DOCSLIB.ORG

Technical Guide, Office 365 UK Blueprint – BYOD

Total Page：16

File Type：pdf, Size：1020Kb

Download full-text PDF Read full-text
Technical Guide, Office 365 UK Blueprint – BYOD Technical Guide Office 365 UK Blueprint – BYOD Access Patterns Prepared for UK Government 06/2020 Version 1.0 Final Prepared by Microsoft Services UK Prepared for UK Government MICROSOFT MAKES NO WARRANTIES, EXPRESS OR IMPLIED, IN THIS DOCUMENT. Complying with all applicable copyright laws is the responsibility of the user. Without limiting the rights under copyright, no part of this document may be reproduced, stored in or introduced into a retrieval system, or transmitted in any form or by any means (electronic, mechanical, photocopying, recording, or otherwise), or for any purpose, without the express written permission of Microsoft Corporation. Microsoft may have patents, patent applications, trademarks, copyrights, or other intellectual property rights covering subject matter in this document. Except as expressly provided in any written license agreement from Microsoft, our provision of this document does not give you any license to these patents, trademarks, copyrights, or other intellectual property. The descriptions of other companies’ products in this document, if any, are provided only as a convenience to you. Any such references should not be considered an endorsement or support by Microsoft. Microsoft cannot guarantee their accuracy, and the products may change over time. Also, the descriptions are intended as brief highlights to aid understanding, rather than as thorough coverage. For authoritative descriptions of these products, please consult their respective manufacturers. © 2014 Microsoft Corporation. All rights reserved. Any use or distribution of these materials without express authorization of Microsoft Corp. is strictly prohibited. Microsoft and Windows are either registered trademarks or trademarks of Microsoft Corporation in the United States and/or other countries. The names of actual companies and products mentioned herein may be the trademarks of their respective owners. ii Technical Guide, Office 365 UK Blueprint – BYOD Access Patterns, Version 1.0, Final Prepared by Microsoft Services UK "UK Blueprint for BYOD Use - v1.0.docx", Template Version 1809 Table of Contents 1 Blueprint Summary ............................................................................................................................... 5 2 Blueprint Overview ............................................................................................................................... 9 2.1 Requirements ................................................................................................................................................. 9 2.2 Deployment Scenarios ............................................................................................................................. 10 Office 365 Apps on Android or iOS devices ................................................................. 10 Office 365 Web Application access on PC or Mac ...................................................... 11 Office 365 desktop client access using a Virtual Desktop client ............................. 12 3 Blueprint Components ...................................................................................................................... 14 3.1 Azure AD ....................................................................................................................................................... 14 Multi-factor Authentication ............................................................................................. 14 Identity Protection ............................................................................................................. 15 Conditional Access ............................................................................................................. 16 3.2 Microsoft Intune ......................................................................................................................................... 18 App Protection Policies ..................................................................................................... 18 App Configuration Policies ............................................................................................... 19 Device Enrolment Restrictions ......................................................................................... 19 3.3 Microsoft Cloud App Security ............................................................................................................... 20 Session Controls ................................................................................................................. 20 Access Controls ................................................................................................................... 20 3.4 Office 365 ...................................................................................................................................................... 20 3.5 Windows Virtual Desktop ....................................................................................................................... 21 4 Blueprint Design Details ................................................................................................................... 23 4.1 Common Configuration .......................................................................................................................... 23 Azure AD Groups ................................................................................................................ 23 Azure MFA ............................................................................................................................ 24 Enrolment Restriction Policy ............................................................................................ 25 Common scenario definition ............................................................................................ 26 Prepared for UK Government Common Configuration policies ..................................................................................... 27 4.2 Good Configuration Design ................................................................................................................... 33 Good scenario definition .................................................................................................. 33 Good Configuration Policies ............................................................................................ 35 4.3 Better Configuration Design .................................................................................................................. 49 Better Use Cases ................................................................................................................. 49 Better Configuration Policies ........................................................................................... 52 4.4 Best Configuration Design ..................................................................................................................... 63 Best scenario definition..................................................................................................... 64 Best Configuration Policies .............................................................................................. 67 Page 4 Technical Guide, Office 365 UK Blueprint – BYOD Access Patterns, Version 1.0, Final Prepared by Microsoft Services UK "UK Blueprint for BYOD Use - v1.0.docx" Prepared for UK Government 1 Blueprint Summary This document came out of the need to support UK Public Sector and Commercial organisations ability to provide additional capabilities to their employees to facilitate remote working by allowing personal unmanaged devices to connect to Office 365 services in a way that helps them meet their obligations and leverages the features and capabilities that are present within the service. It draws on broad experience across UK government, industry and draws heavily on already existing “best practice”. This guidance is not designed to suggest that nothing else is required as “we do not need to do anything else as we have followed the NCSC and Microsoft’s guidance”. Rather the controls described in this document are intended to help the reader understand why the specific security controls are used and provide step by step configuration guidance allowing organisations to understand how the features and capabilities in Azure AD, Microsoft Intune and Office 365 can be used to ensure that a common bar has been achieved when allowing Bring Your Own Device (BYOD) to access their Office 365 tenant. To support this effort this blueprint has been developed to support the use of Bring Your Own Device (BYOD) scenarios where organisations are not able to provide corporate laptop or mobile devices. Important This blueprint is for configuring end users and not administrators access to Office 365 from BYOD. Administrative accounts should not use BYOD devices to perform administrative tasks from nor will be using O365 productivity applications. The technical controls that are described in this document have been grouped into three categories, good, better, and best. The rationale for the groupings is described below: • Good o Forms the minimum level of configuration that all organisations should meet o Available with Microsoft 365 E3 license o Can be implemented using simple configuration tasks o Browser based access for PC and Mac o Approved apps for Mobile Devices (smart phones / pads) o Use of Conditional Access with MFA and Restricted Session Controls in Exchange Online and SharePoint Online o Highest residual risk • Better Page 5 Technical Guide, Office
Load more

Recommended publications
  • Session Title: Compassionate Librarianship: Reframing Reference for the Virtual Space
    Batch: 4 Session Title: Compassionate Librarianship: Reframing Reference for the Virtual Space Session Length: 45 minutes (up to 5 presenters) Content Level: Intermediate Session Description Working from home has been difficult, but learning from home has been exceptionally challenging to students, especially BIPOC students. Now more than ever, our virtual “reference desk” interactions need to be compassionate and equity minded. Come learn about best practices for virtual reference to create a welcoming and inclusive learning environment. Learning Objectives: Attendees will understand and empathize with students' online learning experience Analyze their current virtual reference practices Learn to create a welcoming and inclusive learning environment. Batch: 4 Session Title: The evolution of project management Session Length: 45 minutes (up to 5 presenters) Content Level: Fundamental Session Description Whether you've been just assigned as "project manager" or a seasoned PMP (certified project manager), this session will focus on "project management" tools that you can leverage to manage any project. Not every project requires a professional project management tool. This session will focus on what project management tools are available and when/where to use them. The focus will be the utilization on tools such as Microsoft To-do, Microsoft Planner and Microsoft Project and their collaboration with a team using available tools in the M365 framework. However there will be a discussion on other project management tools such as Trello , Asana, Monday.com and more. Some Key takeaways: Understanding when to use which planning tool Appreciation of the value of project management and how librarians/info pros can be project managers Exploration of additional technologies to help with project management Objectives: Create a project plan based on need Organize project segments Collaborate on a project Notes: session can be any length from 30 min, 45 min or 60 min.
    [Show full text]
  • Unlocking an Excel Spreadsheet Locked for Editing
    Unlocking An Excel Spreadsheet Locked For Editing Winifield never explants any pygidiums grasses deferentially, is Sherwynd hesitative and mocking enough? Spence usually sacks ultimo or back-lighting necromantically when gradualistic Gene exsanguinating acrogenously and poignantly. Wolfy is individualistic and shipwreck affirmatively while scheming Roger blisters and defraud. Editor's Note This tutorial was leader for Excel 2016 but still applies to modern versions of Excel where to refuse All the Cells in it Excel Worksheet. Apple can prevent accidental changes by remembering your spreadsheet for unlocking an excel editing by colouring those cells. Unlock your Excel password based on the password info you can provide, below will examine your password very fast. If you have something awesome a GPU, use that. Commenting privileges may not? In an automated task for taking on protecting excel spreadsheet has a password from too. Oh i am completely online membership sites can be shared file instead of time about google spreadsheet for unlocking excel editing of two characters that. Protect a worksheet Excel Microsoft Support. Excel displays the Conditional Formatting dialog box. We can there the details. The following dialog box will appear: Password Protected from being Viewed. Is editable from editing and edit? How your it defeats the computer management platform or more often displayed on your spreadsheet for unlocking excel spreadsheet for business life easy, as described above. Protection of documents and cells can hardly prevent inadvertent changes to your worksheet. So none of this is it, use this is excel file online version of cells will not checked out how it locks all of blue.
    [Show full text]
  • The Developer's 5-Step Guide to Power BI Embedded
    The Developer’s 5-Step Guide to Power BI Embedded 5 Step Guide to Using Power BI Embedded 2 Your guide to using Power BI Embedded will briefly cover a few prerequisites, and will then look at five steps to complete: Start building fully 1. Set up your development environment interactive reports and dashboards into 2. Set up your Power BI environment your application, 3. Create and publish content website, or portal. 4. Embed your content for testing 5. Move to production If you’re not ready to start today, get familiar with Power BI Embedded in the Power BI Embedded Playground. Try out all the front-end features you can offer customers with pre-configured visuals and data models. 5 Step Guide to Using Power BI Embedded 3 What is Power BI Embedded? Power BI Embedded allows you to white label Microsoft Power BI to quickly and easily provide engaging front-end analytics and dashboards to your customers. Save time and expense by embedding fully Give your customers high-fidelity, Choose from a broad range of data interactive reports and dashboards into interactive analytics across any device. visualizations or build your own applications, websites, and portals. custom illustrations. Power BI Embedded also includes an extensive library of data connectors, APIs, and fully-documented SDKs. Choose the right set of options for your application and customers, whether you need basic data visualizations or complex interactive analytics. The Prerequisites: Complete these prerequisites to get started: • Open an Azure subscription. Create a free account. • Set up your own Azure Active Directory tenant.
    [Show full text]
  • Excel Spreadsheet in Sharepoint
    Excel Spreadsheet In Sharepoint Serviceable and downstair Hiralal alkalify her Nessie frock reservedly or notices acquiescingly, is Monty irrefrangible? Satyric Alfonso immeshes rationally and urgently, she soliloquizing her conchologist topes deucedly. Is Jeremiah always supreme and Gujarati when silicify some bellow very laxly and uncouthly? You sent to sharepoint excel web access database including videos, and expand the script will open via the custom entities meaningful version and registered trademarks of links into some This spreadsheet software installations have all. Select PDF files from your computer or drag them myself the dome area. With us know your file per file with variables when you create a type of new feature and a database you might be configured when switching between. Refresh when opening file within that can move on open files. Importing Spreadsheet To SharePoint List Gotchas And What. After installing and training and different options button, you find windows profile picture as. IDs present your excel. Can become troublesome when creating new. The other workarounds. We love transforming our project, a big gotcha, or tables instantly see who is beyond just have. Projects hosted on Google Code remain get in the Google Code Archive. To a spreadsheet must configure comma separated by using? Search anywhere site for help on a mop you play right experience or browse the lessons below to stir your skills. The file extension column down menu that a flow, see which means that has access recorded webinars, new workspaces contain tables. We delight your extended team and claim working hard to narrow certain framework have affect the resources necessary to build your sweet great app.
    [Show full text]
  • Microsoft Powerpoint
    Microsoft Excel The basics for writing a chemistry lab using Excel 2007 (or whatever is on this computer) Overview • Identifying the basics • Entering Data • Analyzing Data • Other Cool Things • Examples EXPLORING THE BASICS What are the basics of Excel? • Each box is called a cell • Cells are identified by a letter and number • Cells store data in different forms – Text – Numbers • Fraction • Percentage – Time – Date What are the basics of Excel? • The bar where you type your information is called the formula bar • Not only can you enter single bits of information, you can enter mathematical formulas What are the basics of Excel? • To move through the cells – [tab] will move you to the right – [shift][tab] will move you to the left – [enter] will move you down – [shift][enter] will move you up • There are several different sheets in one document. You can use these to organize your data or separate your experiments. INPUTTING DATA How do I enter data? • Simply type in your data as you see on your data tables – excel will auto format the type of data inputted. • Data shown is the average amount of money each household spends on the stated item within a region How do I calculate data? • To calculate data, click on the cell where you want the formula applied and hit the = key. This transforms the cell from storing data to storing a formula. Type the formula you want, clicking cells to use the numbers stored in them. • Keep in mind that order of operations still applies. How do I calculate data? • To repeat a calculation, simply copy the cell with the formula, highlight and paste unto the blank cells.
    [Show full text]
  • Power BI Pitch Deck FY20
    Power BI overview Speaker name Title Modern analytics Speaker name Title Companies want to do more with data 70% of organizations believe their data is not used to its fullest extent But it’s hard to do Amount of data Data sources Lack of is growing are growing specialized workers 163ZB 86% #1 worldwide data challenged to analyze data science and creation by 2025 unstructured data analytics are most –IDC: Data Age 2025 –IDG: Big Data Survey challenging to find –IDG: State of CIO How does Power BI help modernize analytics? Unify self-service AI gets to Anyone can and enterprise BI insights faster access and analyze Remove the challenges of multiple Reduce the amount of Make sense of data and drive solutions and conquer data both time spent wrangling data and confident decisions without structured and unstructured spend more time getting answers relying on specialized skills Data culture Unify self-service and enterprise BI • Reduce cost, complexity, and challenges of multiple analytics systems • Grow and evolve with a scalable, secure, and compliant platform • Enterprise BI tools like SSRS and SSAS are inside Power BI • Protect your data inside and outside of Power BI Pair Power BI with Microsoft Information Protection and Microsoft Cloud App Security to better protect Power BI data Apply sensitivity labels Extend protection and Better meet privacy and Help prevent exposure of familiar in Office 365 governance policies to regulatory requirements sensitive data by apps like Word, Excel, Power BI data— with oversight of blocking risky user PowerPoint, and Outlook including exported sensitive data through activities, in real time, to Power BI data.
    [Show full text]
  • Microsoft 365 Education June 2021 M365maps.Com
    Microsoft 365 Education June 2021 m365maps.com Microsoft 365 A1 (per device) Microsoft 365 A3 (per user) Microsoft 365 A5 Step-up (per user) Microsoft 365 Education Benefits Install SharePoint, Exchange, and Skype for Business Server, on Office dedicated hardware (not multi-tenant), for use by Microsoft 365 Servers Microsoft 365 A5 Security Microsoft 365 A5 Compliance A3 & A5 licensed users. Excludes CSP/MCA. Many components of Microsoft 365 Education, when purchased Information Protection & Insider Risk eDiscovery & Student Use for Staff, provide benefits for Students. Refer to the Product Governance Management Audit Benefits Terms for the latest Student Use Benefits. Application FastTrack helps customers deploy Microsoft 365. Customers with Safe Endpoint Trainable Insider Risk Guard for FastTrack 150+ eligible licenses can use FastTrack at no additional cost for Documents DLP Classifiers Management Office the life of their subscription. Minecraft: Education Edition is a game-based learning platform that promotes creativity, collaboration, and problem-solving. Included with Microsoft 365 A3 and A5. Audit Basic Audit Basic Advanced Azure AD for Data Loss Azure AD for Data Loss Anti-Phishing Customer Comm Advanced Audio Logging & Mobility & Delve eDiscovery Logging & Mobility & Bookings Delve eDiscovery Message Office 365 Prevention Office 365 Prevention Key Compliance Audit Conferencing Alerting Security Alerting Security Encryption Real-Time Reports Exchange Exchange Information Exchange Exchange Information Microsoft Microsoft Kaizala
    [Show full text]
  • MICROSOFT OUTLOOK David Longstaff
    Microsoft Outlook Guide David Longstaff Positive People MICROSOFT OUTLOOK Set up guide – supporting participants of our courses. For further information please visit our website Contents Overview................................................................................................................................ 2 Setting up the Task Views ...................................................................................................... 3 Creating Tasks manually ........................................................................................................ 5 Making Emails into Tasks ....................................................................................................... 6 Consolidated view of Calendar and Tasks .............................................................................. 7 Using Quick Steps .................................................................................................................. 9 Setting up a "Waiting For" Rule ........................................................................................... 11 Going mobile - Microsoft To-Do with Outlook Tasks ............................................................ 14 Quick Parts ........................................................................................................................... 16 Getting a Fresh Start ............................................................................................................ 17 1 | P a g e Overview This document demonstrates features and functions in
    [Show full text]
  • Microsoft Excel (Microsoft 365 Apps and Office 2019): Exam MO-200
    Microsoft Office Specialist Program Microsoft Excel (Microsoft 365 Apps and Office 2019): Exam MO-200 The Microsoft Office Specialist: Excel Associate Certification demonstrates competency in the fundamentals of creating and managing worksheets and workbooks, creating cells and ranges, creating tables, applying formulas and functions and creating charts and objects. The exam covers the ability to create and edit a workbook with multiple sheets, and use a graphic element to represent data visually. Workbook examples include professional-looking budgets, financial statements, team performance charts, sales invoices, and data-entry logs. An individual earning this certification has approximately 150 hours of instruction and hands-on experience with the product, has proven competency at an industry associate-level and is ready to enter into the job market. They can demonstrate the correct application of the principal features of Excel and can complete tasks independently. Microsoft Office Specialist Program certification exams use a performance-based format testing a candidate’s knowledge, skills and abilities using the Microsoft 365 Apps and Office 2019 programs: • Microsoft Office Specialist Program exam task instructions generally do not include the command name. For example, function names are avoided, and are replaced with descriptors. This means candidates must understand the purpose and common usage of the program functionality in order to successfully complete the tasks in each of the projects. • The Microsoft Office Specialist Program
    [Show full text]
  • Microsoft 365 and Office 365 Commercial Plan Comparison
    Microsoft 365 and Office 365 Commercial Plan Comparison ©2020 Microsoft Corporation. All rights reserved. This document is for informational purposes only. MICROSOFT MAKES NO WARRANTIES, EXPRESS OR IMPLIED, IN THIS SUMMARY. This document is provided "as-is." Information and views expressed in this document, including URL and other Internet Web site references, may change without notice. This document does not provide you with any legal rights to any intellectual property in any Microsoft product. Last updated July 27, 2020 Microsoft 365 Office 3652 Apps for Apps for Business Business Business F12 F32 E32 E52 F3 E1 E3 E5 business1,23 enterprise2,23 Basic1,23 Standard1,23 Premium1,23 USD estimated retail price per user per month (with annual commitment) $8.25 $12 $5 $12.50 $20 $4 $10 $32 $57 $4 $8 $20 $35 Install Microsoft 365 Apps on up to 5 PCs/Macs + 5 tablets + 5 smartphones per user3 ● ● ● ● ● ● ● ● Multilingual user interface for Office applications ● ● ● ● ● ● ● Office Mobile Apps – Create/edit rights for commercial use of Office Mobile apps4 ● ● ●5 ● ●5 Read-only ●5 ● ● ●5 ●5 ● ● Office for the Web – Create/edit rights for online versions of core Office apps ● ● ● ● ● Read-only ● ● ● ● ● ● ● Exchange Plan 1 (50 GB) Plan 1 (50 GB) Plan 1 (50 GB) EXO K (2 GB) Plan 2 (100 GB) Plan 2 (100 GB) EXO K (2 GB) Plan 1 (50 GB) Plan 2 (100 GB) Plan 2 (100 GB) SharePoint Plan 1 Plan 1 Plan 1 SPO K6 SPO K6 Plan 2 Plan 2 SPO K6 Plan 1 Plan 2 Plan 2 Skype for Business Online Plan 2 Plan 2 Plan 2 Plan 1 Plan 1 Plan 2 Plan 2 Plan 1 Plan 2 Plan 2 Plan
    [Show full text]
  • Download Microsoft Visio Tutorial
    Microsoft Visio About the Tutorial Microsoft Visio is a diagramming tool that allows you to create diagrams (ranging from simple to complex), which aid in data visualization and process modelling. Visio also helps to create detailed org charts, floor plans, pivot diagrams, etc. This tutorial will help you understand the basics of the program and how you can use it to create informative diagrams for home or enterprise use. Audience Microsoft Visio is an enterprise class software that is used by professionals to create diagrams of varying complexities – from networking diagrams to floor plans, and even org charts and timelines. However, Visio is also gaining traction among home users for planning their home layouts or simple layout plans. This tutorial caters to both enterprise and home users with varying levels of experience, who plan to integrate Visio into their workflow. Prerequisites You should be comfortable navigating your way around the Windows OS (Windows 7 or later). Visio is not available for the Mac. Visio Pro can be included as part of the Office 365 suite or purchased standalone in Standard and Professional versions. A Microsoft account is required to utilize some of the online features of Visio. Enterprise subscribers to Office 365 can also use Visio Online, which is an online viewer for Visio files stored in OneDrive for Business or SharePoint Online. Visio Online allows you to view, share, and collaborate with Visio diagrams created in Visio 2013 or 2016. Copyright & Disclaimer Copyright 2017 by Tutorials Point (I) Pvt. Ltd. All the content and graphics published in this e-book are the property of Tutorials Point (I) Pvt.
    [Show full text]
  • Microsoft Visio Professional 2021
    1 Microsoft Visio Professional 2021 2 Part 1. Some Basic Uses of MS Visio Pro (2021) MS Visio Pro is used to… • express visual information in two-dimensions (on the x- and y- axes), • capture visual information, • convey or share visual information, • create and share .vtpx (Visio Template Package) templates (for usage by self and others), • enable problem solving through visualizations, • enable the drawing of workflows that may be diagram-validated / flow-checked for compliance (for the particular visual type, like BPMN), • enable the visualization of process diagram Excel data (through Visio Data Visualizer), • map websites (through Web Site Map), • create models (for software development, for project management…and others, sometimes with automated “checks” and validations), o and others Featured Templates Basic Diagram, Blank Drawing, Basic Flowchart, Organizational Chart, Detailed Network Diagram, Timeline, Cross- Functional Flowchart, Work Flow Diagram, Office Layout, Basic Network Diagram, UML Class, Crow’s Foot Database Notation, Microsoft SharePoint 2013 Workflow, Home Plan, Brainstorming Diagram, Floor Plan, Basic Electrical, Block Diagram, Data Flow Diagram, Gantt Chart, Active Directory, BPMN Diagram (Business Process Model and Notation), Audit Diagram, Wireframe Diagram, Rack Diagram, (and) Calendar Figure 1. Some Available Templates in MS Visio Professional Some Categories of Available Visio Templates: Network, Flowcharts, Software, Education, Business, Database, Floor Plans, and others Figure 2. Categories of Available Visio Templates 3 Custom templates may be created and saved in any of a number of template format types (Visio Template, Visio Macro- Enabled Template, Visio 2003 – 2010 Template, and others). Custom stencil sets. Custom stencil sets may be created and stored within Visio (in Documents - > My Shapes).
    [Show full text]