Microsoft 365

Integrate Microsoft 365 with ADManager Plus to unlock advanced user management and reporting capabilities. This webpage enables you to configure account settings, permissions, and features to ensure seamless operations across your Microsoft 365 environment. Start configuring to enhance your management experience.

Prerequisites for configuring a Microsoft 365 account in ADManager Plus

Before you set out to add a Microsoft 365 account in ADManager Plus, ensure that:

  • You have Microsoft .NET version 4.8 and PowerShell version 5.1 installed.
  • The MSOnline PowerShell module for Azure Active Directory is installed on the machine where ADManager Plus is installed.
  • Your firewall settings allow access to these domains.
  • The Microsoft 365 tenant account that is to be configured in ADManager Plus must have the global admin or user administrator privileges.
  • The 64-bit version of the product must be installed.
  • Note: The Microsoft Graph API does not provide functionality for executing the MFA settings management action and editing properties of objects using management templates in ADManager Plus. Therefore, MSOnline PowerShell module is utilized to perform these tasks.

Installing Microsoft .NET version 4.8 and PowerShell version 5.1

Microsoft .NET Framework

  1. To check if Microsoft .NET Framework is installed, open Command Prompt from Run. Enter the following command:

    reg query "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\NET Framework Setup\NDP\v4\full" /v version

  2. Check the displayed version. If the version is below 4.8, install Microsoft .NET Framework version 4.8 from here.

PowerShell

  1. To check if PowerShell is installed, type PowerShell from Run. If PowerShell is installed, check for its version number by running the following command in PowerShell:

    $PSVersionTable

  2. If the version is below 5.1 or if PowerShell is not installed, install PowerShell version 5.1 from here.

Installing the MSOnline PowerShell module using the PowerShell cmdlet

  1. To check if this module is installed, open PowerShell and enter the following cmdlet:

    Get-Module -ListAvailable -Name MSOnline.

    This will list the module if it is installed.

  2. If the version of the module installed is other than 1. 1. 183. 81, uninstall the MSOnline module by opening PowerShell as an administrator and entering the following cmdlet:

    Uninstall-Module MSOnline

  3. To install the module, open PowerShell as an administrator and enter the following cmdlet:

    Install-Module -Name MSOnline -RequiredVersion 1.1.183.81 -Force

List of domains that must be allowed by your firewall

The following domains must be allowed through your firewall.

Table 1: Domains that must be allowed by Azure AD general cloud users

Module Endpoint
REST API login.microsoftonline.com
graph.windows.net
graph.microsoft.com
manage.office.com
portal.office.com
login.windows.net/common/oauth2/token
admin.microsoft.com/fd/CommerceAPI/my-org
Exchange Online outlook.office.com
outlook.office365.com/powershell-liveid

Table 2: Domains that must be allowed by Azure China cloud users

Module Endpoint
REST API login.partner.microsoftonline.cn
graph.chinacloudapi.cn
microsoftgraph.chinacloudapi.cn
manage.office.cn
portal.azure.cn
login.partner.microsoftonline.cn/common/oauth2/token
Exchange Online partner.outlook.cn
partner.outlook.cn/PowerShell

Table 3: Domains that must be allowed by Azure United States cloud users

Module Endpoint
REST API login.microsoftonline.us
graph.windows.net
graph.microsoft.us
manage.office.us
portal.azure.us
login.microsoftonline.us/common/oauth2/token
Exchange Online outlook.office365.us
outlook.office365.us/powershell-liveid
Note: To automate Microsoft 365 tenant configuration, refer to this page.

Don't see what you're looking for?

  •  

    Visit our community

    Post your questions in the forum.

     
  •  

    Request additional resources

    Send us your requirements.

     
  •  

    Need implementation assistance?

    Try OnboardPro