Office 365 - Creating and Managing Policy Groups (Departmental IT)
This document explains how departmental IT staff can create and manage policy groups in Manifest for the purposes of policy enforcement and reporting for Office 365 users.
For an introduction to policy groups, please see Office 365 - Using Policy Groups to Manage User Account Policy Compliance.
Note: at this time, the use of policy groups is in a pilot phase. It has yet to be determined if the use of policy groups will be opened to campus. Please contact the DoIT Help Desk for more information.
What do I need to do?
Create a Manifest folder if you do not already have one: Manifest - Request a Manifest Folder
Within your Manifest folder, create a group for the users that need policy compliance and reporting: Manifest - Create a Group
Members of this "affiliation" group will be the individuals whose Office 365 accounts will have policies enforced. Departmental IT admins will be able to generate reports of these users' policy compliance.
Naming convention: "mydept-o365-policy-enforce"
Members should consist of 3 groups:
A data-driven Manifest group (Manifest - Data Driven Groups): as a data-driven group, members of the group will be regularaly updated to reflect current employees based on the UDDS number used.
An "ad-hoc" Manifest group: this group should contain individuals who are not captured in your data-driven Manifest group. Once created, you should then make this "ad hoc" group a member of your "affiliation" group.
An "exclusion" Manifest group: this group should contain individuals whose Office 365 account policy compliance will not be reported on
Naming convention: "mydept-0365-policy-admins"