Planning Microsoft 365 architecture

In the previous posts we have discussed what is Microsoft 365 and different subscription avaliable in the microsoft 365.If haven't seen the post please take a look Link.In this post we are going to discuss about the planning microsoft architecture.Let get started

Let's say a company decides that they want to migrate to Microsoft 365. So we have to plan an architect for the deployment and implementation on Microsoft 365.

The migration plan includes few phases

• Microsoft 365 evaluation

• Microsoft 365 on-premises integration

• Microsoft 365 planning consideration

Microsoft 365 evaluation

Microsoft evaluation as the name we need make few evalution before we migrate to microsoft 365.Let's discuss the few criteria.

• Network

  We want secure and high Bandwidth network connection to access microsoft 365 and to make a stable connection.

• Identity

  It is used to ensure that the right person with the right role can access the right information .In the identity 4 main area we have to focus

  • Provisioning

    The tool we are going the to identify who is accessing microsoft 365 usually Azure Active directory(AD).Just to undestand Active directory is a database that store the user detail and their access. so that admin can easily moniter the user with in the network.

  • Authentication

    PHS (password hash sync): The Hashed password of the on-premises AD is synchronised with Azure AD so user can log in to Azure AD with same password To Perform sync Azure AD connect is used

    PTA (passthrough authentication): It works somewhat similar to PHS but is not synchronised with Azure AD.The user password is validated directly on On-premises Active directory simply it redirects the validation through an agent.

    

    Federated Authentication:Azure Ad redirects the request to to another identity provider that is a third party identity provider.

    MFA (Multi factor authentication):It provieds additional level of security.It can the done using Authenticator app, sms, third parth app.etc

    

    Authorization

    Once the user Authorized and logged we have to decide what they are authorized to use in the network.

    Auditing

    To manange and make sure the user have access to information they should access.

• Security

  Creating a security team to manage the access and move the security control to the cloud even in a hybrid environment so that we can control the security in the cloud.

• Environment type:

  We have to decide what environment we are going the use

  • Hybrid environment ( on-premises + cloud environment).

  • Cloud environment.

  If we choose Hybrid environment we have to consider few other work loads

  • Exchange servers(mail server)
  • Sharepoint server
  • Active directory Domain services
  • Skype for business server

  These workloads have to be shared to the admin who is proficient in these workloads and can organize our deployment team.

I hope this article will be informative and useful, in the upcoming article we will discuss more on planning your Microsoft 365 architecture and Microsoft 365 integration. Share it with your friend who might find it useful.