Best practices: Management for cloud managed

The Best Practices Guide includes deployment recommendations and real-world examples from the Office 365 Product Group and delivery experts from Microsoft Services. For a list of all the articles, see Best practices.

Cloud Managed wants to apply GPO management to their Office 365 ProPlus systems. They want to test specific scenarios that they are likely to encounter.

The items are:

  • Configure infrastructure

  • License users

  • Roll back a build

  • Switch channels

  • Configure policy

    • Group Policy for desktops

    • Group Policy for OneDrive for Business

Configure infrastructure

Office 365 is a cloud service; therefore, it requires Internet access. If you manage by URL, then updates are less frequent and typically only needed when new products or features are released. However, if you manage by IP address range, then changes occur more often. The following page should be referenced and subscribed to in an RSS feed: Office 365 URLs and IP address ranges.

License users

See Assign licenses to user accounts with Office 365 PowerShell.

Roll back a build

Cloud Managed can use a script that is hosted in a network share to perform a client rollback. For step by step guidance on performing a rollback using the OfficeC2RClient.exe update engine, seeChannel management.

Switch channels

To change a user's channel membership, see Channel management.

Configure policy

We highly recommend that you periodically check for new GPO templates. As new Office features are rolled out, GPOs are often updated and new Office management GPOs are released.

Office 2016 Administrative Template files (ADMX/ADML) and Office Customization Tool.

Additional Group Policy for VDI

An additional GPO should be considered for Outlook and Cached Mode for shared workstations. Cloud Managed has set the value to 5 days.

Group Policy for OneDrive

See Administrative settings for the OneDrive for Business Next Generation Synch Client.

Cloud Managed Mac Client Updates

Similar to Office 365 ProPlus, Microsoft provides new builds that contain application updates. This means that individual security or feature updates cannot be downloaded or installed. However, with a locally managed deployment, admins can select which applications to apply updates to. Office 2016 for Mac has a program named Microsoft AutoUpdate to automatically check for updates daily. Microsoft AutoUpdate can be configured to daily, weekly, monthly, or manually depending on preferences.

Because Cloud Managed has a very limited Mac population, they should configure Microsoft AutoUpdate to download updates automatically to users' computers, and then have the users manually install the updates.