%3CLINGO-SUB%20id%3D%22lingo-sub-1310376%22%20slang%3D%22en-US%22%3ERe%3A%20Deploy%20Office%20365%20ProPlus%20to%20remote%20workers%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1310376%22%20slang%3D%22en-US%22%3E%3CP%3EOn%20the%20surface%20this%20seems%20like%20it's%20trading%20one%20problem%20for%20another.%20When%20users%20are%20on%20VPN%20we%20don't%20want%20to%20overload%20those%20devices%20or%20connections%20but%20when%20users%20are%20on-prem%20we%20don't%20want%20to%20overload%20the%20internet%20circuit.%20If%20I%20understand%20this%20article%20and%20the%20corresponding%20%22updates%20for%20remote%20workers%22%20article%20correctly%2C%20you're%20removing%20the%20ability%20to%20use%20Distribution%20Points%20to%20optimize%20internet%20traffic%20from%20sites%20with%20numerous%20clients.%20Is%20there%20a%20single%20approach%20that%20optimizes%20both%20scenarios%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EFor%20example%2C%20does%20this%20still%20honor%20Peer-Caching%3F%20Could%20that%20be%20used%20on-prem%20so%20that%20it%20would%20get%20pulled%20%22once%22%20from%20the%20CDN%20but%20then%20shared%20with%20peers%3F%20It%20would%20be%20nice%20to%20see%20a%20comprehensive%20guide%20to%20bandwidth%20optimization%20that%20accounts%20for%20multiple%20scenarios%20rather%20than%20focusing%20on%20one%20scenario%20(potentially)%20at%20the%20cost%20of%20others.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1315380%22%20slang%3D%22en-US%22%3ERe%3A%20Deploy%20Office%20365%20ProPlus%20to%20remote%20workers%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1315380%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F622938%22%20target%3D%22_blank%22%3E%40JonSauter_MK%3C%2FA%3E%26nbsp%3BThanks%20for%20your%20feedback.%20My%20team%20is%20actually%20working%20on%20a%20comprehensive%20guide%20for%20install%20options%20and%20which%20network%20optimization%20technologies%20can%20be%20used%20when.%20On%20your%20ask%3A%20You%20can%20employ%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fdeployoffice%2Fdelivery-optimization%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3EDelivery%20Optimization%20for%20Office%3C%2FA%3E%26nbsp%3Bin%20combination%20with%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fconfigmgr%2Fcore%2Fplan-design%2Fhierarchy%2Fmicrosoft-connected-cache%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3EConnected%20Cache%3C%2FA%3E%20to%20reduce%20the%20load%20on%20your%20corp%20internet%20circuits.%20We%20save%20tremendous%20saving%20when%20the%20combination%20of%20the%20two%20technologies%20is%20leveraged.%20For%20completeness%2C%20we%20could%20also%20use%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fconfigmgr%2Fcore%2Fplan-design%2Fhierarchy%2Fclient-peer-cache%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3EConfiguration%20Manager%20Client%20Peer%20Cache%3C%2FA%3E%2C%26nbsp%3B%20but%20this%20would%20only%20cache%20the%20setup.exe%20and%20configuration%20file%20included%20in%20the%20deployment%20package.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EThanks%20again%20for%20the%20feedback%2C%20I%20will%20add%20this%20to%20the%20blog%20post%20later.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1258514%22%20slang%3D%22en-US%22%3EDeploy%20Office%20365%20ProPlus%20to%20remote%20workers%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1258514%22%20slang%3D%22en-US%22%3E%3CP%3EThis%20blog%20post%20will%20address%20the%20enterprise%20IT%20admin%E2%80%99s%20challenge%20on%20how%20to%20deploy%20Office%20365%20ProPlus%20to%20remote%20workers%20without%20saturating%20the%20company%E2%80%99s%20VPN%20connections.%20It%20will%20show%20you%20how%20to%20implement%20a%20tactical%20approach%20which%20allows%20an%20IT%20admin%20to%20stay%20in%20control%20and%20quickly%20relief%20the%20pain%20of%20VPN%20congestion%20by%20offloading%20content%20distribution%20to%20the%20Microsoft%20Content%20Delivery%20Network%20(CDN).%20Maybe%20you%20are%20in%20the%20process%20of%20moving%20off%20legacy%20versions%20of%20Office%20and%20want%20to%20keep%20the%20pace%20with%20e.g.%20the%20%3CA%20href%3D%22https%3A%2F%2Fproducts.office.com%2Fen-us%2Foffice-2010-end-of-support%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%22%3EOffice%202010%20end-of-support%3C%2FA%3E%20approaching%20fast.%20There%20are%20multiple%20strategic%20solutions%20available%20(e.g.%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fenterprise-mobility-security%2Fdeploying-office-365-proplus-with-microsoft-intune%2Fba-p%2F250292%22%20target%3D%22_blank%22%20rel%3D%22noopener%22%3EIntune%3C%2FA%3E%20and%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fwindows%2Fdeployment%2Fwindows-autopilot%2Fwindows-autopilot%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%22%3EWindows%20Autopilot%3C%2FA%3E)%2C%20but%20for%20now%20we%20focus%20on%20a%20quick%20fix.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CH2%20id%3D%22toc-hId--1382976427%22%20id%3D%22toc-hId--1382976427%22%3EOverview%20of%20blog%20post%20series%3C%2FH2%3E%0A%3CP%3EThis%20blog%20post%20is%20part%20of%20a%20series%2C%20which%20is%20brought%20to%20you%20by%20the%20Office%20Rangers%20Team%20at%20Microsoft%2C%20a%20group%20of%20senior%20deployment%20experts.%20The%20series%20provides%20guidance%20on%20how%20to%20address%20scenarios%20around%20working-from-home%20across%20the%20lifecycle%20of%20an%20Office%20365%20ProPlus%20installation%3A%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CUL%3E%0A%3CLI%3EInitial%20install%20-%20How%20to%20upgrade%20to%20Office%20365%20ProPlus%20with%20minimal%20on-prem%20network%20impact%20for%20remote%20workers%20(this%20post)%3C%2FLI%3E%0A%3CLI%3EServicing%20-%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Foffice-365-blog%2Fconfiguring-office-365-proplus-updates-for-remote-workers-using%2Fba-p%2F1253491%22%20target%3D%22_blank%22%20rel%3D%22noopener%22%3EConfiguring%20Office%20365%20ProPlus%20updates%20for%20remote%20workers%20using%20VPN%3C%2FA%3E%3C%2FLI%3E%0A%3CLI%3E%3CSPAN%20style%3D%22font-family%3A%20inherit%3B%22%3EManaging%20-%20Adding%20e.g.%20Project%2C%20Visio%20or%20additional%20Language%20Packs%20in%20%E2%80%9C%3C%2FSPAN%3E%3CA%20style%3D%22font-family%3A%20inherit%3B%20background-color%3A%20%23ffffff%3B%22%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fdeployoffice%2Ffieldnotes%2Fbuild-dynamic-lean-universal-packages%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%22%3EBuilding%20dynamic%2C%20lean%20%26amp%3B%20universal%20packages%3C%2FA%3E%3CSPAN%20style%3D%22font-family%3A%20inherit%3B%22%3E%E2%80%9D%3C%2FSPAN%3E%3C%2FLI%3E%0A%3CLI%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Foffice-365-blog%2Fhow-to-secure-your-remote-workers-with-office-cloud-policy%2Fba-p%2F1308579%22%20target%3D%22_blank%22%20rel%3D%22noopener%22%3E%3CSPAN%20style%3D%22font-family%3A%20inherit%3B%22%3EHow%20to%20secure%20your%20remote%20workers%20with%20Office%20Cloud%20Policy%20Service%3C%2FSPAN%3E%3C%2FA%3E%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%3EWe%20hope%20this%20will%20help%20you%20to%20minimize%20the%20impact%20of%20deploying%2C%20servicing%20and%20managing%20Office%20365%20ProPlus%20on%20your%20own%20network%20and%20your%20user%E2%80%99s%20VPN%20connections.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CH2%20id%3D%22toc-hId-1104536406%22%20id%3D%22toc-hId-1104536406%22%3EThe%20Concept%3C%2FH2%3E%0A%3CP%3EWith%20the%20approach%20described%20below%2C%20we%20want%20to%20achieve%20two%20things%3A%3C%2FP%3E%0A%3CUL%3E%0A%3CLI%3EKeep%20IT%20admins%20in%20control%20what%20happens%20when%20by%20continue%20using%20your%20enterprise%20management%20solution%20like%20Microsoft%20Endpoint%20Configuration%20Manager%20(formally%20known%20as%20System%20Center%20Configuration%20Manager%20(SCCM))%3C%2FLI%3E%0A%3CLI%3EOffloading%20the%20content%20distribution%20to%20Microsoft%E2%80%99s%20CDN%20to%20allow%20remote%20user%20to%20leverage%20their%20local%20internet%20connection%20instead%20of%20pulling%20large%20source%20files%20from%20your%20ConfigMgr%20Distribution%20Points%20over%20VPN%20connections%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%3EWe%20will%20walk%20you%20through%20the%20process%20on%20how%20to%20adjust%20an%20existing%20Office%20365%20ProPlus%20deployment%20package%20for%20a%20hybrid%20approach%2C%20update%20your%20sources%20and%20ensure%20that%20the%20source%20file%20download%20will%20bypass%20your%20VPN.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CH2%20id%3D%22toc-hId--702918057%22%20id%3D%22toc-hId--702918057%22%3EStep%201%20%E2%80%93%20Adjust%20your%20deployment%20package%3C%2FH2%3E%0A%3CP%3ETo%20allow%20remote%20users%20to%20leverage%20their%20local%20internet%20connection%20for%20source%20file%20access%2C%20we%20have%20to%20remove%20the%20source%20files%20from%20the%20Configuration%20Manager%20application.%20Navigate%20to%20the%20folder%20which%20is%20holding%20your%20software%20sources%2C%20locate%20the%20%E2%80%9Coffice%E2%80%9D%20folder%20and%20delete%20it%3A%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-center%22%20image-alt%3D%22Deploy_O365PP_to_Remote_workers_2.jpg%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F179914i153480540E8C3D5A%2Fimage-size%2Fmedium%3Fv%3D1.0%26amp%3Bpx%3D400%22%20title%3D%22Deploy_O365PP_to_Remote_workers_2.jpg%22%20alt%3D%22Deploy_O365PP_to_Remote_workers_2.jpg%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%20style%3D%22font-family%3A%20inherit%3B%22%3EIn%20the%20above%20example%2C%2011%20Language%20Packs%20were%20included%20in%20the%20deployment%20package%2C%20bumping%20the%20size%20up%20to%206%2B%20gigabytes.%20Keep%20the%20setup.exe%20as%20well%20as%20any%20configuration%20files%20located%20in%20the%20folder.%20This%20reduces%20the%20size%20of%20your%20deployment%20package%20to%20less%20than%2010%20megabyte.%20That%E2%80%99s%20a%20huge%20saving%20on%20your%20VPN%20connections.%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3EIn%20case%20you%20don%E2%80%99t%20have%20an%20Office%20365%20ProPlus%20installation%20package%20yet%2C%20you%20can%20use%20the%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fdeployoffice%2Fdeploy-office-365-proplus-with-configuration-manager%23step-3---create-and-deploy-the-office-application-to-the-pilot-group%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ebuilt-in%20wizard%3C%2FA%3E%20to%20create%20one.%20Maybe%20you%20want%20to%20adjust%20the%20handling%20of%20languages%2C%20instead%20of%20hard-coding%20those%20you%20might%20want%20to%20use%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fdeployoffice%2Foverview-of-deploying-languages-in-office-365-proplus%23install-the-same-languages-as-the-operating-system%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%22%3EMatchOS%3C%2FA%3E%20or%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fdeployoffice%2Foverview-of-deploying-languages-in-office-365-proplus%23install-the-same-languages-as-a-previous-msi-installation%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%22%3EMatchPreviousMSI%3C%2FA%3E.%20After%20that%2C%20apply%20the%20steps%20above.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CH2%20id%3D%22toc-hId-1784594776%22%20id%3D%22toc-hId-1784594776%22%3EStep%202%20%E2%80%93%20Update%20the%20content%20sources%3C%2FH2%3E%0A%3CP%3EIf%20your%20application%20was%20already%20synced%20to%20Distribution%20Points%2C%20those%20still%20have%20the%20larger%20package%20cached.%20Navigate%20to%20%3CSTRONG%3ESoftware%20Library%3C%2FSTRONG%3E%20%26gt%3B%20%3CSTRONG%3EApplication%20Management%3C%2FSTRONG%3E%20%26gt%3B%20%3CSTRONG%3EApplications%3C%2FSTRONG%3E%2C%20select%20your%20application%2C%20switch%20to%20the%20%3CSTRONG%3EDeployment%20Types%3C%2FSTRONG%3E%20Tab%2C%20right-click%20the%20appropriate%20entry%20and%20click%20%3CSTRONG%3EUpdate%20Content%3C%2FSTRONG%3E.%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22Deploy_O365PP_to_Remote_workers_3.jpg%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F179915i4ECD5655DC656EE6%2Fimage-size%2Fmedium%3Fv%3D1.0%26amp%3Bpx%3D400%22%20title%3D%22Deploy_O365PP_to_Remote_workers_3.jpg%22%20alt%3D%22Deploy_O365PP_to_Remote_workers_3.jpg%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%20style%3D%22font-family%3A%20inherit%3B%22%3EThis%20will%20re-sync%20any%20changes%20to%20your%20Distribution%20Points%2C%20so%20those%20will%20now%20also%20have%20the%20smaller%20deployment%20package%20ready%20to%20sync%20to%20devices.%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CH2%20id%3D%22toc-hId--22859687%22%20id%3D%22toc-hId--22859687%22%3EStep%203%20%E2%80%93%20Verify%20VPN%20configuration%20and%20deploy%3C%2FH2%3E%0A%3CP%3E%3CSPAN%20style%3D%22font-family%3A%20inherit%3B%22%3EOnce%20a%20client%20has%20received%20the%20smaller%20deployment%20package%20through%20ConfigMgr%20and%20kicks%20off%20the%20installation%2C%20it%20will%20download%20the%20source%20files%20directly%20from%20the%20Microsoft%20CDN.%20It%20is%20important%20to%20ensure%20that%20your%20devices%20can%20actually%20reach%20out%20to%20those%20endpoints%20directly%20and%20don%E2%80%99t%20backhaul%20through%20the%20VPN%20tunnel.%20We%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Foffice-365-blog%2Fhow-to-quickly-optimize-office-365-traffic-for-remote-staff-amp%2Fba-p%2F1214571%22%20target%3D%22_blank%22%20rel%3D%22noopener%22%3Epublished%20guidance%20on%20how%20to%20enable%20so-called%20VPN%20split-tunneling%3C%2FA%3E%2C%20the%20endpoints%20relevant%20for%20Office%20365%20ProPlus%20source%20file%20download%20are%20listed%20at%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Foffice365%2Fenterprise%2Furls-and-ip-address-ranges%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%22%3EOffice%20365%20URLs%20and%20IP%20address%3C%2FA%3E%20ranges%20as%20entry%20%2392.%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3EIf%20you%20already%20have%20an%20active%20deployment%20of%20the%20newly-updated%20package%2C%20clients%20will%20start%20receiving%20it%20after%20the%20Distribution%20Points%20have%20finished%20syncing%20the%20changes.%20If%20you%20want%20to%20start%20with%20a%20fresh%20deployment%2C%20just%20follow%20the%20regular%20guidelines%20in%20your%20organization.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CH2%20id%3D%22toc-hId--1830314150%22%20id%3D%22toc-hId--1830314150%22%3EStep%204%20-%20Leverage%20peer%20caching%20to%20reduce%20on-prem%20traffic%20(optional)%3C%2FH2%3E%0A%3CP%3EThe%20following%20step%20is%20not%20required%2C%20but%20highly%20recommended.%20In%20order%20to%20use%20the%20same%20deployment%20package%20for%20your%20remote%20and%20on-premises%20workers%2C%20we%20recommend%20to%20configure%20and%20enable%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fdeployoffice%2Fdelivery-optimization%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3EDelivery%20Optimization%20for%20Office%3C%2FA%3E%3CSPAN%3E%26nbsp%3Bin%20combination%20with%26nbsp%3B%3C%2FSPAN%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fconfigmgr%2Fcore%2Fplan-design%2Fhierarchy%2Fmicrosoft-connected-cache%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3EConnected%20Cache%3C%2FA%3E.%20This%20will%20enable%20your%20on-prem%20devices%20to%20share%20content%20which%20is%20no%20longer%20included%20in%20the%20deployment%20and%20greatly%26nbsp%3B%3CSPAN%3Ereduce%20the%20load%20on%20your%20corporate%20internet%20connection.%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CH2%20id%3D%22toc-hId-657198683%22%20id%3D%22toc-hId-657198683%22%3EFAQ%3C%2FH2%3E%0A%3CP%3E%3CSTRONG%3EQ%3A%3C%2FSTRONG%3E%20We%20usually%20controlled%20which%20build%20is%20installed%20by%20embedding%20the%20matching%20source%20files.%20How%20can%20I%20control%20this%20now%3F%3CBR%20%2F%3E%3CSTRONG%3EA%3A%3C%2FSTRONG%3E%20By%20default%2C%20setup%20will%20fetch%20the%20latest%20build%20available%20for%20the%20specified%20update%20channel.%20You%20can%20use%20the%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fdeployoffice%2Fconfiguration-options-for-the-office-2016-deployment-tool%23version-attribute-part-of-add-element%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%22%3Eversion%20attribute%3C%2FA%3E%20in%20the%20configuration%20file%20to%20specify%20a%20build.%20This%20might%20be%20important%20if%20your%20organization%20is%20wants%20to%20deploy%20the%20older%20SAC%20feature%20release.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CH2%20id%3D%22toc-hId--1150255780%22%20id%3D%22toc-hId--1150255780%22%3EThe%20Authors%3C%2FH2%3E%0A%3CP%3EThis%20blog%20post%20is%20brought%20to%20you%20by%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F6347%22%20target%3D%22_blank%22%3E%40Martin%20Nothnagel%3C%2FA%3E%26nbsp%3Bfrom%20the%20Office%20365%20ProPlus%20Ranger%20Team%20at%20Microsoft.%20Feel%20free%20to%20share%20your%20questions%20and%20feedback%20in%20the%20comments%20below.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-TEASER%20id%3D%22lingo-teaser-1258514%22%20slang%3D%22en-US%22%3E%3CP%3ELearn%20how%20to%20keep%20your%20Office%20365%20ProPlus%20deployment%20going%20and%20relief%20your%20VPN%20from%20heavy%20content%20distribution.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22Deploy_O365PP_to_Remote_workers.jpg%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F179913i7987B27921DC2CF0%2Fimage-size%2Fmedium%3Fv%3D1.0%26amp%3Bpx%3D400%22%20title%3D%22Deploy_O365PP_to_Remote_workers.jpg%22%20alt%3D%22Deploy_O365PP_to_Remote_workers.jpg%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-TEASER%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1258514%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EProPlus%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E

This blog post will address the enterprise IT admin’s challenge on how to deploy Office 365 ProPlus to remote workers without saturating the company’s VPN connections. It will show you how to implement a tactical approach which allows an IT admin to stay in control and quickly relief the pain of VPN congestion by offloading content distribution to the Microsoft Content Delivery Network (CDN). Maybe you are in the process of moving off legacy versions of Office and want to keep the pace with e.g. the Office 2010 end-of-support approaching fast. There are multiple strategic solutions available (e.g. Intune and Windows Autopilot), but for now we focus on a quick fix.

 

Overview of blog post series

This blog post is part of a series, which is brought to you by the Office Rangers Team at Microsoft, a group of senior deployment experts. The series provides guidance on how to address scenarios around working-from-home across the lifecycle of an Office 365 ProPlus installation:

 

We hope this will help you to minimize the impact of deploying, servicing and managing Office 365 ProPlus on your own network and your user’s VPN connections.

 

The Concept

With the approach described below, we want to achieve two things:

  • Keep IT admins in control what happens when by continue using your enterprise management solution like Microsoft Endpoint Configuration Manager (formally known as System Center Configuration Manager (SCCM))
  • Offloading the content distribution to Microsoft’s CDN to allow remote user to leverage their local internet connection instead of pulling large source files from your ConfigMgr Distribution Points over VPN connections

We will walk you through the process on how to adjust an existing Office 365 ProPlus deployment package for a hybrid approach, update your sources and ensure that the source file download will bypass your VPN.

 

Step 1 – Adjust your deployment package

To allow remote users to leverage their local internet connection for source file access, we have to remove the source files from the Configuration Manager application. Navigate to the folder which is holding your software sources, locate the “office” folder and delete it:

Deploy_O365PP_to_Remote_workers_2.jpg

In the above example, 11 Language Packs were included in the deployment package, bumping the size up to 6+ gigabytes. Keep the setup.exe as well as any configuration files located in the folder. This reduces the size of your deployment package to less than 10 megabyte. That’s a huge saving on your VPN connections.

In case you don’t have an Office 365 ProPlus installation package yet, you can use the built-in wizard to create one. Maybe you want to adjust the handling of languages, instead of hard-coding those you might want to use MatchOS or MatchPreviousMSI. After that, apply the steps above.

 

Step 2 – Update the content sources

If your application was already synced to Distribution Points, those still have the larger package cached. Navigate to Software Library > Application Management > Applications, select your application, switch to the Deployment Types Tab, right-click the appropriate entry and click Update Content.

Deploy_O365PP_to_Remote_workers_3.jpg

This will re-sync any changes to your Distribution Points, so those will now also have the smaller deployment package ready to sync to devices.

 

Step 3 – Verify VPN configuration and deploy

Once a client has received the smaller deployment package through ConfigMgr and kicks off the installation, it will download the source files directly from the Microsoft CDN. It is important to ensure that your devices can actually reach out to those endpoints directly and don’t backhaul through the VPN tunnel. We published guidance on how to enable so-called VPN split-tunneling, the endpoints relevant for Office 365 ProPlus source file download are listed at Office 365 URLs and IP address ranges as entry #92.

If you already have an active deployment of the newly-updated package, clients will start receiving it after the Distribution Points have finished syncing the changes. If you want to start with a fresh deployment, just follow the regular guidelines in your organization.

 

Step 4 - Leverage peer caching to reduce on-prem traffic (optional)

The following step is not required, but highly recommended. In order to use the same deployment package for your remote and on-premises workers, we recommend to configure and enable Delivery Optimization for Office in combination with Connected Cache. This will enable your on-prem devices to share content which is no longer included in the deployment and greatly reduce the load on your corporate internet connection.

 

FAQ

Q: We usually controlled which build is installed by embedding the matching source files. How can I control this now?
A: By default, setup will fetch the latest build available for the specified update channel. You can use the version attribute in the configuration file to specify a build. This might be important if your organization is wants to deploy the older SAC feature release.

 

The Authors

This blog post is brought to you by @Martin Nothnagel from the Office 365 ProPlus Ranger Team at Microsoft. Feel free to share your questions and feedback in the comments below.

2 Comments
Regular Visitor

On the surface this seems like it's trading one problem for another. When users are on VPN we don't want to overload those devices or connections but when users are on-prem we don't want to overload the internet circuit. If I understand this article and the corresponding "updates for remote workers" article correctly, you're removing the ability to use Distribution Points to optimize internet traffic from sites with numerous clients. Is there a single approach that optimizes both scenarios?

 

For example, does this still honor Peer-Caching? Could that be used on-prem so that it would get pulled "once" from the CDN but then shared with peers? It would be nice to see a comprehensive guide to bandwidth optimization that accounts for multiple scenarios rather than focusing on one scenario (potentially) at the cost of others.

@JonSauter_MK Thanks for your feedback. My team is actually working on a comprehensive guide for install options and which network optimization technologies can be used when. On your ask: You can employ Delivery Optimization for Office in combination with Connected Cache to reduce the load on your corp internet circuits. We save tremendous saving when the combination of the two technologies is leveraged. For completeness, we could also use Configuration Manager Client Peer Cache,  but this would only cache the setup.exe and configuration file included in the deployment package.

 

Thanks again for the feedback, I will add this to the blog post later.