Microsoft 365 Administration: The Beginner's Complete Guide

← Back to blog

Every organization on the planet is on Microsoft 365 or moving towards it. Exchange Online, Teams, SharePoint, OneDrive, Intune, Entra ID (formerly Azure AD) — these are the backbone of modern enterprise IT.

That means M365 Administrators are in high demand everywhere. The MS-102 certification (Microsoft 365 Certified: Enterprise Administrator Expert) opens doors globally — including remote work opportunities that are very accessible from Nepal.

I'm currently working towards my own MS-102. Here's everything I've learned about getting started with M365 Administration.

What is Microsoft 365, Actually?

Microsoft 365 is a cloud-based subscription service that bundles:

🖥️ Office Apps — Word, Excel, PowerPoint, Outlook
📧 Exchange Online — cloud email and calendaring
💬 Teams — collaboration, chat, video meetings
📁 SharePoint + OneDrive — cloud file storage and intranets
🔐 Entra ID (Azure AD) — identity and access management
📱 Intune — device and mobile management
🛡️ Microsoft Defender — security across all services

As an M365 Admin, you're responsible for managing all of this for an organization.

The M365 Admin Center — Your Control Panel

Everything starts at admin.microsoft.com. This is the central portal where you manage users, licenses, and settings. To get hands-on experience for free, create a Microsoft 365 Developer tenant — 25 free E5 licenses for 90 days (renewable if you're actively using it). Sign up at developer.microsoft.com/microsoft-365/dev-program.

✅ Free lab environment

Microsoft 365 Developer Program gives you a FREE E5 tenant with 25 licensed users. This is the same E5 license used by enterprises — Defender, Intune, Entra P2, everything. No credit card needed. Set this up before you study anything else.

Key Admin Areas You Need to Master

👤

User Management

Create, modify, delete users. Assign licenses. Manage passwords and MFA.

🏢

Groups & Teams

Microsoft 365 Groups, Security Groups, Distribution Lists. Teams provisioning.

📧

Exchange Online

Mailboxes, mail flow rules, spam filtering, shared mailboxes, calendar access.

🔑

Entra ID

Identity, Conditional Access, MFA policies, role-based access control.

📱

Intune (Endpoint)

Enroll and manage devices, deploy policies, app management, compliance.

🛡️

Security & Compliance

Defender for M365, DLP policies, audit logs, information protection.

Day-to-Day Admin Tasks You'll Actually Do

Create a new user and assign license

Bread and butter. New employee joins — create their account, assign M365 Business Premium or E3/E5, set up MFA.

Reset a user's password / unlock account

Most common helpdesk ticket. Admin Center → Users → Active Users → select user → Reset password.

Set up MFA for an organization

Enforce MFA via Conditional Access or Security Defaults. Critical security task every organization should have done.

Configure mail flow rules (anti-spam)

Exchange Admin Center → Mail flow → Rules. Block certain senders, add external email warnings, automatic disclaimers.

Investigate a security alert

Check Microsoft Defender portal for login anomalies, risky sign-ins, suspicious app permissions. Read the audit log.

PowerShell for M365 Admins

The GUI is fine for basic tasks, but PowerShell is where real admins work. Bulk operations, automation, reporting — you can't do these efficiently without it. Learn the Microsoft Graph PowerShell SDK.

    PowerShell — Common M365 Admin Commands
# Connect to Microsoft Graph
Connect-MgGraph -Scopes "User.ReadWrite.All", "Directory.ReadWrite.All"

# Get all licensed users
Get-MgUser -Filter "assignedLicenses/\$count ne 0" -ConsistencyLevel eventual -All

# Create new user
New-MgUser -DisplayName "Test User" -UserPrincipalName "testuser@yourdomain.com" `
    -MailNickName "testuser" -AccountEnabled -PasswordProfile @{ Password = "TempPass123!" }

# Get users who have NOT registered MFA
Get-MgUser -All | Where-Object { $_.StrongAuthenticationMethods.Count -eq 0 }

# Force MFA re-registration for a user
Revoke-MgUserSignInSession -UserId "user@yourdomain.com"
  

🕉️ PowerShell tip

Learn Get-MgUser, Set-MgUser, New-MgUser, Remove-MgUser first — user management covers 60% of admin tasks. Then learn Exchange Online PowerShell (Connect-ExchangeOnline), then Intune.

The Certification Path

START

MS-900: Microsoft 365 Fundamentals

Optional but recommended if you're new to Microsoft cloud. Low cost, 1-2 weeks of study.

CORE

MS-102: Microsoft 365 Administrator

The main certification. Covers users, groups, Exchange, Teams, Entra ID, Intune, security & compliance. 60-90 days of serious study.

SECURITY

SC-400: Microsoft Information Protection Administrator

Specialization in compliance, DLP, and information governance. Pairs perfectly with MS-102.

ADVANCED

AZ-500: Azure Security Engineer

Where M365 and Azure security converge. This is where I'm headed after MS-102.

Free Study Resources

📖 Microsoft Learn (learn.microsoft.com) — free official learning paths for every exam
🎥 John Christopher on YouTube — best free MS-102 course
📝 MeasureUp Practice Tests — best paid practice exams
🛠️ M365 Developer Tenant — hands-on lab environment (free)
💬 r/Microsoft365 — real admin community, real scenarios

📋 Your 30-day plan

Week 1: Set up Developer tenant. Explore admin.microsoft.com. Create/delete users. Set up MFA. Week 2: Exchange Online admin — mailboxes, shared mailboxes, mail flow. Week 3: Entra ID — Conditional Access, RBAC roles. PowerShell basics. Week 4: Intune basics + Microsoft Defender overview. Take a practice test.

M365 Administration is one of the most job-relevant IT skills you can build right now. Organizations of every size rely on it. And with remote work, the jobs aren't limited to wherever you live. From Nepal to Norway — if you know M365, you're employable globally.

I'll be sharing my full MS-102 study journey on @thekalitechie — follow along and we'll get certified together. 🏔️

🕉️

Nash

@thekalitechie

Cybersecurity wizard from Nepal 🇳🇵. I cover Cybersecurity, Azure, M365 Administration, Networking, and Home Lab builds. Inspired by Lord Kali and the Himalayas.

← Back to all posts