Office 365 ProPlus

Deployment & Updates

v1.0
Bulent Ozkir
Microsoft
Office 365 ProPlus Servicing Overview
Builds, rather than updates
Provided monthly. Contains security, non-security
changes.
Cumulative…At most one update away from evergreen
Monthly, cumulative Calculated deltas
Background updating builds

Deltas are calculated and downloaded in background

Several options to provide IT controls

Take Control of Change

Manage change via small ripples, rather than large, Flexible options for Enables agility
disruptive waves management, control
Consistency enables process automation
Updates and Compatibility
Object Model & API
Virtually static since Office 2010 (http://aka.ms/Kj6vya)

…no planned changes to object model/APIs

Extensibility Lifecycle
Builds supported for 12
months
Consistent with MSI/Service Pack lifecycle policy
Enables validation of builds

Manage risk Manage change Telemetry provides

objective data
Facilitates a fact-based approach to manage risk
Helps manage change
Office 365 ProPlus – Update Branch illustration

https://technet.microsoft.com/en-us/library/mt455210.aspx
Office 365 ProPlus – Update Branch comparison

Update Branch Description Feature Security Update Example Usage

Update Frequency
Frequency
Current Channel Get the latest and Monthly Monthly Early adopters/beta group.
(Current Branch) greatest monthly!
Deferred Channel Compiled updates Every 4 Monthly General release.
(Current Branch for and new features months
Business) from 4 months of
updates
First Release for Compiled updates Every 4 Monthly Distributed pilot group.
Deferred Channel and new features months
(First Release for from 4 months of
Current Branch for updates, 4 months
Business) before CBB.

https://technet.microsoft.com/en-us/library/mt455210.aspx
Office 365 ProPlus – Microsoft Office removal tools

Remove Office 2007 & 2010:

https://support.microsoft.com/en-us/kb/971179
OffScrub07.vbs
OffScrub10.vbs
Office 2013
http://go.microsoft.com/?linkid=9815935
OffScrub13.vbs

Example Uninstall:
Cscript.exe //nologo offScrub13.vbs ClientAll /S /Q /NoCancel /Bypass 1,3,4

http://blogs.technet.com/b/odsupport/archive/2011/04/08/how-to-obtain-and-use-offscrub-to-automate
-the-uninstallation-of-office-products.aspx
Installation flow
Setup.exe OfficeClickToRun.exe (user mode)

Download Install the Launch Last Run

Basic Full
and Run ClickToRun First Run task
Prereqs Prereqs
C2R Client Svc Experience

OfficeClickToRun.exe (system mode) – ClickToRun

Service
Streaming
Configuration
Integration
This service continues running for the life of the product
Folder and Registry Structure
Location Content
C:\Program Files\Microsoft Office 15\ClientX64 Click-to-Run/AppV related files
C:\Program Files\Microsoft Office 15\Data Where updates are cached
C:\Program Files\Microsoft Office Main folder for Office files
15\Root\Office15
C:\Program Files\Microsoft Office 15\Root\vfs “Virtual File System.” Contains all non Program Files folder
contents
C:\Program Files\Microsoft Office 15\Root\rsod “Registry Staging on Demand.” Contains virtual registry
keys that are loaded on demand

Location Content
HKLM\Software\Microsoft\Office\15.0\ClickToRun\Registry C2R’s virtual registry
HKLM\Software\Microsoft\Office\15.0\ClickToRun\PropertyBag C2R settings. Evaluated/modified during
installation/update.
Scheduled Tasks

Telemetry Subscription Maintenance Automatic Updates

• Runs after login & every 8 hours • Runs daily • Runs after logon
• 10 minute wait • Validates license • Runs three nights a week
• 0-240 minute delay • Checks for new builds

User account System Account

Office Update Triggers
Update Scheduled Task
Runs after user login and @ 3:00 AM (Sun, Tues, Thurs)
Can be configured to check CDN or local source
Can be disabled

User Initiated
Update Now in the Account section of the Backstage view

Command-line Update
In “%programfiles%\Microsoft Office 15\Client[x86/x64]”

OfficeC2RClient.exe /update user [updatetoversion=“15.0.4711.1004”]

Update Phases

Update Download Update Apply

Binary Delta compression Requires applications to be closed
Will apply on reboot
User interaction is possible
Office 365 ProPlus – Download
Download Command Line
Setup.exe /Download configuration.xml

Download Completion dialog – or lack of

Contents

https://technet.microsoft.com/en-us/library/jj219422.aspx
Configuring Updates at Install Time
Using the Office Deployment Tool
Reference for Click-to-Run configuration.xml file
https://technet.microsoft.com/en-us/library/jj219426.aspx
ODT Reference
https://technet.microsoft.com/en-us/library/jj219423.aspx

Deploy
\\server01\Office\setup.exe /configure \\server01\office\deployconfigfile.xml

Download
\\server01\Office\setup.exe /download \\server01\office\configuration.xml

<Configuration>
<Add SourcePath="\\server\share" OfficeClientEdition=“64“ Channel=“Deferred">
<Product ID="O365ProPlusRetail">
<Language ID="en-us" />
</Product>
</Add>
<Display Level="None" AcceptEULA="TRUE" />
<Logging Name="OfficeSetup.txt" Path="%temp%" />
<Updates Enabled="TRUE" UpdatePath="\\Server\share\" TargetVersion="15.1.2.3" Deadline=“06/16/2016
18:30"/>
</Configuration>
 Configuring Updates via
Group Policy

Computer Configuration
Administrative Templates
Microsoft Office
Updates

Enable Automatic Updates

Hide option to enable or disable updates
Update Version
Update Deadline
Update Path
Disable Update notifications
How Automatic Scheduled Task
triggered Most Common Path
Updates Work
New No
Ready to
build
available?
apply?

No

Do nothing
How Automatic Scheduled Task
triggered Apply Update (Scenario 1 of 3)
Updates Work
New No Yes Office
Ready to
build processes
available?
apply? running?

Yes No

Download
delta

Update Office
How Automatic Scheduled Task
triggered Apply Update (Scenario 2 of 3)
Updates Work
No Yes Yes 3 or 6
New Office
Ready to days
build processes
available?
apply? running?
have
passed?

Yes No

Download
Do nothing
delta
How Automatic Scheduled Task
triggered Apply Update (Scenario 3 of 3)
Updates Work
No Yes Yes 3 or 6 Yes
New Office Prompt user via
Ready to days
build processes Toast or Business
available?
apply? running?
have
Bar
passed?

Yes

User
Download
selects
delta apply?

Yes

Yes Select
Update Office “Close
programs?”

Open Office
apps
How Automatic Scheduled Task
triggered

Updates Work
No Yes Yes 3 or 6 Yes
New Office Prompt user via
Ready to days
build processes Toast or Business
available?
apply? running?
have
Bar
passed?

Yes No No No

No
User
Download
Do nothing selects
delta apply?

No Yes

Yes Select
Update Office “Close
programs?”

Open Office
apps
Update Considerations
Where and When
Internal or Cloud source?
Outsource your update infrastructure
Multiple languages can lead to lots of content
Binary delta replication reduces bandwidth needs
Network infrastructure can impact decision

Automatic Updates or controlled updates?

Update management – can it be justified?

Hybrid approaches provide flexibility/control

Group Policy provides granular control
Eg, automatically have “some” people get automatic updates
 Managing Office Updates
Common Questions

“How can I test/approve “How can I automate “How can I backout, if “How can I determine if it
updates?” update management?” necessary?” worked?”
ConfigMgr to distribute O365ProPlus updates
Registry
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\Configuration]
“OfficeMgmtCOM”=”True”
“UpdatesEnabled”=”True”

configuration.xml
<Configuration>
<Add OfficeClientEdition="32" Channel="Current" OfficeMgmtCOM="True" >
<Product ID="O365ProPlusRetail">
<Language ID="en-us" />
</Product>
</Add>
<Updates Enabled="True" />
</Configuration>

Group Policy
Enable the Office 365 Client Management group policy setting. You can find this policy setting under
Computer Configuration\Policies\Administrative Templates\Microsoft Office 2016 (Machine)\Updates.
System Center Configuration Manager to
update Office 365 ProPlus

https://blogs.technet.microsoft.com/askpfeplat/2016/02/15/natively-updating-office-365-proplus-using-the-new-version-
of-system-center-configuration-manager/
 DFS-R & DFS-N to deploy & update Office
365 Pro Plus
Stage ProPlus
binaries from
CDN via monthly
scheduled task DFS-R Master DFS-R Shares

Cloud Pool
Copy new ProPlus Replicate ProPlus O365
build package to
Dev
distributed DFS-R
file servers
Staging Server Prod

Use scheduled Dev On-Prem Pool

task to promote
new build from
Prod to Dev share

Cloud updates GPO

Set update paths via GP

Dev On-Prem Updates GPO Prod On-Prem Pool

Prod On-Prem Updates GPO

Deploy Office 365 ProPlus via Intune
Intune can be used to
deploy Office 365 Pro
Plus client, but it can
not update it.

Also WSUS cannot update

Office 365 Pro Plus.
Shared Computer
Activation for
Office 365 ProPlus

Enables Office 365 ProPlus to be

used with Remote Desktop
Services or shared computers.
Activation is temporary and
performed with each user session
login.
Shared Computer Activation does
not count against a user’s 5
PC/Mac installation limit.
Office 365 ProPlus Deployment Tool
• Customize and
Manage
installations
sources,
products, and
languages
combinations.
• Define
deployment
configuration
options.

http://officedev.github.io/Office-IT-Pro-Deployment-Scripts/XmlEditor.html
Side by Side
With Office Previous version
Office 2007 SP3
Install KB 2596620 & 2767916
Office 2010 SP2
Remove WorkSpace 2010

With Office 2013 products

Don’t mix MSI and C2R version for 2013 products
https://support.microsoft.com/kb/2753630/en-us
Only use same technology (C2R or MSI) on same box
Example: Office 365 Pro Plus + Project 2013 STD C2R

Don’t mix Office 32 bits and 64 bits

http://support.microsoft.com/kb/2769805
Ports, Protocols and URLs

Review the following document for Office 365 URLs and IP

address ranges.
Overview of Click-to-Run for Office 365 setup architecture
Internet Access
Using direct connection
Nothing to do.

Using a Proxy
Make sure User, System account and Network Service have a proxy configured.
WPAD or Automatic Proxy discovery are the best solutions.

Following URL have to be accessible WITHOUT Form authentication on the proxy

(Full list on http://technet.microsoft.com/en-us/library/hh852551.aspx)

NOTE: You can define proxy server for service accounts that is run by scheduled tasks.
bitsadmin /util /setieproxy localservice AUTOSCRIPT http://proxysrv:8083/blabla.pac
bitsadmin /util /setieproxy localsystem AUTOSCRIPT http://proxysrv:8083/blabla.pac
bitsadmin /util /setieproxy networkservice AUTOSCRIPT http://proxysrv:8083/blabla.pac
Office 365 ProPlus Activation Overview

SignValidate Activate
OLSIssue Key SPP License
In
Office 365 ProPlus Activation Activities
Initial registration/activation Subscription status check Product Key management

Details: Details: Details:

• Frequency: One time, at sign- • Frequency: Daily* • Frequency: Once/month*
in • “Heartbeat” to check if • Occurs during subscription
subscription is active or has status check
Data sent: changed • Updates product key
• User ID • Enabled via scheduled task information
• Product Key • Must succeed once per 30 days • Extends product usage
• Computer Name • Connects to Office Licensing • Connects to Activation and
Service (OLS) Validation Service (AVS)
• Machine ID

Data sent: Data sent:

• Product Key • Product Key

http://technet.microsoft.com/en-us/library/dn308544.aspx
Logging

 Installation (ULS Logging)

 Application Launch / Sign In (TCO Logging)

 Activation (OSPP)
Install Logs

 Enabling C2R Logging:

reg add HKLM\SOFTWARE\Microsoft\ClickToRun\Override /v
LogLevel /t REG_DWORD /d 3 /f
 Logs get created during install, updates, etc.
 Located in the %windir%\temp and %temp% folders
 File name is of the format: <MachineName>*.log
 Errors can be found by looking for log lines with
“Unexpected” verbosity level
Application Launch / Sign In

 Enable TCO Logging:

reg add HKCU\SOFTWARE\Microsoft\Office\15.0\Common\Debug /v
TCOTrace /t REG_DWORD /d 1 /f
 Logs gets created upon application launch
 Located in the %temp% folder
 File name is of the format: <appname>.exe.log
Activation Logging

 OSPP.vbs
 Installed with the product
 Located at c:\Program Files | Program Files
(x86)\Microsoft Office\Office15 folder
 Documentation: On TechNet or in ospp.html
© Microsoft Corporation. All rights reserved.