WWL Tenants - Terms of use

If you are being provided with a tenant as a part of an instructor-led training delivery, please note that the tenant is made available for the purpose of supporting the hands-on labs in the instructor-led training.

Tenants should not be shared or used for purposes outside of hands-on labs. The tenant used in this course is a trial tenant and cannot be used or accessed after the class is over and are not eligible for extension.

Tenants must not be converted to a paid subscription. Tenants obtained as a part of this course remain the property of Microsoft Corporation and we reserve the right to obtain access and repossess at any time.

Pre-Demo Setup

This setup consists of enabling the Microsoft Audit Log.

Setup - Enable Microsoft 365 audit log

In this setup task, you’ll enable the Audit log capability in Microsoft 365. Although documentation indicates that audit log is turned on by default, most lab tenants don’t have this feature enabled, and it can take several hours for this to take effect. It’s beneficial to enable this feature, as Microsoft 365 uses audit logs for user insights and activities identified in policies and analytics insights.

1. Open Microsoft Edge. In the address bar, enter admin.microsoft.com.

2. Sign in with your admin credentials.
   1. In the Sign-in window, enter admin@WWLxZZZZZZ.onmicrosoft.com (where ZZZZZZ is your unique tenant ID provided by your lab hosting provider) then select Next.
   2. Enter the admin password that should be provided by your lab hosting provider. Select Sign in.
   3. When prompted to stay signed- in, select Yes. This takes you to the Microsoft 365 admin center page.

3. From the left navigation pane of the Microsoft 365 admin center, select Show all.

4. Under Admin centers, select Compliance. A new browser page opens to the welcome page of the Microsoft Purview compliance portal.

5. From the left navigation panel of the Microsoft Purview compliance portal, select Show all.

6. In the left navigation panel, under solutions, select Audit. Note: the audit functionality is also accessible through the Microsoft 365 Defender home page.

7. Verify that the Search tab is selected (underlined).

8. Once you land on the Audit page, wait 2-3 minutes. If Auditing is NOT enabled, you’ll see a blue bar on the top of the page that says start recording user and admin activity. Select Start recording user and admin activity. Once auditing is enabled, the blue bar disappears. If the blue bar is not present, then auditing is already enabled, and no further action is required.

9. Return to the home page of the Microsoft Purview compliance portal by selecting Home from the left navigation panel.

Review

In this setup, you enabled the audit log capability in Microsoft 365.