Overview of setup
Watch a short video about Microsoft 365 Business setup.
If you found this video helpful, check out the complete training series for small businesses and those new to Microsoft 365.
Most of the setup steps can be done in the setup wizard, but the other options are also listed.
Step 1: Add your domain and users
Add users. You can add users in any of the three ways:
Step 2: Set up security policies and configure devices
- Use the Setup wizard to configure device policies.
- You can also add more or edit them later in the admin center and in the Intune portal.
- The setup wizard will also set up basic threat protection and data loss prevention settings.
In addition to the security settings in the setup wizard, you can increase your security by adding the following settings:
- Email malware protection
- ATP anti-phishing
- Exchange Online Archiving
- Azure Information Protection (Plan1)
See also top 10 ways to secure your Microsoft 365 Business for a roadmap of best security practices.
Step 3: Set up and manage Windows 10 devices
After you run the set up wizard, you will want to proctect all the Windwos 10 computers in your organization.
- Windows 10 Pro is a prerequisite for Microsoft 365 Business, but if you have Windows 7 Pro, Windows 8 Pro, or Windows 8.1 Pro, your subscription entitles you to an upgrade to Windows 10 Pro.
- Follow the steps in secure Windows 10 PCs to set up policies for Windows 10 devices.
When you join a Windows 10 device to Azure AD, the policies you set for Windows 10 computers get applied to it. For more information, see Set up Windows devices for Microsoft 365 Business users.
Step 4: Install Office 365 Business
- You can automatically install Office in the Windows devices by using the setup wizard.
- Let users install Office apps for Windows and devices.
Use Autopilot to set up new devices
You can use Windows Autopilot to automatically pre-configure new Windows 10 devices for a user, but it might be easier to get a partner who can do this for you. You can also go to Microsoft Store, and ask a cloud technology expert to set up new devices that you purchase.
Access on-premises resources
If your organization uses Windows Server Active Directory on-premises, you can set up Microsoft 365 Business to protect your Windows 10 devices, while still maintaining access to on-premises resources that require local authentication. Follow the steps in Enable domain-joined Windows 10 devices to be managed by Microsoft 365 Business to set this up. This is the preferred method, and devices in this state are called Hybrid Azure AD joined devices.
If your business has a local Active Directory that contains some on-premises resources (such as file shares and printers), you can give your Azure AD-joined devices access to these resources by following the steps here: Access on-premises resources from an Azure AD-joined device in Microsoft 365 Business.