Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
Identity and Access Management
Microsoft Entra ID Plan 1
Microsoft Entra ID Plan 1 provides educational institutions with secure identity and access management capabilities—including single sign-on, multifactor authentication, and conditional access—to protect users and resources across cloud and on-premises environments.
- Microsoft Learn – Get started with identities and access using Microsoft Entra
- IDManagement.gov – Certificate-Based Authentication with Microsoft Entra ID
Meeting, Calling, and chat
Town hall
Microsoft Teams Town Hall enables educational institutions to host large-scale virtual events—such as faculty forums or student assemblies—by broadcasting video and content to thousands of attendees with moderated Q&A and structured roles." Microsoft Learn – Explore meetings and events in Microsoft Teams
Webinars
Microsoft Teams Webinars provide schools and universities with tools to schedule interactive sessions, register attendees, and deliver engaging presentations with features like polls, Q&A, and post-event analytics.
Viva Insights
Viva Insights app in Teams
The Viva Insights app in Teams helps educators and staff improve well-being and productivity by offering personalized recommendations for focus time, meeting habits, and work-life balance.
Personal insights and experiences
Personal insights and experiences in Viva Insights provide private, data-driven suggestions to help educators manage their time, reduce stress, and improve daily work habits.
Premium personal insights and experiences
Premium personal insights and experiences in Viva Insights offer advanced analytics and wellbeing tools—such as focus plans and meeting effectiveness metrics—tailored to support institutional goals and individual growth in education.
Viva Learning
Viva Learning in Teams
Viva Learning in Teams integrates learning into the flow of work for educators and students by surfacing training content from Microsoft Learn, LinkedIn Learning, and other sources directly within Microsoft Teams.
Search, share, and chat about learning content
With Viva Learning, users can search, share, and chat about learning content directly in Teams, fostering collaborative learning and knowledge sharing in educational environments.
Microsoft Learn and Microsoft 365 Training libraries + 125 top LinkedIn Learning courses
Microsoft Learn and Microsoft 365 Training libraries, along with 125 top LinkedIn Learning courses, provide a rich foundation of technical and professional development resources for students and educators.
Organization-generated content with SharePoint and Viva Learning
Educational institutions can enhance learning by integrating organization-generated content from SharePoint into Viva Learning, enabling customized training experiences tailored to institutional goals.
- Add SharePoint as a Content Source for Microsoft Viva Learning
- Set Up Viva Learning and Publish Your Own Content Using SharePoint
Create learning tabs in Teams channels
Creating learning tabs in Microsoft Teams channels allows educators to embed specific training content—such as courses from Viva Learning or SharePoint—directly into class teams, making it easier for students to access and engage with learning materials in one centralized location."
Threat Protection
Microsoft Defender Antimalware
Microsoft Defender Antimalware provides real-time protection for educational institutions by detecting and neutralizing malware threats across student and faculty devices, ensuring a secure learning environment.
- Institute for Advanced Study – Getting Started with Windows Security and Microsoft Defender
- CISA – Ensure Antivirus and Anti-Malware Protections Are Active
Microsoft Defender Firewall
Microsoft Defender Firewall helps educational institutions safeguard their networks by controlling inbound and outbound traffic, reducing the risk of unauthorized access and data breaches.
Microsoft Defender Exploit Guard
Microsoft Defender Exploit Guard helps educational institutions reduce attack surfaces by blocking behaviors commonly used in malware attacks, such as script-based threats and ransomware.
Microsoft Defender Credential Guard
Microsoft Defender Credential Guard protects student and staff credentials in education environments by isolating secrets using virtualization-based security, preventing credential theft attacks like Pass-the-Hash.
BitLocker and BitLocker To Go
BitLocker and BitLocker To Go provide full-disk encryption for devices and removable drives in education, ensuring that sensitive data remains protected even if a device is lost or stolen.
- Microsoft Learn – BitLocker Overview
Windows Information Protection
Windows Information Protection (WIP) helps educational institutions prevent accidental data leaks by separating personal and institutional data on devices and enforcing data protection policies.
Microsoft Defender for Endpoint Plan 1
Microsoft Defender for Endpoint Plan 1 equips educational institutions with foundational endpoint protection, including next-generation antivirus, attack surface reduction, and centralized management to secure student and faculty devices.
Endpoint and app management
Shared computer activation for Microsoft 365 apps
Shared Computer Activation for Microsoft 365 Apps allows educational institutions to deploy Office on shared devices like computer labs or virtual desktops, enabling multiple users to access apps securely with their own credentials.
Endpoint Analytics
Endpoint Analytics in education provides insights into device performance and user experience, helping IT teams proactively identify and resolve issues to improve learning environments and operational efficiency.
Data lifecycle management
Basic org-wide or location-wide retention policies
Microsoft's basic org-wide and location-wide retention policies in education enable institutions to automatically preserve or delete content across Microsoft 365 services—such as Exchange, SharePoint, and Teams—ensuring compliance with data governance standards and student privacy regulations like FERPA.
- Microsoft Learn – Manage records and disposition with Microsoft Purview
- U.S. Department of Education – Best Practices for Data Destruction (PDF)
Teams retention policies
Microsoft Teams retention policies in education help institutions manage the lifecycle of chats, channel messages, and meeting content to ensure compliance with data governance and privacy regulations such as FERPA.
Information Protection
Azure Information Protection Plan 1
Azure Information Protection Plan 1 enables educational institutions to classify, label, and protect sensitive data such as student records and faculty communications, aligning with FERPA and institutional privacy policies to prevent unauthorized access and data leaks.
- U.S. Department of Education – Protecting Student Privacy
- NIST – Security and Privacy Controls (SP 800-53)
Manual, default, and mandatory sensitivity labels
Microsoft's manual, default, and mandatory sensitivity labels empower educational institutions to consistently classify and protect sensitive data—such as student records and research—by enabling user-driven, automated, or enforced labeling policies that align with FERPA and national cybersecurity standards.
Sensitivity labeling for containers in Microsoft 365
Microsoft Sensitivity Labeling for containers in Microsoft 365 enables educational institutions to apply consistent data protection policies to collaborative spaces like Teams, SharePoint sites, and Microsoft 365 Groups, ensuring secure access and compliance with FERPA and institutional data governance standards.
- Use sensitivity labels with Microsoft Teams, Microsoft 365 Groups, and SharePoint sites
- Sensitivity labels for Microsoft Teams
- Assign sensitivity labels to groups – Microsoft Entra ID
- Configure Teams with protection for sensitive data
Personal Data Encryption
Personal data in Microsoft Viva for Education is encrypted both in transit and at rest to ensure student and educator information remains secure and private.
eDiscovery and auditing
Litigation Hold
Microsoft Litigation Hold for Education enables institutions to preserve student and staff emails and Teams messages for legal or compliance purposes, ensuring data remains discoverable even if users delete content.
Litigation Hold in Microsoft 365 preserves all mailbox content—including deleted and modified items—for legal or compliance purposes until the hold is removed or a specified duration expires
Security and Compliance-Add
Microsoft Intune (Plan 1) for Education
Microsoft Intune (Plan 1) for Education is a cloud-based mobile device management solution designed for schools to manage student and teacher devices, apps, and security settings easily and efficiently.
Microsoft Purview Data Loss Protection (for email and files)
Microsoft Purview Data Loss Prevention helps protect sensitive data in email and files by applying policies that monitor, detect, and prevent unauthorized sharing across Microsoft 365 services like Exchange, SharePoint, OneDrive, and Teams.
A3 - Standard (Student Use)
The Microsoft Student Use Benefit allows educational institutions to provide students with free access to certain Microsoft products—like Microsoft 365, Microsoft Entra ID P1/P2, and Intune—based on the number of paid faculty or staff licenses, under qualifying academic agreements such as OVS-ES, EES, or CSP.
Microsoft 365 apps
Microsoft Editor premium features
Microsoft Editor premium features in education enhance writing quality for students and educators by offering advanced grammar, clarity, formality, and vocabulary suggestions across Microsoft 365 apps and supported browsers.
Does Education A3 Licenses Include Microsoft Editor Premium? – Microsoft Community
Email, Calendar, scheduling
Exchange Plan 2 (100 GB mailbox + up to 1.5 TB archive)
Exchange Online Plan 2 provides educational institutions with a 100 GB mailbox and up to 1.5 TB of auto-expanding archive storage, supporting long-term retention and compliance needs for faculty and staff.
Auto-expanding email archive
Auto-expanding email archive in Exchange Online automatically increases archive mailbox storage beyond the initial quota, helping educational institutions manage growing volumes of email without manual intervention.
Microsoft Bookings
Microsoft Bookings streamlines appointment scheduling for educational institutions by allowing students and staff to book office hours, advising sessions, and services through a customizable online calendar.
Social, intranet, and storage
SharePoint Plan 2
SharePoint Online Plan 2 empowers educational institutions with advanced content management, unlimited cloud storage, and enterprise-grade compliance features, enabling secure collaboration and document sharing across departments and classrooms.
- Compare SharePoint Plans – Microsoft 365
- Microsoft Learn – Describe Microsoft SharePoint integration
Automation, app building, chatbots
Power Virtual Agent for Teams
Power Virtual Agents in Teams empower educators and staff to build no-code chatbots that automate common tasks—like answering FAQs or scheduling meetings—directly within Microsoft Teams, enhancing communication and support services.
- Publish Power Virtual Agents Chatbot in Teams – Microsoft Learn
- Microsoft Learn – Power Virtual Agents in Microsoft Teams
Dataverse for Teams
Microsoft Dataverse is a secure, cloud-based data platform that is part of the Microsoft Power Platform. It allows users to store, manage, and securely share data used by business applications.
Dataverse for Teams provides educational institutions with a low-code data platform embedded in Microsoft Teams, enabling the creation of custom apps, workflows, and bots that streamline administrative and academic processes.
Identity and Access Management, student use
Cloud user self-service password reset
Cloud user self-service password reset allows users to reset or change their passwords without admin help, reducing support overhead and downtime.
Hybrid user self-service password change/reset with on premises write-back
Hybrid user self-service password change/reset with on-premises write-back enables password changes made in the cloud to sync back to on-premises Active Directory using Microsoft Entra Connect.
Advanced Security Reports
Advanced Security Reports provide insights into email threats, malware, and phishing attempts across your organization.
Microsoft Advanced Threat Analytics
Microsoft Advanced Threat Analytics are an on-premises solution that detects advanced cyber threats and insider attacks using behavioral analytics and network traffic analysis.
Cloud access Security Broker
Microsoft Defender for Cloud Apps Discovery
Microsoft Defender for Cloud Apps Discovery enables educational institutions to gain visibility into shadow IT by identifying unsanctioned cloud app usage, helping protect sensitive data and enforce compliance policies.
- Cloud App Discovery Overview – Microsoft Learn
- Microsoft Learn – Introduction to Defender for Cloud Apps
Office 365 Cloud App Security
Office 365 Cloud App Security provides advanced threat detection and real-time monitoring for Microsoft 365 environments in education, helping institutions detect anomalies, control data access, and respond to incidents effectively.
- Protect Microsoft 365 with Defender for Cloud Apps – Microsoft Learn
- Microsoft 365 for Education Cybersecurity Solutions
- CISA – Secure Cloud Business Applications (SCuBA) Project
Windows
Virtual Desktop Access
Virtual Desktop Access enables students and educators to securely access institutional desktops and applications from any device, supporting flexible learning and remote work scenarios.
Azure Virtual Desktop (AVD)
Azure Virtual Desktop (AVD) allows educational institutions to deliver secure, cloud-hosted Windows desktops and apps to students and staff, enabling remote learning and lab access from anywhere.
Windows 11 Education/Enterprise
Windows 11 Education and Enterprise editions provide advanced security, management, and productivity features tailored for academic institutions and large-scale deployments.
Windows 365 Enterprise
Windows 365 Enterprise offers persistent Cloud PCs for education, giving users a personalized Windows experience accessible from any device with simplified management and security.
Windows Autopilot
Windows Autopilot streamlines device provisioning in education by enabling IT to preconfigure and deploy Windows devices with minimal user interaction, reducing setup time and ensuring consistency.
- Set Up Devices with Windows Autopilot – Intune for Education
- Education Device Enrollment with Autopilot – Microsoft Learn
Windows Update for Business deployment service
Windows Update for Business deployment service helps educational IT teams manage and automate Windows updates across devices, ensuring timely security patches and feature updates with minimal disruption.