diff --git a/education/windows/school-deployment/device-management.md b/education/windows/school-deployment/device-management.md index 52430b3fe4..8ea78e3660 100644 --- a/education/windows/school-deployment/device-management.md +++ b/education/windows/school-deployment/device-management.md @@ -11,9 +11,7 @@ ms.author: paoloma #ms.reviewer: manager: aaroncz ms.collection: education -appliesto: -- ✅ Windows 10 -- ✅ Windows 11 +#appliesto: --- # Set up device management diff --git a/education/windows/school-deployment/identity.md b/education/windows/school-deployment/identity.md index 3fa56379ce..3762e1eb92 100644 --- a/education/windows/school-deployment/identity.md +++ b/education/windows/school-deployment/identity.md @@ -18,14 +18,14 @@ ms.collection: education The Microsoft platform for education simplifies the management of Windows devices with Intune for Education and Microsoft 365 Education. The first, fundamental step, is configuring the identity infrastructure to manage user access and permissions for your school. -Microsoft 365 Education leverages Azure Active Directory (Azure AD), Microsoft's cloud-based identity platform, to manage user identities and authentication. Azure AD is included with the Microsoft 365 Education subscription, and it provides authentication and authorization to any Microsoft cloud services. Identity objects are defined in Azure AD for human identities, like students and teachers, as well as non-human identities, like devices, services, and applications. Once users get Microsoft 365 licenses assigned, they will be able to consume services and access resources within the tenant. With Microsoft 365 Education, you can manage identities for your teachers and students, assign licenses to devices and users, and create groups for the classrooms. +Azure Active Directory (Azure AD), which is included with the Microsoft 365 Education subscription, provides authentication and authorization to any Microsoft cloud services. Identity objects are defined in Azure AD for human identities, like students and teachers, as well as non-human identities, like devices, services, and applications. Once users get Microsoft 365 licenses assigned, they will be able to consume services and access resources within the tenant. With Microsoft 365 Education, you can manage identities for your teachers and students, assign licenses to devices and users, and create groups for the classrooms. ## Setting up a Microsoft 365 Education tenant -In this section, you will create and configure a Microsoft 365 tenant and explore the Microsoft 365 admin center. +In this section, you'll create and configure a Microsoft 365 tenant and explore the Microsoft 365 admin center. ### Create a Microsoft 365 tenant -If you don't already have a Microsoft 365 tenant, you will need to create one. +If you don't already have a Microsoft 365 tenant, you'll need to create one. For more information, see [Create your Office 365 tenant account](/microsoft-365/education/deploy/create-your-office-365-tenant). @@ -35,7 +35,7 @@ For more information, see [Create your Office 365 tenant account](/microsoft-365 The **Microsoft 365 admin center** is the hub for all administrative consoles for the Microsoft 365 cloud. To access the Microsoft 365 admin center: -1. Go to [admin.microsoft.com](https://admin.microsoft.com/Adminportal/Home) +1. Go to [admin.microsoft.com](https://admin.microsoft.com/Adminportal/Home?azure-portal=true) 1. Sign in with the global administrator you used when [created the Microsoft 365 tenant](#create-a-microsoft-365-tenant) As shown below, form the Microsoft 365 admin center you can access different administrative dashboards: Azure Active Directory, Microsoft Endpoint Manager, Intune for Education, and others. For more information, see [Overview of the Microsoft 365 admin center](/microsoft-365/admin/admin-overview/admin-center-overview), and then return to this document to continue with the steps below. @@ -54,7 +54,7 @@ With the Microsoft 365 tenant in place, it's time to add users, create groups, a ### School Data Sync -School Data Sync imports and synchronizes SIS data to create classes in Microsoft 365, such as Microsoft 365 groups and class teams in Microsoft Teams. SDS can be used to create new, cloud-only identities or to evolve existing identities. Existing users evolve into *students* and *teachers* and are associated with a *grade*, *school*, and other education-specific attributes and associations. +School Data Sync (SDS) imports and synchronizes SIS data to create classes in Microsoft 365, such as Microsoft 365 groups and class teams in Microsoft Teams. SDS can be used to create new, cloud-only, identities or to evolve existing identities. Users evolve into *students* or *teachers* and are associated with a *grade*, *school*, and other education-specific attributes. For more information, see [*Overview of School Data Sync*](/schooldatasync/overview-of-school-data-sync). @@ -68,7 +68,9 @@ For more information, see [*Overview of School Data Sync*](/schooldatasync/overv ### Azure Active Directory sync -To integrate an on-premises directory with Azure Active Directory, you can use **Microsoft Azure Active Directory Connect** to synchronize users, groups, and other objects. Azure AD Connect lets you configure the authentication method appropriate for your school, including [password hash synchronization](/azure/active-directory/hybrid/whatis-phs), [pass-through authentication](/azure/active-directory/hybrid/how-to-connect-pta), or [federation integration](/azure/active-directory/hybrid/how-to-connect-fed-whatis) with Active Directory Federation Services (AD FS) or a non-Microsoft SAML identity provider. For more information, see [Set up directory synchronization for Microsoft 365](/office365/enterprise/set-up-directory-synchronization), and then return to this document to continue with the steps below. +To integrate an on-premises directory with Azure Active Directory, you can use **Microsoft Azure Active Directory Connect** to synchronize users, groups, and other objects. Azure AD Connect lets you configure the authentication method appropriate for your school, including [password hash synchronization](/azure/active-directory/hybrid/whatis-phs), [pass-through authentication](/azure/active-directory/hybrid/how-to-connect-pta), or [federated authentication](/azure/active-directory/hybrid/how-to-connect-fed-whatis). + +For more information, see [Set up directory synchronization for Microsoft 365](/office365/enterprise/set-up-directory-synchronization), and then return to this document to continue with the steps below. ### Create users manually @@ -76,26 +78,27 @@ In addition to the above methods, you can manually add users and groups, and ass There are two options for adding users manually, either individually or in bulk: -1. To add students and teachers as users in Microsoft 365 Education individually: - - Go to [admin.microsoft.com](https://admin.microsoft.com/) to access the Microsoft 365 admin center - - Select **Users** > **Active users** > **Add a user** - +1. To add students and teachers as users in Microsoft 365 Education *individually*: + - Sign in to the [Microsoft Entra Manager admin center](https://entra.microsoft.com). + - Select **Azure Active Directory** > **Users** > **All users** > **New user** > **Create new user** For more information, see [Add users and assign licenses at the same time](/microsoft-365/admin/add-users/add-users) 1. To add *multiple* users to Microsoft 365 Education: - - In the Microsoft 365 admin center, select **Users** > **Active users** > **Add multiple users** - - Follow the **Import multiple users** panel to assign accounts - For more information, see [Add multiple users in the Microsoft 365 admin center](/microsoft-365/enterprise/add-several-users-at-the-same-time). + - Sign in to the [Microsoft Entra Manager admin center](https://entra.microsoft.com). + - Select **Azure Active Directory** > **Users** > **All users** > **Bulk operations** > **Bulk create** +For more information, see [Add multiple users in the Microsoft 365 admin center](/microsoft-365/enterprise/add-several-users-at-the-same-time). ### Create groups Creating groups is important to simplify multiple tasks, like assigning licenses, delegating administration, deploy settings, applications or to distribute assignments to students. To create groups: +- Sign in to the [Microsoft Entra Manager admin center](https://entra.microsoft.com). +- Select **Azure Active Directory** > **Groups** > **All groups** > **New group** - Go to [admin.microsoft.com](https://admin.microsoft.com/) to access the Microsoft 365 admin center -- Select **Teams & groups** > **Active teams & groups** -- Select **Add a group** -- On the **Choose a group type** page, select **Microsoft 365** > **Next** +- On the **New group** page, select **Group type** > **Security** +- Provide a group name and add members, as needed +- Select **Next** -Complete the task by following the instruction [Create a group in the Microsoft 365 admin center](/microsoft-365/admin/create-groups/create-groups?view=o365-worldwide). +For more information, see [Create a group in the Microsoft 365 admin center](/microsoft-365/admin/create-groups/create-groups?view=o365-worldwide). ### Assign licenses @@ -103,7 +106,7 @@ The recommended way to assign licenses is through group-based licensing. With th To assign a license to a group: -1. Sign in to the [Microsoft Entra Manager admin center](https://entra.microsoft.com). +1. Sign in to the [Microsoft Entra Manager admin center](https://entra.microsoft.com) 1. Select **Azure Active Directory** > **Show More** > **Billing** > **Licenses** 1. Select the required products that you want to assign licenses for > **Assign** 1. Add the groups to which the licenses should be assigned @@ -114,11 +117,11 @@ For more information, see [Group-based licensing using Azure AD admin center](/a ## Configure school branding -Configuring your school branding helps customize the look and feel of the Windows Autopilot process, which makes the experience more familiar to students and teachers. For your school branding to appear during the Windows out-of-box experience (OOBE), you need to configure it in Azure Active Directory. +Configuring your school branding enables a more familiar Autopilot experience to students and teachers. With a custom school branding, you can define a custom logo and a welcome message, which will appear during the Windows out-of-box experience. To configure your school's branding: -1. Sign in to the [Microsoft Entra Manager admin center](https://entra.microsoft.com). +1. Sign in to the [Microsoft Entra Manager admin center](https://entra.microsoft.com) 1. Select **Azure Active Directory** > **Show More** > **User experiences** > **Company branding** 1. You can specify brand settings like background image, logo, username hint and a sign-in page text @@ -135,7 +138,7 @@ For more information, see [Add branding to your directory](/azure/active-directo If you decide to enroll Windows devices using provisioning packages instead of Windows Autopilot, you must ensure that the provisioning packages can join Windows devices to the Azure AD tenant. To allow provisioning packages to complete the Azure AD Join process: -1. Sign in to the [Microsoft Entra Manager admin center](https://entra.microsoft.com). +1. Sign in to the [Microsoft Entra Manager admin center](https://entra.microsoft.com) 1. Select **Azure Active Directory** > **Devices** > **Device Settings** 1. Under **Users may join devices to Azure AD**, either select **All** or **Selected** while specifying the Admin account that will create provisioning packages 1. Select Save diff --git a/education/windows/school-deployment/images/entra-assign-licenses.png b/education/windows/school-deployment/images/entra-assign-licenses.png index a1f0ed6355..3f031053d5 100644 Binary files a/education/windows/school-deployment/images/entra-assign-licenses.png and b/education/windows/school-deployment/images/entra-assign-licenses.png differ diff --git a/education/windows/school-deployment/images/entra-branding.png b/education/windows/school-deployment/images/entra-branding.png index 9ca4e34ed4..7201c7386d 100644 Binary files a/education/windows/school-deployment/images/entra-branding.png and b/education/windows/school-deployment/images/entra-branding.png differ diff --git a/education/windows/school-deployment/images/entra-device-settings.png b/education/windows/school-deployment/images/entra-device-settings.png index 327f20c831..ef18b7391f 100644 Binary files a/education/windows/school-deployment/images/entra-device-settings.png and b/education/windows/school-deployment/images/entra-device-settings.png differ diff --git a/education/windows/school-deployment/images/entra-tenant-name.png b/education/windows/school-deployment/images/entra-tenant-name.png index baccbfa772..4cf21148d1 100644 Binary files a/education/windows/school-deployment/images/entra-tenant-name.png and b/education/windows/school-deployment/images/entra-tenant-name.png differ diff --git a/education/windows/school-deployment/images/m365-admin-center.png b/education/windows/school-deployment/images/m365-admin-center.png index bfafaa58d5..d471b441dd 100644 Binary files a/education/windows/school-deployment/images/m365-admin-center.png and b/education/windows/school-deployment/images/m365-admin-center.png differ