You have been hired as a consultant by Mercury USA, a small logistics company that migrated to Microsoft Office 365.

You have been hired as a consultant by Mercury USA, a small logistics company that migrated to Microsoft Office 365. Mercury needs your advice because their Cloud Administrator recently left the company, but she left the credentials and other vital information related to Microsoft 365 accounts was documented.

The CEO of Mercury has provided the following information.

• Microsoft Tenant Name: mercuryusa.onmicrosoft.com
• Procured 25 Microsoft 365 licenses

The CEO wants you to address the following items.

• Change the tenant name from mercuryusa.onmicrosoft.com to mercuryusa.com
• Microsoft DNS servers to host the zone name
• Explain the nature of at least one user account that will have global administrator rights for the Mercury USA tenant.
• Users who have left the organization still have Microsoft 365 licenses while the new employees do not.

 

Solution

1. Changing the tenant’s name

According to Domains FAQ (n.d.), the only approach to changing the tenant’s name is by visiting Microsoft 365 account and particularly on the admin page. In addition, there is a need to purchase a new domain and set it as the default and for the purpose of this case study, the mercuryusa.com domain has been suggested as the new domain that should be considered when changing the domain name to a new domain. Microsoft (2021) illustrated that if you visit the domains page on the Microsoft 365 account, you will be able to get the option and you can successfully add a new tenant name and set it as the default one. It is also essential to contact Microsoft 365 support to deactivate the mercuryusa.onmicrosoft.com domain on their end since it will be no longer in use. This is the best and most significant way that the other domain may be dealt with since once a domain has been created on the server, it cannot be deleted and there is also the need to deactivate the other domain.

2. Microsoft DNS servers to host the zone name

Tutorial: Host your domain in Azure DNS (2021) defines the DNS zone as a portion of the DNS namespace which is controlled by a particular institution or administrator. A Domain Name System zone is an administrative space that permits for more granular management of DNS elements which includes authoritative nameservers. Therefore, domain name space can be referred to as a hierarchical tree with the Domain Name System root domain at the top. In this case study, it will be essential to log in to the Azure portal account in order to create a DNS zone. This procedure requires one to input the location and name of the resources group (Tutorial: Host your domain in Azure DNS, 2021). It is also important to note that one has to retrieve the DNS zone after creating the zone name.

3. The nature of at least one user account that can have global administrator rights for the Mercury USA tenant

According to Microsoft policies buying a tenant profile requires authorization and verification from the institutions or organization one. However, it is also recommended that one should be assigned some customized admin roles to tenants such as Password Admins (Assign admin roles, 2021). Also, one should note that whoever purchases subscription tenets from Microsoft reserves administrator rights and you only have to be specific about the subscription type-Mercury USA tenant (Assign Microsoft 365 licenses to user accounts, 2021). In addition, having many or several global threats poses a security threat to the account, and therefore, limiting the number of global administrators ensures that the security is not compromised in the system (Azure AD built-in roles, 2022).

4. Handling of Users who have left the organization but still have Microsoft 365 licenses while the new employees do not

For users who have left the organization and still possess the Microsoft 365 license, it will be necessary for them to be removed from the system. The global admin can revoke a license from a former employee and then transfer it to a new employee (Assign Microsoft 365 licenses to user accounts, 2021). However, revoking a license in the group-based account by removing a user automatically revokes the license. In addition, revoking licenses in group licenses is much easier since it occurs automatically once a user has been removed.

 

 

References

Assign admin roles. (December 8, 2021). Assign admin roles. Microsoft. https://docs.microsoft.com/en-us/microsoft-365/admin/add-users/assign-admin-roles?view=o365-worldwide

Assign Microsoft 365 licenses to user accounts. (October 6, 2021). Retrieved from: https://docs.microsoft.com/en-us/microsoft-365/enterprise/assign-licenses-to-user-accounts?view=o365-worldwide

Azure AD built-in roles. (March 18, 2022). Retrieved from: https://docs.microsoft.com/en-us/azure/active-directory/roles/permissions-reference

Domains FAQ. (n.d.). Domains FAQ. Microsoft 365. https://docs.microsoft.com/en-us/microsoft-365/admin/setup/domains-faq?redirectSourcePath=%252fen-gb%252farticle%252fAbout-your-initial-onmicrosoft-com-domain-in-Office-365-b9fc3018-8844-43f3-8db1-1b3a8e9cfd5a&view=o365-worldwide

Microsoft 365. (February 4, 2021). Remove or Delete a former employee. Microsoft. https://docs.microsoft.com/en-us/microsoft-365/adm.

Tutorial: Host your domain in Azure DNS. (2021). Microsoft. https://docs.microsoft.com/en-us/azure/dns/dns-delegate-domain-azure-dns