The Complete Microsoft Teams Administration Handbook

Part 1: Environment and Security

Teams architecture and the Microsoft 365 substrate

• Introduction to Microsoft Teams for admins
• How Exchange and Microsoft Teams interact
• Microsoft 365 Groups and Microsoft Teams
• Plan and deploy a file collaboration environment - SharePoint
• Security and compliance in Microsoft Teams

Licensing, SKUs, and add-ons

• Microsoft Teams add-on licenses
• Assign Teams add-on licenses to users
• Teams Phone licensing
• Microsoft Teams Premium licensing
• Microsoft Teams Premium - Overview for admins
• Assign or unassign licenses for users in the Microsoft 365 admin center

Admin roles, least privilege, and administrative units

• Use Microsoft Teams administrator roles to manage Teams
• Microsoft Entra built-in roles
• Administrative units for Microsoft Teams

Admin center, policies, and policy packages

• Manage meeting and event policies in Microsoft Teams
• Teams settings and policies reference
• Assign policies in Teams, getting started
• Assign policies to users and groups
• Assign policy packages to users and groups

PowerShell and Microsoft Graph

• Manage Teams with Microsoft Teams PowerShell
• New-CsGroupPolicyAssignment (MicrosoftTeams module)
• Archive team (Microsoft Graph API)
• Overview for using Teams, Shifts, and Viva Learning (Graph automation)

Network planning, connectivity, and VPN

• Prepare your organization's network for Microsoft Teams
• Overview: VPN split tunneling for Microsoft 365
• Implementing VPN split tunneling for Microsoft 365
• Securing Teams media traffic for VPN split tunneling
• Plan for Teams town halls

QoS and Call Quality Dashboard

• Implement Quality of Service (QoS) in Microsoft Teams
• What is Call Quality Dashboard (CQD)?
• Set up the Call Quality Dashboard
• Building and endpoint data (upload tenant data)

Defender for Office 365 and alert policies

• Microsoft Defender for Office 365 support for Microsoft Teams
• Turn on Safe Attachments for SharePoint, OneDrive, and Microsoft Teams
• Reduce the attack surface for Microsoft Teams
• Alert policies in the Microsoft Defender portal

Retention for Teams

• Learn about retention for Microsoft Teams
• Manage retention policies for Microsoft Teams

Sensitivity labels and meeting protection

• Use sensitivity labels to protect calendar items, Teams meetings, and chat
• Use Teams meeting templates, sensitivity labels, and admin policies together
• Configure Teams meetings with three tiers of protection
• Require end-to-end encryption for sensitive Teams meetings

Data loss prevention and Conditional Access

• Data loss prevention and Microsoft Teams
• Learn about the default data loss prevention policy in Microsoft Teams
• Data Loss Prevention policy reference
• Service dependencies in Microsoft Entra Conditional Access
• Restrict device code flow for Microsoft Teams devices with Conditional Access
• Conditional Access and Intune compliance for Microsoft Teams Rooms and panels

Information barriers, communication compliance, and insider risk

• Information Barriers in Microsoft Teams
• Get started with Information Barriers
• Microsoft Teams and Microsoft Purview Communication Compliance
• Create and manage Insider Risk Management policies
• Configure policy indicators in Insider Risk Management

Part 2: Governance and External Collaboration

Teams Architecture and Microsoft 365 Groups

• Microsoft 365 Groups and Microsoft Teams
• Microsoft 365 Groups overview for administrators
• Manage teams in the Microsoft Teams admin center
• Manage Teams with Microsoft Teams PowerShell

Group Governance: Creation, Naming, and Expiration

• Manage who can create Microsoft 365 Groups
• Enforce a naming policy on Microsoft 365 groups in Microsoft Entra ID
• Microsoft 365 Groups and Microsoft Teams naming policy
• Configure the expiration policy for Microsoft 365 groups
• Microsoft Entra cmdlets for configuring group settings

Policy Architecture and Assignment

• Assign policies in Teams, getting started
• Assign policies to users and groups
• Managing policy packages in Teams
• Assign policy packages to users and groups
• New-CsGroupPolicyAssignment cmdlet reference

Archiving, Deleting, and Restoring

• Archive or delete a team in Microsoft Teams
• Restore a deleted Microsoft 365 group
• Restore a deleted Microsoft 365 group or cloud security group in Microsoft Entra ID

Access Reviews and Identity Governance

• What are access reviews?
• Create an access review of groups and applications in Microsoft Entra ID
• Manage guest access with access reviews
• Monitor and clean up stale guest accounts using access reviews
• Microsoft Entra ID Governance licensing fundamentals

External Access (Federation)

• Manage external meetings and chat with people and organizations using Microsoft identities
• Set-CsTenantFederationConfiguration cmdlet reference
• Block domains and addresses in Microsoft Teams using the Tenant Allow/Block List
• Manage anonymous participant access to Teams meetings and events

Guest Access

• Guest access in Microsoft Teams
• Turn guest access in Microsoft Teams on or off
• "Attempted to perform an unauthorized operation" error when accessing Files tab in Teams
• Collaborate with guests in a team (IT Admins)
• Diagnostics in Enhanced Engagements
• Use guest access and external access to collaborate with people outside your organization
• Change the sharing settings for a site
• Get-SPOSite cmdlet reference

Shared Channels and Cross-Tenant Access

• B2B direct connect overview
• Overview: Cross-tenant access with Microsoft Entra External ID
• Set up B2B direct connect with an external organization

Multitenant Organizations

• What is a multitenant organization in Microsoft Entra ID?
• Plan for multitenant organizations in Microsoft 365
• Synchronize users in multitenant organizations in Microsoft 365

Teams Rooms, Resource Accounts, and Pro Management

• Microsoft Teams Rooms licenses
• How to create and configure resource accounts for Teams Rooms and panels
• Set-CalendarProcessing cmdlet reference
• Microsoft Teams Rooms Pro Management Portal
• Role-based access control in the Microsoft Teams Rooms Pro Management Portal

Teams Devices, Updates, and VDI

• Transitioning Teams Android device management from the Teams admin center to the Teams Rooms Pro Management portal
• Manage devices in Teams
• Manage updates for Teams Android devices in the Pro Management portal
• Teams Rooms Pro Management portal device update management
• Managing settings for Teams devices
• Remote provisioning and sign in for Teams Android devices
• Manage Microsoft Teams device tags
• Microsoft Teams displays
• New VDI solution for Teams

Part 3: Teams, Channels, and Apps

Teams Architecture and Administration

• Introduction to Microsoft Teams for admins
• Overview of teams and channels in Microsoft Teams
• Limits and specifications for Microsoft Teams
• Use Microsoft Teams administrator roles to manage Teams
• Manage Teams with Microsoft Teams PowerShell
• Microsoft Teams PowerShell Overview

Licensing and Prerequisites

• Microsoft Teams add-on licenses
• Microsoft Teams Premium licensing
• How Exchange and Microsoft Teams interact
• Prepare your organization's network for Microsoft Teams

Rollout Planning with Advisor for Teams

• Use Advisor for Teams to help you roll out Microsoft Teams

Creating Teams (Admin Center, PowerShell, Graph)

• Assign team owners and members in Microsoft Teams admin center
• Manage teams in the Microsoft Teams admin center
• Create teams and manage members using the Microsoft Teams API
• Create team (Microsoft Graph API)

Team Templates

• Get started with team templates in the Teams admin center
• Create a custom team template in Microsoft Teams

Channels: Standard, Private, and Shared

• IT Admins - Private channels in Microsoft Teams
• Shared channels in Microsoft Teams
• B2B direct connect overview
• Manage channel policies in Microsoft Teams
• Set-CsTeamsChannelsPolicy

Membership, Sensitivity Labels, and Lifecycle

• Use sensitivity labels to protect collaborative workspaces (groups and sites)
• Sensitivity labels for Microsoft Teams
• Archive or delete a team in Microsoft Teams
• Manage ownerless Microsoft 365 groups and teams
• Configure the expiration policy for Microsoft 365 groups
• Enforce a naming policy on Microsoft 365 groups in Microsoft Entra ID

Chats, Messaging Policies, and Retention

• Manage messaging policies in Teams
• Teams settings and policies reference
• Supervised chats for non-educational tenants
• Delete chat (Microsoft Graph API)
• Learn about retention for Microsoft Teams
• Manage retention policies for Microsoft Teams

Teams Apps and Extensibility

• Understand Microsoft Teams apps and their capabilities
• Build webhooks and connectors
• Create Incoming Webhooks

App Governance, Permissions, and Setup Policies

• Overview of agent and app management and governance in Teams admin center
• Use app permission policies to control user access to apps
• Use app centric management to manage access to apps
• Use setup policies to manage, install and pin agents and apps for users
• Manage custom apps in Microsoft Teams admin center

Frontline Deployment at Scale

• New-CsBatchTeamsDeployment
• Deploy frontline static teams at scale with PowerShell for frontline workers

Part 4: Meetings and Phone

The Teams Communication Stack and Administration

• Teams calling overview
• Manage Teams with policies
• Manage Teams with Microsoft Teams PowerShell
• Set up Teams Phone in your organization

Licensing and Prerequisites

• Microsoft Teams add-on licenses
• Assign Teams add-on licenses to users
• Microsoft Teams Premium licensing
• Microsoft Teams Premium - Overview for admins
• Microsoft Teams Phone Resource Account licenses

Meeting Types, Webinars, Town Halls, and Virtual Appointments

• Plan for Teams town halls
• Manage who can schedule and attend town halls in Microsoft Teams
• Manage who can schedule and attend webinars in Microsoft Teams
• Appointments with Microsoft Teams
• Microsoft Bookings

Meeting Policies, Settings, and Copilot

• Manage meeting and event policies in Microsoft Teams
• Manage meeting policies for content sharing
• Set-CsTeamsMeetingPolicy
• Manage Teams meeting transcription (Copilot)
• Manage Microsoft Teams meeting recording and transcription options for sensitive meetings

Meeting Templates and Customization

• Overview of custom meeting templates in Microsoft Teams
• IT admins - Create a custom meeting template in Microsoft Teams
• Teams Premium meetings customization options
• Use Teams meeting templates, sensitivity labels, and admin policies together

Events Configuration: RTMP and eCDN

• New-CsTeamsEventsPolicy
• Manage RTMP-In for Teams meetings, webinars, and town halls
• Using an encoder for live event streaming with Microsoft Teams
• Enterprise content delivery networks for streaming Microsoft Teams events

Audio Conferencing

• Plan Audio Conferencing for Microsoft Teams meetings
• Set up Audio Conferencing for Microsoft Teams
• Phone numbers for Audio Conferencing in Microsoft Teams
• Manage the Audio Conferencing settings for your organization in Microsoft Teams

Phone Number Types and PSTN Connectivity

• PSTN connectivity options
• Plan Direct Routing
• Manage phone numbers for users
• Set-CsPhoneNumberAssignment
• Plan for Shared Calling
• Configure Shared Calling

Emergency Calling and Dynamic E911

• Manage emergency calling
• Plan and configure dynamic emergency calling
• Manage emergency calling policies in Microsoft Teams
• Emergency addresses for remote locations
• Considerations for Direct Routing (emergency call routing)

Calling, Voicemail, and Call Park Policies

• Calling policies in Teams
• Set-CsTeamsCallingPolicy
• Set up Cloud Voicemail
• Manage Cloud Voicemail policies for your users
• New-CsTeamsCallParkPolicy

Direct Routing: SBCs, Voice Routing, and Dial Plans

• Configure Direct Routing
• Configure call routing for Direct Routing
• Session Border Controllers certified for Direct Routing
• Planning Teams dial plans for Teams Phone
• New-CsOnlinePSTNGateway

Auto Attendants, Call Queues, and the Queues App

• Configure resource accounts
• Set up an Auto Attendant
• Reference - Supported Configurations (auto attendants and call queues)
• Manage Queues app for Microsoft Teams in your organization
• Manage voice applications policies in Teams

Part 5: Monitoring and Troubleshooting

Monitoring and Troubleshooting Stack Overview

• Improve and monitor call quality for Teams
• Data and reports in Call Quality Dashboard (CQD)
• Microsoft Teams analytics and reporting
• Operate your service (Quality Champion)

Roles, Licensing, and Prerequisites

• Use Microsoft Teams administrator roles to manage Teams
• Microsoft Teams Premium - Overview for admins
• Microsoft Teams Premium licensing
• Microsoft Teams add-on licenses
• Microsoft Teams Rooms licenses
• Microsoft Teams Rooms Pro Management Portal
• Health reports in the Teams Management Pro portal

Call Quality Dashboard (CQD)

• Set up the Call Quality Dashboard
• Use CQD to manage call and meeting quality in Microsoft Teams (QER Guide)
• Dimensions and measurements available in Call Quality Dashboard (CQD)
• Stream Classification in Call Quality Dashboard (CQD)
• Intelligent media quality classifiers in Call Quality Dashboard (CQD)
• Use Power BI to analyze CQD data for Microsoft Teams
• Install Microsoft Call Quality connector for Power BI

Building and Endpoint (Tenant) Data

• Building and endpoint data

Per-User Call Analytics and Real-Time Telemetry

• Monitor and troubleshoot Teams meetings and calls from the Teams admin center
• Use Call Analytics to troubleshoot poor call quality
• Set up call analytics for Microsoft Teams
• Use real-time telemetry to troubleshoot poor meeting quality

Usage Reports

• Microsoft Teams Team usage report
• Microsoft Teams User activity report
• Microsoft Teams device usage report
• Microsoft Teams apps App usage report
• Microsoft Teams app usage report (Teams admin center)
• Microsoft 365 admin center usage reports overview

PSTN Usage and Direct Routing Health

• Microsoft Teams PSTN usage report
• View Microsoft Teams Direct Routing calls with SIP Call Flow
• Health dashboard for Direct Routing
• Using the CQD PSTN Report in Power BI for Microsoft Teams

Governance: Audit, Groups, and Feedback

• Search the audit log for events in Microsoft Teams
• Search the audit log
• Manage audit log retention policies
• Learn about auditing solutions in Microsoft Purview
• Search audit logs for app management activities and events
• Manage who can create Microsoft 365 Groups
• Manage feedback policies in Microsoft Teams
• Manage Microsoft feedback for your organization

Alert Rules and Device Health

• Microsoft Teams monitoring and alerting
• Microsoft Teams device health monitoring (Device state rule)
• Alerts for in-progress meeting audio quality issues
• Alerts for in-progress meeting video quality issues
• Alerts for in-progress meeting screen sharing issues
• Alerts for new Teams desktop client releases

Network Readiness and Connectivity Testing

• Microsoft 365 network connectivity test tool
• Network connectivity in the Microsoft 365 Admin Center
• Microsoft 365 network assessment (scoring)
• Assessing Enterprise network last mile
• Securing Teams media traffic for VPN split tunneling
• Microsoft 365 URLs and IP address ranges
• Microsoft Remote Connectivity Analyzer

Client Troubleshooting: Logs, Cache, Updates, Sign-In

• Collect Teams client diagnostic logs for Microsoft support
• Diagnostic logs for Teams Client (remote collection)
• Clear the Teams client cache
• Resolve sign-in errors in Teams
• Resolve Teams client update failures
• Why it's important to keep Teams updated
• Teams client health dashboard in the Teams admin center
• What is Delivery Optimization?

Meeting Join, External Access, and Copilot

• Errors when external participants try to join a Teams meeting
• Plan for meetings with external participants in Microsoft Teams
• Manage anonymous participant access to Teams meetings
• Manage external access in Microsoft Teams
• Manage Teams meeting transcription (and Copilot)
• Admins - Manage transcription and captions for Teams meetings

The companion page for every CertAmount book