Microsoft 365 Certified: Enterprise Administrator Expert

Microsoft 365 enterprise administrators evaluate, plan, migrate, deploy, and manage Microsoft 365 services.

Skills measured

Design and implement Microsoft 365 services
Manage user identity and roles
Manage access and authentication
Plan Office 365 workloads and applications
Implement modern device services
Implement Microsoft 365 security and threat management
Manage Microsoft 365 governance and compliance

Course Outline

Plan architecture

plan integration of Microsoft 365 and on-premises environments
plan an identity and authentication solution
plan enterprise application modernization

Deploy a Microsoft 365 tenant

manage domains
configure organizational settings
complete the organizational profile
add a Microsoft partner or work with Microsoft FastTrack
complete the subscription setup wizard
plan and create a tenant
edit an organizational profile
plan and create subscription(s)
configure tenant-wide workload settings

Manage Microsoft 365 subscription and tenant health

manage service health alerts
create and manage service requests
create internal service health response plan
monitor service health
monitor license allocations
configure and review reports, including Power BI, Azure Monitor logs, Log Analytics
workspaces, and Microsoft 365 reporting

Plan migration of users and data identify data to be migrated and migration methods

identify users and mailboxes to be migrated and migration methods
plan migration of on-premises users and groups
import PST files

Design identity strategy

evaluate requirements and solutions for synchronization
evaluate requirements and solutions for identity management
evaluate requirements and solutions for authentication

Plan identity synchronization Design directory synchronization

design directory synchronization
implement directory synchronization with directory services, federation services, and azure endpoints by using Azure AD Connect sync
plan for directory synchronization using Azure AD cloud sync Manage identity synchronization with Azure Active Directory (Azure AD)
configure and manage directory synchronization by using Azure AD cloud sync
configure directory synchronization by using Azure AD Connect
monitor Azure AD Connect Health
manage Azure AD Connect synchronization
configure object filters
configure password hash synchronization
implement multi-forest AD Connect scenarios Manage Azure AD identities
plan Azure AD identities
implement and manage self-service password reset (SSPR)
manage access reviews
manage groups
manage passwords

Manage authentication

design an authentication method
configure authentication
implement an authentication method
manage authentication
monitor authentication

Plan and implement secure access

design a conditional access solution
implement entitlement packages
implement Azure AD Identity Protection
manage identity protection
implement conditional access
manage conditional access
implement and secure access for guest and external users

Plan for messaging deployments

plan migration strategy
plan messaging deployment
identify hybrid requirements
plan for connectivity
plan for mail routing
plan email domains

Plan for Microsoft SharePoint Online and OneDrive for Business

plan migration strategy
plan external share settings
identify hybrid requirements
manage access configurations
manage Microsoft groups
manage SharePoint tenant and site settings

Plan Windows 10 deployment

plan for Windows as a Service (WaaS)
plan for managing Windows quality and feature updates
plan Windows 10 Enterprise deployment methods
analyze upgrade readiness for Windows 10 by using services such as Desktop Analytics
evaluate and deploy additional Windows 10 Enterprise security features Enroll devices
plan for device join or device registration to Azure Active Directory (Azure AD)
plan for manual and automated device enrollment into Intune
enable device enrollment into Intune

Plan Microsoft Defender for Cloud Apps

plan information protection by using Microsoft Defender for Cloud Apps
plan policies to manage access to cloud apps
plan for application connectors
configure Cloud App Security policies
review and respond to Cloud App Security alerts
monitor for unauthorized cloud applications

Manage information governance

plan data classification
plan for classification labeling
plan for restoring deleted content
implement records management
design data retention labels and policies in Microsoft 365

Implement Information protection

plan an information protection solution
plan and implement sensitivity labels and policies
monitor label alerts and analytics
deploy Azure Information Protection unified labels client
configure Information Rights Management (IRM) for workloads
plan for Windows information Protection (WIP) implementation

About The Exam

This exam measures your ability to accomplish the following technical tasks: design and implement Microsoft 365 services; manage user identity and roles; manage access and authentication; and plan Office 365 workloads and applications.