Managing Office 365 Components for a large enterprise using Active Directory

Opening Office 365 to a large enterprise (7000 users) implies some controls be placed around who can subscribe to what and which Add-Ons a user might have/need/desire access to.
To place these controls around, for example, licensing Project Online to individual users, we are proposing creation of Active Directory groups for each add-on and use powershell or other method to read the AD FS user groups, then flip the bit on the O365
user profile for that member to allow them to select the Add-On.
At any point in time, our Asset Management team can use the AD group to determine licensing distribution and chargeback to internal cost centers.
Does this seem like a viable approach?
Any other approaches that have worked?

John,
After your users and home profile paths are created in AD - have your tried running the createhomedir command from Terminal? Assuming your AD plugin settings are correct on your server - specifically the 'Use UNC path...' - try running the command (in Terminal) below on your document (home folder) server:
sudo createhomedir -s
This command should query your server's search path (check the path using Directory Utility - located in /SystemLibrary/CoreServices) and find any users (preferably your AD network accounts - that's the -s option) that should have home folders on that server and create them. Note that this command nust be run as root - hence the sudo
To test - try creating a new AD user and point their profile to your Mac sharepoint - then run the command. You could also run the command on your Mac server to create an account for just the new user - just add their name at the end of the command above:
sudo createhomedir -s newusername
Hopefully one of these suggestions will work for you...
Ken

Similar Messages

  • Advice needed for WAP4410n to authenticate using active directory ?

    Hello,
    We have a couple of Cisco WAP4410n newly purchased for our organisation.
    1)We already have a windows 2003 active directory with domain and users.
    2)We have installed a machine with ubunto linux.It has freeradius configured
    in it.we have also installed the certificate server in this machine.
    3)we have given the linux machine's ip to the freeradius settings in  wap4410n.
    4)Our logic is that when a wireless users tries to connect to wap4410n the linux
       free radius server will communicate with the windows active directory and grant
       access to the wireless user.
    However when we try to connect a wireless user we are getting certificate related
    errors.
    Can someone advice us on the settings (PEAP and certificate issues) with respect to freeradius and wap4410n
    so that the active directory users can be authenticated.
    Thanks & regards.....

    Hi Sabeesh,
    if you get a certificate warning, then you should check what it is complaining about.
    -If you go for PEAP, you're supposed to install a certificate on the radius server and to have the clients to trust it.
    -Usually people configure the windows peap client to NOT validate the server certificate, which bypass this problem. However a certificate still has to be installed on the Radius server but it can be invalid.
    Hope this helps
    ===
    Don't forget to rate answers that you find useful

  • Managing Office 365 Updates?

    I use WSUS and/or System Center Configuration Manager 2012 to manage Office updates today.  Can I continue to use these products to update Office 365 ProPlus?  Plz Suggest? What is the best way?
    Thanks

    No.  Unfortunately you cannot.  There's a new update system for the Click To Run software.  CTR is a whole nother animal.   This document goes over the limitations: http://technet.microsoft.com/en-us/library/ee624360.aspx
    If you want to control which updates are applied and distribute those internally, then it works something like this:
    Deploy Office with configuration.xml (and/or GPO) configured for an internal update location
    Write and schedule a script to regular run setup.exe with another configuration.xml to download the updates to a shared location
    Microsoft just finally gave us a few more customization and some limited GPO control in April.  Here's some information on that: 
    http://blogs.technet.com/b/odsupport/archive/2014/04/28/new-group-policies-introduced-with-the-april-2014-update-of-office-2013-click-to-run.aspx
    http://blogs.office.com/2014/05/14/the-garage-series-for-office-365-updates-to-office-365-proplus-for-admins-and-first-look-at-upcoming-shared-computer-support/
    Here's the references you'll need:
    http://technet.microsoft.com/en-us/library/jj219420.aspx#BKMK_C2RUpdates
    http://technet.microsoft.com/en-us/library/jj219426(v=office.15).aspx
    Yes the documentation is spread out all over and is not all up to date.  We haven't found the updates to be reliable either and are still frustrated with the lack of any central management or troubleshooting.  It's like they released the software
    but are still working on the tools to manage it.  Good luck.

  • With Multi-Factor Authentication ENABLED how can a admin connect remotely to manage Office 365 with PowerShell

    With Multi-Factor Authentication ENABLED how can office 365 admin connect remotely to manage Office 365 with Power-Shell ?
    When I key-in my credentials, auth fails with invalid username and password ?
    Does any know the procedure ?

    This question was closed over a year ago.   You will  need to start a new question.  You can post a link back here if you think it helps.
    I also recommend asking in the O365 developers forum for how to do bulk license upgrades.  You can use the answer here and just remove and then add the new license. 
    ¯\_(ツ)_/¯

  • Questions on managing Office 365/Exchange Online Mailboxes in Server 2012 Essentials

    Wondered if anyone could answer a couple of queries:
    When managing Office 365/Exchange Online mailboxes in Windows Server 2012 Essentials:-
    1. Does the server itself act as the Exchange server i.e. does it do all of the downloading/sending of emails or does Outlook on each workstation still communicate direct with the Office 365/Exchange Online server address?
    2. Does Outlook on each workstation have the Exchange server address set to the internal address of the Server 2012 Essentials box or does it still have the external Office 365/Exchange Online server address?
    I don't work for Microsoft - I just use their products.

    Hi,
    When you integrate Office 365/Exchange Online mailboxes in Windows Server 2012 Essentials,you can see the mailbox usage information on the Essentials Dashboard and manager users. However, the essentials server won't download/send emails and Outlook
    will still communicate with the O365/Exchange Online Server. In addition, the Exchange server address would be point to the external server address.
    You can also refer to the article below to get more related information:
    Email Options Supported by Windows Server 2012 Essentials
    Best regards,
    Susie
    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

  • Office 365 ability for a specific setup - advice please

    I have a client, that has 1 main company with 2 areas HM is the main company HC is the secondary company which is part of HM
    All of the staff work for HM and HC, and have roles within both... but to clients have a slightly different outward appearance
    I have managed to sell the idea of Office 365 to them as they are a small company (one company)
    They have 2 domains HM.com and HC.com all of the work towards the HM division go to HM and from HM, and all of the work to the HC area go to and from HC.
    This is where the difficulty sets in.
    I have sold the idea of a hosted exchange setup as they have used Exchange in the past and see the immense value... but as a small company and SBS no longer available Office 365 is clearly the way to go.
    They will definitely be going for a Office E3 plan at £15 a month per user for Office and Exchange (although I do wonder can we combine E3 and Business Premium as not all users require Access?)
    Now this will be to the main company of HM as that is the primary company.
    The second division of the company HC do need email too though. Now I know I can tie multiple domains into the 1 Exchange email account
    So all emails to HP.com and HC.com would be received the 1 user mailbox
    However it is the sending from that is important.... can it be set up so;
    1. if they reply to an email received to HC it will be from HC (i.e. so the customers don't see their email to HC coming from HM)
    2. If they do a new email can they chose to send from HC instead of HM (HM would be the typical default)
    If this set up is possible can anyone forward me to a guide as I would like to test or advise
    Or would they need to do an Office 365 E3 for HM
    and then a hosted Exchange plan from Microsoft for HC
    Any help would b gratefully appreciated
    thanks
    Tris

    Hi Tris,
    Thanks for your question. This is the forum to discuss questions and feedback for Microsoft Office client. There is not so much about Office 365
    Plans/Services/Deployment aspects here, I would suggest you to post in the dedicated forum of
    Office 365 Community, where you can get more experienced responses:
    http://community.office365.com/en-us/f/default.aspx
    The reason why we recommend posting appropriately is you will get the most qualified pool of respondents, and other partners who read the forums regularly can either share their knowledge or learn from your interaction with us. Thank you for your understanding.
    Regards,
    Ethan Hua
    TechNet Community Support
    It's recommended to download and install
    Configuration Analyzer Tool (OffCAT), which is developed by Microsoft Support teams. Once the tool is installed, you can run it at any time to scan for hundreds of known issues in Office
    programs.

  • Manage Office 365 Licensing via Azure API

    I am at a loss. We have an issue with limited available licenses for Office 365 Pro Plus for users to use on their home/personal machines. As a result we can not add all of our users, nor does anyone want to manage this manually.
    The solution I proposed is to write a web portal where users can go and selectively apply a license for their account. On the back end, the page would execute an API of some kind to Azure and assign a license. In return, they can also go to remove the license
    if they so desire (It will never happen but give the option).
    What is the best way of doing this? The Azure management portal is extremely confusing and I can not figure out where to begin... I created an API that I can't even figure out how to use and I'm not even sure that I will be able to accomplish this using
    an API. Any suggestions?
    I am using Visual Studio 2013 and at this point purely using a bare bones console app just to see if I can get connected and execute a test API.
    Thanks!
    Tony

    Hi,
    Your second sentence is unclear "We have an issue with limited available licenses for Office 365 Pro Plus for users to use on their home/personal machines".
    Users can install Office 365 ProPlus on up to five different computers with a single Office 365 license. For example, a user can have Office 365 ProPlus installed on a computer in the office, on a laptop to use when traveling, and on a home computer.
    With that in mind, do you really need to create this API?
    Here's some more info on the Pro Plus license:
    To use Office 365 ProPlus, a user must have an Office 365 account and have been assigned a license. If you, as the Office 365 administrator for your organization, remove a user’s license or account, the user’s installations of Office 365 ProPlus go into
    reduced functionality mode.
    Even though users don’t need to be connected to the Internet all the time to use Office 365 ProPlus, users must connect to the Internet at least once every 30 days. This is so that the status of their Office 365 subscriptions can be checked. If users don’t
    connect within 30 days, Office 365 ProPlus goes into reduced functionality mode. After users connect to the Internet and their subscription status is verified, all the features of Office 365 ProPlus are available again.
    https://technet.microsoft.com/en-us/library/gg702619.aspx?f=255&MSPPError=-2147217396
    Cheers
    Amjad

  • How to create a private forum in Office 365 SharePoint for customers?

    Hi, 
    I am implementing a SharePoint Office 365 solution for a client but one of their requirements is sharing regularly updated info with only 20 customers. The idea is to share info with just the customers in a private forum basically to receive feedback, comments
    and emails. What is the best approach to this?
    Thanks, 

    Hello Aslr12,
    Based on these requirements I would just create a new site collection within SharePoint online service of your Office 365 tenant, based on the community site template. This template has some nice web parts like the Discussion list and some Community tools. 
    - Dennis | Netherlands | Blog |
    Twitter

  • Office 365 Exchange for Non-profit

    Hi
    Previous a Website Hosting was own mailing server (Sample)
    [email protected]   is Mailbox only in the hosting
    [email protected]  (as non-mailbox)  come automatic-forward to     [email protected]
    [email protected]  (as non-mailbox) come automatic-forward to    
    joe@other_isp.co.nz
    Now, We bought a Office 365 non-profit in clouding.   I setup a new user for 
    [email protected] in the mailbox via exchange clouding.  And I changed our DNS in our Web hosting, Then I setting a exchange with Outlook app were successfully. 
    I tried find Office 365 about the another add user for [email protected] (as non-mailbox) should be automatic forward to 
    [email protected] (in own mailbox). 
    My experience Windows Server with Exchange 2003, 2008 & 2011.  Now, I first time this Office 365 exchange for business & non-profit.  I never seen this. 
    Help me, Where I can find the "Domain email (non-mailbox) Auto-Forward email to domain email (mailbox) or also external email"
    Thanks for your help
    Mike

    You can nicely do this with Distribution Group or by Transport Rules. Distribution Group will be maybe the easy way.
    You can referer to article Create and use distribution groups.
    Basically, you create DL with address [email protected] and allow to receive e-mail from external sources. Then you add [email protected] as member of this group.
    If you want also sent e-mails from this DL, you can use PowerShell to set rights for it.

  • Could we have same name's for User and Groups in Active directory

    When iam trying to create a user name " Logistics " under a OU, I am getting a error
    "The pre-windows 2000 logon name you have chosen is already in use in this domain. Choose  aother pre-windows logon name, and then try again"
    We already have a group by the name " Logistics "
    Could we have same name's for User and Groups in Active directory?
    Thanks in Advance

    sAMaccountName attribute is unique. So, the short answer is you cannot.
    This posting is provided AS IS with no warranties or guarantees , and confers no rights.
    Ahmed MALEK
    My Website Link
    My Linkedin Profile
    My MVP Profile

  • Use principal name for email if blank in Active Directory

    Hi all,
    allthough I set "Use principal name for email if blank in Active Directory", Spiceworks asks me for an emailadress when i want to Login to the Portal with an AD user without emailadress.
    This topic first appeared in the Spiceworks Community

    Hi,
    What if we change the user name of user account, will it have impact on roaming profiles.
    Yes, it will affect roaming profiles. Please rename the roaming profile folder as the new user account name, in addition, change the profile path in ADUC.
    Here is an related article below for you:
    How to Rename a Windows 7 User Account and Related Profile Folder
    http://social.technet.microsoft.com/wiki/contents/articles/19834.how-to-rename-a-windows-7-user-account-and-related-profile-folder.aspx
    Best Regards,
    Amy

  • Office 365 support for KMS

    Hi,
    Does Office 365 support KMS and/or will there be added support for this in the future? I know this is not
    supported if your read the TechNet article; http://technet.microsoft.com/en-us/library/ee624357.aspx.
    However I want to ask if anyone knows otherwise.
    Marius A. Skovli | MCP/MCTS/MCITP | Twitter: @mariusskovli

    Hi,
    Office 365 don’t support Volume Activation (KMS/MAK).
    http://technet.microsoft.com/en-us/library/office-365-enterprise-value-service-description.aspx#bkmk_VolumeActivation
    Note:
    Volume activation for Office 365 Enterprise E3, Office 365 Enterprise E4, and Office 365 ProPlus are limited to installations on Microsoft Windows Server 2008 R2 and newer with the RDS role enabled or Windows To Go installations. In either
    case, users accessing these installations need to be licensed users of Office 365 Enterprise E3, Office 365 Enterprise E4, or Office 365 ProPlus.
    As the admin for your organization, you can
    set up Office 365 for everyone in your organization. This is an example of Office 365 Small Business admin.
    http://office.microsoft.com/en-001/office365-suite-help/set-up-your-organization-on-office-365-small-business-HA102818317.aspx

  • Managing Office 365 Click to install with SCCM

    Hello,
    I am looking at deploying Office 365 via SCCM, but it looks like we will loose the ability to patch via WU/MU and instead need to update via pointing 365 to a static update source in configuration.xml \\server\path\. 
    Has anyone found a way to deploy the click to run 365  Office version and still effectively manage and updates and patches using SCCM distribution points?  We do not want to run the MSI version. 
    Can anyone from MS here comment on the future of SCCM and 365 click to run integration ?
    TIA
    Lance

    I was hoping you'd ask ;)
    We created a second app in SCCM with some different settings for deployment because we expected people would be using Office while we were trying to update. . We used the same deployment method as the original app and the only real difference in the XML
    is the version number of the bits we are updating and the display level. We changed the display level so that if people were logged in an using Office when the installation deadline was reached they would get a nice popup that indicated if they wished to continue
    with the Office update then they would need to close Office. If they declined then SCCM marked the application as failed and on next software eval cycle would prompt again until success.
    Our XML for the update is below - hope this helps.
    <Configuration>
     <Add SourcePath="" Version="15.0.4623.1003" OfficeClientEdition="32" >
      <Product ID="O365ProPlusRetail">
       <Language ID="en-us" />
      </Product>
     </Add>
     <Updates Enabled="FALSE" />
     <Display Level="Full" AcceptEULA="TRUE" />
     <Logging Name="Office365Setup.log" Path="%temp%" />
      <Property Name="FORCEAPPSHUTDOWN" Value="TRUE" />
    </Configuration>

  • Office 365 version for Exchange online archive

    hi,
    i have a SBS 2011 and i use the exchange 2010 on it. At the moment I use Outlook 2007 to connect to my Exchange mailbox. A few days ago, I signed up for the Office 365 trial version and i am going to switch to Office 365 in a few days. I also have an Exchange
    Enterprise CAL to use the online archive functionality.
    my question is, what version of Office 365 (for business) do i need to be able to use the online archive in my outlook desktop version?
    best regards
    thomas

    Outlook in Office 365 ProPlus，
    Outlook in Office 365 Enterprise E3， Outlook in Office 365 Midsize Business
    https://support.office.microsoft.com/en-us/article/Outlook-license-requirements-for-Exchange-features-46b6b7c5-c3ca-43e5-8424-1e2807917c99?CorrelationId=25f2a475-9f26-4920-b8b3-11e2f9fa9592&ui=en-US&rs=en-001&ad=US

  • Do I need to purchase Office 365 A3 plan for faculty to get free Office 365 ProPlus for students in Office 365?

    Hi there
    Our school has A2 plan for both students and faculty. We recently contacted our reseller and placed an order for free  Office 365 ProPlus A for our students. We received an acknowledgement from Microsoft regarding this order saying that it was successfull
    and I can see the license added when I log into the VLSC website. Problem is, I can't see this licence listed when I log into Office 365 admin. It is not listed under subscriptions or licenses. Apologize for my ignorance, but I don't know how can I get this
    license added in Office 365 so that our students can start using editable versions of office apps on their IPADs. Do we need to purchase Office 365 A3 plan for our staff to get this student's license enabled in Office 365? Can somebody please help?

    I have similar questions concerning getting started with the Student Advantage program offering.
    I've read the blog posts and made as many as 5 calls to Office 365 and still do not understand how to get this going.
    We have a subscription to Education A2 for both faculty and students that we started in January 2014.  We receive this at no charge.  So I'm starting with a subscription at no cost.  I do not have an Education Reseller because we started our
    subscription through the website with a trial and had that converted to the no cost A2 plan.
    When I am in the portal and look under 'Purchase Services' I can see the option to add Office ProPlus for Faculty at $2.00/user/month and for Office ProPlus for Students at $1.50/user/month.  My understanding of Student Advantage is that if I license
    all my faculty/staff accounts for Office ProPlus I would then get the Student access at no charge.  So I've licensed the Office ProPlus for Faculty for all of our faculty accounts yet I cannot get a clear answer about how to get the Student accounts added
    at no cost.
    I most recently was told by Office 365 support that I needed to speak to a reseller, which I did today.  He told me that I would need to do one of two things.
    1. Upgrade my no cost A2 faculty accounts to A3.  Which for me and what I see in the portal would take them from $0 to $4.50/user/month.  With that A3 for faculty I would get the Office ProPlus for the Students accounts on A2 at no charge.  
    2. I would need an Open Value license covering all school FTEs for Office at a cost of about $29/user/year.
    Both of these options are higher than licensing all Faculty accounts for Office ProPlus via the portal at $2/user/month which I have already done.
    So I don't understand why that doesn't qualify us for Student Advantage and now have to license all FTE, most of whom don't even touch a computer, for Office.

Maybe you are looking for