+<!-- ## Watch: NPS feedback and insights

+-->

+#### All Documents

+#### Restricted Documents

+The Service Trust Portal has documents that, given the nature of their content, are available for users with specific permissions. Users with Tenant Admin, Compliance Viewer role or the user set in database are able to see the restricted documents.

+#### Search

+ Title: "Advanced deployment guides for Microsoft 365 and Office 365 services"

+description: "Get step-by-step tools to plan, migrate, and implement the features in your tenant's licenses. Find a guide to set up a service or an app you need to run."

+# Advanced deployment guides for Microsoft 365 and Office 365 services

+Microsoft 365 and Office 365 advanced deployment guides give you tailored guidance and resources for planning and deploying your tenant, apps, and services. These guides are created using the same best practices that [Microsoft 365 FastTrack](https://www.microsoft.com/fasttrack/microsoft-365) onboarding specialists share in individual interactions. They provide information on product setup, enabling security features, deploying collaboration tools, and provide scripts to speed up advanced deployments.

+All advanced deployment guides are available in the Microsoft 365 admin center as described in the section below, and most guides can also be found in the [Microsoft 365 Setup portal](https://aka.ms/setupguides).

+Access to advanced deployment guides in the admin center requires authentication to a Microsoft 365 tenant as an administrator or other role with access to the admin center. Advanced deployment guides in the Microsoft 365 Setup portal can be accessed by anyone. We have provided links to both locations for each guide, where available, in the tables below.

+Note that guides are still being added to the setup portal, but there are a few guides that will only be available in the admin center because they require authentication to a tenant to function.

+In this article:

+- [How to access advanced deployment guides in the Microsoft 365 admin center](#how-to-access-advanced-deployment-guides-in-the-microsoft-365-admin-center)

+- [Guides for initial setup](#guides-for-initial-setup)

+- [Guides for authentication and access](#guides-for-authentication-and-access)

+- [Guides for security and compliance](#guides-for-security-and-compliance)

+- [Guides for collaboration](#guides-for-collaboration)

+- [Advanced guides](#advanced-guides)

+## How to access advanced deployment guides in the Microsoft 365 admin center

+Advanced deployment guides are accessible from the [Advanced deployment guides & assistance](https://aka.ms/advanceddeploymentguides) page in the Microsoft 365 admin center. When you access advanced deployment guides from the admin center, you can keep track of the status of your progress and return at any time to complete a guide. This functionality is not available when you access guides from the [Microsoft 365 Setup portal](https://aka.ms/setupguides).

+> [!NOTE]

+> You must be assigned an admin role such as _Global Reader_ to access advanced deployment guides in the Microsoft 365 admin center. Only admins with the _Global Administrator_ role can use the guides to change settings in the tenant.

+> [!IMPORTANT]

+> Any selections, task assignments, and progress status saved **before January 10, 2023** within each advanced deployment guide in the admin center has been reset due to EU data regulations.

+To reach the **Advanced deployment guides & assistance** page:

+1. In the [Microsoft 365 admin center](https://aka.ms/advanceddeploymentguides), go to the **Home** page.

+2. Find the _Training, guides & assistance_ card and click **Advanced deployment guides & assistance**.

+ :::image type="content" alt-text="This screenshot shows the training & guides card in the Microsoft 365 admin center." source="../media/setup-guides-for-microsoft-365/thumbnail_ADG-TrainingCard.png":::

+## Guides for initial setup

+Advanced deployment guides in the admin center require authentication to a Microsoft 365 tenant as an administrator or other role with access to the admin center, but guides in the Microsoft 365 Setup portal can be accessed by anyone.

+|**Guide - [Setup Portal](https://aka.ms/setupguides)** |**Guide - [Admin Center](https://aka.ms/advanceddeploymentguides)** |**Description** |

+||||

+|[Prepare your environment guide](https://go.microsoft.com/fwlink/?linkid=2223234)|[Prepare your environment guide](https://aka.ms/prepareyourenvironment)|The **Prepare your environment guide** helps you prepare your organization's environment for Microsoft 365 and Office 365 services. Whatever your goals are, there are tasks you'll need to complete to ensure a successful deployment. To avoid any errors while preparing your environment, you're provided with step-by-step instructions to connect your domain, add users, assign licenses, set up email with Exchange Online, and install or deploy Office apps.|

+|[Email setup guide](https://go.microsoft.com/fwlink/?linkid=2223145)|[Email setup guide](https://aka.ms/office365setup)|The **Email setup guide** provides you with the step-by-step guidance needed for configuring Exchange Online for your organization. This guidance includes setting up new email accounts, migrating email, and configuring email protection. For a successful email setup, use this advisor and you'll receive the recommended migration method based on your organization's current mail system, the number of mailboxes being migrated, and how you want to manage users and their access.|

+|[Gmail contacts and calendar advisor](https://go.microsoft.com/fwlink/?linkid=2222987)|[Gmail contacts and calendar advisor](https://aka.ms/gmailcontactscalendar)|When you migrate a Gmail user's mailbox to Microsoft 365, email messages are migrated, but contacts and calendar items are not. The **Gmail contacts and calendar advisor** provides steps for importing Google contacts and Google calendar items to Microsoft 365 using import and export methods with Outlook.com, the Outlook client, or PowerShell.|

+||[Microsoft 365 setup guide](https://aka.ms/microsoft365setupguide)|The **Microsoft 365 setup guide** provides you with guidance when setting up productivity tools, security policies, and device management capabilities. With a Microsoft 365 Business Premium or Microsoft 365 for enterprise subscription, you can use this advisor to set up and configure your organization's devices.<br>You'll receive guidance and access to resources to enable your cloud services, update devices to the latest supported version of Windows 10, and join devices to Azure Active Directory (Azure AD), all in one central location.|

+||[Remote work setup guide](https://aka.ms/remoteworksetup)|The **Remote work setup guide** provides organizations with the tips and resources needed to ensure your users can successfully work remotely, your data is secure, and users' credentials are safeguarded.<br>You'll receive guidance to optimize remote workers' device traffic to both Microsoft 365 resources in the cloud and your organization's network, which will reduce the strain on your remote access VPN infrastructure.|

+|[Windows 11 setup guide](https://go.microsoft.com/fwlink/?linkid=2223054)|[Security analyzer](https://aka.ms/windows11setupguide)|The **Windows 11 setup guide** helps customers find the best way to deploy or upgrade devices to Windows 11 and configure them for cloud management. The Windows 11 setup guide includes information on servicing strategy, automatic enrollment, Windows Autopilot, Configuration Manager integration, and more.|

+|[Microsoft Edge setup guide](https://go.microsoft.com/fwlink/?linkid=2223317)|[Microsoft Edge setup guide](https://aka.ms/edgeadvisoradmin)|Microsoft Edge has been rebuilt from the ground up to bring you world-class compatibility and performance, the security and privacy you deserve, and new features designed to bring you the best of the web.<br>The **Microsoft Edge setup guide** will help you configure Enterprise Site Discovery to see which sites accessed in your org might need to use IE mode, review and configure important security features, configure privacy policies and compliance policies to meet your org's requirements, and manage web access on your devices. You can download Microsoft Edge to individual devices, or we'll show you how to deploy to multiple users in your org with Group Policy, Configuration Manager, or Microsoft Intune.|

+|[Configure IE mode for Microsoft Edge guide](https://go.microsoft.com/fwlink/?linkid=2223137)|[Configure IE mode for Microsoft Edge guide](https://aka.ms/configureiemodeadmin)|If you've already deployed Microsoft Edge and only want to configure IE mode, the **Configure IE mode for Microsoft Edge guide** will give you scripts to automate the configuration of Enterprise Site Discovery. You'll also get IE mode recommendations from a cloud-based tool that will help you create an Enterprise Mode Site List to deploy to your users.|

+||[Microsoft Search setup guide](https://aka.ms/MicrosoftSearchSetup)|Microsoft Search helps your organization find what they need to complete what they're working on. Whether it's searching for people, files, org charts, sites, or answers to common questions, your org can use Microsoft Search throughout their workday to get answers.<br>The **Microsoft Search setup guide** helps you configure Microsoft Search whether you want to pilot it to a group of users or roll it out to everyone in your org. You'll assign Search admins and Search editors and then customize the search experience for your users with answers and more options, like adding the Bing extension to Chrome or setting Bing as your default search engine.|

+||[Block use of Internet Explorer in your organization guide](https://aka.ms/retireinternetexplorer)|Microsoft support for Internet Explorer 11 is ending soon for most versions of Windows 10. The **Block use of Internet Explorer in your organization guide** ensures that your users can still run legacy web apps that rely on Internet Explorer. This guide also helps you move those users to Microsoft Edge with IE mode.|

+|**Guide - [Setup Portal](https://aka.ms/setupguides)** |**Guide - [Admin Center](https://aka.ms/advanceddeploymentguides)** |**Description** |

+||||

+||[Configure multi-factor authentication (MFA) guide](https://aka.ms/MFASetupGuide)|The **Configure multi-factor authentication (MFA) guide** provides information to secure your organization against breaches due to lost or stolen credentials. MFA immediately increases account security by prompting for multiple forms of verification to prove a user's identity when they sign in to an app or other company resource. This prompt could be to enter a code on the user's mobile device or to provide a fingerprint scan. MFA is enabled through Conditional Access, security defaults, or per-user MFA. This guide will provide the recommended MFA option for your org, based on your licenses and existing configuration.|

+||[Identity security for Teams guide](https://aka.ms/teamsidentity)|The **Identity security for Teams guide** helps you with some basic security steps you can take to ensure your users are safe and have the most productive time using Teams.|

+|[Add or sync users to Microsoft 365 guide](https://go.microsoft.com/fwlink/?linkid=2223230)|[Add or sync users to Microsoft 365 guide](https://aka.ms/directorysyncsetup)|The **Add or sync users to Microsoft 365 guide** will help streamline the process of getting your user accounts set up in Microsoft 365. Based on your environment and needs, you can choose to add users individually, migrate your on-premises directory with Azure AD cloud sync or Azure AD Connect, or troubleshoot existing sync problems when necessary.|

+|[Azure AD setup guide](https://go.microsoft.com/fwlink/?linkid=2223229)|[Azure AD setup guide](https://aka.ms/aadpguidance)|The **Azure AD setup guide** provides information to ensure your organization has a strong security foundation. In this guide you'll set up initial features, like Azure Role-based access control (Azure RBAC) for admins, Azure AD Connect for your on-premises directory, and Azure AD Connect Health, so you can monitor your hybrid identity's health during automated syncs.<br>It also includes essential information on enabling self-service password resets, conditional access and integrated third party sign-on including optional advanced identity protection and user provisioning automation.|

+|[Sync users from your Windows Server Active Directory guide](https://go.microsoft.com/fwlink/?linkid=2223230)|[Sync users from your Windows Server Active Directory guide](https://aka.ms/directorysyncsetup)|The **Sync users from your Windows Server Active Directory guide** walks you through turning on directory synchronization. Directory synchronization brings your on-premises and cloud identities together for easier access and simplified management. Unlock new capabilities, like single sign-on, self-service options, automatic account provisioning, conditional access controls, and compliance policies. These capabilities ensure your users have access to the resources they need from anywhere.|

+||[Plan your passwordless deployment guide](https://aka.ms/passwordlesssetup)|Use the **Plan your passwordless deployment guide** to discover the best passwordless authentication methods to use and receive guidance on how to upgrade to an alternative sign-in approach that allows users to access their devices securely with one of the following passwordless authentication methods:<ul><li>Windows Hello for Business</li><li>The Microsoft Authenticator app</li><li>Security keys</li></ul>|

+||[Integrate a third-party cloud app with Azure AD guide](https://aka.ms/AzureAppSetup)|The **Integrate a third-party cloud app with Azure AD guide** helps IT admins select and configure the app.|

+|[Plan your self-service password reset (SSPR) deployment guide](https://go.microsoft.com/fwlink/?linkid=2223231)|[Plan your self-service password reset (SSPR) deployment guide](https://aka.ms/SSPRSetupGuide)|Give users the ability to change or reset their password independently, if their account is locked, or they forget their password without the need to contact a helpdesk engineer.<br>Use the **Plan your self-service password reset (SSPR) deployment guide** to receive relevant articles and instructions for configuring the appropriate Azure portal options to help you deploy SSPR in your environment.|

+|**Guide - [Setup Portal](https://aka.ms/setupguides)** |**Guide - [Admin Center](https://aka.ms/advanceddeploymentguides)** |**Description** |

+||||

+|[Security analyzer](https://go.microsoft.com/fwlink/?linkid=2223325)|[Security analyzer](https://aka.ms/securityanalyzer)|The **Security analyzer** will analyze your security approach and introduce you to Microsoft integrated security and compliance solutions that can improve your security posture. You'll learn about advanced features, such as managing identities and helping to protect against modern attacks. You can then sign up for a trial subscription and be pointed to the corresponding setup guidance for each solution.|

+|[Set up your Microsoft Zero Trust security model](https://go.microsoft.com/fwlink/?linkid=2222968)|[Set up your Microsoft Zero Trust security model](https://aka.ms/zerotrustsetup )|Use the **Set up your Zero Trust security model guide** to configure security that effectively adapts to the complexity of the modern environment, embraces the hybrid workplace, and helps protect people, devices, apps, and data wherever they're located. Key recommendations include: always authenticate, limit user access, minimize the blast radius, segment access, verify end-to-end encryption, and use analytics to get visibility, drive threat detection, and improve defenses.|

+|[Microsoft Intune setup guide](https://go.microsoft.com/fwlink/?linkid=2223058)|[Microsoft Intune setup guide](https://aka.ms/intunesetupguide)|Set up Microsoft Intune to manage devices in your organization. For full control of corporate devices, you'll use Intune's mobile device management (MDM) features. To manage your organization's data on shared and personal devices, you can use Intune's mobile application management (MAM) features.<br>With the **Microsoft Intune setup guide**, you'll set up device and app compliance policies, assign app protection policies, and monitor the device and app protection status.|

+|[Microsoft Defender for Endpoint setup guide](https://go.microsoft.com/fwlink/?linkid=2223155)|[Microsoft Defender for Endpoint setup guide](https://aka.ms/mdatpsetup)|The **Microsoft Defender for Endpoint setup guide** provides instructions that will help your enterprise network prevent, detect, investigate, and respond to advanced threats. Make an informed assessment of your organization's vulnerability and decide which deployment package and configuration methods are best.<br>**NOTE:** A Microsoft Volume License is required for Microsoft Defender for Endpoint.|

+||[Exchange Online Protection setup guide](https://aka.ms/EOPguidance)|Microsoft Exchange Online Protection (EOP) is a cloud-based email filtering service for protection against spam and malware, with features to safeguard your organization from messaging policy violations.<br>Use the **Exchange Online Protection setup guide** to set up EOP by selecting which of the three deployment scenarios&mdash;on-premises mailboxes, hybrid (mix of on-premises and cloud) mailboxes, or all cloud mailboxes&mdash;fits your organization. The guide provides information and resources to set up and review your user's licensing, assign permissions in the Microsoft 365 admin center, and configure your organization's anti-malware and spam policies in the Security & Compliance Center.|

+|[Microsoft Defender for Office 365 setup guide](https://go.microsoft.com/fwlink/?linkid=2222971)|[Microsoft Defender for Office 365 setup guide](https://aka.ms/oatpsetup)|The **Microsoft Defender for Office 365 setup guide** safeguards your organization against malicious threats that your environment might come across through email messages, links, and third party collaboration tools. This guide provides you with the resources and information to help you prepare and identify the Defender for Office 365 plan to fit your organization's needs.|

+|[Microsoft Defender for Identity setup guide](https://go.microsoft.com/fwlink/?linkid=2222970)|[Microsoft Defender for Identity setup guide](https://aka.ms/DefenderforIdentitysetup)|The **Microsoft Defender for Identity setup guide** provides security solution set-up guidance to identify, detect, and investigate advanced threats that might compromise user identities. These include detecting suspicious user activities and malicious insider actions directed at your organization. You'll create a Defender for Identity instance, connect to your organization's Active Directory, and then set up sensors, alerts, notifications, and configure your unique portal preferences.|

+|[Insider risk solutions setup guide](https://go.microsoft.com/fwlink/?linkid=2223415)|[Insider risk solutions setup guide](https://aka.ms/Insiderrisksetup)|The **Insider risk solutions setup guide** helps you protect your organization against insider risks that can be challenging to identify and difficult to mitigate. Insider risks occur in a variety of areas and can cause major problems for organizations, ranging from the loss of intellectual property to workplace harassment, and more.<br>The solutions in this guide will help you gain visibility into user activities, actions, and communications with native signals and enrichments from across your organization:<ul><li>With the communication compliance solution, you can identify and act on communication risks for items like workplace violence, insider trading, harassment, code of conduct, and regulatory compliance violations.</li><li>The insider risk management solution helps you identify, investigate, and take action on risks for intellectual property theft, sensitive data leaks, security violations, data spillage, and confidentiality violations.</li></ul>|

+|[Microsoft Purview Information Protection setup guide](https://go.microsoft.com/fwlink/?linkid=2222967)|[Microsoft Purview Information Protection setup guide](https://aka.ms/microsoftpurviewinformationprotectionsetupguide)|Get an overview of the capabilities you can apply to your information protection strategy so you can be confident your sensitive information is protected. Use a four-stage lifecycle approach in which you discover, classify, protect, and monitor sensitive information. The **Microsoft Purview Information Protection setup guide** provides guidance for completing each of these stages.|

+|[Microsoft Purview Data Lifecycle Management setup guide](https://go.microsoft.com/fwlink/?linkid=2223154)|[Microsoft Purview Data Lifecycle Management setup guide](https://aka.ms/migsetupguide)|The **Microsoft Purview Data Lifecycle Management setup guide** provides you with the information you'll need to set up and manage your organization's governance strategy, to ensure that your data is classified and managed according to the specific lifecycle guidelines you set. With this guide, you'll learn how to create, auto-apply, or publish retention labels, retention label policies, and retention policies that are applied to your organization's content and compliance records. You'll also get information on importing CSV files with a file plan for bulk scenarios or for applying them manually to individual documents.|

+|[Microsoft Defender for Cloud Apps setup guide](https://go.microsoft.com/fwlink/?linkid=2222969)|[Microsoft Defender for Cloud Apps setup guide](https://aka.ms/cloudappsecuritysetup)|The **Microsoft Defender for Cloud Apps setup guide** provides easy to follow deployment and management guidance to set up your Cloud Discovery solution. With Cloud Discovery, you'll integrate your supported security apps, and then you'll use traffic logs to dynamically discover and analyze the cloud apps that your organization uses. You'll also set up features available through the Defender for Cloud Apps solution, including threat detection policies to identify high-risk use, information protection policies to define access, and real-time session controls to monitor activity. With these features, your environment gets enhanced visibility, control over data movement, and analytics to identify and combat cyberthreats across all your Microsoft and third party cloud services.|

+|[Microsoft 365 auditing solutions guide](https://go.microsoft.com/fwlink/?linkid=2223153)|[Microsoft 365 auditing solutions guide](https://aka.ms/auditsolutionsetup)|The **Microsoft 365 auditing solutions guide** provides an integrated solution to help organizations effectively respond to security events, forensic investigations, and compliance obligations. When you use the auditing solutions in Microsoft 365, you can search the audit log for activities performed in different Microsoft 365 services.|

+|[eDiscovery solutions setup guide](https://go.microsoft.com/fwlink/?linkid=2223416)|[eDiscovery solutions setup guide](https://aka.ms/ediscoverysolutionsetup)|eDiscovery is the process of identifying and delivering electronic information that can be used as evidence in legal cases. The **eDiscovery solutions setup guide** assists in the use of eDiscovery tools in Microsoft Purview that allow you to search for content in Exchange Online, OneDrive for Business, SharePoint Online, Microsoft Teams, Microsoft 365 Groups, and Yammer communities.|

+|**Guide - [Setup Portal](https://aka.ms/setupguides)** |**Guide - [Admin Center](https://aka.ms/advanceddeploymentguides)** |**Description** |

+||||

+|[Build your employee experience](https://go.microsoft.com/fwlink/?linkid=2223653)|[Build your employee experience](https://aka.ms/EmployeeExperienceDashboard)|Transform how your employees work together with the **Employee experience dashboard**. For seamless teamwork, use Microsoft 365 to create productive, aligned teams, and keep employees engaged with leadership and the rest of the organization. Help your employees be effective in all work activities. These guides will provide instructions on how to use SharePoint, Teams, and Yammer to build collaboration across your org to help drive productivity.|

+|[Microsoft 365 Apps setup guide](https://go.microsoft.com/fwlink/?linkid=2223409)|[Microsoft 365 Apps setup guide](https://aka.ms/OPPquickstartguide)|The **Microsoft 365 Apps setup guide** helps you get your users' devices running the latest version of Office products like Word, Excel, PowerPoint, and OneNote. You'll get guidance on the various deployment methods that include easy self-install options to enterprise deployments with management tools. The instructions will help you assess your environment, figure out your specific deployment requirements, and implement the necessary support tools to ensure a successful installation.|

+||[Mobile apps setup guide](https://aka.ms/officeappguidance)|The **Mobile apps setup guide** provides instructions for the download and installation of Office apps on your Windows, iOS, and Android mobile devices. This guide provides you with step-by-step information to download and install Microsoft 365 and Office 365 apps on your phone and tablet devices.|

+|[Microsoft Teams setup guide]( https://go.microsoft.com/fwlink/?linkid=2222975)|[Microsoft Teams setup guide](https://aka.ms/teamsguidance)|The **Microsoft Teams setup guide** provides your organization with guidance to set up team workspaces that host real-time conversations through messaging, calls, and audio or video meetings for both team and private communication. Use the tools in this guide to configure Guest access, set who can create teams, and add team members from a .csv file, all without the need to open a PowerShell session. You'll also get best practices for determining your organization's network requirements and ensuring a successful Teams deployment.|

+|[Teams Phone setup guide](https://go.microsoft.com/fwlink/?linkid=2223356)|[Teams Phone setup guide](https://aka.ms/teamsphonesetupguide)|The **Teams Phone setup guide** helps you stay connected with the use of modern calling solutions. Apply key capabilities with a cloud-based, call-control system that supports the telephony workload for Teams. You can choose and deploy features from the available public switched telephone network (PSTN) connectivity options. You can also find assistance for other features, such as auto attendant, call queues, Audio Conferencing, caller ID, and live events.|

+|[SharePoint setup guide](https://go.microsoft.com/fwlink/?linkid=2223320)|[SharePoint setup guide](https://aka.ms/spoguidance)|The **SharePoint setup guide** helps you set up your SharePoint document storage and content management, create sites, configure external sharing, migrate data and configure advanced settings, and drive user engagement and communication within your organization. You'll follow steps for configuring your content-sharing permission policies, choose your migration sync tools, and enable the security settings for your SharePoint environment.|

+|[Surface Hub and Microsoft Teams Rooms setup guide](https://go.microsoft.com/fwlink/?linkid=2222974)|[Surface Hub and Microsoft Teams Rooms setup guide](https://aka.ms/SetupSurfaceHub)|The **Surface Hub and Microsoft Teams Rooms setup guide** will customize your experience based on your environment. If you're hosted in Exchange Online and using Microsoft Teams, the guide will automatically create your device account with the correct settings.|

+|[OneDrive setup guide](https://go.microsoft.com/fwlink/?linkid=2223143)|[OneDrive setup guide](https://aka.ms/ODfBquickstartguide)|Use the **OneDrive setup guide** to get started with OneDrive file storage, sharing, collaboration, and syncing capabilities. OneDrive provides a central location where users can sync their Microsoft 365 Apps files, configure external sharing, migrate user data, and configure advanced security and device access settings. The OneDrive setup guide can be deployed using a OneDrive subscription or a standalone OneDrive plan.|

+|[Yammer deployment advisor](https://go.microsoft.com/fwlink/?linkid=2223165)|[Yammer deployment advisor](https://aka.ms/yammerdeploymentguide)|Connect and engage across your organization with Yammer. The **Yammer deployment advisor** prepares your Yammer network by adding domains, defining admins, and combining Yammer networks. You'll get guidance to deploy Yammer and then customize the look, configure security and compliance, and refine the settings.|

+|**Guide - [Setup Portal](https://aka.ms/setupguides)** |**Guide - [Admin Center](https://aka.ms/advanceddeploymentguides)** |**Description** |

+||||

+||[In-place upgrade with Configuration Manager guide](https://aka.ms/win10upgradedemo)|Use the **In-place upgrade with Configuration Manager guide** when upgrading Windows 7 and Windows 8.1 devices to the latest version of Windows 10. You'll use the script provided to check the prerequisites and automatically configure an in-place upgrade.|

+||[Deploy Office to your users guide](https://aka.ms/proplusodt)|Deploy Office apps from the cloud with the ability to customize your installation by using the Office Deployment Tool. The **Deploy Office to your users guide** helps you create a customized Office configuration with advanced settings, or you can use a pre-built recommended configuration. Whether your users are conducting a self-install or you're deploying to your users individually or in bulk, this advanced guide provides you with step-by-step instructions to give users an Office installation tailored to your organization.|

+||[Deploy Office to remote users guide](https://aka.ms/officeremoteinstall)|Now that working remotely is the norm, users need to receive your organization's Office settings when they're not connected to your internal network or when using their own devices.<br>Use the **Deploy Office to remote users guide** to create a customized Office installation and then send users a generated PowerShell script that will seamlessly install Office with your configuration.|

+||[Deploy and update Microsoft 365 Apps with Configuration Manager advisor](https://aka.ms/oppinstall)|For organizations using Configuration Manager, you can use the **Deploy and update Microsoft 365 Apps with Configuration Manager advisor** to generate a script that will automatically configure your Microsoft 365 Apps deployment using best practices recommended by FastTrack engineers. Use this guide to build your deployment groups, customize your Office apps and features, configure dynamic or lean installations, and then run the script to create the applications, automatic deployment rules, and device collections you need to target your deployment.|

+||[Intune Configuration Manager co-management setup guide](https://aka.ms/comanagementsetup)|Use the **Intune Configuration Manager co-management setup guide** to set up existing Configuration Manager client devices and new internet-based devices that your org wants to co-manage with both Microsoft Intune and Configuration Manager. Co-management allows you to manage Windows 10 devices and adds new functionality to your org's devices, while receiving the benefits of both solutions.|

+||[SDS Rollover setup guide](https://aka.ms/sdsrolloversetupguide)|The **SDS Rollover setup guide** provides the steps to help your organization sync student information data to Azure Active Directory and Office 365. This guide streamlines the term lifecycle management process by creating Office 365 Groups for Exchange Online and SharePoint Online, class teams for Microsoft Teams and OneNote, as well as Intune for Education, and rostering and single sign-on integration for third-party apps. You'll perform end-of-year closeout, tenant cleanup and archive, new school year preparation, and new school year launch. Then you can create new profiles using the sync deployment method that suits your organization.|

+ Title: Microsoft Teams Virtual Appointments Call Quality Dashboard

+audience: Admin

+f1.keywords:

+- NOCSH

+ms.localizationpriority: medium

+search.appverid: MET150

+ - M365-collaboration

+ - m365-frontline

+ - m365initiative-meetings

+description: Learn how to use the Call Quality Dashboard for Virtual Appointments in Microsoft Teams to troubleshoot issues and analyze call quality.

+appliesto:

+ - Microsoft Teams

+ - Microsoft 365 for frontline workers

+# Microsoft Teams Virtual Appointments call quality dashboard

+The Call Quality Dashboard (CQD) is a self-service data environment that empowers you to access data on Teams usage throughout your organization, build reports to analyze call quality, and troubleshoot call issues. The Call Quality Dashboard analytics suite tracks several hundred data points on your organization's Teams calls and stores them in a database that you can easily access using a Power BI connector.

+When you access this data, you can use it to analyze high-level metrics such as daily call errors and total call volume. You can also use it to determine things such as why a participant dropped a call or why a particular building has an unusually high rate of dropped calls. You do this analysis in Power BI by developing reports that can be published to the web, where they can automatically receive updated data at scheduled refresh times or at nearly real-time refresh rates. Once the reports are published to the web, you can distribute links within your organization and set permissions to allow users to explore the data themselves. This also allows users to export the underlying information to Excel.

+> [!NOTE]

+> Power BI reports published to the web are only accessible to authorized admins.

+## Get started

+You'll need to work with the [CQD support team](mailto:cqdsupport@microsoft.com) and your customer success contact to set up your Call Quality Dashboard. You can also [read the documentation to learn more about setting up CQD](/microsoftteams/turning-on-and-using-call-quality-dashboard).

+1. [Sign into CQD](https://cqd.teams.microsoft.com) with your admin credentials.

+1. From the menu bar, select **Analysis & Reports**.

+1. Then, choose **Call Quality Dashboard**.

+After you sign in for the first time, CQD will begin collecting and processing data.

+> [!NOTE]

+> It may take a few hours to process enough data to display meaningful results in the reports.

+After the CQD environment has populated and finished setting up, you can begin to analyze data from the existing dashboards. You can find these in the dropdown menu at the top of the page. When the environment is populated, you can also use [Power BI desktop](https://www.microsoft.com/p/power-bi-desktop/9ntxr16hnw1t#activetab=pivot:overviewtab) to create highly customizable reports. Use the [CQD Power BI template files](/microsoftteams/cqd-data-and-reports#import-the-cqd-report-templates) to get started. These template files contain many of the most frequently requested call quality metrics and charts.

+## Working with CQD in Power BI

+Before you begin analyzing organizational call quality data, you'll need to [install](/p/power-bi-desktop/9ntxr16hnw1t#activetab=pivot:overviewtab) and [learn to use](https://powerbi.microsoft.com/learning/) Power BI desktop. To access the CQD database through Power BI, you'll need to [download and install the Teams CQD connector](/microsoftteams/cqd-power-bi-connector). Make sure to install the CQD connector in the relevant Documents folder.

+Once you've installed the connector, you'll be able to access the CQD database in Power BI.

+[](media/call-quality-dashboard-big.png)

+> [!TIP]

+> You can get a head start by using the [CQD Power BI template files](/microsoftteams/cqd-data-and-reports#import-the-cqd-report-templates). The template files are already connected to the CQD data source. You still need to have the connector installed to use the template files.

+### Start a report from scratch

+If you choose not to use the template files, you can create a Power BI report from scratch.

+1. Follow the [setup](/microsoftteams/cqd-power-bi-connector#setup) and [building queries](/microsoftteams/cqd-power-bi-connector#building-queries) instructions in the CQD connector documentation.

+1. Select **Get Data** in Power BI.

+1. Search the connectors for **Call Quality**.

+## Use cases

+You can analyze CQD data in several different ways.

+- **[Teams admin center](https://admin.teams.microsoft.com/):** You can find a pre-made and easy to read set of insights immediately after setting up CQD. However, you can't extensively customize the insights shown in the Teams admin center.

+ 1. Select **Analytics and reports** from the left navigation in your Teams admin center.

+ 1. Choose **Call quality dashboard**.

+- **[CQD portal](https://cqd.teams.microsoft.com/):** Here you can filter and customize reports that provide quick answers to many frequently asked questions.

+- **[Power BI](/microsoftteams/cqd-power-bi-query-templates):** Using Power BI gives you the most customizable options for creating reports. Here you can use CQD data to understand user behavior, see usage patterns, and resolve individual call issues. You can use Power BI to supplement the aforementioned dashboards with answers that aren't available in the pre-made reports.

+## Virtual appointments data

+You can also use CQD to gather and analyze data specific to Virtual Appointments.

+### Differentiate EHR and Bookings appointments

+You can view the point of origin of a scheduled call by using the **Scheduling Source App ID** column. You can find this in the **Fields** list. Then drag and drop the slicer onto the canvas.

+[](media/cqd-app-source-big.png)

+EHR connector appointments have the ID e97edbaf-39b2-4546-ba61-0a24e1bef890.

+Bookings appointments have the ID 0eaa6b95-4a35-4a5d-9919-e4fc61fb4bdb.

+> [!NOTE]

+> Scheduling Source App ID isn't one of the default slicers in the PBIT templates.

+## Get help

+You can get help by contacting CQD support at cqdsupport@microsoft.com. You can also reach out to your Designated Support Engineering POD for more support with Power BI.

+> Advanced appointments are appointments that use at least one premium Virtual Appointments capability available in [Teams Premium](/microsoftteams/teams-add-on-licensing/licensing-enhance-teams). For more analytics on advanced Virtual Appointments usage, see the [Advanced Virtual Appointments activity report](advanced-virtual-appointments-activity-report.md).

+|**4** |The table gives you detailed information about each appointment that took place during the selected date range. <ul><li>**Start time (UTC)** is the date and time when both a staff member and participant are present in the meeting or when the first activity by one of attendees happened in the meeting.</li> <li>**Meeting ID** is the unique ID of the meeting.</li> <li>**Lobby wait time** is the time difference between when a participant first joins the lobby to when that same participant or a different participant is admitted to the meeting by a staff member.</li><li>**Duration** is the time difference between the start time and when the last person leaves the meeting. If both a staff member and a participant didnΓÇÖt join the meeting, duration shows as 0 (zero).</li> <li>**Status** shows the meeting status. <ul><li>**Completed**: If one or more staff members and participants join the meeting and the meeting has ended. Or, if one or more participants join the meeting and the meeting has ended.</li> <li> **No show**: If one staff member joins the meeting but no other people join, and the meeting has ended. </li></ul> </li> <li>**Product type** indicates whether the virtual appointment was scheduled through Bookings or the Teams EHR connector.</li> <li>**Attendees** is the maximum number of staff members and participants present in the meeting at any given time over the entire duration of the meeting.</li> <li>**Department** is the Bookings calendar or hospital department to which the meeting belongs.</li><li>**SMS sent** indicates whether any SMS notification was sent to attendees.</li><li>**Advanced Appointments** indicates whether an appointment used a Premium feature capability in the Teams Premium offering. </li> </li> </ul> |

+|**4** |The table gives you detailed information about each appointment that took place during the selected date range. <ul><li>**Start time (UTC)** is the date and time when both a staff member and participant are present in the meeting or when the first activity by one of attendees happened in the meeting.</li> <li>**Meeting ID** is the unique ID of the meeting.</li> <li>**Lobby wait time** is the time difference between when a participant first joins the lobby to when that same participant or a different participant is admitted to the meeting by a staff member.</li><li>**Duration** is the time difference between the start time and when the last person leaves the meeting. If both a staff member and a participant didnΓÇÖt join the meeting, duration shows as 0 (zero).</li> <li>**Status** shows the meeting status. <ul><li>**Completed**: If one or more staff members and participants join the meeting and the meeting has ended. Or, if one or more participants join the meeting and the meeting has ended.</li> <li> **No show**: If one staff member joins the meeting but no other people join, and the meeting has ended. </li></ul> </li> <li>**Product type** indicates whether the virtual appointment was scheduled through Bookings or the Teams EHR connector. </li> <li>**Attendees** is the maximum number of staff members and participants present in the meeting at any given time over the entire duration of the meeting.</li> <li>**Department** is the Bookings calendar or hospital department to which the meeting belongs.</li><li>**SMS sent** indicates whether any SMS notification was sent to attendees. </li><li>**Advanced Appointments** indicates whether an appointment used a Premium feature capability in the Teams Premium offering. </li> </li> </ul> |

+|**4** |The table gives you detailed information about each appointment that took place during the selected date range. <ul><li>**Start time (UTC)** is the date and time when both a staff member and participant are present in the meeting or when the first activity by one of attendees happened in the meeting.</li> <li>**Meeting ID** is the unique ID of the meeting.</li> <li>**Lobby wait time** is the time difference between when a participant first joins the lobby to when that same participant or a different participant is admitted to the meeting by a staff member.</li><li>**Duration** is the time difference between the start time and when the last person leaves the meeting. If both a staff member and a participant didnΓÇÖt join the meeting, duration shows as 0 (zero).</li> <li>**Status** shows the meeting status. <ul><li>**Completed**: If one or more staff members and participants join the meeting and the meeting has ended. Or, if one or more participants join the meeting and the meeting has ended.</li> <li> **No show**: If one staff member joins the meeting but no other people join, and the meeting has ended. </li></ul> </li> <li>**Product type** indicates whether the virtual appointment was scheduled through Bookings or the Teams EHR connector. </li> <li>**Attendees** is the maximum number of staff members and participants present in the meeting at any given time over the entire duration of the meeting.</li> <li>**Department** is the Bookings calendar or hospital department to which the meeting belongs.</li><li>**SMS sent** indicates whether any SMS notification was sent to attendees. </li><li>**Advanced Appointments** indicates whether an appointment used a Premium feature capability in the Teams Premium offering. </li> </li> </ul> |

+|**3** |The table gives you detailed information about each appointment that took place during the selected date range. <ul><li>**Start time (UTC)** is the date and time when both a staff member and participant are present in the meeting or when the first activity by one of attendees happened in the meeting.</li> <li>**Meeting ID** is the unique ID of the meeting.</li> <li>**Lobby wait time** is the time difference between when a participant first joins the lobby to when that same participant or a different participant is admitted to the meeting by a staff member.</li><li>**Duration** is the time difference between the start time and when the last person leaves the meeting. If both a staff member and a participant didnΓÇÖt join the meeting, duration shows as 0 (zero).</li> <li>**Status** shows the meeting status. <ul><li>**Completed**: If one or more staff members and participants join the meeting and the meeting has ended. Or, if one or more participants join the meeting and the meeting has ended.</li> <li> **No show**: If one staff member joins the meeting but no other people join, and the meeting has ended. </li></ul> </li> <li>**Product type** indicates whether the virtual appointment was scheduled through Bookings or the Teams EHR connector. </li> <li>**Attendees** is the maximum number of staff members and participants present in the meeting at any given time over the entire duration of the meeting.</li> <li>**Department** is the Bookings calendar or hospital department to which the meeting belongs.</li><li>**SMS sent** indicates whether any SMS notification was sent to attendees. </li><li>**Advanced Appointments** indicates whether an appointment used a Premium feature capability in the Teams Premium offering. </li> </li> </ul> |

+- M365-modern-desktop

+- tier2

+- M365-modern-desktop

+- tier2

+- tier2

+- M365-modern-desktop

+- tier2

+- M365-modern-desktop

+- tier2

+- m365initiative-edu

+- tier2

+- m365initiative-edu

+- tier2

+- tier2

+- M365-modern-desktop

+- tier2

+- M365-modern-desktop

+- tier2

+- M365-modern-desktop

+- tier2

+- tier2

+- tier2

+- M365-modern-desktop

+- tier2

+- M365-modern-desktop

+- tier2

+- M365-modern-desktop

+- tier2

+- tier2

+- M365-modern-desktop

+- tier2

+##### [Configure alert notifications](../defender/configure-email-notifications.md)

+### [Privacy for Microsoft Defender for Endpoint on iOS](ios-privacy.md)

+ Title: Configure alert notifications in Microsoft 365 Defender

+description: You can use Microsoft Defender for Endpoint to configure email notification settings for security alerts, based on severity and other criteria.

+keywords: email notifications, configure alert notifications, Microsoft Defender for Endpoint, Microsoft Defender for Endpoint notifications, Microsoft Defender for Endpoint alerts, windows enterprise, windows education, Microsoft 365 Defender, Defender

+ms.mktglfcycl: deploy

+ms.sitesec: library

+ms.pagetype: security

+ms.localizationpriority: medium

+audience: ITPro

+- m365-security

+- tier2

+search.appverid: met150

+# Configure alert notifications in Microsoft 365 Defender

+**Applies to:**

+- [Microsoft 365 Defender](https://go.microsoft.com/fwlink/?linkid=2118804)

+- [Microsoft Defender for Endpoint Plan 1](https://go.microsoft.com/fwlink/p/?linkid=2154037)

+- [Microsoft Defender for Endpoint Plan 2](https://go.microsoft.com/fwlink/p/?linkid=2154037)

+- [Microsoft Defender for Business](../defender-business/mdb-overview.md)

+You can configure Microsoft 365 Defender to send email notifications to specified recipients for new alerts. This feature enables you to identify a group of individuals who will immediately be informed and can act on alerts based on their severity.

+If you're using [Defender for Business](../defender-business/mdb-overview.md), you can set up email notifications for specific users (not roles or groups).

+> [!NOTE]

+> - Only users with 'Manage security settings' permissions can configure email notifications. If you've chosen to use basic permissions management, users with Security Administrator or Global Administrator roles can configure email notifications.

+> - Device group creation is supported in Defender for Endpoint Plan 1 and Plan 2.

+You can set the alert severity levels that trigger notifications. You can also add or remove recipients of the email notification. New recipients get notified about alerts triggered after they're added. For more information about alerts, see [View and organize the Alerts queue](../defender-endpoint/alerts-queue.md).

+If you're using role-based access control (RBAC), recipients will only receive notifications based on the device groups that were configured in the notification rule. Users with the proper permission can only create, edit, or delete notifications that are limited to their device group management scope. Only users assigned to the Global administrator role can manage notification rules that are configured for all device groups.

+The email notification includes basic information about the alert and a link to the portal where you can do further investigation.

+## Create rules for alert notifications

+You can create rules that determine the devices and alert severities to send email notifications for and the notification recipients.

+1. Go to [Microsoft 365 Defender](https://go.microsoft.com/fwlink/p/?linkid=2077139) and sign in using an account with the Security administrator or Global administrator role assigned.

+2. In the navigation pane, select **Settings** \> **Endpoints** \> **General** \> **Email notifications**.

+2. Click **Add item**.

+3. Specify the General information:

+ - **Rule name** - Specify a name for the notification rule.

+ - **Include organization name** - Specify the customer name that appears on the email notification.

+ - **Include tenant-specific portal link** - Adds a link with the tenant ID to allow access to a specific tenant.

+ - **Include device information** - Includes the device name in the email alert body.

+ > [!NOTE]

+ > This information might be processed by recipient mail servers that are not in the geographic location you have selected for your Defender data.

+ - **Devices** - Choose whether to notify recipients for alerts on all devices (Global administrator role only) or on selected device groups. For more information, see [Create and manage device groups](../defender-endpoint/machine-groups.md). (If you're using [Defender for Business](../defender-business/mdb-overview.md), device groups do not apply.)

+ - **Alert severity** - Choose the alert severity level.

+4. Click **Next**.

+5. Enter the recipient's email address then click **Add recipient**. You can add multiple email addresses.

+6. Check that email recipients can receive the email notifications by selecting **Send test email**.

+7. Click **Save notification rule**.

+## Edit a notification rule

+1. Select the notification rule you'd like to edit.

+2. Update the General and Recipient tab information.

+3. Click **Save notification rule**.

+## Delete notification rule

+1. Select the notification rule you'd like to delete.

+2. Click **Delete**.

+## Troubleshoot email notifications for alerts

+This section lists various issues that you may encounter when using email notifications for alerts.

+**Problem:** Intended recipients report they're not getting the notifications.

+**Solution:** Make sure that the notifications aren't blocked by email filters:

+1. Check that the email notifications aren't sent to the Junk Email folder. Mark them as Not junk.

+2. Check that your email security product isn't blocking the email notifications.

+3. Check your email application rules that might be catching and moving your email notifications.

+## Related topics

+- [Update data retention settings](../defender-endpoint/data-retention-settings.md)

+- [Configure advanced features](../defender-endpoint/advanced-features.md)

+- [Configure vulnerability email notifications](../defender-endpoint/configure-vulnerability-email-notifications.md)