Start Guide for data based optimization techniques
1. EEO’s Global Support
Welcome To Microsoft
New Hire’s Start Guide
The following steps will help you set up your
account, access Microsoft resources, and
use VPN, Microsoft Teams, Live Events, and
Engineering resources whether you are at
a Microsoft location or not.
2. Table of contents
Enable your corporate account
• Anatomy of a corporate account
• Secure your corporate account—Network password
• Secure your corporate account—Two-Factor Authentication
Set up your PC
• Friendly guides to help you set up your work device
• Join Azure Active Directory
• Use Windows Virtual Desktop, connect from any device
Be productive anywhere
• Access your key Microsoft productivity services
• Connecting remotely to Microsoft resources
• Get your key Microsoft productivity apps
Set up your Mac device
• Get started on a Mac
• Connect remotely to Microsoft resources and get core productivity apps
Working from your mobile device (optional)
• Be productive when you don’t have your PC
Get help when you need it
• Helpdesk contact information
• Helpful resources: //CSEWeb, support options (Yammer, phone, online, in-
person), Work Smart, Learning portal, data storage and governance, privacy
and data protection
3.
4. Anatomy of a corporate account
Congratulations! You now have a corporate account that gives you access to Microsoft resources. It’s important that
you know how to use, and secure, your account.
Your corporate account consists of two parts; your local domain and your username (also called your alias).
Local domain + User-
name
= Your corporate account
Examples:
Makayla Example*
Works in Building 37
redmond + makaylax = REDMONDmakaylax
Javier Example*
Works in Tokyo
fareast + javierx = FAREASTjavierx
*no relation
5. Secure your corporate account—Network password
You should have received your alias, temporary network password and domain from your manager or during your
orientation experience. If not, contact your hiring manager.
Reset your temporary password
Visit https://aka.ms/initialpw to create a new, strong password.
Once you have set your password, you won't have to reset it!
(This can be performed on any internet facing device.)
e at least 8 characters long and contain:
• Upper-case letter(s)
• Lower-case letters
• Numbers
• Symbols (~!@#$)
Your password must NOT contain:
• Any previous passwords used at Microsoft
• Part of your name or title
• Sequential numbers or letters (111, 123, aaa, abc, etc.)
MSProtect
Password guidelines:
If there are any issues with the temporary password, please visit https://aka.ms/testpassword to ensure it is working
If that fails, ask your manager to reset your password at https://aka.ms/coreidentity
6. Secure your corporate account—Two-Factor Authentication
Step 1: Register your mobile device
1. Visit https://aka.ms/ringring or
https://phoneregistration.microsoft.com
2. Select the Use manager approval link below the
Next button
3. Follow the prompts to enter your mobile device
information and create a PIN and then select Submit
Your manager will receive an email to approve your
request. This must be approved by your manager
before proceeding to the next step.
Step 2: Configure Two-Factor Authentication
on your mobile device
(This can be performed on any internet facing device.)
1. Download Microsoft Authenticator from app from
your app store
2. Select Add account (or select the three dots icon and
then Add account)
3. Choose Work or school account and follow the
prompts
If your Microsoft Authenticator app shows an old account,
you should remove it before adding your new one.
1. For IOS: Select the three lines icon on the left > Edit
Accounts > select the red circle icon on the left to
remove the account.
2. For Android: Select the click three dots on the right >
Edit Accounts > Select the red X on the right to
remove the account.
7.
8. Friendly guides to help you set up your work device
If provided a Microsoft device, you may see one of the two set up screens shown below. We have a separate guide for
each experience, so select the one appropriate for you.
Option 1: If your starting screen says, “Let’s start with region,” your
device is part of the AutoPilot program. Your setup guide is available
at http://aka.ms/APSetupPC or by scanning the QR code at the right.
Note: You will be automatically prompted to join Azure Active Directory during this
process and do not need to complete the steps on the next slide.
Option 2: If your starting screen says, “Let’s get started,” and
displays your keyboard language setting, the setup guide for your
device is available at SetupNewPC or by scanning the QR code at
the right.
Note: If you are working remotely, follow the instructions on the next slide to join your
device to Azure Active Directory to access internal websites like HRWeb and other
Microsoft resources.
9. Join Azure Active Directory
Option 2- continued: An internet connection will be required.
Step 1: Change the local administrator
password
1. From the Windows start menu, type and then select
Computer Management
2. Select Local Users and Groups in the left navigation
pane and open the Users folder
3. Right-click on Administrator
4. Choose Set Password and then select Proceed
5. Enter a new, strong password for the local
administrator account
Step 2: Join the Azure Active Directory
1. From the Windows start menu, type and then select
Access work or school
2. Select Connect and choose Join this device to Azure
Active Directory
3. Enter your Microsoft corporate email address in the
alias@microsoft.com format and select Next
4. Choose Sign in with a username and password instead
and enter your Microsoft alias and password when
prompted
5. Select Sign in with your phone for two-factor
authentication and authenticate from your mobile device
6. Select Join and then Done
10. Use Virtual Desktop with any device
Microsoft Windows Virtual Desktop (MS WVD) allows you to easily and securely access corporate applications, data,
and resources from any device, anywhere.
Follow the instructions below to start using WVD!
1. Go to aka.ms/installwvdclient to find and install the Microsoft Remote Desktop client app for your device;
when installed, open this app.*
2. On the let's get started screen, login with your alias@microsoft.com account and password, followed by
your Phone Authentication PIN.
3. After a few seconds, you will see CSEO WVD Icons. Select a vDesktop icon to the closest region to
you. You may be asked again to login with account and password, and Phone Authentication PIN.
4. After a one-time setup completes in 30-60 seconds, a virtual desktop appears. Open the Start menu to
find apps like Outlook for corporate email, Edge to access internal websites, Teams for calls and
meetings, and other apps for business.
5. When you first login to Outlook or other Office apps, you may be asked to activate a license. Use your
alias@Microsoft.com account to complete this step.
For windows users: If the Use This Account Everywhere On Your Device screen appears, uncheck Allow my
organization to manage my device and select This app only.
*Any non-FTE (vendor) users will need to request enrollment at https://aka.ms/JoinWVDEnterprise
For tips and FAQs for CSEO WVD vDesktop, visit: aka.ms/CSEOwvdFAQ
11.
12. Get your key Microsoft productivity apps
1. From the Windows start menu, type and then select Microsoft Teams
2. In the bottom left of the side bar, select Get app
Get tips and best practices for working remotely in Teams
http://onedrive.microsoft.com
1. From the Windows start menu, type and then select OneDrive
2. Enter your Microsoft corporate email address and choose Sign in
3. Select the folders you want to sync to your PC
https://Outlook.office365.com/owa/microsoft.com
1. From the Windows start menu, type and then select Outlook
2. At the welcome screen, select Yes to add an email account and choose Next
13. Connecting remotely to Microsoft resources
MSFTVPN is our VPN solution
for remote connectivity on Windows 10 devices.
Connect to MSFTVPN
1. From the Windows start menu, type and then select
VPN Settings
2. Select MSFTVPN and choose Connect
Note: If you do not see an option for MSFTVPN on your
new device, do not to worry. An automatic process will
push the latest version to your device for you. This
process may take up to 24 hours.
https://aka.ms/remoteaccessfaq for more details.
For tips and best practices for working remotely, visit:
https://aka.ms/FlexibleWorkLearningResources
14.
15. Getting started on a Mac
If you will be using a Mac device for your work, you will need to install the Company Portal app and enroll the device
in Intune to access Microsoft resources.
1. Visit https://aka.ms/cpweb
2. Select the three lines icon (hamburger) in the upper
left and choose Devices
3. Select the gray bar that says, “Tap here to tell us
which device you’re using or add a new device” to
download the Company Portal app
4. When the download is complete, open the install
package and launch the Company Portal application
5. Enter the administrator credentials for the Mac
device and allow the Company Portal app access to
the device keychain, when prompted
6. Open Finder and run the Company Portal app. Sign
in using your Microsoft credentials and
authenticate using two-factor authentication on
your mobile device
7. Select Begin and follow the prompts to enroll your
device in Intune
8. Your device will automatically sync with Intune to
install access certificates along with the management
profile
9. When prompted, allow access to the device keychain
again and approve the management profile in
System Preferences > Profiles > Approve button
16. Connect remotely to Microsoft
resources on a Mac
VPN for Mac
1. Download the Mac GlobalProtect agent from
https://aka.ms/macvpninstall
2. Open GlobalProtect to begin installation process and select
Continue on the Introduction screen
3. On the Installation Type screen, choose GlobalProtect >
Continue > Install
4. When prompted, enter your password and select Install Software
5. When complete, you will receive a system pop-up to allow Palo
Alto Network from System Preferences > Security & Privacy
6. Select Open Security Preferences, choose Allow and then Close
7. Select the GlobalProtect icon in your task bar. Enter portal
address msftvpn-alt.ras.microsoft.com and choose Connect
8. When prompted to sign in, choose Sign in with a username and
password instead. Provide your password and choose Sign in
9. When you receive the second authentication prompt, choose
Sign in with your phone or token device and then approve the
two-factor authentication request on your mobile device
10. You should see that GlobalProtect is now connected.
Get core productivity apps for
a Mac
https://portal.office.com/OLS/MySoftware.aspx
https://teams.microsoft.com/download
Configure Microsoft email on Outlook for Mac
1. In Outlook, select Outlook > Preferences > Accounts > Add
Email Account
2. When prompted for your username, enter your full Microsoft
email address in the alias@Microsoft.com format
3. Choose Add Account > Connect
4. Enter your network password and choose Sign in
5. Approve the two-factor authentication request on your mobile
device and then close the Add Accounts window
6. Your account (mail, calendar, contacts) will show up under the
name of the mailbox you added
17.
18. Be productive when you don’t have your PC
For many people, working from a mobile device helps them be their most productive. Visit the Modern Access page to learn more and
to determine if it’s right for you. To easily enable and configure your phone, scan the appropriate QR codes for your device to install
Company Portal and then download Outlook, Microsoft Teams, and other Microsoft mobile applications. (Turn on your device’s
camera to scan QR codes)
For Android devices
Intune Company Portal
Microsoft Teams
Microsoft Outlook
For iOS devices
Intune Company Portal
Microsoft Teams
Microsoft Outlook
19.
20. Support Contact Information
Global Helpdesk Support
If you require assistance, please visit aka.ms/cseweb
where you can find options to engage our Global
Helpdesk (GHD) 24 X 7 based on your location.
Password Reset - aka.ms/sspm
Phone Registration – aka.ms/ringring
Tech Link Location
Tech Link and AV Link Support requiring on-site
presence will vary by site depending on site closure.
Please visit Tech Link site for status of locations or
on-site support near you.
Tips and tricks for working remotely
aka.ms/FlexibleWorkLearningResources
Please visit aka.ms/WorkFromHome for instructions
on how to get connected via VPN remotely and
other best practices that will help you stay
connected and productive.
22. Request assistance with an
issue you are having at
CSEWeb > Create a Helpdesk ticket
or visit:
https://microsoft.service-now.com/
An incident record will be
created and managed through
to successful resolution with the
ServiceDesk.
23. local Tech Link
Walk-in service
Hardware and software
AV Link
Note: check link for hours of operations
29. Data storage and governance
https://aka.ms/classification
(personal data)
(corporate data)
Non-Business
Represents data that is non-business related and does
not belong to Microsoft.
Public Represents data designed for public consumption.
General
Represents business data which is NOT meant for
public consumption.
Confidential
Represents sensitive business data which could cause
business harm if over-shared.
Highly
Confidential
Represents very sensitive business data which would
certainly cause business harm if over-shared.
30. Privacy and data protection
Information Rights
Management (IRM)
• Enables you to apply specific access permission to
documents, workbooks, and presentations to prevent
unauthorized forwarding, printing, or copying.
• You can also use IRM to set expiration dates after which
files no longer are available or usable.
BitLocker Drive
Encryption & BitLocker
to Go
• Protects data on your computer by preventing
unauthorized access to your hard drive.
• BitLocker To Go prevents unauthorized access to portable
drives such as USB drives (thumb drives).
Take the Privacy 101 training to learn more (Mandatory)
