Microsoft 365 Apps

Microsoft 365 Apps (formerly Office 365 ProPlus) is the subscription-based version of Microsoft Office that is included with most Microsoft 365 business, enterprise, and education plans. Unlike the traditional perpetual versions (e.g., Office 2019, Office 2021), Microsoft 365 Apps are licensed on a per-user per-month basis and are updated regularly with new features, security patches, and performance improvements. The software is installed locally on the device but leverages cloud services for activation, updates, and some functionality (e.g., real-time co-authoring, AI-powered features).

Microsoft introduced Microsoft 365 Apps to address several limitations of perpetual Office: - Feature stagnation: Perpetual Office versions receive only security updates, not new features. Microsoft 365 Apps receive new features multiple times per year via feature updates. - Deployment complexity: IT admins had to manually deploy and patch each version. Microsoft 365 Apps can be deployed from the cloud with Click-to-Run, reducing overhead. - Licensing flexibility: Perpetual licenses are tied to a specific device and version; Microsoft 365 Apps licenses are tied to the user, allowing installation on up to 5 devices (PC, Mac, tablets, phones). - Security: Microsoft 365 Apps receive continuous security updates, while perpetual versions have a fixed support lifecycle (10 years mainstream + extended support).

Microsoft 365 Apps use Click-to-Run technology, which is a streaming and virtualization technology that replaced Windows Installer (MSI). Here's the step-by-step mechanism:

- Update Channels: Microsoft 365 Apps have three main update channels: - Current Channel: Receives new features first (monthly). Suitable for users who need the latest features. Default for consumer and some business plans. - Monthly Enterprise Channel: Receives new features once a month with a predictable release schedule. Suitable for most enterprise users. - Semi-Annual Enterprise Channel: Receives new features twice a year (January and July). Suitable for regulated environments that need extensive testing. - Activation validity: Online activation is valid for 30 days. If the device cannot contact the activation server for 30 consecutive days, the apps enter reduced functionality mode (read-only). After 30 more days (60 total), the apps become disabled. - Product IDs: Each plan has a specific product ID used during deployment. For example: - O365ProPlusRetail for Microsoft 365 Apps for enterprise - O365BusinessRetail for Microsoft 365 Apps for business - Architecture: 32-bit is default, but 64-bit is recommended for large datasets (e.g., Excel >2GB). The installer can be configured to force 64-bit. - Installation size: ~1.5 GB for 32-bit, ~2.5 GB for 64-bit.

Administrators can deploy and manage Microsoft 365 Apps using the Office Deployment Tool (ODT). The ODT uses an XML configuration file to specify settings. Example XML to install Microsoft 365 Apps for enterprise with the Semi-Annual Enterprise Channel:

<Configuration>
  <Add OfficeClientEdition="64" Channel="SemiAnnual">
    <Product ID="O365ProPlusRetail">
      <Language ID="en-us" />
    </Product>
  </Add>
  <Updates Enabled="TRUE" UpdatePath="\\server\updates" />
  <Display Level="None" AcceptEULA="TRUE" />
</Configuration>

To verify installed version and channel, check the registry at HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\Configuration. Key values: - VersionToReport: Installed version (e.g., 16.0.15601.20088) - UpdateChannel: Current channel URL (e.g., http://officecdn.microsoft.com/pr/492350f6-3a01-4f97-b9c0-c7c6ddf67d60 for Semi-Annual)

Microsoft 365 Apps are included in the following plans: - Microsoft 365 Business Basic: Web and mobile apps only (no desktop apps). - Microsoft 365 Apps for business: Desktop apps for up to 5 devices per user, no enterprise features (e.g., no Group Policy support). - Microsoft 365 Apps for enterprise: Full desktop apps with enterprise management capabilities. - Microsoft 365 E3/E5: Includes Microsoft 365 Apps for enterprise plus additional security and compliance features. - Office 365 E1: Web and mobile apps only. - Office 365 E3/E5: Includes Microsoft 365 Apps for enterprise.

Microsoft 365 Apps include features not available in perpetual versions: - Real-time co-authoring: Multiple users editing the same document simultaneously. - AI-powered features: Ideas in Excel, Designer in PowerPoint, Editor in Word. - Cloud-based storage: Auto-save to OneDrive or SharePoint. - Modern authentication: Supports Multi-Factor Authentication (MFA) and Conditional Access. - Always-up-to-date: No need to purchase new versions; updates are included.

Perpetual versions (e.g., Office 2021) lack these features and receive only security updates for 10 years.

Updates are delivered via the Office Content Delivery Network (CDN). The update process: 1. The Microsoft 365 Apps update service checks for updates every 12 hours by default. 2. If an update is available, it downloads the delta (differential) update using BITS. 3. The update is applied silently (no user interaction required). 4. The user may be prompted to restart the app if files are in use.

Administrators can control updates via Group Policy or ODT XML (e.g., set update path to a local network share to reduce internet bandwidth).

A multinational bank with 50,000 employees needs to deploy Microsoft 365 Apps while ensuring all devices are patched within 30 days of release. They use the Semi-Annual Enterprise Channel to receive updates twice a year, but they also need to test updates before deployment. The IT team uses the Office Deployment Tool to download updates to a local network share (SCCM Distribution Point). They configure the update path via Group Policy to point to the local share. This reduces internet bandwidth usage and allows them to approve updates after internal testing. Common issues: if the local share goes down, devices cannot update and may fall behind. They monitor update compliance using Microsoft Endpoint Analytics.

A 50-person marketing agency uses Microsoft 365 Business Premium. They want users to self-install Office from the Office Portal. The IT admin assigns licenses and sends an email with instructions. Users install Office on their laptops and activate with their work email. The admin uses the Office 365 Admin Center to view activation status and generate a report of inactive users. They also enable Multi-Factor Authentication to secure logins. Problem: if a user leaves, the admin must deactivate the license and revoke the user's access. The former user's local Office installation remains activated until the 30-day timer expires. To immediately block access, the admin can sign out the user from all sessions via Azure AD.

A hospital with 10,000 devices must comply with HIPAA. They deploy Microsoft 365 Apps via Intune with policies that disable cloud features like AutoSave and Real-Time Co-authoring to prevent data leakage. They also enable Application Guard for Office to open attachments from external sources in a sandbox. They use the Monthly Enterprise Channel to receive security updates monthly but test features in a pilot group. They enforce 64-bit Office because some Excel files exceed 2GB. Common misconfiguration: forgetting to set the update channel, resulting in devices being on Current Channel and receiving untested features. They use Group Policy to lock the update channel.