This document discusses strategies for enabling and governing Microsoft Teams usage in educational institutions while enforcing IT policies. It covers creating and managing Teams over their lifecycle, security and compliance capabilities, and automation options like PowerShell and the Graph API. Recommendations include starting with Teams for collaboration, evaluating tools to enforce policies during Team creation, and reviewing additional resources on Teams usage scenarios and management.
"I see eyes in my soup": How Delivery Hero implemented the safety system for ...
Microsoft Teams for Education Webinars - IT Pro introduction
1.
2. Objectives
Introduce you to administration capabilities to
enable and govern Microsoft Teams
Discuss strategies to allow for frictionless user
Teams creation while enforcing business rules
and addressing IT concerns
Understand the Teams lifecycle and
recommended practices for long term
management of the environment
Understand security and compliance
capabilities for Teams integrated in the Office
365 tools you are already using today
All links available at https://aka.ms/TeamsEduITProResources
3. Teams is the fastest growing app in Microsoft history
4. Communicate
through chat, meetings & calls
Collaborate
with deeply integrated Office 365 apps
Customize & Extend
with 3rd party apps, processes, and devices
Work with confidence
enterprise level security, compliance, and
manageability
5. Designed for education
Create collaborative classrooms that save
teachers time and better engage students
in modern learning
Connect educators in professional
learning communities to improve
teaching skills with built-in PLC Notebooks
Streamline staff communication on
institution-wide initiatives using custom
Staff Notebooks
Come together in a team for any team or
project, like student groups or planning
events
6. Hub for apps
Streamline workflow and bring all your
apps into a single hub.
Extend your team with 3rd party apps to
combine the best of Microsoft with a huge
store of apps across education, developers,
marketing and more.
Integrate artificial intelligence using bots
for Microsoft Teams to easily complete
tasks such as course polls, arrange
meetings and manage tasks.
7.
8. Live Events
For large lectures, online courses, public virtual events
• Supports up to 10K concurrent participants
• Audio and video for presenters only
• Automatic meeting recording via Stream
• Real time closed captioning
• Real time translation in up to 6 languages at a time
• Moderated Q&A available
• Attendance report available after event
• Engagement report available after event
Teams Meetings
For smaller lectures, breakout sessions, capstone courses, group
meetings
• Supports up to 250 concurrent participants
• Audio and video for both presenters and participants
• Meeting recording available with Stream integration
• Transcription available after recording
• Chat, share files and reactions inside the meeting
• Capture lecture notes
9. Microsoft Teams Devices
Work how you want, where you want
A range of certified devices in every size, for every space and working style
Work with confidence
Certified devices, with high quality video
and audio, enterprise-grade security, and
easy set up and management
Access intelligent
communications
Smarter and faster ways to connect and
collaborate with your devices
Purpose-built
Devices optimized for your spaces and work
styles
Personal devices Shared devices
Large screen
collaboration device
Skype Room
Systems
Conference
Room Phone
Headset Desk phone Mobile phone
station
Speaker puck Mobile phone PC
23. Avoid conflicts of interest within your organization by limiting which individuals can communicate and
collaborate with each other in Microsoft Teams.
27. Classes PLCs
Teachers and Students collaborating on group
projects, assignments, and more.
(i.e. classroom settings)
Educators collaborating within a professional
learning community.
(i.e. collaborative professional learning)
Staff Members Anyone
Staff leaders and staff members collaborating on a
school administrator and development.
(i.e. Oversee professional development)
Students and school employees collaborating in
interest groups and clubs.
(i.e. general collaboration)
40. Automation Capabilities
PowerShell
Traditional management tasks
Manage
• Teams
• Settings
• Membership
Graph API
More modern and powerful
Manage
• All capabilities of PowerShell and more
• Full Teams lifecycle – from creation to archive
• Interact with chat, channels, threads, apps
43. Call to Action
Start
Start using Microsoft Teams for your group collaboration
https://aka.ms/GetTeams
Evaluate
Evaluate IT tools to enforce organizational policies while
still allowing user Team creation
Learn
Register for additional webinars to understand Teams
usage scenarios with: staff, students, and research.
https://aka.ms/TeamsEduWebinars
Review
Links to more information about everything I reviewed
today is available at
https://aka.ms/TeamsEduITProResources
Editor's Notes
Work has change to focus on teamwork. Microsoft Teams is the leading app for modern collaboration.
Teams is now the fastest growing business app in Microsoft History!
Source https://www.microsoft.com/en-us/microsoft-365/blog/2019/07/11/microsoft-teams-reaches-13-million-daily-active-users-introduces-4-new-ways-for-teams-to-work-better-together/#.XSmgFoWi2Dk.twitter
500K organizations using Teams. 91 of top Fortune 100 companies are using Teams. 44 languages are now supported. And 60 customers have 10,000 or more active users.
And this is across multiple industries.
This is a platform to help students develop skills for their profession.
[This is an animated slide. Please show it in presentation mode]
[MAIN POINT TO LAND]
Microsoft Teams is a hub for teamwork, a chat-based workspace that enables teams to be more productive by giving them a single and secure location that brings together everything a team needs: chats, meetings, calls, files, and tools. Microsoft Teams is one place for all the needs your teams have.
Microsoft Teams delivers on four core promises to create a digital workspace for high performing teams.
[COMMUNICATE]
First, Microsoft Teams solves for the communication needs of a diverse workforce.
Since preview, Microsoft Teams has evolved to a complete meetings and calling solution, incl. chat, voice and video, as we have completed our roadmap for bringing Skype for Business Online features and functionality into Teams. You can use Teams for informal 1:1 or group chats – directly on your phone if you’re on the go. Or you can have an open conversation in a channel. This enables people to share information in a transparent way to accelerate decision making. And it's super easy to move from a chat into a face to face meeting, helping you to bridge geographical barriers.
[COLLABORATE]
When it comes to collaboration, the deep Office integration enables today’s multigenerational workforce to use the Office apps they are familiar with and love - Word, Excel, PowerPoint, OneNote, SharePoint, Planner, even Power BI - right within the context of Teams.
You can avoid email attachments and having to search for the latest version of a document. Teams brings all the Office 365 services together – so that you can easily share and co-author files.
[CUSTOMIZE]
Many of you use other services than Office 365 as well which results in you having to jump between and spend time in disparate experiences. We built Teams to be the hub for all the services and tools your teams use on a day to day basis. So, you can customize Teams with tabs, connector and bots to include the apps and services you need - <mention relevant 3rd party apps like GitHub and Trello>. We have also created an extensible platform, to enable building apps and to integrate with business processes.
And for Firstline workers, Teams provides an additional set of capabilities including schedule management.
[WORK WITH CONFIDENCE]
Microsoft Teams comes with the enterprise grade security, compliance and manageability that you expect from Office 365 which customers tell us is a huge value add for them.
Microsoft Teams has unique team type designed to support common scenarios.
More details of each type can be found here - https://support.office.com/en-us/article/Choose-a-team-type-to-collaborate-in-Microsoft-Teams-0a971053-d640-4555-9fd7-f785c2b99e67
Click on the Store from the web or laptop version of Teams to show the full Microsoft App Store in Teams.
If some apps are blocked at your institution you can find all the app available for Teams here https://aka.ms/TeamsUniversityStoreApps
Finally, Microsoft Teams benefits from the Office 365 hyper-scale, enterprise-grade cloud, delivering the advanced security and compliance capabilities customers expect.
Data encryption at all times, at-rest and in-transit.
Ability to have local data residency for core customer data at rest, plus failover and disaster recovery (see public Office 365 Roadmap for locations)
Human back-up via on-call support engineers standing by 24×7
Multi-factor authentication for enhanced identity protection.
It supports key standards including SOC 1, SOC 2, EU Model Clauses, HIPPA, and more. Since preview, we’ve added mobile management with Microsoft Intune and new features for compliance and litigation support, including audit log search, eDiscovery and legal hold for channels, chats and files.
PSTN connectivity in Office 365 with option for connecting existing on-premises investments in the future
Advanced call management including call routing, auto attendant, call queues, and reporting
Easily manage users, usage, and settings in the Office 365 Admin Portal
IT controls to manage trusted apps for employees/the organization
While security and compliance capabilities are critical for enterprise customers, our responsibility at Microsoft goes beyond this. Our mission talks about empowering every person to achieve more. With that in mind, we’re focused on building an inclusive experience for the entire group, including support for those who use screen readers, high contrast, and keyboard-only navigation, to enable the collective brainpower and potential of everyone.
We now have an amazing and growing list of partners that are expanding our portfolio of Teams Devices.
Microsoft works with partners to create purpose-built devices across personal and shared spaces so you can access your Teams meetings and calling instantly.
And only with our Certified for Microsoft Teams devices, can you meet our high bar for video and audio quality, giving you the best experience
Staff
Teaching and Learning
Faculty (PLC)
Research
Student
Student and Frontline workers
Healthcare
Ask everyone to install on their smartphone and wait to ensure there’s no issues.
Important to have people participate from both phone and laptop to ensure they see Teams across experiences
Finally, Microsoft Teams provides industry leading security and compliance capabilities and rich management capabilities.
With Microsoft Teams, customers benefit from the Office 365 hyper-scale, enterprise-grade cloud.
[MAIN POINT TO LAND]
From Day 1, the requirement has been for Teams to provide you with the same Office 365 capabilities that you’re used to and to build security, privacy and trust directly into the service.
You can manage and monitor all features in one centralized portal:
Data encryption at all times, at-rest and in-transit.
Customer data at rest remains in region
Ability to have local data residency for core customer data at rest, plus failover and disaster recovery (see data residency slide in the appendix for details)
Human back-up via on-call support engineers standing by 24×7
Customer content is never accessible in logs or telemetry
Multi-factor authentication for enhanced identity protection.
Secure guest access with AAD managed guest accounts
A big privacy topic for all our European customers is of course GDPR – the Global Data Protection Regulation. We will adhere to this ahead of the May 2018 deadline
Microsoft Teams supports key standards including SOC 1, SOC 2, EU Model Clauses, HIPPA, and more. Since preview, we’ve added mobile management with Microsoft Intune and new features for compliance and litigation support, including audit log search, eDiscovery and legal hold for channels, chats and files.
The Microsoft Teams admin center [coming early 2018] provides you with a single coherent admin experience where you can manage all aspects of Microsoft Teams including users, settings, and analytics.
Teams provides enterprise manageability to configure and set policies at a per-user level and manage trusted apps for employees and the organization.
PSTN connectivity in Office 365 will give you the option to connect existing on-premises investments in the future.
Advanced call management controls include call routing, auto attendant, call queues, and reporting.
While security and compliance are critical, our responsibility goes beyond this. Our mission talks about empowering every person to achieve more. With that in mind, we’re focused on building an inclusive experience, including support for those who use screen readers, high contrast, and keyboard-only navigation, to enable the collective brainpower and potential of everyone.
Most settings have been moved to the new Teams and Skype for Business admin center; however, a few settings remain in ‘Services and add-ins’ on the Microsoft 365 admin center. Over time, these settings will be moved to the new admin center.
Educational tenants have the unique ability for enabling education user sets allowing you to apply licenses in bulk to faculty/staff or students
Guest access enablement has been moved to the Teams admin center
In the Microsoft 365 admin portal you have the ability to configure which Teams store apps are available to your users. This is useful in cases where you need to review the privacy statements of applications before they are available for use.
There are some built-in protection mechanisms already. Applications published to the store must be approved by Microsoft including a review process by both the Office and Teams application teams. Reviews include the app’s integration with Teams, the first run experience, and how it copes with unexpected input.
You can load your own LoB apps into Teams store.
Policies can be assigned at an organization or user level. Powershell can be used to assign policies to users in bulk.
Meeting policies allow you to define:
How users are allowed to create and schedule meetings
Audio and video capabilities including recording
Content sharing capabilities including desktop and notes sharing
Participant and guest meeting capabilities
Meeting transcription is disabled by default but we recommend that you enable this feature to allows Stream to automatically transcribe your recorded meetings. This feature will be available to customers with A1/E1 licensing and above.
Messaging Policies allow you to configure the capabilities that users will have when interacting with teams and private conversations.
Translated messages are not enabled by default because the feature was added after the creation of meeting policies. We recommend that you enable this setting.
Teams settings is where you can configure organizational wide settings such as the ability to email a channel, domains that are allowed to email channels, the external file provider services you will allow within Teams, and how meeting room devices operate in meetings.
In August we added the ability for Microsoft Teams to honor Exchange address book policies if there was a need to scope users ability to search for contacts. This is commonly used in K-12 to prevent students from seeing students or teachers at other schools.
Other organization wide settings allow you to:
Configure guest access permissions
Configure your Skype to Teams upgrade policies
Configure external access and federation permissions
The user dashboard allows you to see the configurations of each user, assign specific policies, and view calling and meeting history if you need to troubleshoot any audio quality issues.
Four admin roles have been created to scope common administrative tasks:
The Teams service administrator has read/write access to all policies and organization settings including the ability to manage Teams
The Teams communications administrator is designed for an administrator that only needs to manage meeting and calling policies and routing including the ability to troubleshoot call quality
The Teams communications support engineer role can view full call analytics and call record information
The Teams communications support specialist role can access the user’s profile page for troubleshooting calls but can only see information on the specific user for which they searched.
These roles apply to both the Teams admin center as well as PowerShell modules.
View reports of user, device and usage of Teams
Ask everyone to install on their smartphone and wait to ensure there’s no issues.
Important to have people participate from both phone and laptop to ensure they see Teams across experiences
You can control who can create teams via a security group membership. This is commonly used in K-12 organizations where there is a requirement to prevent students from creating Teams. However, I would strongly caution against this in higher education.
There are many reasons why your organization would want to invent in and deploy Microsoft Teams. The biggest threat to that investment is users (weather they are staff or students) not having the ability to create teams for their specific purpose or culture. Disability the ability to create a Team within the application is enough for a user to go to other tools that don’t have the provisioning friction and thus taking the conversations and content to a provider that is out of your control. Even if you have the simplest IT driving provisioning process, it is still on the user to discover what your process is and initiate the process.
If you want to enforce specific Teams policies, we have the ability to do that with a number of other IT controls.
You can apply your own custom policies to Office 365 and thus Teams creation.
The policy allows you to define:
Teams naming conventions including prefix, suffix, and user attributes including department, company, office, state or province, countryorregion, Title
Define a list of blocked words that cannot be used for team creation. Users with administrative rights will be allowed to create teams with these reserved words
Add a link to your organizational guidelines for team creation and use
Note: I do not recommend using a prefix as part of your naming convention as this will have all teams start with a common prefix and gives you less room to identify the team purpose in the Teams view. I used [Department] as a prefix in this example to show the experience
Teams provides a superset of teams options when compared to other enterprise tenants. These options allow different permissions and OneNote notebook structures based on the collaboration type.
The Anyone team is the standard team option that is available to enterprise deployments and will often be the team type used for more staff and student group collaboration scenarios.
Ask everyone to install on their smartphone and wait to ensure there’s no issues.
Important to have people participate from both phone and laptop to ensure they see Teams across experiences
Ask everyone to install on their smartphone and wait to ensure there’s no issues.
Important to have people participate from both phone and laptop to ensure they see Teams across experiences
Ask everyone to install on their smartphone and wait to ensure there’s no issues.
Important to have people participate from both phone and laptop to ensure they see Teams across experiences
In the Microsoft 365 admin portal you have the ability to configure which Teams store apps are available to your users. This is useful in cases where you need to review the privacy statements of applications before they are available for use.
There are some built-in protection mechanisms already. Applications published to the store must be approved by Microsoft including a review process by both the Office and Teams application teams. Reviews include the app’s integration with Teams, the first run experience, and how it copes with unexpected input.
You can load your own LoB apps into Teams store.
Ask everyone to install on their smartphone and wait to ensure there’s no issues.
Important to have people participate from both phone and laptop to ensure they see Teams across experiences