Deploy Office 365 Pro Plus

Office 365 and
Windows
Deploying and
Updating Office 365
ProPlus
Hands-on lab
Office 365 ProPlus is subscription-based offering of Microsoft

Office that runs locally on the users’ computers. On the surface it
appears identical to other versions of Office. However, it has
some significant differences. For example, it relies on Click-to-
Run, a streaming and virtualization technology, to reduce the
application installation. To use Office 365 ProPlus, users must
have an Office 365 account.
This lab provides a demonstration of the various ways in which
you can deploy Office ProPlus 365.
Produced by HynesITe, Inc.

Version 1.0
10/15/2015
This document supports a preliminary release of a software product that may be changed substantially prior to final commercial
release. This document is provided for informational purposes only and Microsoft makes no warranties, either express or implied, in
this document. Information in this document, including URL and other Internet Web site references, is subject to change without
notice. The entire risk of the use or the results from the use of this document remains with the user. Unless otherwise noted, the
companies, organizations, products, domain names, e-mail addresses, logos, people, places, and events depicted in examples herein
are fictitious. No association with any real company, organization, product, domain name, e-mail address, logo, person, place, or
event is intended or should be inferred. Complying with all applicable copyright laws is the responsibility of the user. Without
limiting the rights under copyright, no part of this document may be reproduced, stored in or introduced into a retrieval system, or
transmitted in any form or by any means (electronic, mechanical, photocopying, recording, or otherwise), or for any purpose, without
the express written permission of Microsoft Corporation.
Microsoft may have patents, patent applications, trademarks, copyrights, or other intellectual property rights covering subject matter
in this document. Except as expressly provided in any written license agreement from Microsoft, the furnishing of this document
does not give you any license to these patents, trademarks, copyrights, or other intellectual property.
Copyright 2015 © Microsoft Corporation. All rights reserved.
Microsoft Hyper-V, Internet Explorer, Windows, Windows PowerShell, and Windows Server 2012 are trademarks of the Microsoft
group of companies.
All other trademarks are property of their respective owners.

Deploying Office 365 ProPlus
Introduction
Objectives
After completing this lab, you will be able to:
 Install and configure Azure Active Directory Synchronization

 Synchronize your on-premises users to your Office 365 tenant
 Assign ProPlus licenses
 Install ProPlus manually
 Use Office Deployment Tool to download Office
 Deploy Office using the Office Deployment Tool
 Setup and deploy Office to a shared computer
 Use SCCM to deploy Office
 Configure and apply Group Policy Objects with the Office Administrative Templates
Prerequisites
Before working on this lab, you must have:
 A valid Office 365 E3 Trial subscription. You can sign up for a trial subscription here:
https://products.office.com/en-us/business/office-365-enterprise-e3-business-software.
Note: you will need a Microsoft account (live.com, outlook.com, etc.) that does not have an Office 365
subscription associated with it.
 An understanding of Office.
 An understanding of networking concepts.
 An understanding of Windows Server and client operating systems
Overview of the lab

Office 365 ProPlus is subscription-based offering of Microsoft Office that runs locally on the users’
computers. On the surface it appears identical to other versions of Office. However, it has some significant
differences. For example, it relies on Click-to-Run, a streaming and virtualization technology, to reduce the
application installation. To use Office 365 ProPlus, users must have an Office 365 account.
This lab provides a demonstration of the various ways in which you can deploy Office ProPlus 365.
Virtual machine technology

This lab is completed using virtual machines that run on Windows Server 2012 Hyper-V technology. To
log on to the virtual machines, press CTRL+ALT+END and enter your logon credentials.
Lab created by HynesITe, Inc. For questions or comments, send an email message to content@hynesite.biz Page | 3
Computers in this lab

This lab uses computers as described in the following table. Before you begin the lab, you must ensure
that the virtual machines are started and then log on to the computers.
Virtual Machine Role Configuration

O365Lab-DC Domain controller Windows Server domain controller
O365Lab-D1 Windows Desktop Windows 10
O365Lab-SCCM SCCM Windows Server 2012 R2
All user accounts in this lab use the password pass@word1
Note regarding pre-release software

Portions of this lab may include software that is not yet released, and as such may still contain active or
known issues. While every effort has been made to ensure this lab functions as written, unknown or
unanticipated results may be encountered as a result of using pre-release software.
Note regarding user account control

Some steps in this lab may be subject to user account control. User account control is a technology which
provides additional security to computers by requesting that users confirm actions that require
administrative rights. Tasks that generate a user account control confirmation are denoted using a shield
icon. If you encounter a shield icon, confirm your action by selecting the appropriate button in the dialog
box that is presented.
Note on activation
The virtual machines for these labs may have been built by using software that has not been activated.
This is by design in the lab to prevent the redistribution of activated software. The unactivated state of
software has been taken into account in the design of the lab. Consequently, the lab is in no way affected
by this state. For operating systems other than Windows 10 or 8.1, click Cancel or Close if prompted by an
activation dialog box. If you are prompted by an Activate screen for Windows 10 or 8.1, press the
Windows key to display the Start screen.
Exercise 1: Synchronize on-premises users with Azure

Active Directory
A requirement for Office 365 ProPlus is that users have Office 365 identities in order to be a licensed to
use it. To meet this requirement, Azure Active Directory synchronization enables organizations to
synchronize their on-premises Active Directory user identities with their Office 365 subscriptions.
In this exercise, you will learn to install and configure Azure Active Directory Synchronization tool and use
it to perform a Directory Synchronization
Activate Active Directory Synchronization

In this task, you will activate Active Directory Synchronization.
Ensure you are logged on to O365Lab-DC as Contoso\Administrator using the password

pass@word1
1. On O365-DC, on the taskbar, click Windows PowerShell.

2. At the PowerShell prompt, type the following commands and press ENTER.
↪ Connect-MsolService.
3. When prompted, enter your Office 365 administrative credentials, and click OK.
The administrative credentials will be those you created when you signed up for the free trail, eg,
<AdminName>@<your tenant>.onmicrosoft.com.
4. At the PowerShell prompt, type Set-MsolDirSyncEnabled –EnableDirSync $True, and then press
Y, followed by ENTER when prompted.
You can verify your tenant’s settings with the command, Get-MsolCompanyInformation.
5. Leave the PowerShell window open for subsequent tasks.

Please do not close PowerShell at this time.
Configure Azure AD Sync

In this task, you will configure AD Sync to synchronize the user objects in Active Directory OU with Azure
AD.

pass@word1
1. On the desktop, double-click the DirectorySync Tool shortcut on the desktop.
2. On the Azure AD Credentials page, enter your Office 365 /Windows Azure Active Directory
credentials, and click Next.
The administrative credentials will be those you created when you signed up for the free trail, eg,
<AdminName>@<your tenant>.onmicrosoft.com.
3. On the AD DS page, enter the following information, and then click Add Forest.
 Forest: contoso.com
 Username: contoso\dirsync
 Password: pass@word1
4. Click Next.
5. On the User Matching page, accept the defaults, and click Next.
6. On the Optional features page, check Password synchronization, and click Next.
This setting ensures that Active Directory users can log on to Office 365 using the same password.
7. Click Next.
8. Click Configure.
9. Wait for the wizard to finish configuring your directory synchronization, and click Next.
10. Uncheck Synchronize now.

Please ensure you uncheck this setting.
11. Click Finish.
12. Open File Explorer, and browse to C:\Program Files\Microsoft Azure AD Sync\UIShell.
13. Double-click miisclient.
The Synchronization Service Manager console opens.
14. Click the Connectors tab.
15. Double-click the AD Connector (contoso.com).

16. In the left pane, select Configure Directory Partitions.
17. Click Containers.
18. Enter the following credentials and click OK.
 Forest: contoso.com
 Username: contoso\dirsync
 Password: pass@word1
 Domain: contoso.com
19. In the Select Containers dialog box, unselect every OU, except for Contoso Users.
Do not uncheck the whole domain and then tick ContosoU sers. This would trigger a different behavior.
20. Click OK twice.
21. Leave the console open.
Perform Directory Synchronization

Enabling Password Synchronization sometimes take a little while to propagate. In this task, you will first
verify that password synchronization has been enabled and then you will synchronize the directories.
Ensure you are logged on to OFCLab-DC as Contoso\Administrator using the password

pass@word1
1. Switch to the PowerShell window you left open in the first task.
2. In Windows PowerShell, type the following command and then press ENTER.
↪ Get-MsolCompanyInformation
3. Ensure that the last line of the output indicates that password synchronization is enabled.
If password synchronization is not enabled, wait a couple of minutes and run the command again.
4. Leave the PowerShell prompt open for subsequent tasks.
5. Re-run the DirectorySyncTool from the shortcut on your desktop until the last page (click Next 5
times), check Synchronize now, and click Finish.
The synchronization steps can be observed in the Operations tab of the miisclient., where you can
observe the Active Directory objects uploading into Windows Azure AD, as shown below.
Exercise 2: Assign Office 365 Pro Plus subscriptions to

users
In this exercise, you will assign a single license manually through the portal and then assign them in bulk
using a PowerShell script.
Assign licenses using the portal

In this task, you will log on to the Office 365 administrative portal and assign an Office 365 license to a
user manually.

pass@word1
1. Open Internet Explorer.

Internet Explorer on O365Lab-DC displays the Office 365 login page by default.
2. Log in with your Office 365 / Windows Azure Active Directory credentials.
3. On the portal page, in the center, click Admin.
4. In the left pane, click Users, and then click Active Users.
You will observe that local AD user accounts have been synchronized, and now appear in Azure AD
5. Click on any user.
6. In the right pane, click Edit.
7. In the left menu, click licenses.
8. Set the user location to United States.
9. Check the box next to Office 365 Enterprise E3.
10. Click Save.

11. Leave Internet Explorer open for the next task.
Assign licenses using Windows PowerShell

In this task, you will log on to the Office 365 administrative portal and assign an Office 365 license to a
user manually.

pass@word1
1. In the Windows PowerShell prompt you left open in the previous task, enter the following
command on a single line and press ENTER.
↪ foreach ($o in (Get-MsolUser -UnlicensedUsersOnly)){Set-MsolUser -

UserPrincipalName $o.UserPrincipalName -UsageLocation US ; Set-
MsolUserLicense -UserPrincipalName $o.UserPrincipalName -AddLicenses
(Get-MsolAccountSku).AccountSkuId}
TIP: You can copy and paste this command from the PS-command text file on the desktop of O365Lab-
DC to the PowerShell prompt.
This command will assign the Microsoft Office 365 Plan E3 license to all unlicensed users and will take
approximately a minute to complete.
2. Switch to the instance of Internet Explorer you left open in the previous task.
3. On the ACTIVE USER page, double click any user other than the one you manually assigned a
license to earlier.
4. In the left menu, click licenses.

Note that User Location is now set to United States and that the Microsoft Office 365 Plan E3 License
has been assigned.
Exercise 3: Install Office 365 ProPlus as a user

In this exercise, you will install Office 365 ProPlus from the perspective of a user.
Install Office 365 ProPlus from the Office 365 portal

In this task, you will log on to the Office 365 portal as a user and install Office 365 ProPlus.
Begin this task logged on to O365Lab-D1 as Contoso\hfenbury using the password pass@word1
Please ensure you are logged on as Contoso\hfenbury and not as Contoso\Administrator.
1. On O365lab-D1, from the task bar, launch Microsoft Edge.
2. Browse to https://portal.office.com.
3. When prompted, log on as hfenbury@<your tenant>.onmicrosoft.com using pass@word1 as
the password.
4. Click Install now.
5. Click Run.
6. In the User Account Control dialog box, click Yes.

The Getting things ready notice appears, and Office start installing in the background.
7. On the Welcome to your new Office page, click Next.

8. On the First things first page, choose No thanks, and then click Accept.
9. On the Meet OnDrive page, click Next.
10. On the Hello Hudson Fenbury page, accept the default, and then click Next.
11. On the We’re getting things ready page, click No, thanks.
You will be able to start using Office application even before the installation is completed.
Notice the speed at which Office installs – much faster that that a standard MSI installation from media
or from and SMB share. The reason for this is the Click-to-Run virtualization and streaming technology
being used to install Office. For more information Click-to-Run, please see
https://technet.microsoft.com/en-us/library/jj219427.aspx.
Exercise 4: Configure and Install Office 365 ProPlus using

Standard Activation
In this exercise, you will become familiar with the /download and /configure switches of the Office
Deployment Tool (ODT), as well as the basic tags and values set in the ODT’s configuration file. You will
also note the default activation behaviour of Office 365 ProPlus, which is to assign a licenses to the device
that the user activates Office on.
Download Office 365 ProPlus Binary files

In this task, you will example a sample XML file used to provide settings information for the Office
Deployments Tool. You will subsequently use this file in a command to download the binaries for Office
ProPlus and Visio.
Begin this task logged on to O365Lab-SCCM as Contoso\Administrator using the password

pass@word1
1. On O365Lab-SCCM, on the desktop, double-click cmd ODT.

A command prompt opens.
2. At the command prompt, type notepad configuration.xml, and press ENTER.

The Office 365 configuration file opens.
In the file note the XML tags that provide the settings for the use the 32-bit version of O365 ProPlus
VisioProRetail. Also, note the Language ID values for French and English.
3. Close Notepad.
4. At the command prompt, type setup /download configuration.xml, and press ENTER.
The Office 365 ProPlus binaries start to download to the C:\ODT\Office directory.
5. Press CTRL+C to stop the download.

This download was performed earlier to save time. The files from the download were copied to
C:\OfficeCDN, which you will use in the next task.
6. Leave the command prompt open for the next task.
Customize installation of Office ProPlus

In this task, you will configure an Office 365 xml configuration file to cause the French version of Office to
be installed and Access to be excluded.

pass@word1
1. At the command you left open in the previous task, type cd\OfficeCDN, and press ENTER to
change to the C:\OfficeCDN directory.
2. Type notepad install.xml, and press ENTER.

The Office 365 configuration file opens.
3. Above the en-us language tag, add the French language pack in the Product tag to install both
language packs for Office 365: <Language ID="fr-fr" />

If you are using a source location, you will need to download specific language(s) from the Microsoft
CDN. In this case we have already downloaded the languages necessary for this lab.
4. In the product tag, add the following line: <ExcludeApp ID="Access" />
This will exclude Access from the installation of Office.
5. In the Display Level tag, change “None” to “Full”.

This will allow us to see the installation process; the previous setting causes a silent installation.
6. The file will look like this:

<Configuration>
<Add SourcePath=”\\o365Lab-sccm.contoso.com\OfficeCDN” OfficeClientEdition="32" >
<Product ID="O365ProPlusRetail">
<Language ID="fr-fr" />
<Language ID="en-us" />
<ExcludeApp ID="Access" />
</Product>
</Add>
<Updates Enabled="TRUE" UpdatePath="\\o365Lab-sccm.contoso.com\OfficeCDN" />
<Display Level="Full" AcceptEULA="TRUE" />
</Configuration>
Please double-check your spelling and punctuation. For, example, if you leave out a quote, you will get
an error during installation.
7. Click File, and then click Save.
8. Close Notepad.
9. Leave the command prompt open for subsequent tasks.
Install Office 365 ProPlus using the Office Deployment Toolkit

In this task, you will install the Offic365 using the Office Deployment Toolkit and the custom XML file you
modified earlier.
Begin this task logged on to O365Lab-D2 as Contoso\akeynes using the password pass@word1
Please ensure you are logged on to O365Lab-D2 as akeynes.
1. On O365Lab-D2, right-click Start, and then click Command Prompt.
2. At the command prompt, type net use z: \\o365lab-sccm\officecdn and press ENTER.
This command maps a drive to an SMB share on O365Lab-SCCM.
3. At the command prompt, type Z:, and press ENTER.
4. Type setup /configure install.xml, and press ENTER.

5. In the User Account Control dialog box, click Yes.
Office 365 ProPlus starts to install in the background. After a minute or two, at around the 30% mark,
you will be able to start using the Office applications.
Note that French is the language used for the installation. The language of the installation is
determined by which language is specified first in the XML configuration. However, the language that
Office applications will use when they are run is determined by the language settings on the device.
6. You do not have to wait for Office to finish installing before proceeding to the next task,
7. When office finishes installing, click Fermer (French for Close)
Activate Office
In this task, you will activate Office 365 ProPlus using against an Office 365 license that you assigned
earlier.
1. In the search box to the right of Start, type Word.
2. In the result, click Word 2016.

3. The Activate Office page appears.
4. In Activate Office, type akeynes@<your tenant>.onmicrosoft.com, and click Next.

5. In Password, type pass@word1, and click Sign In.
A message is displayed indicating that the account has been updated and the computer added to the
account.
Users can install Office ProPlus on up to 5 devices. In the next steps, you will look at where a user can
manage Office activations.
6. On the Account Updated page, note that the computer has been added to your account, and click
OK.
7. On the First things first page, select Use recommended settings, and click Accept.
8. Close the big Office Window that pops up.
9. From the taskbar, open Microsoft Edge, and browse to https://portal.office.com.

10. When prompted, sign in to Office 365 using akeynes@<your tenant>.onmicrosoft.com as the
user name and pass@word1 as the password.

11. In the top right corner, click the gear icon, and then click Office 365 settings.
12. Click Software.
You will see that one device, O365Lab-D2, is listed under Manage installs. Also note the presence of the
link to deactivate the installation.
13. Right-click Start, point to Shutdown or sign out, and then click Sign out.
14. Log on to O365Lab-D2 as Contoso\dballow, using pass@word1 as the password.
15. In the search box, type Word, and then click Word 2016.
16. On the First things first page, select Use recommended settings, and then click Accept.
17. Close the Office page.
18. Click Blank document.

You can observe that Office is still activated from the lack of visual warnings. The reason for this is that
Office activation is based on the device, although the user who consumed the license has the ability to
deactivate the license.
If Office is deactivated, a faint red ribbon with the date of the end of the grace period is displayed above
the document. A yellow shade is also displayed on the File/Account menu with instructions to perform
the activation.
Exercise 5: Configure and Install Office 365 ProPlus using

Shared Computer Licensing
In the previous exercise, you examined the default behavior for Office license activation — to activate
Office on a per user / per device basis. In this exercise, you will examine how to deploy Office 365 ProPlus
to a shared computer using the shared activation feature.
Configure Shared Activation installation of Office 365 ProPlus

In this task, you will customize the Office Deployment Toolkit configuration file to install Office 365
ProPlus as a shared installation.

pass@word1
1. On O365Lab-SCCM, switch to the command prompt you left open in the previous task.
You should be at the C:\OffceCDN directory.
2. Type notepad install-sca.xml, and press ENTER.
3. Add the shared activation feature by adding the following tag after the Add tag.
<Property Name="SharedComputerLicensing" Value="1" />
4. Change Display Level=”None” to Display Level=”Full”.

5. The resulting file should look like this:
<Configuration>
<Add SourcePath="\\o365Lab-sccm.contoso.com\OfficeCDN" OfficeClientEdition="32" >
</Product>
</Add>
<Property Name="SharedComputerLicensing" Value="1" />
<Updates Enabled="TRUE" UpdatePath="\\o365Lab-sccm.contoso.com\OfficeCDN" />
<Display Level="Full" AcceptEULA="TRUE" />
</Configuration>
6. Close Notepad.
Install Office 365 ProPlus using the Office Deployment Toolkit

In this task, you will install the Offic365 using the Office Deployment Toolkit and the custom XML file you
modified earlier.
7. On O365Lab-D3, right-click Start, and then click Command Prompt.
8. At the command prompt, type net use z: \\o365lab-sccm\officecdn and press ENTER.
This command maps a drive to an SMB share on O365Lab-SCCM.
9. At the command prompt, type Z:, and press ENTER.

10. Type setup /configure install-sca.xml, and press ENTER.
11. When prompted, click Yes.

Office 365 ProPlus starts to install in the background. After a minute or two, at around the 30% mark,
you will be able to start using the Office applications.
Observe Shared Computer Activation

In this task, you will activate Office 365 ProPlus on the computer where you configured a shared-user
activation installation..
1. In the search box to the right of Start, type Word.
2. In the result, click Word 2016.
3. The Activate Office page appears.

4. In Activate Office, type akeynes@<your tenant>.onmicrosoft.com, and click Next.
5. In Password, type pass@word1, and click Sign In.
6. Follow the default prompts to activate Office.
7. From the taskbar, open Microsoft Edge, and browse to https://portal.office.com.
8. When prompted, sign in to Office 365 using akeynes@<your tenant>.onmicrosoft.com as the
user name and pass@word1 as the password.

9. In the top right corner, click the gear icon, and then click Office 365 settings.
10. Click Software.

Note that only the O365LAB-D2 device is registered as having consumed a license using the akeyenes
account. Had this account activated an instance of Office on a separate device that used the default
licensing behavior, the additional device would have appeared here. Because shared computer
activations licenses are assumed to be for temporary use, activating this kind of Office installation does
not consume a license.
11. Right-click Start, point to Shutdown or sign out, and then click Sign out.
12. Log on to O365Lab-D2 as Contoso\dballow, using pass@word1 as the password.
13. In the search box, type Word, and then click Word 2016.
The Activate Office page appears.
14. Close the Activate Office page.

The user is denied access to the application. To use a shared-computer activation deployment of Office,
a user still requires a valid license to use the application. Close the Activate Office page.
15. Click OK to exit the notice.
Exercise 6: Deploy Office 365 ProPlus using System Center

Configuration Manager
In this exercise, you will learn to deploy Office 365 ProPlus using System Center 2012 R2 Configuration
Manager.
Create a device collection to target software deployment

In this task, you create a device collection based on an OU that contains the desktop computers. You
subsequently target a deployment of Office 365 ProPlus to the device collection.

pass@word1
1. Open Configuration Manager Console from the Start menu.
2. In the left pane, in the Assets and Compliance workspace, right-click Device Collections, and click
Create Device Collection.
3. In Name, type Office Desktops.
4. Click Browse… and set the limiting collection to All Systems.
5. Click Next.
6. Click Add Rule, then click Query Rule.
7. In the Query Rule Properties dialog box, in Name, type RuleOU.

8. Click Edit Query Statement… .
9. Select the Criteria tab.
10. On the Criteria tab, click on the Sunburst icon to create a new criterion.
11. In the Criterion Properties dialog box, click Select…
12. In the Select Attribute dialog box, in Attribute class, select System Resource.
13. In Attribute, select System OU Name, and click OK.
14. In Operator, leave the default selection is equal to.

15. Click Value.
16. In the Values dialog box, select CONTOSO.COM/CONTOSO COMPUTERS DESKTOPS.
This OU contains the 3 desktop VMs.
17. Click OK.

The query rule should look like the following:
18. Click OK 3 times.
19. Click Next twice, and then click Close.
20. Leave the Configuration Manager console open for subsequent steps.
Examine deployment configuration files

In this task, you will compare two configuration that will be used to create deployments of Office 365
ProPlus. One file causes Office 365 to be deployed without Access; the other file cause Access to be
deployed along with all the other Office applications.

pass@word1
1. If not already open from a previous task, open a command prompt.

2. At the command prompt, type cd\SCCM_Packages, and press ENTER.
3. Type notepad install-NoAccess.xml, and press ENTER.

Notepad opens showing the following:
<Configuration>
<ExcludeApp ID=”Access” />
</Product>
</Add>
<Updates Enabled="TRUE" UpdatePath="\\o365Lab-sccm.contoso.com\OfficeCDN” />
<Display Level=”None” AcceptEULA=”TRUE” />
</Configuration>
Note that this file has the same format as the configuration XML files you were working with earlier.
Note the exclusion for Access (ExcludeApp) and note that Office will install silently in the background
(Display Level=”None”). Also note the AcceptEula=”TRUE” setting. This will ensure that Office will install
without requiring user input.
4. Close Notepad.
5. At the command prompt, type notepad install-all.xml, and press ENTER.
6. Notepad opens showing the following:

<Configuration>
</Product>
</Add>
<Updates Enabled="TRUE" UpdatePath="\\o365Lab-sccm.contoso.com\OfficeCDN” />
<Display Level=”None” AcceptEULA=”TRUE” />
</Configuration>
Note the removal of the ExcludeApp setting.
7. Close Notepad.
Create application packages for Office 365 ProPlus

In this task, you will create a Systems Center Configuration Manager application package of Office 365
ProPlus that uses the NoAccess.xml configuration file. You will then duplicate this package and modify the
copy to use the Install-All.xml configuration file.

pass@word1
1. Switch to the Configuration Manager console you left open in a previous task.
2. On the bottom left pane of the Configuration Manager Console, select the Software Library
workspace.
3. On the left pane, under Application Management, right-click Applications, and click Create
Application.
4. On the General page, select Manually specify the application information, and click Next.
5. On the General Information page, in Name, type Office 365 ProPlus – General Staff, and click
Next.
6. On the Application catalog page, click Next.
7. On the Deployment Types page, click Add… .
8. In the Type drop-down, select Script Installer, and click Next.

Recall that Office ProPlus installs as a Click-to-Run application and does not use a standard MSI for
installation.
9. On the General Information page, in Name, type Office 365 ProPlus, and click Next.
10. On the Content page, in Content location, type \\O365Lab-SCCM\SCCM_Packages.
11. In the Installation program field, type setup.exe /configure Install-NoAccess.xml.
12. Click Next.

13. On the Detection Method page, click Add Clause… .
14. In the Detection Rule dialog box, in Path, type C:\Program Files\Microsoft Office 15.
15. In File or Folder name, type v32.cab.
16. Clear the checkbox for This file or folder is associated with a 32-bit application on 64-bit
systems, and click OK.
17. Click Next.
18. On the User Experience page, in the Installation behavior drop-down, select Install for system.
19. In Logon requirement, select Whether or not a user is logged on.
20. Click Next 4 times to complete the wizard, and then click Close.
21. Click Next to complete the previous wizard, and then click Close.
In the next steps, you will copy this package and modify it so that it will use the Install-All.xml
configuration file.
22. In the left pane, under Application Management, select Applications.
23. Right-click Office 365 ProPlus – General Staff, and click Copy.
24. Double-click the copy of the application to display the properties.
25. On the General Information tab, change the Name to Office 365 ProPlus – with Access.
26. Select the Deployment Types tab.
27. In the Deployment Types tab, select Office 365 ProPlus, then click Edit… .
28. In the Office365 ProPlus Properties dialog box, select the Programs tab.
29. In Installation program, change the command to setup.exe /configure Install-All.xml.

30. Click OK twice.
31. Leave the Configuration Manager console open for the next task.
Create a deployment of Office 365 ProPlus

In this task, you will create a Systems Center Configuration Manager deployment of Office 365 ProPlus –
General Staff application package that is targeted to the Office Devices device collection you created
earlier.

pass@word1
1. In the left pane of the Configuration Manager console, under Application Management, select
Applications.
2. Right-click Office 365 ProPlus – Gerneral Staff, and then click Deploy.
3. Next to the Collection box, click Browse… .
4. In the top left dropdown, select Device Collections.

5. Select Office Desktops, and click OK.
6. Click Next.
7. Click Add, and then click Distribution Point.
8. Check O365LAB-SCCM.CONTOSO.COM, and click OK.
9. Click Summary.
10. Click Next.
11. Click Close.

The Office 365 Pro Plus application will now be available for installation computers that belong to the
Desktop OU.
Exercise 7: Create and Deploy Office-related GPOs

In this lab exercise, you will learn about some of the Group Policy settings for Office applications.
Import admx templates

As a first step for managing the latest version of Office applications by using Group Policy Objects, you
need to download and install the Office template .admx files.
In this task, you will import the administrative templates that contain setting to manage both MSI and
Click-to-run installed versions of Office.

pass@word1
1. On O365-DC browse to C:\OfficeAdmx\32bit.

The administrative template files for Office 2016 were downloaded from https://www.microsoft.com/en-
us/download/details.aspx?id=49030 as part of the lab setup.
2. Copy all the .admx files from C:\OfficeADMX\32bit\admx folder to
C:\Windows\PolicyDefinitions.
3. Copy the contents of the C:\OfficeADMX\32bit\admxen-us folder to
C:\Windows\PolicyDefinitions\en-us.
Create a new Group Policy Object for Office updates

In this task, you will create a Group Policy Object that will update all desktops inside the Contoso
Desktops OU to the latest version of Office from the specified Update Path. This path could be any SMB
or HTTP location.

pass@word1
1. On O365-DC, open the Group Policy Management from the Start page.
2. Expand Forest.contoso.com, expand Domains, and expand contoso.com.
3. Right-click Contoso Desktops, and click Create a GPO in this domain, and Link it here.
4. In Name, type Office ProPlus Computer Policy, and click OK.

5. Right-click Office ProPlus Computer Policy, and click Edit.
6. Browse to Computer Configuration / Policies / Administrative Templates (…) / Microsoft
Office 2016 (Machine) / Updates.

7. Double-click Enable Automatic Updates, select Enabled, and click OK.
This setting controls enables automatic updates for Click-to-Run installations of Office.
8. Double-click Update Path, and select Enabled.
9. In Location for Updates, enter \\o365Lab-sccm.contoso.com\OfficeUpdates, and click OK.
10. Close the Group Policy Management Editor console.
11. Leave the Group Policy Management console open for subsequent steps.
Create a new Group Policy Object for telemetry

In this task, you will create a Group Policy Object that will enable Office Telemetry for all users inside the
Contoso Users OU, and specify where the Telemetry Agents will log to.

pass@word1
1. In the Group Policy Management console, under contoso.com, right-click Contoso Users, and
click Create a GPO in this domain, and Link it here.

2. In Name, type Office Telemtry Policy, and click OK.
3. Right-click Office Telemetry Policy, and click Edit.
4. Browse to User Configuration / Policies / Administrative Templates (…) / Microsoft Office
2016 / Telemetry Dashboard.

5. Double-click Turn on telemetry data collection, select Enabled, and click OK.
6. Double-click Specify the UNC path to store Office telemetry data, and select Enabled.
7. In UNC path to store Office telemetry data, \\o365Lab-sccm.contoso.com\OfficeTelemetry,

and click OK.
8. Close the Group Policy Management Editor.
9. Leave the Group Policy Management console open for the next task.
Create a new Group Policy Object for rolling back to previous build
One of the advantages of Click-to-Run applications is that they do not install like standard MSI
applications and rarely conflict with other applications. Standard MSI applications can often have conflicts,
however.
In this task you will learn about the Group Policy settings you can use to roll back Office to a compatible
version, should the need arise.

pass@word1
1. On O365-DC, open the Group Policy Management from the Start page.
2. In the Group Policy Management console, expand Contoso Desktops.
3. Right-click Accounts Department, and click Create a GPO in this domain, and Link it here.
4. In Name, type Office Rollback, and click OK.
5. Right-click Office Rollback, and click Edit.

6. Browse to Computer Configuration / Policies / Administrative Templates (…) / Microsoft
Office 2016 (Machine) / Updates.
7. Double-click Enable Automatic Updates, select Enabled, and click OK.

This setting controls enables automatic updates for Click-to-Run installations of Office.
8. Double-click Update Path, and select Enabled.
9. In Location for Updates, enter \\o365Lab-sccm.contoso.com\OfficeUpdates, and click OK.

10. Double-click Target Version, and select Enabled.
11. In Update version, enter 15.0.4649.1000 and click OK.
12. Close the Group Policy Management Editor console.
13. Close the Group Policy Management console.
Verify Group Policy

In this task, you will force the Group Policy updates and observe the relevant registry keys have been set
for the GPO set in Step 2 (Office Telemetry Policy)
Begin this task logged on to O365Lab-D1 as Contoso\hfenbury using the password pass@word1
Please ensure you are logged on as Contoso\hfenbury and not as Contoso\Administrator.
1. In the Search box to the right of Start, type cmd, and click Command Prompt.
2. At the command prompt, type gpupdate /force, and press ENTER.
3. At the command prompt, type regedit, and press ENTER.

4. Click Yes.
5. Browse to
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Office\16.0\common\officeupdate
Note that the policies you created earlier are present.
This is the end of the lab.

Deploy Office 365 Pro Plus

Hochgeladen von

Dokumentinformationen

Copyright

Verfügbare Formate

Dieses Dokument teilen

Dokument teilen oder einbetten

Freigabeoptionen

Stufen Sie dieses Dokument als nützlich ein?

Sind diese Inhalte unangemessen?

Copyright:

Verfügbare Formate

Deploy Office 365 Pro Plus

Hochgeladen von

Copyright:

Verfügbare Formate

Office 365 and

Office 365 ProPlus is subscription-based offering of Microsoft

Produced by HynesITe, Inc.

Copyright 2015 © Microsoft Corporation. All rights reserved.

All other trademarks are property of their respective owners.

 Install and configure Azure Active Directory Synchronization

subscription associated with it.

Overview of the lab

Virtual machine technology

Computers in this lab

Virtual Machine Role Configuration

Note regarding pre-release software

Note regarding user account control

Exercise 1: Synchronize on-premises users with Azure

Activate Active Directory Synchronization

Ensure you are logged on to O365Lab-DC as Contoso\Administrator using the password

1. On O365-DC, on the taskbar, click Windows PowerShell.

5. Leave the PowerShell window open for subsequent tasks.

Configure Azure AD Sync

Ensure you are logged on to O365Lab-DC as Contoso\Administrator using the password

1. On the desktop, double-click the DirectorySync Tool shortcut on the desktop.

10. Uncheck Synchronize now.

11. Click Finish.

14. Click the Connectors tab.

15. Double-click the AD Connector (contoso.com).

18. Enter the following credentials and click OK.

20. Click OK twice.

21. Leave the console open.

Perform Directory Synchronization

Ensure you are logged on to OFCLab-DC as Contoso\Administrator using the password

4. Leave the PowerShell prompt open for subsequent tasks.

Exercise 2: Assign Office 365 Pro Plus subscriptions to

Assign licenses using the portal

Ensure you are logged on to O365Lab-DC as Contoso\Administrator using the password

1. Open Internet Explorer.

3. On the portal page, in the center, click Admin.

5. Click on any user.

6. In the right pane, click Edit.

7. In the left menu, click licenses.

8. Set the user location to United States.

9. Check the box next to Office 365 Enterprise E3.

10. Click Save.

Assign licenses using Windows PowerShell

Ensure you are logged on to O365Lab-DC as Contoso\Administrator using the password

↪ foreach ($o in (Get-MsolUser -UnlicensedUsersOnly)){Set-MsolUser -

DC to the PowerShell prompt.

4. In the left menu, click licenses.

has been assigned.

Exercise 3: Install Office 365 ProPlus as a user

Install Office 365 ProPlus from the Office 365 portal

Please ensure you are logged on as Contoso\hfenbury and not as Contoso\Administrator.

1. On O365lab-D1, from the task bar, launch Microsoft Edge.

3. When prompted, log on as hfenbury@<your tenant>.onmicrosoft.com using pass@word1 as

4. Click Install now.

6. In the User Account Control dialog box, click Yes.

7. On the Welcome to your new Office page, click Next.

9. On the Meet OnDrive page, click Next.

Exercise 4: Configure and Install Office 365 ProPlus using

Download Office 365 ProPlus Binary files

Begin this task logged on to O365Lab-SCCM as Contoso\Administrator using the password

1. On O365Lab-SCCM, on the desktop, double-click cmd ODT.

2. At the command prompt, type notepad configuration.xml, and press ENTER.

5. Press CTRL+C to stop the download.

C:\OfficeCDN, which you will use in the next task.