Both sides previous revisionPrevious revisionNext revision | Previous revision |
en:services:email_collaboration:office365 [2020/03/26 14:34] – [Data management at Microsoft] 0nkopp1 | en:services:email_collaboration:office365 [2024/05/02 07:53] (current) – [Who can use Microsoft 365?] 0nkopp1 |
---|
| ====== Microsoft 365 ====== |
| |
| ===== Overview Microsoft 365 ===== |
| Microsoft 365 (formerly Office 365) is a software suite by Microsoft that combines the familiar Office applications (Excel, Word, and PowerPoint) in online and offline versions with cloud-based storage and collaboration applications in one subscription service. The goal is to provide a comprehensive range of applications and services that simplify daily work from anywhere with any device.[[#references| [1] ]] The Microsoft cloud storage OneDrive serves as file storage, on which 1TB storage space is available for each user by default. [[#references| [2] ]] For efficient team communication via text, audio and video, the platform Teams is available so that both large and small working groups can work together from anywhere. |
| |
| Microsoft 365 is offered in several different models for private, business and educational use. Via the [[en:services:general_services:software_and_license_management:mscampus|Microsoft Campus Agreement]] different license models will be available to employees and students from 01.05.2021, which can be activated for interested users through our GWDG portal. The //Microsoft 365 with Teams// offer gives you access to the Teams communication service, and //Microsoft 365 with Office// allows you to install the Office applications on your private devices. |
| |
| Once a user account has been activated and synchronized, access to the Microsoft 365 applications is enabled via [[https://office.com|office.com]] using GWDG login credentials. After authentication via the ADFS service of the GWDG (adfs.gwdg.de) the portfolio of available web applications appears. Links to download the client applications are also provided. |
| |
| ===== Who can use Microsoft 365? ===== |
| Currently, using Microsoft 365 is possible only for the **employees of the University of Göttingen and the GWDG**. Excluded from this are the **employees of the UMG and the University's central administration**. There, the use of Microsoft 365 with Teams is not approved and therefore the use is not possible. |
| |
| The **Students of the University of Göttingen** will receive access to Microsoft 365 with Office from 01.05.2021 for a one-off fee of €11, which they can use via the [[en:services:general_services:software_and_license_management:mscampus|Campus Agreement]] until the end of the term. |
| |
| <WRAP center round important 70%> |
| **Update:** The offer will continue after 01.05.2024 in accordance with the term of the [[en:services:general_services:software_and_license_management:mscampus|Campus Agreement]] and only the fee will be adjusted. Activation **before 30.04.2024** for Microsoft 365 by students of the University of Göttingen will continue without additional costs. |
| </WRAP> |
| |
| **Important!** According to the guidelines of the University of Göttingen, it is not permitted to store business data and especially data that is worthy of protection in the Microsoft cloud. |
| |
| ===== Activation ===== |
| The following steps are necessary for independent activation for Microsoft 365 via the GWDG: |
| |
| - Registration at [[https://www.gwdg.de/my-account|Customer Portal of the GWDG]] |
| - In the account management under //External services// click on //Edit// |
| - Click //Activate for Office 365 / Teams// |
| - Read the [[en:services:email_collaboration:office365#data_protection_information_according_to_gdpr_art_13|data protection information]] and submit the displayed data protection dialog if you agree |
| - After max. 45 minutes you will receive a confirmation email as soon as the activation has been completed |
| |
| ===== Download + License Activation ===== |
| ==== Initial Office 365 Installation ==== |
| If Office 365 has not yet been used on the private device, the Office applications must first be installed. The installation file can be downloaded via https://portal.office.com/account#installs after activation and logging in with the student or business account. After installation, Office 365 must [[#office_365_activation|be activated using this account]]. |
| |
| ==== Sign out the Expired Account ==== |
| If Office 365 has already been installed on a private device and used before 01.05.2021 via the previous Asknet offer (via the portals [[https://www.studyhouse.de|www.studyhouse.de]] or [[https://www.academic-center.de|www.academic-center.de]]) for 4.99 € per year, after [[#activation|activating the student or business account for Microsoft 365 with Office]] only the Microsoft account linked in Office needs to be changed to obtain a license from the new [[en:services:general_services:software_and_license_management:mscampus|Campus Agreement]]. Accounts from the expired Asknet offer can be recognized by the extension **@benefitcfgau.onmicrosoft.com** and can no longer be used for Office 365. |
| |
| The option to deregister the old account can be found in any installed Office application (e.g. Word) under the account settings ("File" > "Account"). |
| |
| {{:en:services:email_collaboration:office_logout.png|}} |
| |
| Once the logout is complete, Office 365 [[#office_365_activation|can be reactivated]] in the same place in the Office application with the activated student or business account. |
| |
| === Migration of OneDrive Data === |
| If data is stored in the OneDrive cloud storage of the expired Microsoft account (e.g. //m.musterfrau@benefitcfgau.onmicrosoft.com//), it must be manually moved to the OneDrive storage of the newly activated business or student account (e.g. //m.musterfrau@stud.uni-goettingen.de//). Instructions for doing this can be found on [[https://support.microsoft.com/en-us/office/move-files-from-onedrive-to-onedrive-for-work-or-school-7fb28cad-7e25-451f-8b4b-2d1a71e5c0e9|Microsoft's help pages]]. |
| |
| **Note:** For the migration of **OneNote notebooks** there is also a separate [[https://pad.gwdg.de/s/duqEM7Kf7|GWDG help page]] (only available in German). |
| |
| ==== Office 365 Activation ==== |
| To activate an installed Office 365 on a private device, the student or business account that was activated in advance for //Microsoft 365 with Office// must be linked to the Office suite. To do this, open any Office application (e.g. Word, Excel, PowerPoint, Outlook) and log in under "File" > "Account". |
| |
| {{:en:services:email_collaboration:office_signin.png|}} |
| |
| **Note:** On some Mac devices, even after logging in with the correct account, an error message "**Your account does not allow editing on a Mac**" appears. In this case, when opening any Office application, there is a separate "Activate" button that can be used to activate the license on the device and thus fix the error. |
| |
| === Problems with signing in === |
| In a few cases, an error occurs when signing in the student or business account, because another account is still logged in. In this case, check in the Windows settings on Windows devices whether other accounts are logged in under "Accounts" > "Access work or school account". Only the personal student or work account should be listed here. |
| |
| If no error is detected in the Windows settings, the activation status can be reset in four steps using [[https://docs.microsoft.com/en-us/office/troubleshoot/activation/reset-office-365-proplus-activation-state|Microsoft's help page]]. |
| |
| ===== Licenses ===== |
| From 01.05.2021, the pool of Microsoft 365 licenses will include the license package called Office 365 A3 (for details see [[https://www.microsoft.com/en-us/microsoft-365/academic/compare-office-365-education-plans|License Overview]]). Licenses are assigned to individual users via groups in the Active Directory (AD) of the GWDG. These groups are created exclusively for this purpose and are equipped with licenses for the individual applications in Microsoft 365. |
| |
| ==== Activated Applications ==== |
| |
| The following services are currently activated for the Microsoft 365 users of the GWDG: |
| * [[#word|Word]] (Web only) |
| * [[#excel|Excel]] (Web only) |
| * [[#powerpoint|PowerPoint]] (Web only) |
| * [[#onedrive|OneDrive]] |
| * [[#onenote|OneNote]] |
| * [[en:services:mobile_working:videoconferencing_tools:ms-teams|Teams]] |
| |
| The classic Office applications Word, Excel and PowerPoint are only available in an online version and can be used in parallel with locally installed Office programs that were installed using the Office 2019 package (for details see [[https://products.office.com/en-us/business/microsoft-office-volume-licensing-suites-comparison|License Overview]]). In the Web applications, only OneDrive can be used as data storage, whereby the data is stored on Microsoft servers and therefore some notes must be observed, especially from a data protection perspective (see [[#data_security|Data Security]]). Locally installed Office applications also allow access to local resources, so that the processed data can still be stored at the GWDG. |
| |
| For the use of Office applications on private devices, the **Microsoft 365 with Office** offer also includes the following components: |
| * [[#word|Word]] (Web + **Desktop** + Mobile) |
| * [[#excel|Excel]] (Web + **Desktop** + Mobile) |
| * [[#powerpoint|PowerPoint]] (Web + **Desktop** + Mobile) |
| * Outlook (**Desktop** + Mobile) |
| * Publisher (**Desktop**) |
| * Access (**Desktop**) |
| * [[#onedrive|OneDrive]] |
| * [[#onenote|OneNote]] |
| |
| <WRAP center round important 70%> |
| Due to its cloud connection, this offer is explicitly not intended for use on official devices! **Office 2019 will continue to be used for official devices**, is installed by the responsible administrators and works without a cloud connection, . |
| </WRAP> |
| ===== Authentication ===== |
| User authentication is provided by the ADFS service adfs.gwdg.de operated by the GWDG. The [[https://docs.microsoft.com/en-us/windows-server/identity/ad-fs/ad-fs-overview|Active Directory Federation Service]] (ADFS) enables a single sign-on with the login credentials stored at the GWDG and access to connected services. Microsoft itself therefore does not receive access to the login password (or other login factors) when logging on to Microsoft 365. |
| |
| ===== User Data ===== |
| ==== User Synchronization ==== |
| When a user is activated for Microsoft 365, his account is synchronized from the AD of the GWDG to the Azure AD of the GWDG mandate at Microsoft. This is necessary so that Microsoft can assign all customer data to this account and so that the logon via the ADFS service of the GWDG works. During synchronization, the amount of account information transferred can be fine-grained, so that only the user attributes necessary for proper operation are shared with Microsoft by the GWDG AD. In addition, the groups described above are indispensable for license distribution. The following two tables show which objects from AD are generally synchronized and which associated attributes are involved. |
| |
| | **object type** | **AD → Azure AD** | **Azure AD → AD** | **Reason for synchronization** | **Object filter** | |
| | //user// | X | | Access to Microsoft 365 for users | User must be given authorization for Azure access through the IDM, either by an administrator or in self-service. | |
| | //contact// | | | | | |
| | //group// | X | | Organization of synchronized users, especially for license distribution | Groups must be manually marked as Azure groups by an AD admin. | |
| | //device// | | | | | |
| |
| When selecting the object attributes to be synchronized, Microsoft provides a short list of mandatory and an extensive [[https://docs.microsoft.com/en-us/azure/active-directory/hybrid/reference-connect-sync-attributes-synchronized|list of recommended attributes]]. The GWDG has decided to share only the most necessary user data from its own AD with Microsoft. |
| |
| | **Attribute** | **Description** | **Reason for synchronization** | **user** | **contact** | **group** | **device** | |
| | //accountEnabled// | defines whether an account is activated[[#references| [3] ]] | mandatory | X | | | X | |
| | //displayName// | A string representing the name that is often displayed as the display name (firstname lastname).[[#references| [3] ]] | User identification using real name for the user | X | X | X | | |
| | //mail// | Complete e-mail address[[#references| [3] ]] | Contact possibility for system and user | X | | X | | |
| | //userPrincipalName// | This user principal name is the login ID for the user. Usually identical with the value [mail]..[[#references| [3] ]] | mandatory | X | | | | |
| | //sourceAnchor// | Mechanical property. Invariable identifier which maintains the relationship between AD DS and Azure AD.[[#references| [3] ]] | mandatory | X | X | X | | |
| | //member// | List of group members as AD Distinguished Name | License distribution via AD groups | | | X | | |
| | //securityEnabled// | Defines whether a group is a security group | Required for group synchronization[[#references| [4] ]] | | | X | | |
| | //deviceId// | Identifier of the device belonging to the object | mandatory | | | | X | |
| |
| ==== Data Management at Microsoft ==== |
| Microsoft promises in its own [[https://www.microsoft.com/de-de/trust-center/privacy/data-management|Microsoft Trust Center]] not to use the stored data for advertising or marketing purposes. In addition, Microsoft safeguards such policies with the [[https://www.iso.org/standard/76559.html|Code of practice for protection of personally identifiable information in public clouds (ISO/IEC 27018)]]. [[#references| [5] ]] The [[https://go.microsoft.com/fwlink/p/?LinkID=2052345|Online Service Terms]] set forth all rules for data management. These include the following points: |
| |
| * The customer retains all rights and ownership of his customer data. |
| * The use of customer data is limited exclusively to the provision of the agreed services. |
| * Customer data protection measures comply with the requirements of ISO 27001, ISO 27002 and ISO 27018 |
| * Data transfers outside the European Economic Area or Switzerland are secured and documented in accordance with the GDPR. |
| * Customer data is deleted 90 days after the end of the subscription. |
| |
| ===== Data Protection Information according to GDPR Art. 13 ===== |
| This information supplements the data protection information of the GWDG (https://www.gwdg.de/privacy-notice) wherever applicable: |
| |
| ==== Purpose and Legal Basis, Right of Withdrawal ==== |
| The processing, including the transfer of personal data to Microsoft, takes place within the scope of providing the online services described above. Since the use of the services represents an additional offer, the legal basis is consent in accordance with GDPR Art. 6 Paragraph (1) Letter a). |
| |
| The right of revocation results directly from the consent, which is possible via the [[https://www.gwdg.de/my-account|GWDG customer portal]], just like the consent. The other rights of the persons concerned (right to information, correction, deletion, blocking, transferability) can be exercised as described in the GWDG data protection declaration. |
| |
| ==== Processed Data, Recipient of the Data, Third Country Status === |
| The following data is collected and shared as part of the Microsoft cloud services, which include Microsoft 365 incl. OneDrive: |
| |
| * User ID (for details see [[#user_synchronization|User Synchronization]]) |
| * Membership of the institution "University of Göttingen" |
| * Stored data (OneDrive), if necessary also data actively used in Microsoft 365 applications |
| |
| The data will be passed on to Microsoft Inc. and a transfer of data to the USA cannot be ruled out. The USA is a so-called //third country// in terms of data protection. The PrivacyShield Agreement between the EU and the USA guarantees a data protection standard comparable to the GDPR, but the CloudAct nevertheless grants US investigative authorities access to the data in case of doubt. |
| |
| ==== Storage Duration==== |
| After the end of the subscription by revocation of the user or expiration of the [[https://info.gwdg.de/docs/doku.php?id=en:services:general_services:software_and_license_management:mscampus|Microsoft Campus Agreement]], the customer data will be kept for 90 days and restored in case of reactivation. After 90 days, the data is automatically deleted. |
| |
| ==== Data Security ==== |
| When using the Microsoft online services, the [[http://www.uni-goettingen.de/de/amtliche+mitteilungen+i+ausgabe+4+%2824.01.2020%29/619701.html|guidelines for information security of the University of Göttingen]] (only available in german) must be observed. Every user must be aware that data in Microsoft 365 is stored in OneDrive and thus on Microsoft servers. With sensitive data (e.g. personnel or financial data), storage on external servers is prohibited. |
| |
| ===== Help and Support ===== |
| ==== Open Office Hour ==== |
| For quick help, we offer open office hours on Office 365 every Tuesday during lecture period from 10:00 am to 12:00 pm. You can either visit us in person at [[https://wiki.student.uni-goettingen.de/en/support/rechnerstandorte/lrcs/sub|LRC SUB]] ([[https://lageplan.uni-goettingen.de/?ident=5383_1_2.OG_2.108&lang=en|Location]]) or virtually by zooming in via https://s.gwdg.de/DPBsuZ. |
| ==== OneDrive ==== |
| * Introduction |
| * Video: [[https://support.office.com/en-us/article/what-is-onedrive-work-or-school-10f5c3fd-b0f6-40e2-9059-04735ffe01b7|What is OneDrive?]] |
| * Quick guide: [[https://support.office.com/en-us/article/upload-and-save-files-and-folders-to-onedrive-for-business-a1397e56-61ec-4ed2-9dac-727bf8ac3357|Upload and save files and folders to OneDrive for Business]] |
| * User training: [[https://support.office.com/en-us/article/onedrive-video-training-1f608184-b7e6-43ca-8753-2ff679203132|OneDrive video training]] |
| * Help: [[https://support.office.com/en-us/onedrive|OneDrive help center]] |
| * Data Migration: [[https://support.microsoft.com/en-us/office/move-files-from-onedrive-to-onedrive-for-work-or-school-7fb28cad-7e25-451f-8b4b-2d1a71e5c0e9|Move files from OneDrive to OneDrive for work or school]] |
| |
| ==== Teams ==== |
| * GWDG Teams Guide: [[en:services:mobile_working:videoconferencing_tools:ms-teams|Microsoft Teams via GWDG]] |
| |
| ==== OneNote ==== |
| * Introduction |
| * Video: [[https://support.office.com/en-us/article/video-what-is-onenote-be6cc6cc-3ca7-4f46-8876-5000f013c563|What is OneNote?]] |
| * Quick guide: [[https://support.microsoft.com/en-us/office/create-a-notebook-in-onenote-6be33cf9-f7c3-4421-9d74-469a259952d3|Create a notebook in OneNote]] |
| * User training: [[https://support.office.com/en-us/article/onenote-video-training-1c983b65-42f6-42c1-ab61-235aae5d0115|OneNote video training]] |
| * Help: [[https://support.office.com/en-us/onenote|OneNote help center]] |
| |
| ==== Word ==== |
| * Introduction |
| * Video: [[https://support.office.com/en-us/article/what-is-word-aee9c7ff-f9c5-415f-80dc-103ad5e344d7|What is Word?]] |
| * Quick guide: [[https://support.office.com/en-us/article/create-a-document-28508ada-9a3c-4333-a17b-cb29723eb64c|Create a document]] |
| * User training: [[https://support.office.com/en-us/article/word-for-windows-training-7bcd85e6-2c3d-4c3c-a2a5-5ed8847eae73|Word video training]] |
| * Help: [[https://support.office.com/en-us/word|Word help center]] |
| |
| ==== Excel ==== |
| * Introduction |
| * Video: [[https://support.office.com/en-us/article/create-a-workbook-in-excel-94b00f50-5896-479c-b0c5-ff74603b35a3|What is Excel?]] |
| * Quick guide: [[https://support.office.com/en-us/article/create-a-new-workbook-ae99f19b-cecb-4aa0-92c8-7126d6212a83|Create a new workbook]] |
| * User training: [[https://support.office.com/en-us/article/excel-for-windows-training-9bc05390-e94c-46af-a5b3-d7c22f6990bb|Excel video training]] |
| * Help: [[https://support.office.com/en-us/excel|Excel help center]] |
| |
| ==== PowerPoint ==== |
| * Introduction |
| * Video: [[https://support.office.com/en-us/article/video-what-is-powerpoint-5f9cc860-d199-4d85-ad1b-4b74018acf5b|What is PowerPoint?]] |
| * Quick guide: [[https://support.office.com/en-us/article/create-a-presentation-in-powerpoint-422250f8-5721-4cea-92cc-202fa7b89617|Create a presentation in PowerPoint]] |
| * User training: [[https://support.office.com/en-us/article/powerpoint-for-windows-training-40e8c930-cb0b-40d8-82c4-bd53d3398787|PowerPoint video training]] |
| * Help: [[https://support.office.com/en-us/powerpoint|PowerPoint help center]] |
| |
| ==== Microsoft 365 Overview ==== |
| * Video training: [[https://support.office.com/en-us/office-training-center|Microsoft 365 training center]] |
| |
| ===== References ===== |
| [1] https://products.office.com/en-us/home/\\ |
| [2] https://www.microsoft.com/en-us/microsoft-365/academic/compare-office-365-education-plans\\ |
| [3] https://docs.microsoft.com/en-us/azure/active-directory/hybrid/reference-connect-sync-attributes-synchronized\\ |
| [4] https://docs.microsoft.com/en-us/archive/blogs/kolldhee/export-error-on-azure-ad-connector\\ |
| [5] https://docs.microsoft.com/en-usmicrosoft-365/compliance/offering-iso-27018\\ |
| [6] https://products.office.com/en-us/where-is-your-data-located\\ |
| |
| |
| |