AB-650: Administering Microsoft 365
and AI Services — Complete Course
The definitive course for the new Microsoft 365 Certified: AI Services Administrator Associate certification — replacing MS-102. Master M365 tenant administration, identity & security governance, Microsoft 365 Copilot, Agent 365, and AI services monitoring with practical portal walkthroughs and PowerShell.
What You’ll Learn
By the end of this course you will be able to administer every domain of the AB-650 exam — from classic M365 tenant management through AI services governance with Agent 365
📋 Prerequisites
- Solid understanding of Microsoft 365 fundamentals — users, groups, licences, and workloads (Exchange, Teams, SharePoint, OneDrive)
- Familiarity with Microsoft Entra ID — authentication, Conditional Access, and admin roles
- Basic understanding of Microsoft Purview and Defender for Office 365
- Experience with Microsoft 365 Copilot helpful but not required — Module 7 starts from the admin basics
- Recommended prior courses: M365 Admin Center, Entra ID Administration, M365 Security Administration, Compliance & Purview
Course Modules
Nine modules covering all three AB-650 exam domains — each with exam alignment, PowerShell commands, and a 5-question mock test
M365 Tenant Configuration & AI Services Licensing
Tenant branding, custom domains, org settings, security & privacy settings. AI services licensing — Copilot, Agent 365, and Copilot Studio. Microsoft 365 Backup setup and restore. Network connectivity insights and service health monitoring.
M365 Workloads & Copilot Integration
Exchange Online mailbox management including shared mailboxes. Microsoft Teams administration — Copilot transcription settings for meetings. SharePoint site creation and permissions. SharePoint Advanced Management and OneDrive for Copilot — Copilot Search and site exclusions.
Identity Management with Microsoft Entra
Create and manage M365 users, guest users, and external access settings. Groups including M365 Groups. Admin roles and Privileged Identity Management (PIM). Administrative units, contacts, and bulk management with Microsoft Graph PowerShell.
Authentication & Conditional Access
Authentication methods management. Microsoft Entra Password Protection and SSPR. Investigate and resolve authentication issues. Conditional Access policies — including MFA and Entra ID Protection. Agent Conditional Access covered in Module 8.
Securing M365 with Defender for Office 365
Manage alerts in Defender for Office 365. Configure threat policies and rules — anti-phishing, Safe Links, Safe Attachments, anti-spam. Investigate and respond to email and collaboration threats. Configure and manage Attack Simulation Training campaigns.
Purview Data Protection & AI Governance
DLP policy requirements for Exchange, SharePoint, OneDrive, Teams, endpoints, and Copilot. Information protection — SITs, sensitivity labels, and label policies. Data lifecycle management — retention labels and policies. DLP alert review for M365 and AI services. Purview DSPM for AI — monitor and secure AI activity.
Microsoft 365 Copilot Administration
Assess tenant readiness for Copilot including in-app experiences. Identify and resolve data readiness issues — leaks, oversharing, and compliance. Manage web search and Copilot Chat. Configure Microsoft 365 Copilot Search. Tenant settings — self-service purchases, release preferences, AI disclaimer, video & image generation. Manage Copilot user experiences, Cowork, third-party AI providers, and connectors.
Agent 365 & Agents Administration
Microsoft Entra Agent ID — agent identity lifecycle workflows. Secure agent access — access packages and Conditional Access for agents. Manage agent owners and settings. Discover and manage Microsoft and third-party agents in the agent registry. Publish, reject, install, block, and upload custom agents. Manage tools in Agent 365.
Securing & Monitoring AI Services
Monitor agent activity, protect sensitive data, and evaluate compliance gaps using Agent 365. Manage and monitor AI service costs. Monitor Copilot usage reports and workload-level adoption in the M365 Admin Center. Monitor usage and service health with the Copilot Control System.
Ready to Start?
Begin with Module 1 and build through all three AB-650 exam domains. Every module includes PowerShell commands and AB-650 exam questions to prepare you for the certification.