Some Notes on the Machines

If you let the eDiscovery Export Tool time out, it will eventually give you a link:

https://docs.microsoft.com/en-us/office365/securitycompliance/increase-download-speeds-when-exporting-ediscovery-results

which has the registry edit below. No explanation is given, but it does say that adjustment of the number (in some direction?) can help.

Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Exchange\Client\eDiscovery\ExportTool]
"DownloadConcurrency"="2"

New methods, reportedly considerably better, have not tested yet myself:

https://docs.microsoft.com/en-us/powershell/exchange/exchange-online/exchange-online-powershell-v2/exchange-online-powershell-v2?view=exchange-ps

1. Install the Azure Active Directory Module for Powershell.

2. Connect to Azure AD, and disable sync:

Set-MsolDirSyncEnabled –EnableDirSync $false

3. Check status, repeatedly, until it returns False. It can take 72 hours for sync to be fully deactivated.

(Get-MSOLCompanyInformation).DirectorySynchronizationEnabled 

This includes Exchange Online, Lync, and others:

https://support.office.com/en-us/article/Office-365-URLs-and-IP-address-ranges-8548a211-3fe7-47cb-abb1-355ea5aa88a2?ui=en-US&rs=en-US&ad=US#BKMK_Portal-identity

This has been updated recently, and many changes have occurred. Ports have been reduced considerably, and many more FQDNs added.

It can happen fairly easily, that one or more user’s Office 365 login is wrong, and AD Sync fails to correct it. Here is a manual override, courtesy of the excellent Joe Busby.

1. On a domain controller, verify the AD username and proxy addresses is set correctly.
2. Connect to O365 Powershell on any machine with Powershell 5.1, and run this command:

Set-MsolUserPrincipalName -UserPrincipalName "user@old.address" -NewUserPrincipalName "user@new.address"

3. On the user’s PC:
   1. Navigate to Settings > Accounts > Access work or school
   2. Disconnect from any accounts linked to the new or old username
   3. Hit the [ + ] Connect button and provide the credentials to sign in to Office 365
   4. If their password has been changed since their account was synced up with the wrong username, the password may need to be reset.
   5. Remove any credentials from windows credential manager that match the old username.
   6. Check Outlook, you may have to create a new profile.

Excellent tool.

https://support.office.com/en-us/article/microsoft-support-and-recovery-assistant-sara-e90bb691-c2a7-4697-a94f-88836856c72f

There are many different products / licenses for Office 365, in several categories. The first item has links to the rest:

Business, general

Small business

Education

Government

Nonprofits

Home

Firstline Workers

The above suggested by the excellent Tharin Brown.

There is an alternative activation logon screen.

https://answers.microsoft.com/en-us/msoffice/forum/msoffice_account-mso_win10/unable-to-sign-in-to-office-2016-desktop-apps-sign/b32738c8-1b17-43d1-839b-cb97c8ae3c29

From the indefatigable Mike Crayton:

https://www.thecloudjournal.net/2016/08/reset-microsoft-office-product-activation-status/

https://gallery.technet.microsoft.com/office/How-To-Reset-Office-01cf9c07

This can help a lot when Office will not activate.

When this happens, do the following in Azure AD Connect:

1. In “Customize synchronization options”, disable (uncheck) the password hash sync option.
2. Wait for sync to complete, watching in the Operations tab of the Synchronization Service Manager.
3. In “Customize synchronization options”, enable (check) the password hash sync option.
4. Wait for sync to complete, watching in the Operations tab of the Synchronization Service Manager.
5. Check the Office 365 admin readout.