Plan your enterprise deployment of Microsoft 365 Apps
Refer to this article for guidance on deploying Microsoft 365 Apps and managing updates. It helps you decide whether to deploy Microsoft 365 Apps from the cloud, use Configuration Manager, or install from a local source within your network.
Before you begin
If you haven't already, complete the assessment of your environment and infrastructure. This assessment helps you make key decisions as part of planning your deployment.
Step 1 - Choose how to deploy
First choose which deployment tool to use and whether to install from the cloud or from a local source on your network.
Note
Best practice: Microsoft recommends to deploy Microsoft 365 Apps from the cloud, using the portal or Microsoft Intune.
You can also manage your deployment from the Microsoft 365 portal and have your users install the Microsoft 365 Apps on their client devices directly from the portal. This method requires the least amount of administrative setup, but gives you less control over the deployment. You can, however, still define how frequently your users receive feature updates. For more information, see Manage Microsoft 365 installation options in the Microsoft 365 admin center. This option requires that your users have local administrative rights on their client devices.
If managing numerous devices or user restrictions on administrative permissions on their devices makes this option impractical, consider deploying Microsoft 365 Apps through Microsoft Intune. Check out this video and the Intune documentation to learn more about deploying the Microsoft 365 Apps this way.
You can also use Configuration Manager to deploy from local Distribution points. This option reduces the network load on your internet links. We recommend using the latest current branch release.
For organizations that don't have Configuration Manager but still want to manage their deployment, consider using the Office Deployment Tool (ODT). The ODT serves as a standalone tool or assists with downloading installation files for deployment through other software deployment tools. In either case, the ODT provides control over installation, updates, and settings. For more information, see Overview of the Office Deployment Tool.
If you use the ODT and have the network capacity, we recommend deploying Microsoft 365 Apps from the cloud. Doing so minimizes your administrative overhead. If you don't have the network capacity to install on client devices from the cloud, you can use the ODT to download the installation files to a local source on your network and install from there. But this approach introduces more complexity into your deployment and isn't recommended.
Choose how you want to deploy:
Self-install from the cloud: Manage your deployment from the Microsoft 365 portal and have your users install the apps on their client devices directly from the portal.
Deploy from the cloud using Intune: Manage your deployment through Intune and automate the configuration and installation of the Microsoft 365 Apps.
Deploy from a local source with Configuration Manager: Manage your deployment with Configuration Manager, and download and deploy from distribution points on your network.
Deploy from the cloud with the Office Deployment Tool: Manage your deployment with the ODT, and install on client devices directly from the Office CDN.
Deploy from a local source with the Office Deployment Tool: Manage your deployment with the ODT, and download and deploy from a local source on your network.
Many organizations use a combination of these options for different users. For example, an organization might use Intune to deploy Microsoft 365 Apps to most of their users, but enable self-install for a small group of workers who aren't using managed devices.
Step 2 - Choose how to manage updates
Note
Best practice: We recommend updating your client devices automatically. You can define the frequency of the feature updates, but the updates occur without any administrative overhead. If you want to take more control and get additional insights into e.g. the progress of an update deployment, we recommend usinga cloud update.
Set your client devices to update automatically from the Office CDN. You can still control the frequency of the feature updates, as those settings are defined as part of the initial deployment, but the updates themselves occur without any other tools or administrative overhead. In addition, the updates are automatically deployed over many days to conserve your network bandwidth.
You can also use Intune to apply other policies. For example, to set a deadline after how many days an update installation should be enforced. Review the Intune documentation on how to apply ADMX settings to devices.
The third, cloud-based option is to use cloud update. It's a cloud-based update management solution for devices on Monthly Enterprise Channel and Current Channel. It includes features like advanced monitoring, reporting, enforcing, staggering, and rolling back devices.
If you need to distribute updates from an on-premises source, you can do so with Configuration Manager by downloading the updates and deploying them from distribution points. If you use a previous version of Configuration Manager, we recommend you upgrade to the current branch.
If you don't have Configuration Manager, you can use the ODT to download updates to a local source on your network and deploy them from there. This option requires the most administrative overhead, as you need to manage update packages for different update channels, architectures, and platforms. We suggest this option only when your network capacity is too limited to update from the cloud and other solutions aren't available.
Choose how to manage updates:
Update automatically: Client devices are automatically updated directly from the Office CDN based on the update channel you define as part of the initial deployment.
Manage updates with Intune: Use Intune to set policies on devices, which control how and when those devices should get updates from the cloud.
Manage updates with cloud update: When you use Monthly Enterprise Channel or Current Channel, cloud update gives you the most comprehensive toolset to manage updates from the cloud.
Manage updates with Configuration Manager: Updates are downloaded and deployed to client devices by Configuration Manager.
Manage updates with the Office Deployment Tool: The ODT downloads updates to a local source and installs them on client devices.
As with the initial deployment, organizations can use a combination of these options for different users.
For more information, see Choose how to deliver updates for the Microsoft 365 Apps.
Step 3 - Choose your update channels
With Microsoft 365 Apps, you can control how frequently your users receive feature updates to their applications. To do so, you choose an update channel for your users:
Current Channel: Provides users with the latest features as soon as they're ready, but on no set schedule.
Monthly Enterprise Channel: Provides users with the latest features once a month and on a predictable schedule (the second Tuesday of the month)
Semi-Annual Enterprise Channel: Provides users a roll-up of features every six months, in January and July.
Note
The "Explained - Microsoft 365 Apps Update Channels" video gives you a complete overview of all update channels.
We recommend Current Channel, because it provides your users with the newest features as soon as they're ready. If you need more predictability of when new features are released, we recommend Monthly Enterprise Channel with cloud update. By using cloud update, you automatically deliver monthly Microsoft 365 Apps updates for specific users or groups in waves, limiting the effect on your network. In those cases where you select devices that require extensive testing before receiving new features, we recommend Semi-Annual Enterprise Channel.
All the update channels receive updates for security and non-security issues when needed. These updates usually occur on the second Tuesday of the month.
For more information, see Overview of update channels for Microsoft 365 Apps.
To preview or test new updates before deploying them to your entire organization, you have two options:
- Deploy the update in a staged manner. For example, begin the update deployment process with a few devices on the release day. After a few days, extend to a sample set across your organization and then to the remaining devices in two more waves. With Monthly Enterprise Channel and cloud update, you can automate the staged deployment through custom rollout waves in combination with Update validation.
- Deploy a combination of update channels where one channel receives new features earlier than the other. For example, deploy Current Channel (Preview) to a subset of your users for validation and Current Channel to the bulk of your devices. In that scenario, users with Current Channel usually receive feature updates just a few weeks after the users with Current Channel (Preview).
Step 4 - Define your installation packages
Note
Best practices:
Build as few installation packages as possible to reduce administrative overhead. Allow the installation process to fetch the installation files from the cloud, so you don't have to include and maintain them. If you need e.g. different update channels, go with one package and switch the update channel later with one of the available options to change update channels.
If you need additional products to be installed during an upgrade, like Visio or Project, use MSICondition in combination with RemoveMSI to dynamically add the products based on the previously installed ones.
If you need additional products (like Visio or Project) or language packs being available, build lean and dynamic installations to add those later.
Build the installation packages using the Office Customization Tool and the Office Deployment Tool. By default, the resulting packages would download the required files during installation.
If you can't download files during installation in your environment, take a different approach. Use the "/download" switch. This approach allows you to obtain the necessary source files in advance. Then, include these files in your installation package. This approach means you need to regularly update the included sources, increasing maintenance work.
To package languages, we recommend identifying required languages in each region. You can deploy these languages directly as part of the first installation. You can also install the language that matches the operating system of the client device. For more information, see Install the same languages as the operating system.
After you deploy Office with the required languages, you can add more language accessory packs whenever needed. To install more language accessory packs, select one of these options:
- Have your users download and install the language accessory packs that they need from the Microsoft 365 portal (requires local administrator permissions).
- Set and assign the policy "Allow users who aren’t admins to install language accessory packs" to your users. This policy enables them to install language packs through the apps UI themselves.
- Use Intune, Configuration Manager, or the Office Deployment Tool to deploy the appropriate language accessory packs to your users.
For more information, see Overview of deploying languages for Microsoft 365 Apps.
For details on which architecture to choose, see Choose the 32-bit or 64-bit version of Office.
If you have the subscription versions of the Project and Visio desktop apps, continue to use them. If you have the volume licensed versions of Project and Visio, we recommend you upgrade to the subscription versions. If you need to keep using a volume licensed version of Project or Visio, see Supported scenarios for installing different versions of Office, Project, and Visio on the same computer.
Step 5 - Plan your upgrade from existing versions of Office
Note
Best practice: Allow the Microsoft 365 Apps setup to automatically uninstall any existing MSI-based version of Office, Visio and Project. We do not recommend to run Microsoft 365 Apps in parallel with MSI-based Office on the same device.
To help with the removal of previous Office versions that use Windows Installer (MSI) for installation, use the Office Deployment Tool. By specifying the RemoveMSI element, you can streamline the uninstallation process within your Microsoft 365 Apps deployment package. For details see Remove existing MSI versions of Office when upgrading to Microsoft 365 Apps.
Step 6 - Plan for shared computers (optional)
Note
Best practice: For shared computer scenarios, such as VDI, enable shared computer activation when deploying Microsoft 365 Apps.
To set up Microsoft 365 Apps in an environment where multiple users share workstations, such as in a virtual desktop infrastructure (VDI) or among shift workers, enable shared computer activation on these devices.
With shared computer activation enabled, any user that is assigned a Microsoft 365 Apps license can sign in to the device and use the apps, such as Word or Excel. For more information, see Overview of shared computer activation for Microsoft 365 Apps.
Review exit criteria
Before beginning your deployment, make sure you complete the planning exit criteria:
| Plan | Completed? |
|---|---|
| Choose how to deploy | Y/N |
| Choose how to manage updates | Y/N |
| Choose your update channels | Y/N |
| Define your source files | Y/N |
| Define your deployment groups | Y/N |
| Plan your upgrade | Y/N |
| Plan for shared computers | Y/N |
Next step
Depending on your deployment plan, go to one of the following articles: