- What Is Domain 1 and Why Does It Matter?
- Domain 1 Topic Breakdown: What Microsoft Actually Tests
- Teams Environment Setup and Configuration
- Governance, Lifecycle Management, and Policies
- How MS-700 Questions Test Domain 1 Knowledge
- Where Candidates Lose Points in Domain 1
- A Practical Study Schedule for Domain 1
- Hands-On Lab Work You Cannot Skip
- Frequently Asked Questions
- Domain 1 is one of four scored areas on the MS-700 and covers core Teams environment planning and configuration.
- Microsoft tests scenario-based questions - you must know why a setting exists, not just where to find it.
- Governance and lifecycle management (teams creation, expiration, naming policies) are consistently high-weight topics.
- Hands-on experience in a Microsoft 365 developer tenant is essential; reading alone will not pass this domain.
What Is Domain 1 and Why Does It Matter?
The Microsoft 365 Certified: Teams Administrator Associate certification - earned by passing the MS-700 exam - is structured around four distinct content domains. Domain 1 lays the groundwork for everything else on the exam. Before you can manage meetings, calls, or security in Teams, you need to understand how a Teams environment is planned, built, and governed. That is what Domain 1 tests.
Candidates who treat Domain 1 as introductory material and rush past it typically find themselves losing points on later domains too, because the foundational concepts surface repeatedly throughout the exam in different forms. If you are just starting your preparation, reading the MS-700 Study Guide 2026: How to Pass on Your First Attempt will give you a full picture of how Domain 1 fits into the overall exam structure before you dive deep.
Domain 1 is not about memorizing menu paths. Microsoft builds its questions around realistic administrative problems: a company is rolling out Teams to 3,000 users, how do you prevent chaos in team creation? A compliance officer needs to ensure all teams expire after 12 months. An IT director wants naming conventions enforced automatically. These are the scenarios you will face, and they all live in Domain 1.
Domain 1 Topic Breakdown: What Microsoft Actually Tests
Microsoft publishes a skills outline for the MS-700, and Domain 1 clusters around planning and configuring a Microsoft Teams environment. While Microsoft does not publish exact sub-topic weights within a domain, the skills measured fall into recognizable categories that experienced Teams administrators immediately recognize as high-priority.
Core Topic Clusters in Domain 1
These are the functional areas that Domain 1 questions draw from most heavily:
- Network readiness and planning - bandwidth requirements, split-tunnel VPN considerations, network assessment tools
- Teams upgrade and coexistence modes - Islands mode, Teams Only, SfB coexistence configurations
- Teams org-wide settings - external access, guest access, tenant-wide controls in the Teams admin center
- Teams creation and provisioning - creating teams from groups, templates, and programmatic methods
- Governance policies - expiration policies, naming policies, Microsoft 365 Groups settings
- Teams policies and policy packages - how policies are created, assigned, and prioritized
- PowerShell for Teams administration - MicrosoftTeams module commands for configuration tasks
Notice that this list spans from infrastructure (network planning) to end-user experience (policy packages) to compliance (expiration). That breadth is intentional. A Teams Administrator does not operate in a silo - Domain 1 reflects that reality by testing your ability to think across the stack.
To understand how Domain 1 compares to the other three content areas, the MS-700 Exam Domains 2026: Complete Guide to All 4 Content Areas provides a comprehensive side-by-side comparison of what each domain covers and how they interconnect.
Teams Environment Setup and Configuration
Network Planning and Readiness
Many candidates underestimate network topics because they feel more like infrastructure work than Teams administration. Microsoft disagrees - and the exam reflects that. You need to understand how to use the Network Planner in the Teams admin center, how to interpret reports from the Microsoft 365 Network Connectivity tool, and what Quality of Service (QoS) markers Teams uses for audio, video, and screen sharing traffic.
Split-tunnel VPN is a particularly important topic. Microsoft recommends excluding Teams media traffic from VPN tunnels, and exam questions test whether you understand both the recommendation and how to implement it. Know the specific DSCP values Teams uses: 46 for audio, 34 for video, and 18 for screen sharing.
Coexistence Modes and Upgrade Paths
Organizations migrating from Skype for Business to Teams do not flip a switch. The coexistence and upgrade configuration is a multi-step process with real consequences for end users, and MS-700 questions love this topic because it has many moving parts.
You must know the five coexistence modes: Islands, Skype for Business Only, Skype for Business with Teams Collaboration, Skype for Business with Teams Collaboration and Meetings, and Teams Only. More importantly, you need to understand when to use each and what the user experience looks like during each phase. Scenarios will describe an organization's current state and ask which mode to apply - sometimes at the tenant level and sometimes per-user.
Grant-CsTeamsUpgradePolicy PowerShell cmdlet, and understand that per-user settings override tenant-wide settings.
Tenant-Wide Settings in the Teams Admin Center
The Teams admin center is your primary administrative interface, and Domain 1 tests your familiarity with its org-wide settings section extensively. Key areas include:
- External access - controlling federation with other Teams and Skype for Business organizations, domain allow/block lists
- Guest access - enabling guest access at the tenant level, then controlling specific guest capabilities (calling, meeting, messaging features)
- Teams settings - email integration, cloud file storage options, device settings, and search by name scope
A critical distinction that trips up many candidates: external access and guest access are fundamentally different. External access allows communication between organizations but guests remain outside the tenant. Guest access adds external users to your Azure AD as guest accounts and gives them access to specific teams and channels. Exam scenarios will test whether you can identify which feature solves a given business requirement.
Governance, Lifecycle Management, and Policies
Microsoft 365 Groups and Team Provisioning
Every Microsoft Teams team is backed by a Microsoft 365 Group. Understanding this relationship is not optional - it is foundational to how governance works. When you configure group creation restrictions, expiration policies, or naming policies, you are configuring them at the Azure AD level for Microsoft 365 Groups, and those configurations flow down to Teams.
You need to know how to control who can create teams (and therefore Microsoft 365 Groups). By default, all users can create groups. To restrict this, you configure a security group in Azure AD and limit group creation to members of that group. The exam will test both the conceptual understanding and the specific configuration location (Azure Active Directory - well, now Microsoft Entra ID - group settings).
Teams Lifecycle Management: Three Pillars
Microsoft 365 provides three key policy types that govern the lifecycle of teams. Candidates must know all three:
- Expiration policies - automatically expire Microsoft 365 Groups (and their associated teams) after a set period; owners receive renewal notifications
- Naming policies - enforce prefix/suffix rules and blocked words for group/team names; configured in Azure AD
- Retention policies - govern how long Teams messages and files are retained; configured in the Microsoft Purview compliance portal
Policy Packages and Policy Assignment
Policy packages are pre-built collections of policies designed for specific user types - Frontline Worker, Education student, Healthcare clinician, and others. Domain 1 tests whether you understand what policy packages contain, how to assign them to users, and critically, what happens when a policy package assignment conflicts with a directly assigned policy.
The priority order matters: direct policy assignment wins over policy package assignment, which wins over global (org-wide) defaults. This hierarchy appears in scenario questions where you must determine the effective policy for a specific user.
Teams Templates
Teams templates allow administrators to create standardized team structures with predefined channels, apps, and settings. Domain 1 tests both built-in templates (Project Management, Manage a Project, Coordinate Incident Response, etc.) and custom templates. Know that you can create custom templates from scratch, from an existing team, or from an existing template.
How MS-700 Questions Test Domain 1 Knowledge
Understanding the question format is as important as knowing the content. The MS-700 uses several question types - multiple choice, multiple select, drag-and-drop ordering, case studies, and hot area questions where you click on the correct part of an interface screenshot.
For Domain 1 specifically, watch for:
- Multi-select questions on governance configurations where you must identify all required steps, not just one
- Case study scenarios describing an organization's current Teams deployment with specific business requirements and compliance constraints
- Hot area questions showing the Teams admin center or Azure AD portal and asking you to identify the correct setting location
- Ordering questions for upgrade path steps - what do you configure first, second, third?
If you are wondering how difficult these question formats feel under exam conditions, the How Hard Is the MS-700 Exam? Complete Difficulty Guide 2026 breaks down the cognitive load by domain and question type in useful detail.
Where Candidates Lose Points in Domain 1
Based on the structure of the skills outline and the nature of Teams administration, these are the areas where candidates most commonly leave points on the table in Domain 1:
| Mistake | Why It Costs Points | How to Fix It |
|---|---|---|
| Confusing external access with guest access | Scenario questions hinge on this distinction | Lab both configurations; note where each is configured |
| Ignoring PowerShell cmdlets | The exam includes PowerShell-based questions for admin tasks | Practice key cmdlets: Grant-CsTeamsUpgradePolicy, New-CsTeamsPolicy |
| Memorizing menu paths instead of concepts | Interface screenshots may differ; conceptual understanding transfers | Understand why each setting exists, not just where it lives |
| Skipping network planning topics | DSCP values and QoS appear regularly in Domain 1 questions | Dedicate specific study time to Teams network requirements |
| Overlooking the Microsoft 365 Groups relationship | Governance policies are set at the Groups level, not Teams level | Study Azure AD group settings alongside Teams admin center |
Key Takeaway
The single most common Domain 1 failure point is treating the Teams admin center as the only administrative interface. Azure Active Directory (Microsoft Entra ID) and the Microsoft Purview compliance portal both host settings that directly affect Teams governance. Know all three.
A Practical Study Schedule for Domain 1
Given the breadth of Domain 1, a focused two-week block before moving to other domains is a reasonable approach for most candidates working alongside a job. Here is how to sequence that time effectively:
Environment Foundations
- Days 1-2: Network planning, QoS, DSCP values, Network Planner tool
- Days 3-4: Coexistence modes - read Microsoft documentation, then lab each mode in a developer tenant
- Days 5-7: Tenant-wide settings (external access, guest access, org-wide Teams settings) with hands-on configuration
Governance and Policy Mastery
- Days 1-2: Microsoft 365 Groups - creation restrictions, expiration policies, naming policies (Azure AD)
- Days 3-4: Policy packages, policy assignment hierarchy, Teams templates
- Days 5-6: PowerShell - MicrosoftTeams module, key cmdlets for Domain 1 tasks
- Day 7: Full domain review using practice questions at the MS-700 practice test platform
This schedule uses spaced repetition naturally - you revisit concepts from Week 1 when they appear in Week 2's governance topics (for example, understanding coexistence modes helps contextualize upgrade-related policy packages). The key is pairing every reading session with a lab task so the configuration process becomes second nature.
Hands-On Lab Work You Cannot Skip
No amount of reading replaces the experience of actually configuring a Teams environment. Microsoft provides free Microsoft 365 developer tenant access through the Microsoft 365 Developer Program - sign up and use it throughout your Domain 1 preparation.
Priority lab tasks for Domain 1:
- Configure and compare external access vs. guest access - add an external user both ways and observe the difference in user experience
- Set a tenant-wide coexistence mode, then override it for a specific user and verify the effective mode
- Create a Microsoft 365 Group naming policy with both prefix/suffix rules and blocked words
- Configure a team expiration policy and observe the renewal notification workflow
- Create a custom Teams template from an existing team and provision a new team from that template
- Assign a policy package to a user and then assign a conflicting direct policy - verify which takes precedence
- Run key PowerShell cmdlets: connect to the MicrosoftTeams module, get and set upgrade policies, list policy assignments
Candidates who complete all seven of these lab tasks before exam day have a tangible advantage on scenario-based questions. The MS-700 practice tests on this site are built around the same scenario format Microsoft uses, making them ideal for validating whether your lab work has translated into exam-ready understanding.
If you are weighing whether the full certification process is worthwhile before committing to deep Domain 1 study, the Is the MS-700 Certification Worth It? Complete ROI Analysis 2026 lays out the professional and financial case clearly. And if you are already committed and curious about what roles this certification unlocks, MS-700 Jobs covers the specific positions and employers actively hiring certified Teams Administrators.
Frequently Asked Questions
Microsoft does not publish exact percentage weights for individual domains within the MS-700 skills outline. However, Domain 1 - covering Teams environment planning and configuration - is consistently described as a foundational area, meaning its concepts underpin questions in other domains as well. Focus on mastering it thoroughly rather than trying to calculate a minimum study investment.
Yes. The MS-700 includes PowerShell-based questions throughout the exam, and Domain 1 is no exception. You should be comfortable with the MicrosoftTeams PowerShell module, particularly cmdlets related to Teams upgrade policies (Grant-CsTeamsUpgradePolicy), policy retrieval (Get-CsTeamsUpgradePolicy), and user configuration. You do not need to be a PowerShell developer, but you must recognize correct syntax and understand what specific cmdlets accomplish.
No - and this is one of the most common Domain 1 mistakes. Governance features like expiration policies and naming policies are configured in Azure Active Directory (Microsoft Entra ID), not the Teams admin center. Retention policies live in the Microsoft Purview compliance portal. A complete Domain 1 preparation covers all three administrative surfaces plus PowerShell.
Domain 1 establishes the environment and governance foundation that the other domains build on. Domains 2, 3, and 4 cover meetings and calling, security and compliance, and monitoring and troubleshooting respectively. Governance policies from Domain 1 affect what users can do in meetings (Domain 2), what data is retained for compliance (Domain 3), and what signals appear in usage reports (Domain 4). Study Domain 1 first for good reason.
For candidates with active Microsoft 365 administration experience, one to two focused weeks covering Domain 1 topics is typically sufficient before moving on. Candidates without hands-on Teams experience should expect to spend closer to three weeks to account for the lab time needed to build genuine configuration fluency. The goal is not to rush through Domain 1 - it is to build the conceptual foundation that makes the remaining three domains easier to learn.