Microsoft MS-700 - Managing Microsoft Teams

To prevent incoming Teams call notifications when users are already on a Teams call or in a Teams meeting, you can use the Teams admin center to enable the Mute notifications during meetings and calls option. This option will suppress the incoming call notifications without rejecting the call. The caller will still hear the ringing tone and the callee can still answer the call from the Teams app or the taskbar. Here are the steps to enable this option:

Sign in to the Teams admin center with your Microsoft 365 username and password 1 .

In the left navigation, go to Teams > Teams update policies.

Select an existing policy or create a new one by clicking Add.

In the Update policy pane, under Meetings and calls, turn on the toggle for Mute notifications during meetings and calls.

Click Save and then Close.

Note: You can assign different update policies to different users or groups of users. For more information, see Manage update policies in Microsoft Teams 2 .

To ensure that content on Microsoft SharePoint Online sites can be shared only with new and existing guest users, you need to limit the external sharing settings in the SharePoint admin center. Here are the steps to follow:

Sign in to the SharePoint admin center with your admin credentials.

Go to  Policies   >   Sharing .

Under  External sharing , drag the  SharePoint  slider down to  New and existing guests . (The  OneDrive  slider is dependent on SharePoint and will also be set to  New and existing guests .)

Under  More external sharing settings , check the box  Allow only users in specific security groups to share externally  and select  Manage security groups .

Add the security groups that contain the users who are allowed to share content with guest users. You can also create a new security group if needed.

Click  Save  to apply the settings.

To ensure that when users dial emergency numbers, the call is routed based on the user’s current location, you need to enable the external location lookup mode in Teams. This mode allows Teams to use the location services of the device’s operating system to suggest an emergency address for the user. The user can then confirm, edit, or enter a new address, which will be used to route the emergency call to the appropriate Public Safety Answering Point (PSAP). Here are the steps to follow:

Sign in to the Teams admin center with your admin credentials.

Go to  Voice   >   Emergency policies .

Select  Add .

Enter a name for the emergency calling policy, for example, “E911WFH”.

Turn on  External location lookup mode .

Select  Apply  to create the policy.

To assign the policy to the users who need it, go to  Users  on the left menu and select the users that you want to apply the policy to. You can use the filters or the search box to find them.

On the right pane, under  Policies , select  Edit  next to  Emergency calling policy .

Choose the policy that you created from the drop-down list and click  Apply .

To provide only Adele Vance with the ability to turn on and off Teams preview features, you need to create and assign a custom update policy for her. Here are the steps to do so:

Sign in to the Microsoft Teams admin center with your Microsoft 365 username and password 1 .

In the left navigation, go to Teams > Teams Update policies.

Select Add to create a new policy or select an existing policy to open Update policy.

Name the update policy, add a description, and select Enabled from the drop-down menu for Allow public preview. This option enables Teams Public Preview regardless of whether a user is enrolled in Office Current Channel (Preview). The end user must also opt in to Teams public preview in their Teams app 2 .

Click Save and then Close.

In the left navigation, go to Users and then search for Adele Vance from the list of users.

In the user details page, go to Policies and then click Edit next to Assigned policies.

In the Assigned policies pane, under Update policy, select the policy that you created or modified in step 4 from the drop-down menu.

Click Apply and then Close.

Now, Adele Vance can tu rn on and off Teams preview features by following these steps in her Teams app 3 :

Select the three dots to the left of your profile to display the Teams menu.

Select About > Public preview.

Select Switch to Public preview or Switch back to standard version.

To ensure that the Approvals app is pinned to the top of the app bar of the Teams client for all members of the Retail team, you need to create a custom app setup policy and assign it to the Retail team members. Here are the steps to follow:

Sign in to the Teams admin center with your admin credentials.

Go to  Teams apps   >   Setup policies .

Select  Add .

Provide a name and description for the policy, such as Retail App Policy.

Optionally, turn on  User pinning  to allow users to pin apps and change the order of the pinned apps.

Under  Pinned apps , select  Add apps .

Search for the Approvals app and add it to the list of pinned apps. You can also add other apps that you want to pin for the Retail team members.

Click  Save  to create the policy.

To assign the policy to the Retail team members, go to  Users  on the left menu and select the users that belong to the Retail team. You can use the filters or the search box to find them.

On the right pane, under  Policies , select  Edit  next to  App setup policy .

Choose the Retail App Policy from the drop-down list and click  Apply .

To prevent users from deleting messages posted in private chats and channels, you need to manage the messaging policies in Teams. Here are the steps to follow:

Sign in to the Teams admin center with your admin credentials.

Go to  Teams apps   >   Messaging policies .

Select the policy that you want to modify, such as the global (Org-wide default) policy or a custom policy.

Turn off the following settings:  Owners can delete sent messages ,  Users can delete sent messages , and  Users can edit sent messages .

Click  Save  to apply the changes.

To set Microsoft SharePoint as the only cloud storage option for all teams, you need to use the Teams admin center to disable the third-party cloud storage services. Here are the steps to follow:

Sign in to the Teams admin center with your Microsoft 365 username and password 1 .

In the left navigation, go to Org-wide settings > Services & add-ins.

Under Cloud file storage, click Manage.

In the Cloud file storage pane, turn off the toggles for Box, Dropbox, Google Drive, and Citrix ShareFile. This will disable these services for all teams and users in your organization.

Click Save.

Now, Microsoft SharePoint will be the only cloud storage option for all teams. Users will be able to access SharePoint files from the Files tab in each team channel or from the Files app on the left side of Teams.

To restrict Teams bandwidth by network range, you can use the Network Roaming Policy feature 1 . This feature allows you to define different media bit rate settings for different network locations based on the IP address ranges. Here are the steps to accomplish your task:

Create a new network roaming policy with the desired media bit rate settings. For example, you can use the following PowerShell cmdlet to create a policy named “MiamiPolicy” with a maximum bit rate of 1000 Kbps for audio and video:

New-CsTeamsNetworkRoamingPolicy -Identity " MiamiPolicy " -MaxMediaBitRateKb 1000

Assign the network roaming policy to the network range of the Miami office. You can use the following PowerShell cmdlet to assign the policy to the 10.10.10.0/24 network range:

New-CsTeamsNetworkRoamingPolicyAssignment -PolicyName " MiamiPolicy " -IPAddressRange " 10.10.10.0/24 "

Verify that the policy is applied correctly by using the Get-CsTeamsNetworkRoamingPolicyAssignment cmdlet. You should see something like this:

Identity : 10.10 . 10.0 / 24

PolicyName : MiamiPolicy

IPAddressRange : 10.10 . 10.0 / 24

EffectiveTime : 8 / 1 / 2023 1 : 18 : 24 PM

LastUpdateTime : 8 / 1 / 2023 1 : 18 : 24 PM

LastUpdateBy : admin@XXXXXXXXXXX.onmicrosoft.com

LastUpdateBySid : S -1-5-21-XXXXXXXXXX-XXXXXXXXXX-XXXXXXXXXX-XXXXX

Note: You may need to wait for some time for the policy to take effect.

To ensure that only users from litwareinc.com can be added to Teams as guest users, you need to configure the guest access settings in Azure Active Directory (AAD). Here are the steps to follow:

Sign in to the Azure portal with your admin credentials.

Go to Azure Active Directory  >  External identities  >  External collaboration settings.

Under Collaboration restrictions, select Allow invitations only to the specified domains (most restrictive).

In the Allow invitations to these domains box, enter litwareinc.com. You can also add more domains if you want, separated by commas.

Click Save to apply the settings.

That’s it. You have successfully restricted the guest access in Teams to a specific domain. This means that only users with email addresses from litwareinc.com can be invited as guests to your teams.  You can also prevent guests from being added to a specific team by using sensitivity labels 1  or PowerShell 2 .

To restrict external Teams communication for both calling and personal chat to only organizational users that use the microsoft.com domain, you need to use the Teams admin center to configure the external access settings. Here are the steps to follow:

Sign in to the Teams admin center with your Microsoft 365 username and password.

In the left navigation, go to Org-wide settings > External access.

Under External access, turn on the toggle for Users can communicate with other Skype for Business and Teams users.

Under Cross-tenant access settings, click Manage settings.

In the Cross-tenant access settings pane, under Calling and chat, select Allow specific domains and then enter microsoft.com in the box below. This will allow your users to communicate with Microsoft users via calling and chat.

Click Save.

Note: You also need to make sure that microsoft.com has configured their external access settings to allow communication with your domain. See Communicate with users from other organizations for more details.