the document metadata and
analytics. You can then load the Office 365 documents and Equivio analytics data into eDiscovery review
applications. Office 365 also provides an open platform where eDiscovery review tools can directly access
data in Office 365 that has been analyzed with Equivio Analytics.

FAQ | Office 365 E5 and Skype for Business Disclosure

 80. How can an organization prove in a court of law that the documents Equivio
identifies as duplicate, excluded, or irrelevant, is unnecessary for eDiscovery? (e.g.
if the level of duplication or other exclusion is challenged, what recourse do
organizations have?)
These are common processes in eDiscovery. One common eDiscovery artifact is a decision log, showing all of
the steps that are done in the eDiscovery process to preserve and cull data. Microsoft eDiscovery provides
auditing capabilities to help document the steps made along the way. Equivio has been used in many cases
and has been an accepted product for many years. The techniques used by Equivio have had court
acceptance for a long time. If challenged, data can be sampled to prove relevant documents were rarely if
ever found in the set of data that was not turned over. There are also many eDiscovery consulting companies
out there that assist customers with the eDiscovery process and help with this.

81. What is the legal requirement for producing relevant documents?

This is a question to be discussed with your legal counsel. Microsoft does not provide legal advice.

82. What are the primary differences between Office eDiscovery with Equivio vs. kCura
Relativity vs. Recommind Accelerate?
Office eDiscovery with Equivio enables the searching and culling of the data and applies additional analytics
for organizing the data. Relativity and Axcelerate are review tools that allow large teams of attorneys to look
at and make decisions on the individual documents that have been exported out of O365. Customers will be
able to take advantage of all of the analytics information provided by Equivio within these tools.

83. Can I use Microsoft eDiscovery to view all items, tag results, and export based on
my tags?
At this time Microsoft eDiscovery does not support document tagging.

84. I see the concept of Case within Equivio Analytics as well as inside the eDiscovery
within compliance center in Office 365. Are these same?
At the moment, the Case in compliance center is a different entity when compared to the Case Equivio
analytics. If you want to analyze a case using Equivio Analytics capabilities, you will need to create a case
from within Equivio Analytics.

85. Will Equivio be available in different languages?

At release the User Interface will only be available in English. However, the system itself is language agnostic,
and supports processing and analysis of documents regardless of language.

86. What is the format of the file which is exported from Equivio? Is it CSV?
The data is exported in a package that contains the extracted text, a metadata load file, email in HTML
format, and attachments or SharePoint data in native format

87. What fields are included in the export file?

All of the standard metadata fields as well as all of the analytics information. An exact list of all the fields will
be made available at launch time

FAQ | Office 365 E5 and Skype for Business Disclosure

 88. Are PDF files searchable through the Compliance Center?
If the PDF files are in searchable formats, then yes. It is possible to create PDF files without searchable text
and for those files you can search on their metadata but not the textual content.

89. How many files can I export from eDiscovery in the Compliance Center vs. Equivio?
There are no file limits to the exports.

90. How many mailboxes can I search via eDiscovery in the Compliance Center?
eDiscovery Search in the Compliance Center enables you to search unlimited mailboxes within your tenant at
one time.

91. Do you support keyword searches on Sensitive Type information, e.g. Credit Card
Number?
Yes

Architecture

92. How does Equivio fit with the existing Exchange Admin Center and SharePoint
eDiscovery Center tools?
Microsoft is continuing to invest in eDiscovery hold, search, and export capabilities in the Office 365
Compliance Center.

Compliance Searches in the Office 365 Compliance Center are used to select data to be analyzed with
Equivio Analytic

93. Will Equivio be released for on premises Exchange or SharePoint?

Equivio is an Office 365 service. If you have Office 365 you can move data to Office 365 to analyze it with
Equivio. In 2016 we will make it easier to use Exchange 2016 to send on premises data to Office 365 so it can
be analyzed with Equivio.

94. I have on-prem or hybrid Exchange, will Equivio work with this?
Data should be in O365 for Equivio Analytics to be able to work with it. For the pure on-prem scenario,
Equivio Analytics service will not work at the moment. You can be in a Hybrid configuration but Equivio
Analytics functionality can be only used for the data that is already migrated and present in O365.

Security and Compliance

95. Is Equivio currently in Microsoft data centers?

Yes

Extensibility

FAQ | Office 365 E5 and Skype for Business Disclosure

 96. Does Equivio work on-prem or with 3rd party data?
Yes, but you will need to first import data into Office 365 using the new import tools to analyze it with
Equivio.

Licensing

97. Is the support and serviceability story for Equivio Analytics same as rest of E5 SKU?
Equivio is part of Office 365 E5, so it will be supported like any other functionality you get with E5 SKU. It is
also a service, so we will be updating the service continuously with new features, bug fixes etc.

98. How does licensing work?

To analyze a users data with Equivio Analytics, the user must have an E5 license. The user performing tasks
in Equivio does not need a license.

99. Is Equivio available as a standalone option or only as part of E5?

Yes, you will be able to purchase Equivio licenses separately from E5

Advanced Threat Protection

Description: Also known as Secure Attachments or Sonar. Protects users against unknown and sophisticated threats
hidden in emails, attachments, and URLs.

Resources
Microsoft Ignite Series Overview recording
Microsoft Ignite Series Deep Dive Session recording
Advanced threat protection for safe attachments and safe links

100. What is ATP?

ATP stands for Advanced Threat protection. It is a collection of features, including Safe Attachments and
Safe Links, designed to combat zero day malware attacks. This is a completely new offering from Microsoft
for Office 365.

101. What is Safe Attachments?

Safe Attachments is a new feature that opens suspected unknown attachment in a special hypervisor
environment and detects malicious activity. It is designed to detect malicious attachments even before anti-
virus signatures are available.

102. What is Safe Links?

Safe Links is a feature that prevents users from going to malicious web sites when they click on them in
email. Safe Links has advanced reporting features that make it easy to determine who has clicked through a
malicious link to support faster remediation.

FAQ | Office 365 E5 and Skype for Business Disclosure

 103. When will this new capability be available?
June 1st you will be able to order ATP via direct channel. ATP can also be purchased via VL and CSP starting
August 1st 2015. EDU, GCC channels will be made available at a later date.

104. How can I enroll customers to this private preview?

We are currently not accepting any new preview customers. They can try the product once available through
the direct channel on June 1st.

105. Will this service be included in any existing Office 365 plans?
No, Exchange Online ATP will not be included in any existing Office 365 plans or suites at launch. It will need
to be purchased separately. Different vendors in the Industry charge a premium for this service; we offer this
at a premium and a separate paid add-on.

106. How will customers be able to purchase this new service, and how will it be
priced?
Exchange Online ATP will be available for purchase to all commercial customers through the Direct, CSP,
Open, MPSA, and EA channels at an ERP of $2 per user per month. It will also available to multi-tenant
Government customers through the Direct, Open, MPSA, and EA channels at an ERP of $1.75 per user per
month.

107. What is the rationale behind charging for ATP?

Microsoft always evaluates customer interest, product value, competitor prices, and other factors when
pricing our services. In todays market, Advanced Threat Protection is a premium service with security
vendors, like Proofpoint and FireEye ATP, charging for the product on top of a customers email costs. Most
email providers, like Google Apps for Work, do not offering a comparable level of security. By providing ATP
as an add-on to Office 365, Microsoft will enable customers to get ATP at a competitive price with seamless
integration into Office 365 or their on-premises Exchange environment.

108. Is the service available to Office 365 Government Community Cloud (GCC),
Office 365 Education, and Office 365 Nonprofit customers?
Exchange Online ATP will not be available at launch to Office 365 Government Community Cloud (GCC),
Office 365 Education, and Office 365 Nonprofit customers. It will only be available initially to Office 365
commercial and multi-tenant Government customers. Segment availability may expand in the future.

109. Is the service available to Office 365 Dedicated customers?

EXO-ATP is not supported with EXO Dedicated. Customers can start using the service once they have
migrated to EXO vNext.

110. Does it protect only internal mailboxes?

Yes, the service protects internal mailboxes (mails flowing into the company). The protection is not applied
to outbound mails.

111. Can a user be configured only for safe attachments or only for safe links?
Yes, there are separate policies for Safe Links and Safe Attachments. Each policy can be applied to a specific
set of users . Furthermore, it is possible to have unique policies within Safe Links and Safe Attachments so
each group of users can have custom settings.

FAQ | Office 365 E5 and Skype for Business Disclosure

 112. What is the email delivery latency with ATP?
If the Safe Attachment policy that applied to a given recipient has an action of Block the email will not be
delivered until the attachments can be detonated by Safe Attachments. Safe Attachments will launch a
unique hypervisor to open the attachment. This can result in a delivery delay of upto 30 minutes for each
mail evaluated by Safe Attachments. On average, this is about 7-10 Minutes.

113. Will safe links rewriting in a message break existing DKIM signatures?
Yes, once a message has its links rewritten, any subsequent DKIM checking will no longer work. However,
EOP validates DKIM signatures before rewriting URLs and stamps the result in clear-text into the
Authentication-Results header. For example:
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=contoso.com;
h=Received:Received:Date:From:To:Message-ID:Subject:MIME-Version:
Content-Type; s=s1024; bh=<body hash>; b=<signed content>
Authentication-results: protection.outlook.com; spf=pass
(sender IP is xx.xx.xx.xx) smtp.mailfrom=user@contoso.com
dkim=pass (signature was verified) header.d=contoso.com;
dmarc=fail action=quarantine header.from=contoso.com;

Any subsequent DKIM checks should rely upon this header rather than attempting to verify the DKIM
signature after it has passed through EOP.

114. How long does it take for ATP policies to be effective?

Once a change is made to an ATP policy, it can take up to 30 minutes for that change to propagate to every
server.

115. Does safe links web service add any latency to browsing experience?
In the event that a link points to a non-malicious web site, Safe Links adds very little latency to loading the
target web page. If the link points to a malicious web site, then the user is routed to a warning page and
may click through (if click through is enabled) to continue on to the site.

116. Does EOP Antimalware work with ATP?

Yes, ATP compliments Antimalware scanning. Only those attachments that successfully pass Antimalware
scanning are impacted by Safe Attachments or Safe Links policies.

117. What types of files will Safe Attachments detonate?

Safe Attachments will detonate attachments that are common targets for malicious content, such as
Microsoft Office documents, PDFs, executable file types, and Flash files.

118. Can on-premises users use this capability?

Yes, on-premises customers can use this service. They will have to use Exchange Online Protection for
incoming messages.

119. Are there any changes with SLA for this service?
No, all SLAs are the same as EOP. No new SLAs have been added.

FAQ | Office 365 E5 and Skype for Business Disclosure

 120. How is Exchange Online ATP different from Microsoft Advanced Threat
Analytics?
Advanced Threat Analytics (ATA) comes from Aorato, a company Microsoft acquired in November, 2014. It is
a platform that helps Active Directory customers protect their data from advanced attacks by automatically
learning, profile and predicting entity (user, device, etc.) behavior. Using machine learning, it builds the
Organizational Security Graph, a living, continuously-updated view of all of the people and machines
accessing an organizations Windows Server Active Directory (AD). This enables it to understand what normal
behavior is and then to identify anomalies, so a company can quickly see suspicious behavior and take
appropriate measures to help protect itself.

While ATA is focused on AD, Exchange Online Advanced Threat Protection is focused on emails, and
provides protection against malware, viruses with rich feature set of Safe attachments, Safe Links and URL
tracing, giving your office 365 admins a simple way to block prevent such attacks.

121. Will users require Shared Mailboxes to get advanced functionality for ATP?
Yes - users require Shared Mailboxes to have a license to get the more advanced functionality for ATP (and
other Office 365 component features like Equivio, EOA, or DLP).

Power BI Pro
Description: Business analytics service that enables information workers to visualize and analyze data with greater
speed, efficiency, and understanding through live data dashboards, interactive reports, and compelling visualizations.

Resources

Power BI Pro Detailed FAQ for internal Microsoft and Partner facing use only.
Microsoft Ignite Series Recordings
Microsoft Power BI Knowledge Base

122. What is Power BI?

Power BI is a cloud-based business analytics service (software-as-a -service) for non-technical business users to
visualize and analyze data. Power BI securely connects to a broad set of data sources residing both on-
premises and in the cloud.

123. How does Power BI fit into Microsofts overall data platform strategy?
Our data platform strategy is to empower customers to maximize the value derived from each byte of data
they store and process. Power BI delivers on that strategy by connecting our customers data to Microsofts full
data platform, enabling them to easily use other Microsoft data solutions -- including the predictive analytics
capabilities of Azure Machine Learning -- to achieve business value faster.

124. What market momentum are we seeing for Power BI?

Tens of thousands of people have used Power BI since we first introduced it. Customers such as Boys & Girls
Clubs are already previewing the new Power BI features.

Were anticipating growth in the market. According to IDC, global spending on business analytics services is
projected to rise from $51.6 billion in 2014 to $89.6 billion in 2018. IDC also predicts that Visual data
discovery data visualization is projected to grow 2.5x faster than the rest of the BI market between 2015
and 2018.

FAQ | Office 365 E5 and Skype for Business Disclosure

 With the new capabilities and new pricing, we think Power BI is the best solution on the market to enable
more customers learn from and act on their data.

125. What data services does Microsoft offer in the cloud?

Microsoft offers a comprehensive set of data services for customers -- including Azure Machine Learning,
Azure Search, Azure DocumentDB, and other Azure data services -- to managed data services from our
partners. Microsoft is committed to supporting the broadest data platform so customers get data benefits, in
the cloud, on their terms.
In addition, Power BI is an end-to-end cloud based solution for deriving insights on data. It reduces barriers
to deploying a business intelligence environment for sharing and collaborating on data and analytics from
anywhere.

With Microsofts big data and cloud solutions, customers have more options to enable new scenarios for
modern data warehousing, information services and business intelligence to gain deeper insight from their
data and improve the way they deliver services and products to their customers.

126. What languages and regions is Power BI available?

At GA Power BI will be available in all countries where Office 365 is supported except Brazil and China.

Power BI will be available in 43 languages.

Q&A and Data Search features are currently English only and we are working on providing additional
language support over time.

Delve Analytics
Description: Rich interactive dashboards highlighting key trends such as reach, influence and work-life balance across
an individual and teams engagement with internal and external teams.

Resources
Delve Analytics FAQ
Office Delve and Office Graph Vision and Roadmap
Break Down Organizational Silos and Gain New Insights with Office Graph and Office Delve

DLP and Encryption

Description: Extending Data Loss Prevention and Data Encryption at rest to SharePoint Online and Skype for Business
Online in addition to Exchange Online. Availability dates for DLP and Encryption in Skype for Business and SharePoint
Online will be communicated at a later date.

Resources
Overview of data loss prevention policies

Meeting Broadcast
Description: Enables hosting meetings to reach thousands of attendees, with unique large meeting features.

FAQ | Office 365 E5 and Skype for Business Disclosure

 Resources
What is a Skype Meeting Broadcast?

Skype for Business Cloud PBX

Description: Cloud-Based call management to enable making, receiving, and transferring calls across a wide range of
devices.

Skype for Business PSTN Conferencing

Description: Public Switch Telephone Network Conferencing enables meeting attendees to join from any device via
telephone number and organizers to dial-out to pull attendees in.

Resources
What is PSTN calling?

FAQ | Office 365 E5 and Skype for Business Disclosure