ems

End-user signup for Azure Self Service Password Reset

If you want to enable a user for Self Service Password Reset the user need to navigate to one of these endpoints and register his/her phone as a second factor.

Endpoints:

This endpoint verifies your phone and enrolls the user in SSPR: http://aka.ms/ssprsetup
It does not change your password!
This endpoint resets your password and enrolls the user if his or her phone number is already stored on the user. http://aka.ms/sspr (which points here: http://passwordreset.microsoftonline.com)

Here is a screen dump of what the user will have to do:

routed-to-account-setup-in-azure-ad — You get routed to or enrollment service

verify-phone-number-in-azure-ad — asks to verify your phone (if it is already there) if not you have to enter your phone number

if-phone-is-not-registered — If your phone is not registered in azure AD you see this

call-to-verify-azure-ad — Call goes fastest

one-factor-is-completed — In Azure AD you select how many factors your users need to setup. I have selected 1

myapps-in-azure-after-registration — This is where you end up

September 9, 2016 0

What Azure Rights Management Tells You!

A colleague of mine, Ilya sendt out a Azure RMS protected document. Here is what it looks like for a user of Azure RMS when sharing documents.

http://portal.azurerms.com

Observe the insight and control you have over the information, and at a moments notice you can withdraw access to the document.

The Yellow lines are the last names which have been removed for privacy.

Notification settings — Get notified once someone opens the document

July 13, 2016 0

Did I travel, Azure Identity Protection say so

Got a medium warning in Azure IDP, it says my account have been out traveling.

What can I do now?

Just reset password (solve)
Prompt for MFA regardless (mitigate)

This is how Azure figured it out:

http://manage.windowsazure.com keeps a track on logins for each user. London is not Oslo…

May 30, 2016 0

Removing user access to Azure RMS documents

Scenario:

You share a Azure RMS protected document with one user lg@haukeberg.com. If you now remove that user and add Samsung@haukeberg.com

-> What happens?

NOTHING.

Each share on the file creates a new instance in Azure RMS, hence if you want to remove user lg@haukeberg.com access you need to revoke access to the document completly.

Note: once you revoke access to a document, all the users will loose access.

Hence if the user lg@haukeberg.com quits and you revoke access to a document which also Samsung@haukberg.com has access to then both loose access.

version protection — Observe the individual shared versions of the file

Workaround would be to always share a document with as few as possible each time.

May 30, 2016 0

Adding a Success Plan Owner to Fasttrack

In order to be eligible for the adoption funds you need to have a success plan owner on your success plan and that owner need to be from the customer email-domain.

Here is how you as a PARTNER can do it:

Find the success plan and make sure it is all 100%

Click on 1. Business Case and wait for page to load. Then click teams

If you are missing Success Plan Owner , click add and add him.

Now go back up to the success plan and click the gear icon and Edit members

If you do not see a customer plan owner click add/edit members

Select the customer owner from the drop down list

Now you are ready to submit your offer request. Click on Offers and continue or “Learn more”

Associate the success plan which now has a owner

Attach any aditional files and click submit.

Customer Success Plan Owner now has to approve the project in the fasttrack portal.

April 30, 2016 0

Easy way to claim Fasttrack adoption funding

http://fasttrack.microsoft.com
Click Log In in top right corner
Click the Sign in button again and Sign in with your Office 365/Azure AD account (you must have this)
Wait for the site to load all the menus, takes some seconds
Click “Search for a customer”
Search for a customer
Then seach for the customer name. Green ball means that Fasttrack center is engaged, red pyramid means that we have not engaged the customer
Click the customer and click “Add me“
Now click on Offers and find the “FY16 EMS Adoption Offer” and click “Learn more“
If you have the competency to claim funds then click “Create Request” and start to fill out.

April 27, 2016 0

Deploy Office 2016 ProPlus from Office 365 with Microsoft Intune

You can use Microsoft Intune agent to distribute and deploy quietly Office 2016 ProPlus bits to any Windows PC you manage with the agent.

Here is what you do:

Download the Office Deployment Toolkit https://www.microsoft.com/en-us/download/details.aspx?id=49117
Install it and you get two files. Setup.exe and Configuration.xml

Configure the configure.xml with something like this:

<Configuration>
  <Add OfficeClientEdition="32" Branch="Current">
    <Product ID="O365ProPlusRetail">
      <Language ID="en-us" />
    </Product>
  </Add>
<Display Level="None" AcceptEULA="True" />
</Configuration>