Microsoft Updated MS-700 Exam Questions and Answers by ace

To restrict external Teams communication for both calling and personal chat to only organizational users that use the microsoft.com domain, you need to use the Teams admin center to configure the external access settings. Here are the steps to follow:

Sign in to the Teams admin center with your Microsoft 365 username and password.

In the left navigation, go to Org-wide settings > External access.

Under External access, turn on the toggle for Users can communicate with other Skype for Business and Teams users.

Under Cross-tenant access settings, click Manage settings.

In the Cross-tenant access settings pane, under Calling and chat, select Allow specific domains and then enter microsoft.com in the box below. This will allow your users to communicate with Microsoft users via calling and chat.

Click Save.

Note: You also need to make sure that microsoft.com has configured their external access settings to allow communication with your domain. See Communicate with users from other organizations for more details.

To ensure that the Approvals app is pinned to the top of the app bar of the Teams client for all members of the Retail team, you need to create a custom app setup policy and assign it to the Retail team members. Here are the steps to follow:

Sign in to the Teams admin center with your admin credentials.

Go to Teams apps > Setup policies.

Select Add.

Provide a name and description for the policy, such as Retail App Policy.

Optionally, turn on User pinning to allow users to pin apps and change the order of the pinned apps.

Under Pinned apps, select Add apps.

Search for the Approvals app and add it to the list of pinned apps. You can also add other apps that you want to pin for the Retail team members.

Click Save to create the policy.

To assign the policy to the Retail team members, go to Users on the left menu and select the users that belong to the Retail team. You can use the filters or the search box to find them.

On the right pane, under Policies, select Edit next to App setup policy.

Choose the Retail App Policy from the drop-down list and click Apply.

To ensure that only users from litwareinc.com can be added to Teams as guest users, you need to configure the guest access settings in Azure Active Directory (AAD). Here are the steps to follow:

Sign in to the Azure portal with your admin credentials.

Go to Azure Active Directory > External identities > External collaboration settings.

Under Collaboration restrictions, select Allow invitations only to the specified domains (most restrictive).

In the Allow invitations to these domains box, enter litwareinc.com. You can also add more domains if you want, separated by commas.

Click Save to apply the settings.

That’s it. You have successfully restricted the guest access in Teams to a specific domain. This means that only users with email addresses from litwareinc.com can be invited as guests to your teams. You can also prevent guests from being added to a specific team by using sensitivity labels1 or PowerShell2.

To prevent guest users from calling your company’s Teams users, you need to turn off the calling capability for guests in the Teams admin center. Here are the steps to follow:

Sign in to the Teams admin center with your admin credentials.

Go to Users > Guest access.

Turn off the Make private calls setting. This will disable the peer-to-peer calling feature for guests.

Click Save to apply the changes