FAQ | Office 365 E5 and Skype for Business Disclosure

Office 365 E5 and Skype for Business Licensing

Frequently Asked Questions

FIELD AND PARTNER USE

LAST UPDATED: NOVEMBER 2, 2015

Contents Office 365 E5 ..................................................................................................................................................... 1

Upgrade to E5 Promo ....................................................................................................................................... 7

Skype for Business ............................................................................................................................................ 8

PSTN Conferencing and Calling Services ........................................................................................................... 9

Feature Details ................................................................................................................................................ 13

Customer Lockbox ...................................................................................................................................... 13

Office 365 Equivio Analytics for eDiscovery ............................................................................................... 17

Advanced Threat Protection ....................................................................................................................... 20

Power BI Pro ............................................................................................................................................... 23

Delve Analytics ............................................................................................................................................ 24

DLP and Encryption ..................................................................................................................................... 24

Meeting Broadcast ...................................................................................................................................... 24

Skype for Business Cloud PBX ..................................................................................................................... 25

Skype for Business PSTN Conferencing ....................................................................................................... 25

Office 365 E5

1. What is Office 365 E5?

Office 365 E5 is a new suite offering that includes new feature value across three categories of investments in

Real-time Communications, Analytics and Advanced Security. Features across the categories are listed below:

Real-time Communications – Cloud PBX, PSTN Conferencing, Skype Meeting Broadcast and PSTN

Calling as an add-on based on availability

Analytics – End User Analytics with Power BI and Organizational Analytics with Delve Analytics

Advanced Security – Office 365 Equivio Analytics for eDiscovery, Secure Attachments and Safe URLs

with Advanced Threat Protection, and Access Control with Customer Lockbox

FAQ | Office 365 E5 and Skype for Business Disclosure

2. What are the new features that will be available across the Office 365 Suites?

Highlighted in orange below, you will see all the new features across our enterprise suites.

*Toll-free and International Dial-out conferencing capabilities may incur additional per minute consumption

charges when available. Customers can disable this feature to avoid additional billing.

**$24 includes both International and Domestic calling plans. Domestic only calling plans are available for

$12. Tax is included in price in USA. Add-On price to E1 & E3 is $32, which includes Cloud PBX

3. Why would a customer select E5 instead of E3; what is the value prop for E5?

With Office 365, Microsoft delivers the most comprehensive, most secure cloud for productivity and

communications. E5 customers gets Cloud PBX and PSTN conferencing, End User and Organizational

Analytics while getting unprecedented control over their data with Access Control, and Advanced Threat

Protection.

4. What is the Partner value prop for E5?

With E5, partners can build new service business lines around voice and analytics, upsell their customers on

PSTN Conferencing as well as acquire new customers showcasing advanced threat protection.

1. Upsell your customers on Cloud PBX with on-premise PSTN connectivity and PSTN Conferencing as

well as new organizational analytics.

2. Convert new customers to the cloud with advanced threat protection

3. Build new service business around voice, modern meetings, and business analytics

5. Is there anything new in E1 and E3?

Yes, new feature value will be added into E1 and E3. For E1, we will be adding Skype Meeting Broadcast to

enable E1 customers to host every kind of meeting from 1:1, 1:Many, to 1:Thousands. In addition, we will be

adding Work Management to provide light-weight project management capabilities for teams. For E3, we

will be expanding Data Loss Prevention and Encryption across both the Skype for Business and SharePoint

FAQ | Office 365 E5 and Skype for Business Disclosure

Online workloads. Availability dates for DLP and Encryption in Skype for Business and SharePoint Online will

be communicated at a later date.

6. When and where will Office 365 E5 be available?

E5 will be available on December 1, 2015 in the following programs and geographies:

*E5 will not be available for GCC or EDU customers at launch on 12/1. Availability of E5 for both GCC and

EDU will be shared at a later date.

7. When will pricing information for E5 and the component standalone in E5 become

available?

E5 pricing was released on Price List Preview on November 1, 2015 and is now available. See below for

additional details.

FAQ | Office 365 E5 and Skype for Business Disclosure

*For geographies and programs where PSTN Conferencing is not available, Office 365 E5 will be offered at a

reduced price of $33 (Commercial) and $28.05 (Government)

**Dial-out conferencing capabilities may incur additional per minute consumption charges. Customers can

disable these features to avoid additional billing.

***Includes both International and Domestic calling plans. Domestic only calling plans are available for $12

Commercial and $10.50 Gov. Tax is included in price.

8. Will E5 be available to Government and Government Community Cloud (GCC)

customers?

Yes, E5 is planned to be available to Government customers at launch on 12/1. However, Office 365 E5 will

not be available to GCC customers at launch on 12/1. The availability in GCC will be announced at a later

date.

9. Will E5 be available in Education?

E5 will not be available on 12/1 for Education. We will announce availability for education at a later date.

10. What is going to happen to E4?

E4 will be sunset June 30th, 2016 in all channels. Customers should continue using the Office 365 plan they

are using today. When customers’ plans come up for renewal prior to June 30th, 2016, they should renew to

their current plan or transition into E5 or into E3 with Skype for Business Plus CAL subscription.

E4 will appear on the Price List until June 30th, 2016.

11. What will the transition options be for E4 customers?

Existing customers will be able to step up to E5 following our standard licensing motion for upgrades via

step-up SKUs that charge the difference between what the customer currently has and E5 as the step-up

price to E5. They will also have the option of just adding Cloud PBX on top of E3.

For customers who wish to maintain their current licensing position, they will be able to renew into E3 and

the Skype for Business Plus CAL (or renew with E4 prior to June 30th, 2016). In this particular scenario, there

will be a user subscription license (USL) version of Skype for Business Plus CAL that customers can add to

FAQ | Office 365 E5 and Skype for Business Disclosure

their existing E3 subscription.

Prices reflect the incremental cost of customers transitioning from E4 to either E3 with Cloud PBX or E5

E4 customers can also maintain current licensing position by having E3 + On-Prem PBX

E4 will remain on the Price List until June 30th, 2016

12. What is the path for an E4 customer who wants Cloud PBX with E5?

Purchase the from E4 Step-up SKU to E5.

13. How can I upgrade to E5?

Existing Office 365 customers will be able to upgrade to E5 following our standard licensing motions. EA

customers can upgrade via step-up SKUs that charge the difference between what the customer currently

has and E5 as the step-up price to E5. Add-on SKUs will also be available with customers who are

maintaining on-prem licenses with SA.

FAQ | Office 365 E5 and Skype for Business Disclosure

14. Will Small Business customers be able to purchase E5?

Yes, similar to E3 all customers will be able to purchase E5, but there will not be a new premium SKU specific

for small business.

15. What is the path for an E4 customer who is not interested in moving to Cloud PBX?

Renew into E3 and Skype for Business Plus CAL.

16. What if a customer wants just a few of the new capabilities in E5, yet is content

with their current E1 or E3 coverage?

The new capabilities that are included in E5 can also be added at standalone prices to E1 and E3. See table

in question 6 above.

17. What if I purchase E5 but only want some of the components that are included?

E5 provides the best value for our customers and while each of the components will be available for

customers to leverage at any point, the use of those components are at the customer’s discretion, enabling

them to choose the options that best fits their needs.

18. Will the Adoption Offer apply specifically for the new Skype for Business

workloads?

Yes.

19. How does E5 fit into the ECS model?

ECS customers will be able to purchase an E5 add-on for $15 which credits the price they have paid for

Office 365 E3.

20. Do E5 and Cloud PBX come with dual-access rights?

Yes. E5 and Cloud PBX come with dual-access rights to on premise servers and cloud services rights.

21. What Enterprise Service Offerings are available in support of E5?

Microsoft Services has offerings to help our customers get their Office 365 platforms up and running quickly

and help drive value and usage of the communications platform. Current offerings aligned to E5 include:

FAQ | Office 365 E5 and Skype for Business Disclosure

Skype for Business Foundations designs and implements an enterprise communications

environment aligned to your customers’ workstyle, user base, and business needs. Enterprises can

make use of rich collaboration features, both on premises and in the cloud, to deliver a consistent

communications experience for all employees. This offer helps your customer to make use of recent

Office 365 Enterprise E5 features such as Skype broadcast meetings, cloud conferencing, and cloud

private branch exchange (PBX).

Data Visualization Jumpstart demonstrates the power of the Microsoft Power BI and Datazen

toolset for discovering data, creating compelling visualizations, and sharing insights. The jumpstart

is meant to deliver quick value to customers by using their own data with familiar tools.

Additionally, our domain experts in MCS, Premier, and Adoption Services are able to support Skype for

Business, Power BI and Security solutions.

22. How can I find more information on these Microsoft Services?

Leverage Domain Experts in Cloud Productivity Services across Office 365, Social, Enterprise

Communications, and Adoption Services. Business Productivity Domain and Adoption Services resources

with deep expertise and that are part of the Neptune Partner Program can help with Vision Setting, Business

Outcome Selling, Solution and Adoption Acceleration. Locate a resource at: http://aka.ms/servicesconnect.

Find All Cloud Productivity and Adoption Services Offer Information: http://aka.ms/portfolio-cp.

Upgrade to E5 Promo

23. What is the Upgrade to E5 Promo?

All existing EA/EAS Office 365 E3, E4, and ECS customers will be able to take advantage of a 15% discount on

Office 365 E5 Step-up and Office 365 E5 Add-on SKUs. Standard waterfall pricing level discounts will apply.

24. When will the offer be available?

The Upgrade to E5 Promo will be available for customers concurrent with the E5 launch on December 1st,

2015. It will run through the end of the fiscal year on June 30th, 2016.

25. What eligibility requirements must the customer meet?

The customer must purchase a minimum of 250 Office 365 E5 Step-up or Add-on seats and be an existing

Office 365 E3, E4, and ECS, EA/EAS customer.

26. What is the benefit of this promo?

By locking in the best pricing for your customers, you will be able to ensure that they upgrade to the highest

quality Office 365 experience and take advantage of the premium value of advanced security, analytics, and

cloud voice that is included in the suite.

FAQ | Office 365 E5 and Skype for Business Disclosure

Skype for Business

27. What is Cloud PBX?

With Cloud PBX (PBX: Private Branch Exchange), users can make calls to, and receive and transfer calls from

phones, mobiles, tablets and PC’s from nearly anywhere with internet access. IT administrators can manage

users for communications in the Office 365 administrator portal. Companies can take advantage of existing

telephony infrastructure (i.e. traditional PBX systems or on-premises SIP trunks). With our Cloud PBX,

customers can eliminate separate PBX systems.

28. What is PSTN Conferencing?

PSTN Conferencing (PSTN: Public Switched Telephone Network) allows meeting attendees to dial-in to

Skype meetings from virtually any device. Meeting organizers can also dial-out to attendees to connect

them to the audio portion of the meeting. Companies can consolidate conferencing solutions and simplify

operations while reducing complexity and support costs for IT while enabling employees to work from

virtually anywhere.

29. What is PSTN Calling?

PSTN Calling provides domestic and international calling plans with Skype for Business. This allows

organizations to subscribe to calling plans from Office 365, using existing phone numbers or getting new

ones.

30. When and where will PSTN Conferencing and PSTN Calling be available?

PSTN Conferencing and PSTN Calling, as well as the inclusion of PSTN Conferencing in E5, are subject to

geographical and channel availability. Initial availability for select geographies and licensing programs, as

noted below, will be on December 1, 2015. Additional availability dates will be announced at a later time.

PSTN Conferencing

Tolled Dial-in numbers* will be available in the following countries and territories on December 1, 2015:

Argentina, Australia, Austria, Belgium, Brazil, Canada, Chile, China, Colombia, Costa Rica, Czech Republic,

Denmark, Estonia, Finland, France, Germany, Hong Kong, Hungary, India, Ireland, Israel, Italy, Japan, Mexico,

Netherlands, New Zealand, Norway, Philippines, Poland, Portugal, Romania, Russia, Singapore, Slovak

Republic, Slovenia, South Africa, South Korea, Spain, Sweden, Switzerland, Taiwan, Thailand, Turkey, UK, US.

PSTN Calling

PSTN Calling will only be available in the US at launch on December 1, 2015.

For more information, please refer to the International Availability of Microsoft Online Services page on

Office.com.

31. Can I upgrade to PSTN Conferencing and PSTN Calling on E1 and E3?

Yes, customers with E1 and E3 will be able to upgrade to PSTN Conferencing and Cloud PBX + PSTN Calling

as standalone offers.

32. What options does a customer have in order to get PSTN calling with Cloud PBX?

Based on channel and geographic availability, customers can choose to buy Microsoft PSTN Calling as an

add-on to Cloud PBX in Office 365. In addition, customers can take advantage of their existing telephony

FAQ | Office 365 E5 and Skype for Business Disclosure

infrastructure through traditional PBX systems or on-premises SIP trunks offered through their local/regional

telco, along with Cloud PBX in E5 or Cloud PBX standalone.

33. What licensing, if any, is required for Skype Meeting Broadcast public webinars?

Attendees do not need to have a license to attend a Skype Meeting Broadcast. However, if the organization

wants the attendee to be authenticated, then a Skype for Business license is required.

34. Are there any pre-requisites that need to be purchased and provisioned before a

customer can use Cloud PBX, PSTN Conferencing or PSTN Calling?

Yes, in order to use these services, customers must have purchased and have Skype for Business Plan 2

deployed as a standalone or as a component of Office 365 E1, E3, or E5 suites. To use PSTN Calling,

customers must also purchase Cloud PBX or E5 (which includes Cloud PBX functionality) as a pre-requisite.

35. Can a customer who has Skype for Business on-prem use PSTN Conferencing and

PSTN Calling through a hybrid model?

E5 and Cloud PBX customers will be able to connect their existing PSTN service provider with Microsoft’s

cloud-based call control. Scenarios are based on whether a customer already has a Skype for Business Server

deployed. Customers with an existing Skype for Business Server deployment can configure it to connect to

Cloud PBX functionality which is covered under existing Server licensing. For customers without an existing

server, they can leverage a minimal Skype for Business Server deployment with four preconfigured Virtual

Machines that are deployed on customer owned Windows Servers. Skype for Business Server roles in VMs

are not paid roles and are licensed for use with Cloud PBX.

36. Does Microsoft have plans to become a Telco?

To the extent our new Skype for Business offering includes features that are subject to telecom regulation,

Microsoft will ensure those features comply with the applicable regulations.  With regard to our long-

provided communications capabilities, such as the Skype consumer offerings available in the market today

from Skype.com, we have no plans to change or add features that would result in subjecting Skype to

telecom regulation.  Moreover, the mere fact that Microsoft will offer an enterprise communications

capability that includes regulated features does not in any way change the regulatory status of our other

communications products, including Skype.

37. Is Microsoft competing with Network Operators?

We have existing relationships with network operators through managed services, and we are expanding

those to managed networks. With these new services, we continue to deepen our partnerships with network

operators across the managed services portfolio for dedicated deployments. In addition, we are expanding

our partnerships to include network connectivity services; customers will soon have the option of purchasing

Operator services to directly connect their corporate WAN networks to Office 365 and Skype for Business

through Azure ExpressRoute for Office 365.

PSTN Conferencing and Calling Service Details

38. What are the PSTN Conferencing Features?

Skype for Business PSTN Conferencing will include the following features, subject to timing concerns called out in

the following section:

FAQ | Office 365 E5 and Skype for Business Disclosure

Tolled Dial-in: This feature enables invitees to meetings organized by a user licensed for PSTN Conferencing

to join the audio portion of the meeting by dialing a PSTN number and entering a conference passcode.

There are limits on the use of this feature designed to prevent abuse and/or fraud.

Dial-out: This feature enables attendees of meetings organized by a user licensed for PSTN Conferencing to:

Dial out to other users from the meeting

Transfer an in-progress meeting to a PSTN endpoint from within the meeting

At meeting join, dial out to a PSTN endpoint

At meeting join from a mobile client, dial out to the mobile phone

Dial out calls can be domestic or International

Toll-free dial in: This feature enables attendees of meetings organized by a user licensed for PSTN

Conferencing to join meeting by dialing a toll-free number and entering a pin. Toll-free PSTN numbers can

either be domestic or international

39. What is included within the PSTN Conferencing and Calling service plans? What is

additional paid based on consumption?

Tolled Dial-in conferencing and domestic dial-out conferencing services are both included in the PSTN

Conferencing service plan. While both services do not have a pre-defined limit, there will be usage limits

designed to limit abuse and/or fraud and to protect the performance of the service. The details of these

limitations will be published on November 1, 2015.

In addition, there are two PSTN Conferencing features that will become available once they can be

supported by consumption billing: International Dial-out and Toll-free dial-in. Note that neither of these

features will be available with PSTN Conferencing until consumption billing is enabled later in H1 CY2016.

For PSTN Calling plans, inbound domestic calls, outbound domestic calls, and international calls are included

with the service in accordance with our excessive use limit policy. If the customer exceeds the excessive use

limits, the excess minutes will be billed on a per-minute basis.

40. What are the excessive use limits for PSTN Calling and PSTN Conferencing?

The total minutes of use for the excessive use threshold is calculated at the tenant level based on the

number of users licensed for the tenant. For PSTN Calling, excessive use is defined as follows:

For Domestic PSTN Calling plans, each licensed user is allocated 3,000 domestic dial-out minutes

that are pooled at the tenant-level.

For International PSTN Calling plans, each licensed user is allocated 3,000 domestic dial-out

minutes and 600 international dial out minutes that are pooled at the tenant-level.

For PSTN Conferencing Tolled Dial-in and Domestic Dial-out, there is no excessive use limit, only

limits designed to protect against fraud and abuse of the service and to protect the performance of

the service.

There will be a period of time between GA (12/1/15) and the availability of consumption billing (H1 CY2016)

where customers will be made aware of their overages via reporting but they will not be charged for their

PSTN Calling or Conferencing overages under the excessive use limits. This will serve as an important

opportunity to estimate future billing overage charges.

41. What if a customer exceeds the PSTN Calling excessive use threshold?

When a customer exceeds the PSTN Calling excessive use threshold, which is the culmination of all users’

allocated minutes that is pooled at the tenant-level, during the period between GA (12/1/15) and the

FAQ | Office 365 E5 and Skype for Business Disclosure

availability of consumption billing (H1 CY2016), the overage will be reported to the customer. After the

availability of consumption billing, the customer will be charged for their usage that goes above and beyond

the tenant-pooled limits.

42. What if an individual user’s usage went above the allocation limit in a monthly

period, will the customer be charged?

Not necessarily – overage charges are only applied if the customer’s overall usage in a monthly period

exceeds the tenant-pooled limits. If an individual user goes beyond their user limit of 3,000 Domestic

minutes, for example, but the overall tenant-pooled limit threshold wasn’t breached, then no, the customer

will not be charged for any overages.

43. When will these features be available?

Not all of the PSTN Conferencing and Calling features will be available at GA; others will launch with the

availability of consumption billing in H1 CY2016.

Available at GA (12/1/15) Available with Consumption Billing (H1 CY2016)

PSTN Conferencing

Tolled Dial-in Conferencing – Available in 45

countries

Dial-out Conferencing – Domestic calls only

PSTN Calling

Domestic Calling

International Calling

PSTN Conferencing

International Dial-out

Domestic Toll-free

International Toll-free

44. What services will incur consumption billing and which will not?

PSTN Services Subscription Consumption Rates Apply

Tolled Dial-in Conferencing Included* -

Dial-out Conferencing - Domestic Included* -

Dial-out Conferencing - International - Per minute

Toll-free Conferencing – Domestic - Per minute

Toll-free Conferencing – International - Per minute

PSTN Calling – Inbound calls Included* -

PSTN Calling – Outbound calls (Domestic) Included** Per minute charge on excess use

of tenant pooled minutes

PSTN Calling – Outbound calls (Int’l) Included** Per minute charge on excess use

of tenant pooled minutes

*Tolled Dial-in Conferencing and PSTN Calling inbound calls be included in the subscription though there

will be terms of service designed to prohibit fraud and abuse and to protect the performance of the service.

**PSTN Calling plans will be subject to excessive use limits of 3,000 minutes per user for Domestic calling

and 600 minutes per user of International calling. Minutes will be pooled at the tenant-level and excess use

charges will be incurred and billed by the minute when the usage limits are exceeded.

FAQ | Office 365 E5 and Skype for Business Disclosure

45. What are the rates that customers will be billed based on consumption?

Initial per-minute pricing will be published one month prior to GA of consumption billing. Customers and

partners will need to reach out to their account executive representative at that time to ascertain the most

current rate plans.

46. Will the per-minute pricing be published in the Customer Pricing Sheet?

No. We want the latitude to drive our customers’ price for PSTN Services down over the term of our

customer contract. Therefore, the CPS will not lock in multi-year per minute pricing.

47. Where will we sell PSTN Conferencing at launch on 12/1?

On December 1, 2015, PSTN Conferencing will be for purchase by EA Direct customers with enrollment bill-

to addresses located in the following countries and territories:

Belgium, Canada, Denmark, Finland, France, Germany, Italy, Netherlands, Norway, South Africa, Spain,

Sweden, Switzerland, United Kingdom, and United States (continental US, Alaska, and Hawaii).

For more information, please refer to the International Availability of Microsoft Online Services page on

Office.com.

48. Where will PSTN Conferencing Tolled Dial-in numbers be able to be provisioned at

launch on 12/1?

PSTN Conferencing Tolled Dial-in numbers will be available in the following countries and territories on

December 1, 2015:

Argentina, Australia, Austria, Belgium, Brazil, Canada, Chile, China, Colombia, Costa Rica, Czech Republic,

Denmark, Estonia, Finland, France, Germany, Hong Kong, Hungary, India, Ireland, Israel, Italy, Japan, Mexico,

Netherlands, New Zealand, Norway, Philippines, Poland, Portugal, Romania, Russia, Singapore, Slovak

Republic, Slovenia, South Africa, South Korea, Spain, Sweden, Switzerland, Taiwan, Thailand, Turkey, UK, US.

49. What will be the experience for customers who will not get a local PSTN

conferencing tolled dial-in number, but will be provisioned with the service?

Users licensed to use the PSTN Conferencing service who do not have a local tolled PSTN dial in number will

be able to invite others to Skype meetings and have a local PSTN dial in number available to them in their

local area if they are located in the same local geography as a dial in number. If not, these invitees can

connect to audio using VoIP from their PC, tablet, or mobile phone or by dialing a number in a relatively

inexpensive international geography. The organizers who do not have a local dial in number will have the

same choice of options-- connecting to audio using VoIP from their PC, tablet, or mobile phone or by dialing

a number in a relatively inexpensive international geography.

50. How will customers pay for their consumption charges for PSTN Conferencing and

PSTN Calling?

Upon GA of our consumption billing capability, customers will be able to fund an account with Microsoft

from which the relevant consumption-based charges will be deducted. Customers will have the option of

setting the initial funding amount, funding from an EA agreement (if an EA customer) or other funding

instrument if not an EA customer, determining if the funding will be automatically or manually renewed

when the account hits customer defined limits, and reporting on the use of this account.

Additional details will be published closer to the H1 CY2016 GA date.

FAQ | Office 365 E5 and Skype for Business Disclosure

51. Will customers be able to track their usage?

Yes. Usage reporting will be available via the Skype for Business Admin Center.

52. What will the limitation be that mitigate instances of fraud and/or abuse of the

conferencing and calling services that are included in plans?

Details on these limitations will be published on November 1, 2015, though these will change over time and

as our technology and ability to identify fraud and abuse and / or identify issues that impact service

performance mature.

53. Will we ever have calling plans that are billed strictly based on usage?

Future calling plans are not covered in this document.

54. Do the EA VL Discounting levels apply to subscription pricing?

Yes, EA VL discounting levels and pricing waterfalls apply to subscription pricing.

55. Are the prices for PSTN services tax inclusive?

In the United States the prices for PSTN services are tax inclusive. In the other December 15, 2015 launch

countries the prices for these services are tax exclusive.

Feature Details

Customer Lockbox Description: Customer Lockbox ensures that no one at Microsoft can access customer content to perform a service

operation without the customer’s explicit approval. Customer Lockbox brings the customer into the approval

workflow for such access to customer content. As customers move data to Office 365, they may be concerned about

access to their data in the service by the service provider. In the rare cases, when a Microsoft employee needs access

to customer content to perform a service operation, Customer Lockbox provides customers with the ability to

approve or reject requests for access.

Resources

Announcing Customer Lockbox for Office 365 Blog Post

FAQ | Office 365 E5 and Skype for Business Disclosure

56. Why did Microsoft build Customer Lockbox?

Microsoft employees do not have standing access to any service operation. All access is obtained through a

rigorous access control technology called Lockbox. Lockbox enforces access control through multiple levels

of approval within Microsoft, providing just-in-time access with limited and time-bound authorization. In

addition, all access control activities in the service are logged and audited. We built Customer Lockbox to

bring customers into the Lockbox approval process and to provide the customer with explicit control over

access to their content, in case a Microsoft employee needs access for an elevated service operation. We

recognize that providing customers with visibility into actions taken on their content and control over access

to their content in Office 365 are necessary to earn customer trust.

57. What is customer content?

Customer content is the data created by users of Office 365 Services. Examples of customer content include:

E-mail body or e-mail attachments

SharePoint site contents

Information in the body of a SharePoint file

Skype for Business Presentation File body

IM or Voice Conversations

Customer generated blob or structured storage data (e.g., SQL Containers)

Customer-owned security information (e.g., certificates, encryption keys, passwords)

Inferences, and all subsequent inferences, if customer content remains

For additional details on customer content within Office 365, see the Office 365 Trust Center.

58. How does Microsoft ensure that a member of its staff does not access customer

content in Office 365 applications?

Microsoft implements extensive preventative measures through access control systems, and detective

measures to identify and address attempts to circumvent the access control systems. Office 365 operates

with the principles of least privilege and just-in-time access. Therefore, no Microsoft personnel have

permission to access customer content on an ongoing basis. If permission is granted, it is for a limited

duration.

Office 365 uses an access control system called Lockbox to process requests for permissions that grant the

ability to perform operational and administrative functions within the service. An operator must request

access to customer content using Lockbox, which then requires a second person to take action on the

request (e.g., approve it) before access is granted. That second person cannot be the requestor and must be

designated to approve access to customer content. Only if the request is approved does the operator

acquire temporary access to customer content. Once the elevation period expires the access is revoked by

Lockbox.

59. Under what circumstances do Microsoft engineers need access to my content?

The most common scenario where Microsoft engineers may need to access customer content is when the

customer makes a support request that requires access for troubleshooting. A foundational principle of

Office 365 is that we should be able to operate our service without Microsoft personnel having access to

customer content, and nearly all service operations performed by Microsoft are fully automated and the

human involvement is highly controlled and abstracted away from customer content. What we aspire to

achieve across all of our cloud services is that we never have access to customer content to support the

service until the customer approves a specific request that allows Microsoft personnel such access. The

FAQ | Office 365 E5 and Skype for Business Disclosure

ability to offer Customer Lockbox is a reflection of our engineering progress and we aspire to make

Customer Lockbox available across additional cloud services in the future.

60. Who is notified when there is a request to access my content?

In the initial release of Customer Lockbox, members of the tenant’s Compliance Center Admins and Tenant

Admins groups are notified. The list of tenant designees who are notified is the same as the list of approvers

of Customer Lockbox requests.

61. Who can approve or reject these requests in my organization?

Customers control membership of the groups that can approve or reject Customer Lockbox requests.

62. How do I opt-in to Customer Lockbox?

In the initial release, the tenant administrator can enable and configure Customer Lockbox using Remote

PowerShell commands.

63. How are Customer Lockbox requests handled by customers?

In the initial release, we plan to offer customers the option of using either Remote PowerShell or the Office

365 Admin Center to manage Customer Lockbox requests.

64. Is Customer Lockbox available to all Office 365 customers?

Our plan is to make Customer Lockbox available to Office 365 enterprise service families, as described here.

65. If a customer only licenses some of their users on Customer Lockbox, will the non-

licensed users also receive Customer Lockbox?

Users must be licensed for Customer Lockbox to ensure that they will receive the feature. For customers

who license Customer Lockbox for a subset of users, Microsoft does not commit to providing Customer

Lockbox access control approval requests for the users who are not licensed. Customers should license any

users for whom they want Customer Lockbox.

66. Can Microsoft modify the list of approvers for my tenant? If not, how is it

prevented from happening?

The Tenant Admin group is an identity within Azure Active Directory that is solely managed by the customer.

67. What if I need more information on the content access requests to approve it?

Each Customer Lockbox request will contain an Office 365 service request number that you can reference

when you contact Microsoft Support Services for additional details.

68. What happens if I don’t respond to a Customer Lockbox request in a timely

manner?

Customer Lockbox requests have a default lifetime of 12 hours, after which they expire and cannot be acted

upon.

69. When a Customer Lockbox request is approved, how long are the permissions

valid?

The maximum period for permissions granted following a Customer Lockbox approval is currently 4 hours.

The engineer may request a shorter period as well.

FAQ | Office 365 E5 and Skype for Business Disclosure

70. How can I get a history of all content access requests?

Log entries for Customer Lockbox will be made available via the Office 365 Compliance Center Activity Feed

and reporting in the Office 365 Admin Center.

71. How do I correlate the content access requests with the access logs that I have?

The Compliance Center Activity Feed will contain log activities of Customer Lockbox. Customers can cross-

reference the email approval notifications received by Tenant Admins and Compliance Center admins with

the log data received via the Activity Feed API.

72. What happens to requests that occur (or remain in the system) after I have

terminated Office 365 services?

Customer Lockbox requests have a validity of twelve (12) hours. Requests that are not acted on within 12

hours expire and cannot be approved.

73. What does Microsoft do in case the customer rejects a Customer Lockbox request?

If a customer rejects a Customer Lockbox request no access to customer content will occur. If a tenant user

was experiencing a service issue that required Microsoft to access customer content in order to resolve the

issue (though such circumstances are rare) then the service issue might persist, and Microsoft would inform

the customer of this outcome.

74. How do I know that Microsoft will not bypass Customer Lockbox in order to access

my content without my knowledge or approval?

Upholding privacy through transparency and control are fundamental principles of Microsoft cloud services.

Customer Lockbox is a manifestation of these principles. We will include in our audit logging features the log

data for Customer Lockbox, including logging for actions related to the configuration of Customer Lockbox.

Disabling Customer Lockbox for your tenant will also be captured in the audit logs.

75. With Customer Lockbox, will Microsoft be able to guarantee that it will not have to

turn my data over to a government or a third party?

No. Customer Lockbox was not designed with this in mind, and security features are not intended to

undermine our legal obligations. In the very rare case that we receive a valid legal demand for customer

content belonging to an enterprise, we would have to comply with it. However, our policies and practices

related to third party requests are described in our contracts. We only disclose customer content to a third

party when we are legally required to do so. Each request is reviewed by experienced Microsoft attorneys,

and access to the data is only requested/approved when a determination has been made that we are legally

required to respond. Even then, we always attempt to redirect the third party to obtain the data from you.

We also periodically publish detailed information about the requests we receive from law enforcement

agencies around the world. Those reports show that only an extremely small percentage – a fraction of one

percent – of our customers are ever the subject of a government demand for information, and the numbers

are even smaller in the context of our enterprise services. Our interests are completely aligned on this

subject – Microsoft has no reason to comply with a third party request for customer content unless legally

required to do so.

FAQ | Office 365 E5 and Skype for Business Disclosure

76. With Customer Lockbox, can Microsoft guarantee that its access for purposes of

responding to a law enforcement or other third party request will always appear in

the logging feature, and that it will be flagged for the administrator’s attention?

No. Customer Lockbox was designed to provide our customers with greater control over their data and

transparency into who is accessing it to perform a service operation. When it comes to third party requests

for customer content, our policies are very clear. We always attempt to redirect the third party to you – the

customer – to obtain the information, and we always provide our customers with prompt notice of such

requests, except when legally prohibited from doing so.

77. What is the timeline for Customer Lockbox availability in Office 365?

Customer Lockbox is expected to be available for Exchange Online in Q4 of CY 2015, and for SharePoint

Online in Q1 of CY 2016.

Office 365 Equivio Analytics for eDiscovery Description: Microsoft Office 365 enables in-place, predictive eDiscovery, increasing relevancy while decreasing cost

and risk. Integration of the Equivio Analytics predictive coding and machine learning platform increases relevance by

identifying themes, near duplicates and providing new generation clustering. This accelerates the eDiscovery process

by eliminating the need to move data around so that you can get to the most relevant data much faster. Moreover,

since you’ll no longer need to ship massive volumes of data out of the organization as part of an outsourced process,

it remains constantly protected by Microsoft’s stringent cloud security. All of this saves you time and money while

also reducing your overall risk.

Resources:

Microsoft Ignite Series – eDiscovery Redefined: Real Time and In-Place

78. What are the benefits of Equivio?

A large amount of documents for eDiscovery are duplicates or email threads where only one item or the

changes between documents needs to be reviewed to get the full context. Equivio can help eliminate this

data or give you analytics so the similar documents can be reviewed in context in eDiscovery review tools.

This makes document review faster and more effective.

With predictive coding you train the system what relevant data you are looking for and then use that to

make informed decisions about what to review based on the relevance of the documents.

With Equivio you will be able to use themes and search to analyze your data and get insights into how the

data is organized.

79. How does Equivio work with other eDiscovery applications?

Equivio data is exported in a processed format with a load file that has the document metadata and

analytics. You can then load the Office 365 documents and Equivio analytics data into eDiscovery review

applications. Office 365 also provides an open platform where eDiscovery review tools can directly access

data in Office 365 that has been analyzed with Equivio Analytics.

FAQ | Office 365 E5 and Skype for Business Disclosure

80. How can an organization prove in a court of law that the documents Equivio

identifies as duplicate, excluded, or irrelevant, is unnecessary for eDiscovery? (e.g.

if the level of duplication or other exclusion is challenged, what recourse do

organizations have?)

These are common processes in eDiscovery. One common eDiscovery artifact is a decision log, showing all of

the steps that are done in the eDiscovery process to preserve and cull data. Microsoft eDiscovery provides

auditing capabilities to help document the steps made along the way. Equivio has been used in many cases

and has been an accepted product for many years. The techniques used by Equivio have had court

acceptance for a long time. If challenged, data can be sampled to prove relevant documents were rarely if

ever found in the set of data that was not turned over. There are also many eDiscovery consulting companies

out there that assist customers with the eDiscovery process and help with this.

81. What is the legal requirement for producing relevant documents?

This is a question to be discussed with your legal counsel. Microsoft does not provide legal advice.

82. What are the primary differences between Office eDiscovery with Equivio vs. kCura

Relativity vs. Recommind Accelerate?

Office eDiscovery with Equivio enables the searching and culling of the data and applies additional analytics

for organizing the data. Relativity and Axcelerate are review tools that allow large teams of attorneys to look

at and make decisions on the individual documents that have been exported out of O365. Customers will be

able to take advantage of all of the analytics information provided by Equivio within these tools.

83. Can I use Microsoft eDiscovery to view all items, tag results, and export based on

my tags?

At this time Microsoft eDiscovery does not support document tagging.

84. I see the concept of “Case” within Equivio Analytics as well as inside the eDiscovery

within compliance center in Office 365. Are these same?

At the moment, the “Case” in compliance center is a different entity when compared to the “Case” Equivio

analytics. If you want to analyze a case using Equivio Analytics capabilities, you will need to create a case

from within Equivio Analytics.

85. Will Equivio be available in different languages?

At release the User Interface will only be available in English. However, the system itself is language agnostic,

and supports processing and analysis of documents regardless of language.

86. What is the format of the file which is exported from Equivio? Is it CSV?

The data is exported in a package that contains the extracted text, a metadata load file, email in HTML

format, and attachments or SharePoint data in native format

87. What fields are included in the export file?

All of the standard metadata fields as well as all of the analytics information. An exact list of all the fields will

be made available at launch time

FAQ | Office 365 E5 and Skype for Business Disclosure

88. Are PDF files searchable through the Compliance Center?

If the PDF files are in searchable formats, then yes. It is possible to create PDF files without searchable text

and for those files you can search on their metadata but not the textual content.

89. How many files can I export from eDiscovery in the Compliance Center vs. Equivio?

There are no file limits to the exports.

90. How many mailboxes can I search via eDiscovery in the Compliance Center?

eDiscovery Search in the Compliance Center enables you to search unlimited mailboxes within your tenant at

one time.

91. Do you support keyword searches on Sensitive Type information, e.g. Credit Card

Number?

Yes

Architecture

92. How does Equivio fit with the existing Exchange Admin Center and SharePoint

eDiscovery Center tools?

Microsoft is continuing to invest in eDiscovery hold, search, and export capabilities in the Office 365

Compliance Center.

Compliance Searches in the Office 365 Compliance Center are used to select data to be analyzed with

Equivio Analytic

93. Will Equivio be released for on premises Exchange or SharePoint?

Equivio is an Office 365 service. If you have Office 365 you can move data to Office 365 to analyze it with

Equivio. In 2016 we will make it easier to use Exchange 2016 to send on premises data to Office 365 so it can

be analyzed with Equivio.

94. I have on-prem or hybrid Exchange, will Equivio work with this?

Data should be in O365 for Equivio Analytics to be able to work with it. For the pure on-prem scenario,

Equivio Analytics service will not work at the moment. You can be in a Hybrid configuration but Equivio

Analytics functionality can be only used for the data that is already migrated and present in O365.

Security and Compliance

95. Is Equivio currently in Microsoft data centers?

Yes

Extensibility

FAQ | Office 365 E5 and Skype for Business Disclosure

96. Does Equivio work on-prem or with 3rd party data?

Yes, but you will need to first import data into Office 365 using the new import tools to analyze it with

Equivio.

Licensing

97. Is the support and serviceability story for Equivio Analytics same as rest of E5 SKU?

Equivio is part of Office 365 E5, so it will be supported like any other functionality you get with E5 SKU. It is

also a service, so we will be updating the service continuously with new features, bug fixes etc.

98. How does licensing work?

To analyze a user’s data with Equivio Analytics, the user must have an E5 license. The user performing tasks

in Equivio does not need a license.

99. Is Equivio available as a standalone option or only as part of E5?

Yes, you will be able to purchase Equivio licenses separately from E5

Advanced Threat Protection Description: Also known as Secure Attachments or Sonar. Protects users against unknown and sophisticated threats

hidden in emails, attachments, and URLs.

Resources

Microsoft Ignite Series – Overview recording

Microsoft Ignite Series – Deep Dive Session recording

Advanced threat protection for safe attachments and safe links

100. What is ATP?

ATP stands for Advanced Threat protection. It is a collection of features, including Safe Attachments and

Safe Links, designed to combat zero day malware attacks. This is a completely new offering from Microsoft

for Office 365.

101. What is Safe Attachments?

Safe Attachments is a new feature that opens suspected unknown attachment in a special hypervisor

environment and detects malicious activity. It is designed to detect malicious attachments even before anti-

virus signatures are available.

102. What is Safe Links?

Safe Links is a feature that prevents users from going to malicious web sites when they click on them in

email. Safe Links has advanced reporting features that make it easy to determine who has clicked through a

malicious link to support faster remediation.

FAQ | Office 365 E5 and Skype for Business Disclosure

103. When will this new capability be available?

June 1st you will be able to order ATP via direct channel. ATP can also be purchased via VL and CSP starting

August 1st 2015. EDU, GCC channels will be made available at a later date.

104. How can I enroll customers to this private preview?

We are currently not accepting any new preview customers. They can try the product once available through

the direct channel on June 1st.

105. Will this service be included in any existing Office 365 plans?

No, Exchange Online ATP will not be included in any existing Office 365 plans or suites at launch. It will need

to be purchased separately. Different vendors in the Industry charge a premium for this service; we offer this

at a premium and a separate paid add-on.

106. How will customers be able to purchase this new service, and how will it be

priced?

Exchange Online ATP will be available for purchase to all commercial customers through the Direct, CSP,

Open, MPSA, and EA channels at an ERP of $2 per user per month. It will also available to multi-tenant

Government customers through the Direct, Open, MPSA, and EA channels at an ERP of $1.75 per user per

month.

107. What is the rationale behind charging for ATP?

Microsoft always evaluates customer interest, product value, competitor prices, and other factors when

pricing our services. In today’s market, Advanced Threat Protection is a premium service with security

vendors, like Proofpoint and FireEye ATP, charging for the product on top of a customer’s email costs. Most

email providers, like Google Apps for Work, do not offering a comparable level of security. By providing ATP

as an add-on to Office 365, Microsoft will enable customers to get ATP at a competitive price with seamless

integration into Office 365 or their on-premises Exchange environment.

108. Is the service available to Office 365 Government Community Cloud (GCC),

Office 365 Education, and Office 365 Nonprofit customers?

Exchange Online ATP will not be available at launch to Office 365 Government Community Cloud (GCC),

Office 365 Education, and Office 365 Nonprofit customers. It will only be available initially to Office 365

commercial and multi-tenant Government customers. Segment availability may expand in the future.

109. Is the service available to Office 365 Dedicated customers?

EXO-ATP is not supported with EXO Dedicated. Customers can start using the service once they have

migrated to EXO vNext.

110. Does it protect only internal mailboxes?

Yes, the service protects internal mailboxes (mails flowing into the company). The protection is not applied

to outbound mails.

111. Can a user be configured only for safe attachments or only for safe links?

Yes, there are separate policies for Safe Links and Safe Attachments. Each policy can be applied to a specific

set of users . Furthermore, it is possible to have unique policies within Safe Links and Safe Attachments so

each group of users can have custom settings.

FAQ | Office 365 E5 and Skype for Business Disclosure

112. What is the email delivery latency with ATP?

If the Safe Attachment policy that applied to a given recipient has an action of Block the email will not be

delivered until the attachments can be detonated by Safe Attachments. Safe Attachments will launch a

unique hypervisor to open the attachment. This can result in a delivery delay of upto 30 minutes for each

mail evaluated by Safe Attachments. On average, this is about 7-10 Minutes.

113. Will safe links rewriting in a message break existing DKIM signatures?

Yes, once a message has its links rewritten, any subsequent DKIM checking will no longer work. However,

EOP validates DKIM signatures before rewriting URLs and stamps the result in clear-text into the

Authentication-Results header. For example:

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=contoso.com;

h=Received:Received:Date:From:To:Message-ID:Subject:MIME-Version:

Content-Type; s=s1024; bh=<body hash>; b=<signed content>

Authentication-results: protection.outlook.com; spf=pass

(sender IP is xx.xx.xx.xx) smtp.mailfrom=user@contoso.com

dkim=pass (signature was verified) header.d=contoso.com;

dmarc=fail action=quarantine header.from=contoso.com;

Any subsequent DKIM checks should rely upon this header rather than attempting to verify the DKIM

signature after it has passed through EOP.

114. How long does it take for ATP policies to be effective?

Once a change is made to an ATP policy, it can take up to 30 minutes for that change to propagate to every

server.

115. Does safe links web service add any latency to browsing experience?

In the event that a link points to a non-malicious web site, Safe Links adds very little latency to loading the

target web page. If the link points to a malicious web site, then the user is routed to a warning page and

may click through (if click through is enabled) to continue on to the site.

116. Does EOP Antimalware work with ATP?

Yes, ATP compliments Antimalware scanning. Only those attachments that successfully pass Antimalware

scanning are impacted by Safe Attachments or Safe Links policies.

117. What types of files will Safe Attachments detonate?

Safe Attachments will detonate attachments that are common targets for malicious content, such as

Microsoft Office documents, PDFs, executable file types, and Flash files.

118. Can on-premises users use this capability?

Yes, on-premises customers can use this service. They will have to use Exchange Online Protection for

incoming messages.

119. Are there any changes with SLA for this service?

No, all SLA’s are the same as EOP. No new SLAs have been added.

FAQ | Office 365 E5 and Skype for Business Disclosure

120. How is Exchange Online ATP different from Microsoft Advanced Threat

Analytics?

Advanced Threat Analytics (ATA) comes from Aorato, a company Microsoft acquired in November, 2014. It is

a platform that helps Active Directory customers protect their data from advanced attacks by automatically

learning, profile and predicting entity (user, device, etc.) behavior. Using machine learning, it builds the

Organizational Security Graph, a living, continuously-updated view of all of the people and machines

accessing an organization’s Windows Server Active Directory (AD). This enables it to understand what normal

behavior is and then to identify anomalies, so a company can quickly see suspicious behavior and take

appropriate measures to help protect itself.

While ATA is focused on AD, Exchange Online Advanced Threat Protection is focused on emails, and

provides protection against malware, viruses with rich feature set of Safe attachments, Safe Links and URL

tracing, giving your office 365 admins a simple way to block prevent such attacks.

121. Will users require Shared Mailboxes to get advanced functionality for ATP?

Yes - users require Shared Mailboxes to have a license to get the more advanced functionality for ATP (and

other Office 365 component features like Equivio, EOA, or DLP).

Power BI Pro Description: Business analytics service that enables information workers to visualize and analyze data with greater

speed, efficiency, and understanding through live data dashboards, interactive reports, and compelling visualizations.

Resources

Power BI Pro Detailed FAQ – for internal Microsoft and Partner facing use only.

Microsoft Ignite Series Recordings

Microsoft Power BI Knowledge Base

122. What is Power BI?

Power BI is a cloud-based business analytics service (software-as-a -service) for non-technical business users to

visualize and analyze data. Power BI securely connects to a broad set of data sources residing both on-

premises and in the cloud.

123. How does Power BI fit into Microsoft’s overall data platform strategy?

Our data platform strategy is to empower customers to maximize the value derived from each byte of data

they store and process. Power BI delivers on that strategy by connecting our customers’ data to Microsoft’s full

data platform, enabling them to easily use other Microsoft data solutions -- including the predictive analytics

capabilities of Azure Machine Learning -- to achieve business value faster.

124. What market momentum are we seeing for Power BI?

Tens of thousands of people have used Power BI since we first introduced it. Customers such as Boys & Girls

Clubs are already previewing the new Power BI features.

We’re anticipating growth in the market. According to IDC, global spending on business analytics services is

projected to rise from $51.6 billion in 2014 to $89.6 billion in 2018. IDC also predicts that “Visual data

discovery” – data visualization – is projected to grow 2.5x faster than the rest of the BI market between 2015

and 2018.

FAQ | Office 365 E5 and Skype for Business Disclosure

With the new capabilities and new pricing, we think Power BI is the best solution on the market to enable

more customers learn from and act on their data.

125. What data services does Microsoft offer in the cloud?

Microsoft offers a comprehensive set of data services for customers -- including Azure Machine Learning,

Azure Search, Azure DocumentDB, and other Azure data services -- to managed data services from our

partners. Microsoft is committed to supporting the broadest data platform so customers get data benefits, in

the cloud, on their terms.

In addition, Power BI is an end-to-end cloud based solution for deriving insights on data. It reduces barriers

to deploying a business intelligence environment for sharing and collaborating on data and analytics from

anywhere.

With Microsoft’s big data and cloud solutions, customers have more options to enable new scenarios for

modern data warehousing, information services and business intelligence to gain deeper insight from their

data and improve the way they deliver services and products to their customers.

126. What languages and regions is Power BI available?

At GA Power BI will be available in all countries where Office 365 is supported except Brazil and China.

Power BI will be available in 43 languages.

Q&A and Data Search features are currently English only and we are working on providing additional

language support over time.

Delve Analytics Description: Rich interactive dashboards highlighting key trends such as reach, influence and work-life balance across

an individual and team’s engagement with internal and external teams.

Resources

Delve Analytics FAQ

Office Delve and Office Graph Vision and Roadmap

Break Down Organizational Silos and Gain New Insights with Office Graph and Office Delve

DLP and Encryption Description: Extending Data Loss Prevention and Data Encryption at rest to SharePoint Online and Skype for Business

Online in addition to Exchange Online. Availability dates for DLP and Encryption in Skype for Business and SharePoint

Online will be communicated at a later date.

Resources

Overview of data loss prevention policies

Meeting Broadcast Description: Enables hosting meetings to reach thousands of attendees, with unique large meeting features.

FAQ | Office 365 E5 and Skype for Business Disclosure

Resources

What is a Skype Meeting Broadcast?

Skype for Business Cloud PBX Description: Cloud-Based call management to enable making, receiving, and transferring calls across a wide range of

devices.

Skype for Business PSTN Conferencing Description: Public Switch Telephone Network Conferencing enables meeting attendees to join from any device via

telephone number and organizers to dial-out to pull attendees in.

Resources

What is PSTN calling?