Lab Answer Key: Module 2: Managing Users, Groups, and

Licenses

Lab: Managing Users, Groups, and Licenses

Exercise 1: Manage Users and Licenses by Using the Administration

Center

Task 1: Creating Office 365 Users

1. On your host computer, ensure you are logged into the 20346A-LUC-CL1 virtual
machine as Student1 with a password of Pa$$word.

2. On LUC-CL1, open Internet Explorer and browse to https://login.microsoftonline.com/

3. Sign in as hleitner@lucernepublishingXXX.onmicrosoft.com (where XXX is your

unique Lucerne Publishing number) with a password of Pa$$w0rd.

4. In the Office 365 admin center, click Admin, then click Office 365.

5. On the left-hand side, click users and groups.

6. Click the + (Add) symbol.

7. On the details page, in the First name box, type Robert.

8. In the Last name box, type Schmid.

9. In the Display name box, accept the default name.

10. In the User name box, type rschmid.

11. Verify that LucernepublishingXXX.onmicrosoft.com is listed in the text box after the
@ sign (where XXX is your unique Lucerne Publishing number).

12. Click Next.

13. On the settings page, in the Set user location box, select Switzerland.
14. Click Next.

15. On the assign licenses page, assign the user a license for the Microsoft Office 365 Plan
E3 by clicking Next.

16. On the send results in email page, click create.

17. On the results page, note the temporary password here

18. Click Create another user.

19. Repeat steps 7 to 18 to create the following users: (using the first letter of first name and
all of surname as the user names, e.g. wdouglas.)

o William Douglas

o Justin Muller

o Rick Torres

o Mario Ledford

20. Note their temporary passwords here:

o William ..

o Justin ..

o Rick .

o Mario .

21. When you have completed the last user account, on the results page, click finish.

22. In the active users list, select the checkboxes for Mario Ledford and Rick Torres.

23. On the right-hand side, click the (Edit) symbol.

24. On the details page, in the Department box, type Accounts.

25. Click next.

26. On the settings page, in the Set sign-in status section, select Blocked.

27. Click next.

28. On the assign license page, click Submit.

29. On the results page, click finish.

30. In the active users list, under DISPLAY NAME, click Mario Ledford.

31. On the left-hand side, click details.

32. Click additional details.

33. Verify that the Department box specifies Accounts.

34. On the left-hand side, click settings.

35. Verify that Set sign-in status is set to Blocked.

36. Click cancel.

37. In the active users list, under DISPLAY NAME, click Rick Torres.

38. Repeat steps 31 to 36 to verify that this user has the same settings defined.

39. In the active users list, select the checkbox for Robert Schmid.

40. On the right-hand side, click the (Delete) symbol.

41. In the warning dialog box, click Yes.

42. Click close.

43. In users and groups click deleted users.

44. Verify that Robert Schmid is in this list.

45. In the deleted users list, select the checkbox for Robert Schmid.

46. On the right-hand side, click Restore users.

47. Click close.

48. Click active users.

49. Verify that Robert Schmid is in this list.

50. Click Heidi Leitner, then click Sign out.

51. Close Internet Explorer.

Task 2: Verifying the Office 365 User Accounts

1. On LUC-CL1, open Internet Explorer and browse to https://login.microsoftonline.com/

2. Sign in as rschmid@lucernepublishingXXX.onmicrosoft.com (where XXX is your

unique Lucerne Publishing number), with the temporary password noted in the previous
task.

3. On the Update password page, in the Old password box, type Roberts temporary
password, in the New password and Confirm new password boxes, type Pa$$w0rd.

4. Click save.

5. If prompted, re-enter your new password, and click Sign in.

6. Verify that you can access the Get started with Office 365 page.

7. Click Robert Schmid, and then click Sign out.

8. Open Internet Explorer and browse to https://login.microsoftonline.com/

9. Sign in as rtorres@lucernepublishingXXX.onmicrosoft.com (where XXX is your

unique Lucerne Publishing number), with the temporary password noted in the previous
task.

10. Verify that you cannot log in and the message states that your account has been blocked.

11. Close Internet Explorer.

12. Open Internet Explorer and browse to https://login.microsoftonline.com/

13. Sign in as hleitner@lucernepublishingXXX.onmicrosoft.com (where XXX is your

unique Lucerne Publishing number), with a password of Pa$$w0rd

14. In the Office 365 admin center, click Admin, then click Office 365.

15. On the left-hand side, click users and groups.

16. In the active users list, select the checkboxes for Mario Ledford and Rick Torres.
17. On the right-hand side, click the (Edit) symbol.

18. On the details page, click next.

19. On the settings page, in the Set sign-in status section, select Allowed.

20. Click next.

21. On the licenses page, click Submit.

22. On the results page, click finish.

23. Click Heidi Leitner, then click Sign out.

24. Open Internet Explorer and browse to https://login.microsoftonline.com/

25. Sign in as rtorres@lucernepublishingXXX.onmicrosoft.com (where XXX is your

unique Lucerne Publishing number), with the temporary password noted in the previous
task.

26. On the Update password page, in the Old password box, type Ricks temporary
password, in the New password and Confirm new password boxes, type Pa$$w0rd.

27. Click save.

28. If prompted, re-enter your new password, and click Sign in.

29. Verify that you can access the Get started with Office 365 page.

30. Click Rick Torres, and then click Sign out.

Results: User accounts and licenses are created and managed according to business needs.

Exercise 2: Manage Security and Distribution Groups

Task 1: Creating Security and Distribution Groups

1. Open Internet Explorer and browse to https://login.microsoftonline.com/

2. Sign in as hleitner@lucernepublishingXXX.onmicrosoft.com (where XXX is your
unique Lucerne Publishing number), with a password of Pa$$w0rd

3. In the Office 365 admin center, click Admin, and then click Office 365.

4. On the left-hand side, click users and groups.

5. In users and groups click security groups.

6. Click the + (Add) symbol.

7. On the details page, in the Display name box, type Sales.

8. In the Description box, type Sales department users.

9. Under the Members section, click the + (Add) symbol.

10. In the Group Member Picker window, press the Ctrl key, select Robert Schmid and
William Douglas, and then click add.

11. Click ok.

12. Ensure these two users are now listed under the DISPLAY NAME list, and click save.

13. Click the + (Add) symbol.

14. On the details page, in the Display name box, type Accounts.

15. In the Description box, type Accounts department users.

16. Under the Members section, click the + (Add) symbol.

17. In the Group Member Picker window, press the Ctrl key, select Mario Ledford and
Rick Torres, and then click add.

18. Click ok.

19. Ensure these two users are now listed under the DISPLAY NAME list, and click save.

20. In the Office 365 admin center, click Admin, and then click Exchange.

21. On the left-hand side, click recipients.

22. In recipients click groups.

23. Click the + (Add) symbol.

24. In the drop-down list, click Distribution group.

25. In the Distribution Group window, in the Display name box, type Sales Distribution.

26. In the Alias box, type salesdist.

27. In the Email address box, accept the default address.

28. In the Description box, type Distribution group for sales department.

29. Under Members, uncheck the Add group owners as members checkbox.

30. Click the + (Add) symbol.

31. In the Select Members window, select Robert Schmid and click add.

32. In the Select Members window, select William Douglas and click add.

33. Click ok.

34. In the Distribution Group window, click save.

35. Click the + (Add) symbol.

36. In the drop-down list, click Distribution group.

37. In the Distribution Group window, in the Display name box, type Accounts
Distribution.

38. In the Alias box, type accountsdist.

39. In the Email address box, accept the default address.

40. In the Description box, type Distribution group for accounts department.

41. Under Members, uncheck the Add group owners as members checkbox.

42. Click the + (Add) symbol.

43. In the Select Members window, select Rick Torres and click add.

44. In the Select Members window, select Mario Ledford and click add.

45. Click ok.

46. In the Distribution Group window, click save.

47. In the Exchange admin center console, click groups, then click the + (Add) symbol.

48. In the drop-down list, click Security group.

49. In the Security Group window, in the Display name box, type Sales Security.

50. In the Alias box, type salessec.

51. In the Email address box, accept the default address.

52. In the Description box, type Exchange security group for sales.

53. Under Members, uncheck the Add group owners as members checkbox.

54. Click the + (Add) symbol.

55. In the Select Members window, select Robert Schmid and click add.

56. In the Select Members window, select William Douglas and click add.

57. Click ok.

58. In the Security Group window, click save.

59. Click the + (Add) symbol.

60. In the drop-down list, click Dynamic distribution group.

61. In the Dynamic Distribution Group window, in the Display name box, type Accounts
Dynamic.

62. In the Alias box, type acctsdynamic.

63. In the Description box, type Dynamic distribution group for accounts.

64. Under Owner, click browse.

65. In the Select Owner window, click Heidi Leitner and click ok.

66. Under Members, click Only the following recipient types.

67. Select the Users with Exchange mailboxes checkbox.

68. Click add a rule.

69. In the drop-down list select Department.

70. In the specify words or phrases dialog box, type Accounts.

71. Click the + (Add) symbol.

72. Click ok.

73. In the Dynamic Distribution Group window, click save.

74. Verify that the following groups now exist in the groups list:

o Sales Distribution

o Accounts Distribution

o Sales Security

75. Accounts Dynamic

Task 2: Managing Security Groups

1. In the Exchange admin center, click Admin, and then click Office 365.

2. On the left-hand side, click users and groups.

3. In users and groups click security groups.

4. Verify that you can see the following groups:

o Sales Distribution

o Accounts Distribution

o Sales Security

5. Verify that you cannot see the Accounts Dynamic group.

6. In the security groups list, deselect the checkbox for Accounts, and select the checkbox
for the Accounts Distribution group.

7. Above the security groups list, click the (Edit) symbol.

8. Note the message stating that system security groups, distribution groups, and mail-
enabled security groups cannot be edited.

9. Click cancel.

10. In the security groups list, select the checkbox for the Sales group.

11. Above the security groups list, click the (Edit) symbol.

12. Note that you can edit the properties of this Office 365 security group.

13. Under the Members section, click the + (Add) symbol.

14. In the Group Member Picker window, select Justin Muller, click add, and then click
ok.

15. Ensure that Justin Muller is now listed under the DISPLAY NAME list, and click save.

16. In the security groups list, select the checkbox for the Sales Security group.

17. On the right-hand side, click the (Delete) symbol.

18. In the warning box click yes.

Results: You have created a group structure based on the security need within Lucerne
Publishing.

Exercise 3: Manage Cloud Identities with Microsoft PowerShell

Task 1: Managing Users, Groups, and Licenses with Windows PowerShell

1. On the desktop, right-click the Windows Azure Active Directory Module for
Windows PowerShell shortcut and click Run as administrator.

2. If a User Account Control dialog box appears, click Yes.

3. At the prompt type the following command and press Enter.

Connect-msolservice
4. In the Enter Credentials dialog box log in as
hleitner@lucernepublishingXXX.onmicrosoft.com (where XXX is your unique
Lucerne Publishing number), with a password of Pa$$w0rd.

5. At the prompt, type the following command and press Enter (where XXX is your unique
Lucerne Publishing number).

New-MsolUser UserPrincipalName
elabrecque@LucernePublishingXXX.onmicrosoft.com
DisplayName Elisabeth Labrecque FirstName Elisabeth
LastName Labrecque
Password Pa$$w0rd ForceChangePassword $false
UsageLocation CH

6. At the prompt type the following command and press Enter (where XXX is your unique
Lucerne Publishing number).

7. New-MsolUser UserPrincipalName lmartin@LucernePublishingXXX.onmicrosoft.com

DisplayName Liane Martin FirstName Liane LastName Martin Password
Pa$$w0rd ForceChangePassword $false UsageLocation CH

8. To create a Marketing group, at the prompt type the following command and press Enter.

New-MsolGroup DisplayName Marketing Description

Marketing department users

9. To configure a variable for the group, at the prompt type the following command and
press Enter.

$MktGrp = Get-MsolGroup | Where-Object {$_.DisplayName -eq

"Marketing"}
10. To configure a variable for the first user account, at the prompt type the following
command and press Enter.

$ELabrecque = Get-MsolUser | Where-Object {$_.DisplayName -eq

"Elisabeth Labrecque"}

11. To configure a variable for the second user account, at the prompt type the following
command and press Enter.

$LMartin = Get-MsolUser | Where-Object {$_.DisplayName -eq

"Liane Martin"}

12. To add Elisabeth Labrecque to the Marketing group, at the prompt type the following
command and press Enter.

Add-MsolGroupMember -GroupObjectId $MktGrp.ObjectId

-GroupMemberType "User" -
GroupMemberObjectId $ELabrecque.ObjectId

13. To add Liane Martin to the Marketing group, at the prompt type the following command
and press Enter.

Add-MsolGroupMember -GroupObjectId $MktGrp.ObjectId

-GroupMemberType "User" -
GroupMemberObjectId $LMartin.ObjectId

14. To verify the members of the Marketing group, at the prompt type the following
command and press Enter.

Get-MsolGroupMember -GroupObjectId $MktGrp.ObjectId

15. To determine which users are unlicensed, at the prompt type the following command and
press Enter.

Get-MsolUser -UnlicensedUsersOnly

16. To license Elizabeth Labrecque, at the prompt type the following command and press
Enter (where XXX is your unique Lucerne Publishing number).

Set-MsolUserLicense -UserPrincipalName
elabrecque@LucernePublishingXXX.onmicrosoft.com AddLicenses
LucernePublishingXXX:ENTERPRISEPACK

17. To license Liane Martin, at the prompt type the following command and press Enter
(where XXX is your unique Lucerne Publishing number).

Set-MsolUserLicense -UserPrincipalName
lmartin@LucernePublishingXXX.onmicrosoft.com
AddLicenses LucernePublishingXXX:ENTERPRISEPACK

18. To prevent a user from signing in, at the prompt type the following command and press
Enter (where XXX is your unique Lucerne Publishing number).

Set-MsolUser -UserPrincipalName
elabrecque@LucernePublishingXXX.onmicrosoft.com -
blockcredential $true

19. To delete a user, at the prompt type the following command and press Enter (where
XXX is your unique Lucerne Publishing number).

Remove-MsolUser UserPrincipalName
elabrecque@lucernepublishingXXX.onmicrosoft.com
Force
20. To view the deleted users list, at the prompt type the following command and press
Enter.

Get-MsolUser ReturnDeletedUsers

21. Verify that Elisabeth Labrecque in included in the deleted users list. Note that it specifies
that she is still licensed.

22. To restore a deleted user, at the prompt type the following command and press Enter
(where XXX is your unique Lucerne Publishing number).

Restore-MsolUser UserPrincipalName
elabrecque@lucernepublishingXXX.onmicrosoft.com

23. To view the deleted users list, at the prompt type the following command and press
Enter.

Get-MsolUser ReturnDeletedUsers

24. Verify that Elisabeth Labrecque is no longer in the deleted users list.

25. To view the active users list, at the prompt type the following command and press Enter.

Get-MsolUser

26. Verify that Elisabeth Labrecque is included in the active users list.

27. To allow a user to sign in, at the prompt type the following command and press Enter
(where XXX is your unique Lucerne Publishing number).
 Set-MsolUser -UserPrincipalName
elabrecque@LucernePublishingXXX.onmicrosoft.com -
blockcredential $false

Task 2: Bulk Provision Users with Windows PowerShell

1. In LUC-CL1, on the Task bar, click File Explorer.

2. Navigate to E:\labfiles\Lab02.

3. Right-click O365users.csv, point to Open with, and click Notepad.

4. Click Edit, and then click Replace.

5. In Find what, enter XXX.

6. In Replace with, enter your unique three digit number from your Office 365 domain.

7. Click Replace All.

8. Click Cancel.

9. Check that the XXX entries have been replaced with your unique Lucerne Publishing
number.

10. Close O365Users.csv and in the Notepad message box, click Save.

11. To bulk import several users from a CSV file, cut and paste this code into the prompt and
press Enter.

Import-Csv -Path e:\labfiles\lab02\O365Users.csv | ForEach-

Object { New-MsolUser -
UserPrincipalName $_."UPN" -AlternateEmailAddresses
$_."AltEmail" -FirstName
$_."FirstName" -LastName $_."Lastname" -DisplayName
$_."DisplayName" -BlockCredential
$False -ForceChangePassword $False -LicenseAssignment
$_."LicenseAssignment" -
 Password $_."Password" -PasswordNeverExpires $True -Title
$_."Title" -Department
$_."Department" -Office $_."Office" -PhoneNumber
$_."PhoneNumber" -MobilePhone
$_."MobilePhone" -Fax $_."Fax" -StreetAddress
$_."StreetAddress" -City $_."City" -
State $_."State" -PostalCode $_."PostalCode" -Country
$_."Country" -UsageLocation
$_."UsageLocation" }

12. To view the active users list, at the prompt type the following command and press Enter.

Get-MsolUser

13. Switch back to Internet Explorer and click Admin, then click Office 365.

14. On the left column, click users and groups.

15. Review the active users that you have just imported.

16. Click Admin and then click Exchange.

17. Under recipients, review the mailboxes and associated email addresses that have been
created.

Results: Heidi can use PowerShell to manage Lucerne Publishing user and group accounts
in Office 365 by using PowerShell.