Microsoft 365 The 7 Secret Admin Portals that you MUST KNOW!

this time around we're going to take a look at the seven hidden admin centers in microsoft 365 that you simply have to know so if you're ready to learn stay tuned [Music] hey everyone welcome back to the channel andy here so nice to see you especially if this is your first time i really do appreciate you dropping by and clicking that button all right hey and this episode i thought i would take a look at what i think are the seven most useful hidden admin centers in 365. they're terrible aren't they they kind of hide things so they're difficult to find and then of course when you end up doing an exam they kind of throw the secret questions on you well have no fear in this episode you're gonna learn them all now as with all my videos i definitely recommend that you watch the video at least twice and because if you watch it once it's just kind of unfamiliar but the more times you watch it of course the more that information sinks in and that you learn it now if you've not subscribed to the channel we love subscribers so hit that subscribe button ring the bell and you'll be notified of any future videos uh and interesting postings and of course i love your comments questions and feedback so please just get them down below there so i think without any further ado uh it's time to jump in with the seven hidden admin centers can you guess what they are let's take a look so for my number seven i'm going to kick things off by heading into the admin center here in microsoft 365 and if i click on show all of course there is nothing here to indicate microsoft stream a couple of ways that you can get into this though if you want to you go down into all admin centers and you can see that we have a number of familiar ones but also a number of unfamiliar ones as well and we have microsoft stream here and this will take you into the admin center itself all right and again that's one way to get into that another way that you can get into the same place is simply by going into microsoft stream and it's amazing how many people don't know this so i'm gonna go in here i'm gonna come into microsoft stream and if you've not used stream by the way it is absolutely awesome so a couple of things about stream you can have your own youtube and the great thing is you can even create your own live events and this integrates with the likes of teams and yammer and so on so to do that you simply can either upload videos or you can schedule your own live events you can have multiple channels it's truly awesome and it's amazing how many people don't use this um one thing though if you don't see the live event option it's because you've got a small business plan and um you need to have an e5 subscription or an a separate subscription to stream a couple of things over here in terms of hidden admin settings you can actually switch the portal into admin mode and this allows the administrator to manage other content so other users content including private content on there all right so again if you're going to use that you maybe want to have some kind of disclaimer the other option here is i'm going to click onto the gear icon and as well as my settings i can also get in to the admin center settings here as well so here in the admin center you can create additional stream administrators so if you want additional users or groups to be administrators you can do that you can also set up here spotlight videos so when channels are open by users any videos that you want to be highlighted will be added here i mentioned live events and you can see here this shows you what's live now and also what events are upcoming as well and you can see you can set this up again you may not want your users uh creating live events so this is a really useful setting just click that and only these users and groups will be able to create those live events and that is one of the only places in 365 that you can do that um company policies so again if you've got a web page with kind of acceptable usage policies and things like that you can pop that in here and you can also require your users to go ahead and accept that policy as well um usage details is always useful so again if you've used a kind of 85 percent of your storage uh it will flag up a message to the administrator and of course you can also see that we have the usual recycle bin here now we have groups here so these are groups and of course these are linked in with microsoft 365 groups as well um if you need support on this or any of the topic of course this links you to microsoft support and any comments of any videos will actually appear here as well um content creation so again all users are currently allowed to upload so again if you want to restrict that however to specific users and groups you can do that here and you can also restrict company-wide channel creation so again if you don't want a company-wide channel that everyone can see again we have some additional settings here and also default viewing permissions which are definitely worth having a look at now if you are doing live streaming the chances are you're going to work with an enterprise content delivery network so again there are a number of options to choose from here and you simply sign up to their organization and they will give you the appropriate information to paste copy and paste into here all right and this is something new this is stream migration so again if you're moving or migrating from older systems again this is a new stream migration tool and also you can manage user data here which is really useful so things like reports and also you can see any deleted users here so that's the first of our admin centers that is microsoft stream so for my number six option this is something that absolutely every windows administrator needs to know so i'm going to come down into all admin centers scroll right down to the bottom and we have the universal print admin center now windows 10 introduced the concept of universal print and the idea of this of course is on a in a company of course you're going to have print servers within a company you can share out printers now nowadays of course most printers are internet based and you can share them out so super simple okay what you do is you can deploy either printers that i've got are already set up for universal print or you can set up connectors okay so any connectors i can go ahead i can manually install a connector and by the way this also supports windows printers that don't support um universal print as well so this is a truly fantastic feature now as you can see i don't have any printers here i'm a mac user um but i just wanted to draw your attention to this it's absolutely really super super simple uh to go ahead and set up okay so basically install the connector or use the connector uh you can share out printers so you can share a printer out on a network just by of course um just giving it a share name search for that printer on your network that's using universal print and again you can specify what level of access by default everyone can access it but if not then you can only choose like for example specific members if you want to do that so it could be like a a management printer or something like that all right so really super simple to set up um again we also have a document conversion feature as well so if you're using uh for example non-standard microsoft documents and things like that it will automatically convert them as well all right and again you can switch that feature on uh more details on that there is a technical guide there so definitely take a look at universal print which is now available now this next one is super useful if you're interested in deploying microsoft office and of course what we mean by that is when you whenever users go into this page here which of course is the office home page and they have an option here to install microsoft office and you can install it for the pc of course you can all also install it for the mac um i'm often asked andy can i manage and configure that and the answer is absolutely and check it out here you have the office configurator here in the owl admin centers and here you can do some very cool things you can create uh office deployment policies and again allows enterprise users to manage the policies for all of your users and you can also manage device configurations here and if you're this works alongside the odt the office configurator tool so basically what we have here is you've got a number of different options you can set different channels for deployment and in here we have got some customization options for devices that you're using so you might be using for example windows 10 windows 11 devices and in here you could you can have a number of different types of configuration so any configurations that you want to design yourself standard configurations and of course modern app settings as well so again to create this policy i can simply come here i can create a deployment customization tool i can specify if it's 32-bit 64-bit i can determine which apps which version of the apps do i want to deploy for my users so if your for example got an enterprise volume licensing option you can choose that or you can just use the standard kind of click to run and you can say do you want visio project any additional products put in um of course you also get things like word and excel in there anyway and then you have got the update channels now if you're using uh the likes of microsoft in tune you know that you can have different update rings in microsoft in tune at the moment i've not set that up at the moment all right so um again if you're choosing volume license into information you can see here that you have got some options here so this is showing you basically what's going in there and once you have clicked and gone through all of these different settings basically by using the office deployment tool it's essentially creating an answer file and you can call this marketing dot xml whatever you want to call it and again you can simply then download that tool and then once you've created that and the next thing you want to do is you maybe want to create some management tools in order to manage those policies so if i just call this let's say hq and if i go into next i can say this policy configuration is applied to users or specific groups or it can go to users that access documents anonymously so for example you might want to do separate policies for the web so for the purpose of this demo i'm just going to select the group at the top and i'll just type in sales and we have the sales team here i'm going to click onto that and i've now added in a group so the next thing of course is the actual configuration policies now if you're familiar with the likes of group policy in active directory you this will be very very familiar to you um so you can see that we have got lots of different kind of standard options here now if you want to change any of these so for example um if you want to say i never want to cache data you can simply click onto this option and you can see that this essentially is group policy this is what it's doing it's amending those group policy settings so you can go through here and every week every month there are more and more of these settings uh coming in so the i that's the idea anyway so once you've configured all of those settings um that's it you're you're pretty much done okay and then i'm just gonna once you've finished you simply click on next that's it we've now assigned it to those users and i'm now going to go ahead and i'm going to create that configuration policy and that's pretty much how it works all right really really powerful feature so if you're deploying software to your users and you want a very simple way of doing it again no you don't want to type out command lines and things like that then this is a really fantastic tool all right and other things that you've got in here as well you've also got the health of your apps so things like are they up to date and i think you can also we have a new feature with onedrive sync so i'm going to cover one drive in a later session we are currently in preview for this so again i'm going to go ahead i'm going to enable onedrive sync so this will manage of course any apps that are in um users onedrive for business and things like that so if there's any kind of sync issues or you know they've got duplicates and things like that that can be quite useful all right so that's currently in preview and we also have an inventory feature as well which again is really nice so of course once you've deployed this out you'll have a nice uh inventory of everything so an inventory of all your apps and how they've been deployed and who they've been deployed to so there you have it that is the office configurator definitely check that out in the admin center so the next one is the endpoint management tenant settings and you can find this in microsoft endpoint manager of course aka intune and in here as well as being able to manage devices and apps which i've covered on many videos before if you've not seen them go ahead and check them out you can also manage endpoint security here and the other thing that we've got here is also a full tenant admin center here and this is something that you definitely have to be aware of because there's an awful lot of information here so not just things like connector status to what the tenant is connected to but also things like the service health uh and any kind of message centers from microsoft okay so other things that we've got here as i said you've got tenant status you can also um set up remote help here as well and this is of course things like remote remote desktop connections so if you've got um a current um remote help session going on between yourself and let's say a windows 10 or windows 11 users you can see all of those um connections going on here and again you can switch this on or you can switch it off and there is a full docs.microsoft.com guide here on how to do it it's super simple by the way now the other thing that we can also have is you can configure what we call the microsoft tunnel uh gateway and of course this is if you're using things like vpns or split vpns into your organization and the likes of traditional vpn what this does is when you connect through a vpn come into your organization and then the user starts doing some general browsing um you know in a web browser it's consuming all of your bandwidth within your organization so what this does is it offloads it to microsoft so that means that microsoft um you know kind of regular traffic it takes that burden off you so again definitely check that out here it talks about how you can set up and manage for example tunneling service here so whether you're using hardware or software so you can set up configurations between different locations here likewise you can also set up vpn profiles um to the microsoft tunnel and for example if you're using android and ios devices here um details on any connectors or tokens so again if you want to enable things like the store for business sync and let's say your users have purchased apps or you've deployed apps to your users and this will keep those apps in sync okay um again you need to have a subscription for this service but it's essentially typically a one two three type option very very simple to set up now um the next thing down is the windows enterprise certificates so you know you're in an organization you maybe want to deploy a digital certificate for authentication purposes and you can bring that file in here and then of course upload it all right likewise if you're not using a windows enterprise certificate you can also have a public digital digi cert one here as well more information on that can be found here um again if you're using side loading keys or any keys to side load applications or any kind of software you can add those keys in here and that will of course then be automated endpoint configuration manager so if you're using config manager on-premises this would show you kind of the links between uh that that connectivity um you do need to have current branch version enabled for config manager on premises but once you do you'll be able to see that um we've i've talked about apple tokens and so do you want to create an apple token for your organization again you can sign up for the apple volume purchase program and this can be really useful in fact it's a requirement if you want to manage those apple devices for example in schools and things like that all right um other things that we've got you've also got things like privileged identity management uh roles so of course we also have different roles within intune as well so again these are some of the sub roles that intune has here so for example if you want if you've got like a junior admin and you want to give them that um help desk administrator role then of course you can do that there as well um privileged identity management so if you've got an emns and an e5 subscription you can do that and that again i've covered this before this would just then take me into azure active directories uh privileged in identity management this would take me into azure ad privileged identity management and if you wanted let's say you know you've got a couple of users you don't want them to be permanently assigned a role maybe it's just a temporary or just in time feature then this is where you would do that and i've done sessions on this before by the way so you can if you go into the identity area of my youtube channel you'll be able to see that there all right the rest of it of course is just pretty much logs diagnostic settings um you've got things like the end user experience so things like end user customize any kind of customizations you want to add in so things like branding settings support information so rather than your users contacting microsoft support you may want them to contact you of course you can also set up notifications and terms and conditions so when a user connects to a device or opens an app they have to accept your terms and conditions so if you're auto enrolling devices we have a new feature called well it's not new it's called windows auto patch here and again this allows you to do auto patching of windows 10 and windows 11 devices you do need to enroll with the service so again you just select the agreement and again you go and do that so you know you might want to definitely take a look at this there's some really good documentation there as for my number three i'm here in azure active directory and i'm going to click into the public preview for microsoft entre now i kind of get the feeling it's not entirely finished yet and again there's a few things that's missing from the menus but it's going to give you an idea of of everything that's going to be included now of course it was announced not that long ago that microsoft enter is the new name for everything to do with an enterprise identity so of course security of course we've got the the defender brand you've got priva of course for privacy management and of course entry you've got for uh identity and this encompasses three products so azure active directory permissions management and also verified ids which are currently in public preview but as you go through each of the menus things start to look quite familiar i kind of like the way they're laying these out it's got very much a 365 sharepoint look and feel about that so it's nice to see that we're getting a kind of standard look and feel for everything so definitely go ahead and check this out this is the entra portal and just to say that if you want to try permissions management you can do so there's a trial license available at the moment and you can kind of try it for 30 days likewise with verified id previews as well so it's available in preview you do need to have an azure account with this um so you can set yourself up a um a trial account for 30 days and for that you also need to create an azure key vault so and the setup process will walk you through everything and again i'm going to cover this in a future session so there we have it microsoft entra so here we are in microsoft defender now i have to be honest the security and compliance centers are growing uh at an exponential rate and the number of tools the number of technologies that are coming into these products now are really quite overwhelming and you have to wonder um okay where are they gonna put all of these different tools so are they gonna start rolling up menus and and adding different features in here um possibly but um actually what they're actually doing is if i go into the settings area here we're starting to see more and more hidden admin centers so in here this is where i would manage defender for identity so defender for identity and this is a really really important sneaky little hidden portal because you can do an awful lot of stuff with this so not only can you manage vpns you can view health issues and you can also redirect the portals as well and of course remember that the defender for identity product has actually been in integrated with cloud app security or defender for cloud apps as it's now known as microsoft have gone crazy with their naming um now obviously when you bring in devices um you can either you've got users you've got devices and you've got groups um so the nice thing is you can actually uh tag these uh entities now as well so for example if you've got a a honeypot server that you want to lure potential hackers into and this is quite useful it's nothing unethical in my opinion it's just giving you an idea of what the hackers are going for and how to defend against their known attacks and you can also set up notifications here as well for my number one i absolutely love this feature here i am in microsoft teams now of course a traditional team's admin you would go into the team's admin center and manage most of the teams there and as a team admin for let's say a specific team you might go in to the actual teams tool itself and do some administration well we now have an additional tool which you might want to take a look at and this can be found in the apps menu so simply go into apps and if you do a search for admin and you can see here that we now have the new admin app tool and simply go in here we click on open and this will then install the tool and you can see that we now have an admin app tool within actually microsoft teams so as an administrator if you want to you know allocate permissions to junior users management so on and the cool thing is you can see i now get those same menus i get those same settings that i would in traditional teams isn't that cool i love this feature by the way and so you've got things like settings you've got messaging settings you've got webinars you can manage policies um all of this is available in the teams app i think it's absolutely fantastic now available from the app store so there you have it that's my seven uh admin tools that you simply need to know and you know they're kind of tricky to find hey listen i would love to know what your seven would be or did i miss anything what would you have included uh in that list all right anyway listen i really appreciate you start stopping by and sticking with me uh remember if you've enjoyed the session hit the like button it really does make a big difference and if you've not subscribed come and join the community go ahead hit that subscribe button ring the bell and you won't miss out on the good stuff in the future so that's it for this week thank you so much for dropping by and i'll see you next time around stay safe take care thanks so much for dropping by today here's a couple of videos that you may enjoy and while you're here go ahead click on the subscribe button and you won't miss out [Music] you

Channel: Andy Malone MVP

Views: 84,118

Keywords: Microsoft 365 hidden admin portals, Administering Microsoft 365, andy malone mvp, microsoft 365

Id: 2CVgSpgEDSE

Length: 32min 4sec (1924 seconds)

Published: Fri Jul 29 2022