This is the first exam in the MCSA track for Office 365
http://www.microsoft.com/learning/en-us/mcsa-office365-certification.aspx
Exam Home page is located at http://www.microsoft.com/learning/en-us/exam.aspx?ID=70-346
Please note that the Microsoft Cloud is constantly changing and improving, so some of this content may be outdated or points to websites that no longer exists. Therefore, make sure to check the official exam home page to get up to speed before taking the exam. I’m trying to keep these lists updated, but please send me an email with any missing content 🙂
This exam is divided into six main categories
- Provision Office 365 where you will be Provision tenants, add and configure custom domains and plan a pilot.
- Plan and Implement Networking and Security in Office 365 is testing you in DNS configuration for the services, enable client connectivity to Office 365, Administer rights management and Manage administrator roles in Office 365
- Manage Cloud Identities tests you in password management, managing user and security groups and manage cloud identities with Microsoft PowerShell
- Implement and manage identities using Azure Active Directory Synchronization (AADSync) where you need to know how to prepare on-premises Active Directory for AADSync, set up AADSync tool and manage Active Directory users and groups with AADSync in place.
- In Implement and Manage Federation Identities [single sign-on(SSO)] you are tested in AD FS requirements planning, install and manage AD FS servers and install and manage AD FS proxies.
- The last skill mentioned is Monitor and Troubleshoot Office 365 Availability and Usage. Here you will be tested on analyzing reports, monitor service health and isolate service interruption.
As with every other reading list, this list has gotten it’s life during my own reading, an I’m still reading for it my self.
Some general links that’s good to have knowledge about
- Office Ignite Labs
http://officeignitelabs.cloudguides.com/ - Manage Azure AD using Windows PowerShell
http://msdn.microsoft.com/en-us/library/azure/jj151815.aspx - Exchange Online PowerShell
http://technet.microsoft.com/en-us/library/jj200677%28v=exchg.150%29.aspx - Introduction to the SharePoint Online Management Shell
https://support.office.com/en-us/article/Introduction-to-the-SharePoint-Online-Management-Shell-c16941c3-19b4-4710-8056-34c034493429 - Using Windows PowerShell to manage Lync Online
http://technet.microsoft.com/en-us/library/dn362831.aspx
Provision Office 365
Provision tenants
Configure the tenant name, tenant region, global administrator; manage tenant subscriptions; and manage the licensing model
- Set up Office 365 for business – Admin Help
https://support.office.com/en-us/article/Set-up-Office-365-for-business-%e2%80%93-Admin-Help-6a3a29a0-e616-4713-99d1-15eda62d04fa - What is a tenant name
http://thecloudmouth.com/2012/09/13/whats-in-a-tenant-name/ - Microsoft Online Services International Availability
http://www.microsoft.com/online/international-availability.aspx - You can not change the country associated with your tenant
http://blog.hametbenoit.info/Lists/Posts/Post.aspx?ID=506 - Permissions in Office 365
https://support.office.com/en-us/article/Permissions-in-Office-365-da585eea-f576-4f55-a1e0-87090b6aaa9d - Assigning admin roles
http://office.microsoft.com/en-us/office365-suite-help/assigning-admin-roles-HA102816050.aspx - Buy a subscription after trying Office 365
http://community.office365.com/en-us/f/148/t/268826.aspx - Buy licenses for your Office 365 for business subscription
https://support.office.com/en-us/article/Buy-licenses-for-your-Office-365-for-business-subscription-36081d8d-b3fa-4948-8c34-e217bba825e1 - Switch to a different Office 365 plan or subscription
https://support.office.com/en-US/article/Switch-to-a-different-Office-365-plan-or-subscription-73318661-8F33-478B-BCC7-FB8D69DBB22A - Compare all Office 365 for business plans
http://office.microsoft.com/en-us/business/compare-all-office-365-for-business-plans-FX104051403.aspx
Add and configure custom domains
Specify domain name, confirm ownership, specify domain purpose, and move ownership of DNS to Office 365
- Office 365 Service Description – Domains
http://technet.microsoft.com/en-us/library/office-365-domains.aspx - Add your domain to Office 365
http://office.microsoft.com/en-us/office365-suite-help/add-your-domain-to-office-365-HA102818660.aspx - Verify your domain in Office 365
https://support.office.com/en-us/article/Verify-your-domain-in-Office-365-6383f56d-3d09-4dcb-9b41-b5f5a5efd611 - Find and fix issues after adding your domain or DNS records in Office 365
https://support.office.com/en-in/article/Find-and-fix-issues-after-adding-your-domain-or-DNS-records-in-Office-365-f49b1287-9993-4538-b8c3-2c738ccb85a3 - Video: Confirm ownership of your custom domain name
http://office.microsoft.com/en-us/office365-suite-help/video-confirm-ownership-of-your-custom-domain-name-VA104025442.aspx - What is the selecting services page in the Office 365 domains setup wizard?
https://support.office.com/en-us/article/What-is-the-selecting-services-page-in-the-Office-365-domains-setup-wizard-17f4aa9b-5ece-4af8-8be4-a5e8ff8367f2 - Change nameservers to set up Office 365 with any domain registrar
https://support.office.com/en-us/article/Change-nameservers-to-set-up-Office-365-with-any-domain-registrar-a8b487a9-2a45-4581-9dc4-5d28a47010a2
Plan a pilot
Designate pilot users, identify workloads that don’t require migration, run the Office 365 Health, Readiness, and Connectivity Checks, run IdFix, create a test plan or use case, and connect existing email accounts for pilot users, understand service descriptions and planning to onboard users to Office 365
- Pilot Office 365 with a few email addresses on your custom domain
https://support.office.com/en-US/article/Pilot-Office-365-with-a-few-email-addresses-on-your-custom-domain-39cee536-6a03-40cf-b9c1-f301bb6001d7 - Office 365 FastTrack
http://fasttrack.office.com/ - Install and run the Office 365 IdFix tool
https://support.office.com/en-us/article/Install-and-run-the-Office-365-IdFix-tool-f4bd2439-3e41-4169-99f6-3fabdfa326ac - Connect to another email account
https://support.office.com/en-US/article/Connect-to-another-email-account-174da61d-2c8d-4b62-bf4f-8c1dd06a97cf - Office 365 Service Descriptions
http://technet.microsoft.com/en-us/library/office-365-service-descriptions.aspx
Plan and Implement Networking and Security in Office 365
Configure DNS records for services.
Creating DNS records for Exchange, Lync, and SharePoint.
- Create DNS records at any DNS hosting provider for Office 365
http://office.microsoft.com/en-us/office365-suite-help/create-dns-records-at-any-dns-hosting-provider-for-office-365-HA103479204.aspx
Enable client connectivity to Office 365
Configure proxy server to allow anonymous access to Office 365 URLs, configure firewalls for outbound port access to Office 365, recommend bandwidth, Internet connectivity for clients, and deploy desktop setup for previous versions of Office clients
- You can’t connect to Lync Online, or certain features don’t work, because an on-premises firewall blocks the connection
http://support.microsoft.com/kb/2409256/en - Troubleshooting tips for Office 365 ProPlus
http://technet.microsoft.com/en-us/library/gg702620.aspx - Office 365 URLs and IP address ranges
https://support.office.com/en-us/article/Office-365-URLs-and-IP-address-ranges-8548a211-3fe7-47cb-abb1-355ea5aa88a2 - Network planning and performance tuning for Office 365
https://support.office.com/en-us/article/Network-planning-and-performance-tuning-for-Office-365-e5f1228c-da3c-4654-bf16-d163daee8848 - Set up Office 2010 desktop programs to work with Office 365 for business
https://support.office.com/en-us/article/Set-up-Office-2010-desktop-programs-to-work-with-Office-365-for-business-3324b8b8-dceb-45e2-ac24-c642720108f7
Administer rights management
Activate rights management, Office integration with rights management, assign roles for Windows Azure Active Directory (WAAD) RM, and enable recovery of protected document
- Windows Azure Rights Management
http://technet.microsoft.com/en-us/library/jj585024.aspx - Office 365 Information Protection using Azure Rights Management
http://blogs.technet.com/b/rms/archive/2013/11/11/office-365-information-protection-using-azure-rights-management.aspx - Integrating Office with Windows Azure Rights Management
http://technet.microsoft.com/en-us/library/jj585031.aspx - Configuring Super Users for Azure Rights Management and Discovery Services or Data Recovery
https://technet.microsoft.com/en-us/library/mt147272.aspx
Manage administrator roles in Office 365
Permission model, create or revoke assignment of administrative roles or the administrative model, determine and assign global administrator, billing administrator and user administrator, delegated administrator, and control password resets
- Permissions in Office 365
https://support.office.com/en-us/article/Permissions-in-Office-365-da585eea-f576-4f55-a1e0-87090b6aaa9d - Assigning admin roles
http://office.microsoft.com/en-us/office365-suite-help/assigning-admin-roles-HA102816050.aspx - Permissions in Office 365
http://office.microsoft.com/en-us/help/permissions-in-office-365-HA104043996.aspx - Change your password in Office 365 for business
https://support.office.com/en-us/article/Change-your-password-in-Office-365-for-business-d1efbaee-63a7-4c08-ab1d-71bf932bbb5d
Manage Cloud Identities
Configure password management
Expiration policy, password complexity, password resets, and Administration Center
- Configure user passwords to never expire in Azure AD
https://msdn.microsoft.com/en-us/library/azure/hh967633.aspx - Password policy in Azure AD
https://msdn.microsoft.com/en-us/library/azure/jj943764.aspx - Change your password in Office 365 for business
https://support.office.com/en-us/article/Change-your-password-in-Office-365-for-business-d1efbaee-63a7-4c08-ab1d-71bf932bbb5d - Reset a user’s password
https://support.office.com/en-us/article/reset-a-users-password-7a5d073b-7fae-4aa5-8f96-9ecd041aba9c
Manage user and security groups
Bulk import, Windows Azure Active Directory Graph API, soft delete, Administration Center, and multi-factor authentication
- Add several users at the same time to Office 365 – Admin Help
https://support.office.com/en-ca/article/Add-several-users-at-the-same-time-to-Office-365—Admin-Help-1f5767ed-e717-4f24-969c-6ea9d412ca88 - Azure AD Graph API
https://msdn.microsoft.com/library/azure/hh974476.aspx - Delete or restore users
https://support.office.com/en-CA/article/delete-or-restore-users-d5155593-3bac-4d8d-9d8b-f4513a81479e - Users and passwords in Office 365 for business – Admin Help
https://support.office.com/en-ca/article/Users-and-passwords-in-Office-365-for-business-%e2%80%93-Admin-Help-e4df7dbc-a98c-4bb4-9fa7-ab28a9c56b8e - Set up multi-factor authentication for Office 365
https://support.office.com/en-CA/article/Set-up-multi-factor-authentication-for-Office-365-8f0454b2-f51a-4d9c-bcde-2c48e41621c6
Manage cloud identities with Microsoft PowerShell
Configure passwords to never expire, bulk update of user properties, bulk user creation, Windows Azure Active Directory cmdlets, bulk user license management, and hard delete users
- Manage Azure AD using Windows PowerShell
https://msdn.microsoft.com/en-us/library/azure/jj151815.aspx - Set up user passwords to never expire
http://office.microsoft.com/en-us/office365-suite-help/set-up-user-passwords-to-never-expire-HA102816049.aspx - Use PowerShell to Create Bulk Users for Office 365
http://blogs.technet.com/b/heyscriptingguy/archive/2014/08/04/use-powershell-to-create-bulk-users-for-office-365.aspx - Manage Email address using PowerShell – Office 365
http://o365info.com/manage-email-address-using-powershell/ - Office 365: Assign individual parts of licenses based on groups using PowerShell
http://365lab.net/2014/12/17/office-365-assign-individual-parts-of-licenses-based-on-groups-using-powershell/ - Office 365 Recycle bin (Soft and Hard Delete) – PowerShell commands
http://o365info.com/soft-delete-office-365-recycle-bin/
Implement and Manage Identities by Using DirSync
Please note that DirSync have been replaced by AADSync, that again have been replace by Azure AD Connect. This section will be updated to reflect this. Until then check this two page s
- https://azure.microsoft.com/en-us/documentation/articles/active-directory-aadconnect/
- https://msdn.microsoft.com/en-us/library/azure/dn790204.aspx
Prepare on-premises Active Directory for DirSync
Plan for non-routable domain names, clean up existing objects, plan for filtering Active Directory, and support for multiple forests
- Office 365 integration with on-premises environments
https://support.office.com/en-us/article/Office-365-integration-with-on-premises-environments-263faf8d-aa21-428b-aed3-2021837a4b65 - Understanding Office 365 identity and Azure Active Directory
https://support.office.com/en-us/article/Understanding-Office-365-identity-and-Azure-Active-Directory-06a189e7-5ec6-4af2-94bf-a22ea225a7a9 - Prepare to provision users through directory synchronization to Office 365
https://support.office.com/en-us/article/Prepare-to-provision-users-through-directory-synchronization-to-Office-365-01920974-9e6f-4331-a370-13aea4e82b3e - Multi-forest Directory Sync with Single Sign-On Scenario
https://msdn.microsoft.com/en-us/library/azure/dn510976.aspx
Set up DirSync [WAAD sync tool]
Soft match filtering and identify synchronized attributes, password sync, and installation requirements
- Configure filtering
https://msdn.microsoft.com/en-us/library/azure/dn801051.aspx - Attributes synchronized to Azure Active Directory
https://msdn.microsoft.com/en-us/library/azure/dn764938.aspx - Implement password synchronization with AAD Sync
https://msdn.microsoft.com/en-us/library/azure/dn835016.aspx - Install the Azure Active Directory Sync Service
https://msdn.microsoft.com/en-us/library/azure/dn757602.aspx
Manage Active Directory users and groups with DirSync in place.
Deleting, create, modify, and scheduled and forcing synchronization
- How To Run Manual DirSync / Azure Active Directory Sync Updates
http://blogs.technet.com/b/rmilne/archive/2014/10/01/how-to-run-manual-dirsync-_2f00_-azure-active-directory-sync-updates.aspx - Office 365 Identity Management with DirSync without Exchange Server On-Premises
http://blog.baeke.info/2012/06/24/office-365-identity-management-with-dirsync-without-exchange-server-on-premises/
Implement and Manage Federated Identities for Single Sign-On (SSO)
- Use third-party identity providers to implement single sign-on
http://technet.microsoft.com/en-us/library/jj679342.aspx - Directory Sync with Single Sign-On Scenario
http://technet.microsoft.com/en-us/library/dn441213.aspx
Plan requirements for Active Directory Federation Services (AD FS)
Namespaces and certificates, plan AD FS internal topologies and dependencies, plan AD FS proxy topologies, network requirements, multi-factor authentication, and access filtering using claims rules
- Checklist: Use AD FS to implement and manage single sign-on
http://technet.microsoft.com/en-us/library/jj205462.aspx - Overview: Manage Risk with Additional Multi-Factor Authentication for Sensitive Applications
http://technet.microsoft.com/en-us/library/dn280949.aspx - Using Multi-Factor Authentication with Active Directory Federation Services
http://technet.microsoft.com/en-us/library/dn394281.aspx - Understanding Key AD FS Concepts
http://technet.microsoft.com/en-us/library/ee913566.aspx
Install and manage AD FS servers
Create AD FS service account, configure farm or stand-alone settings, add additional servers, convert from standard to federated domain, and manage certificate lifecycle
- Directory Sync with Single Sign-On Scenario
http://technet.microsoft.com/en-us/library/dn441213.aspx - Active Directory Federation Services Overview
http://technet.microsoft.com/en-us/library/hh831502.aspx
Install and manage AD FS proxy servers
Set up perimeter network name resolution, install required Windows roles and features, set up certificates, configure AD FS proxy settings, and set custom proxy forms login page
- Directory Sync with Single Sign-On Scenario
http://technet.microsoft.com/en-us/library/dn441213.aspx - Active Directory Federation Services Overview
http://technet.microsoft.com/en-us/library/hh831502.aspx
Monitor and Troubleshoot Office 365 Availability and Usage
Analyze reports
Service reports, mail protection reports, auditing log, and portal email hygiene reports
- View and download reports about service usage in Office 365
http://office.microsoft.com/en-us/office365-suite-help/view-and-download-reports-about-service-usage-in-office-365-HA102819905.aspx
Monitor service health
RSS feed, service health dashboard (including awareness of planned maintenance, service updates, and historical data), Office 365 Management Pack for System Center Operations Manager, and Windows PowerShell cmdlets
- View the status of your services
http://office.microsoft.com/en-us/office365-suite-help/view-the-status-of-your-services-HA102817837.aspx - Monitor Office 365 with SCOM 2012 SP1
http://social.technet.microsoft.com/Forums/systemcenter/en-US/46443681-c0c4-41c9-99b8-df83ef7be3b8/monitor-office-365-with-scom-2012-sp1?forum=operationsmanagermgmtpacks
Isolate service interruption
Create a service request, Microsoft Remote Connectivity Analyzer (RCA), Microsoft Online Services Diagnostics and Logging (MOSDAL) support toolkit, Transport Reliability IP Probe (TRIPP), Microsoft Connectivity Analyzer tool, and hybrid free/busy troubleshooter
- Office 365 Platform Service Description – Support
http://technet.microsoft.com/en-us/library/office-365-support.aspx - Microsoft Remote Connectivity Analyser
https://testconnectivity.microsoft.com/ - The Microsoft Online Service Diagnostics and Logging (MOSDAL) Support Toolkit
http://support.microsoft.com/kb/960625/en - You experience poor audio or video quality in Lync Online
http://support.microsoft.com/kb/2386655/en - Microsoft Connectivity Analyzer Tool
http://technet.microsoft.com/en-us/library/jj851141(v=exchg.80).aspx - How to troubleshoot free/busy issues in a hybrid deployment of on-premises Exchange Server and Exchange Online in Office 365
http://support.microsoft.com/kb/2555008/en
Thanks , this links are Very useful !!!!!!
Anders – Thanks for putting this together. I’m finding it is too much to remember about each and ever feature offered by Azure, O365, SP, etc. Do you really recommended read each page word by word? Could you suggest any strategy to pass this exam?
Hi,
You should read/try as much as possible, and especially if it’s a topic that you don’t know that well.
Just reading word by word might trick you of also, as the service might change faster than the documentation, and we don’t know when the exam was updated.
My strategy is always to read and try the service, and as a read I write don’t my own test questions that I repeat a few times til they stick 🙂
/Anders
Do you have any new info on Azure AD Connect?
It’s a new addition to the 70-346 exam, which replaces AAD Sync/DirSync.
Hi Anders,
I believe the link for “You can not change the country associated with your tenant” should be updated to http://blog.hametbenoit.info/Lists/Posts/Post.aspx?ID=506
BTW: Does your guides include the latest updates to office 365 ?
Thanks for the tip Loghin. Link updated.
Sorry, but the content haven’t been updated yet.
You are welcome. I am planning to take the 70-346 in the following weeks and i have a hard time getting proper documentation for it.
Do you have perhaps some tips for correct resources for the exam besides the one above?
I believe that a quick Bing/Google about a specific topic would be safest 🙂
The following document describes the changes that have been made to the exam http://download.microsoft.com/download/B/7/0/B7012C5B-5153-4CC9-8651-BC8FA1B15FCC/OD_70-346_changes.pdf
Hi,
A newbie to Sharepoint, looking to get certified. I can easily find good reading sources for the exam (including this extensive page). However, I learn better by experimenting and am completely lost as to how I can work on a Office 365 installation myself. The service requires a business email to signup, which I don’t have.
So then am I stuck just reading and memorizing? Your insight will be much appreciated
Thanks!
Hi Harry,
When reading for these lists, I created 30 day trials, where I got practical experience. Also, in stead of reading, maybe watching Microsoft Virtual Academy videos, and replicate what they do in your trial tenant?
/Anders
Thanks for putting this together Anders! I used this as a basis for reading up on sitting this exam and please to say I passed it today. I used CBT Nuggets and watched the MVA videos. It was ALOT harder than I was expecting so for those preparing make sure you know your AADConnect and ADFS inside and out. Onto 70-347!
Any chance of modifying your blog to reflect recent changes of the 4th measured skill, Azure AD Connect that replaced AAD Sync & DirSync?