Acceptation and Production tenant settings (DTAP)

%3CLINGO-SUB%20id%3D%22lingo-sub-379121%22%20slang%3D%22en-US%22%3EAcceptation%20and%20Production%20tenant%20settings%20(DTAP)%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-379121%22%20slang%3D%22en-US%22%3E%3CP%20class%3D%22s14dydj4-10%20kiAEUp%22%3EHi%20all%2C%3C%2FP%3E%3CP%20class%3D%22s14dydj4-10%20kiAEUp%22%3EI'm%20looking%20for%20a%20solution%20to%20keep%202%20tenant%20settings%20%22in%20sync%22%20for%20a%20while%20now.%20We%20have%20an%20acceptation%20tenant%20and%20production%20tenant%20(also%20development%20and%20test%20but%20for%20this%20question%20out%20of%20scope)%20and%20i%20need%20to%20monitor%20and%20compare%20the%20settings%20to%20see%20what%20is%20the%20difference.%20We%20need%20to%20know%20if%20the%20acceptation%20tenant%20is%20compliant%20with%20production%20settings%20and%20vica%20versa.%3C%2FP%3E%3CP%20class%3D%22s14dydj4-10%20kiAEUp%22%3EI%20understand%20that%20not%20all%20the%20settings%20can%20be%20the%20same%20(for%20example%2C%20in%20production%20we've%20got%20hybrid%20exchange%20which%20is%20not%20necessary%20in%20acceptation)%20but%20i%20want%20to%20know%20as%20much%20as%20possible.%3C%2FP%3E%3CP%20class%3D%22s14dydj4-10%20kiAEUp%22%3ESo%20far%20i%20found%3A%3C%2FP%3E%3CP%20class%3D%22s14dydj4-10%20kiAEUp%22%3E%3CA%20href%3D%22https%3A%2F%2Fgallery.technet.microsoft.com%2Foffice%2FGet-Office-365-Tenant-ceb5149d%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fgallery.technet.microsoft.com%2Foffice%2FGet-Office-365-Tenant-ceb5149d%3C%2FA%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E-%20Great%20script%20(in%20combination%20with%20excel%20compare%20functions)%20but%20have%20to%20be%20adapted%20all%20the%20time%20when%20new%20functions%20arrive.%3C%2FP%3E%3CP%20class%3D%22s14dydj4-10%20kiAEUp%22%3E%3CA%20href%3D%22https%3A%2F%2Fgithub.com%2FMicrosoft%2FOffice365DSC%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fgithub.com%2FMicrosoft%2FOffice365DSC%3C%2FA%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E-%20Looks%20promising%20but%20doesn't%20work%20yet.%3C%2FP%3E%3CP%20class%3D%22s14dydj4-10%20kiAEUp%22%3E%26nbsp%3B%3C%2FP%3E%3CP%20class%3D%22s14dydj4-10%20kiAEUp%22%3EAny%20tips%20or%20experience%20with%20(DT)AP%20for%20office365%20tenants%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-379121%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAdmin%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EOffice%20365%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-382480%22%20slang%3D%22en-US%22%3ERe%3A%20Acceptation%20and%20Production%20tenant%20settings%20(DTAP)%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-382480%22%20slang%3D%22en-US%22%3E%3CP%3EIt%20really%20boils%20down%20to%20which%20exact%20workloads%20and%20settings%20you%20want%20to%20monitor%2Fenforce%2C%20and%20how%20much%20time%20(or%20money)%20you%20are%20willing%20to%20invest%20in%20this.%20You%20can%20easily%20create%20a%20PowerShell%20or%20Graph-based%20solution%20that%20periodically%20enumerates%20each%20setting%20you%20care%20about%2C%20across%20any%20number%20of%20tenants%20you%20manage.%20And%20you%20can%20also%20include%20a%20%22policy%20enforcement%22%20code%2C%20if%20needed.%20But%20Microsoft%20doesn't%20provide%20anything%20out%20of%20the%20box%20for%20such%20scenarios.%20There%20are%20some%20third-party%20products%20that%20can%20help%20with%20this%2C%20but%20again%20depends%20on%20the%20detail%20(and%20they%20will%20of%20course%20cost%20%24%24%24).%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
Visitor

Hi all,

I'm looking for a solution to keep 2 tenant settings "in sync" for a while now. We have an acceptation tenant and production tenant (also development and test but for this question out of scope) and i need to monitor and compare the settings to see what is the difference. We need to know if the acceptation tenant is compliant with production settings and vica versa.

I understand that not all the settings can be the same (for example, in production we've got hybrid exchange which is not necessary in acceptation) but i want to know as much as possible.

So far i found:

https://gallery.technet.microsoft.com/office/Get-Office-365-Tenant-ceb5149d - Great script (in combination with excel compare functions) but have to be adapted all the time when new functions arrive.

https://github.com/Microsoft/Office365DSC - Looks promising but doesn't work yet.

 

Any tips or experience with (DT)AP for office365 tenants?

1 Reply
Highlighted

It really boils down to which exact workloads and settings you want to monitor/enforce, and how much time (or money) you are willing to invest in this. You can easily create a PowerShell or Graph-based solution that periodically enumerates each setting you care about, across any number of tenants you manage. And you can also include a "policy enforcement" code, if needed. But Microsoft doesn't provide anything out of the box for such scenarios. There are some third-party products that can help with this, but again depends on the detail (and they will of course cost $$$).