- Domain 2 of the MS-700 exam tests your ability to configure and manage Microsoft Teams environments at an administrative level.
- Questions in this domain frequently involve scenario-based policy configuration tasks requiring PowerShell and Teams Admin Center knowledge.
- Hands-on experience in a Microsoft 365 tenant is essential - reading alone will not prepare you for Domain 2's applied questions.
- Understanding the layered policy model in Teams (org-wide, group, user) is one of the most heavily tested concepts in this domain.
What Is Domain 2 and Why It Matters
The Microsoft 365 Certified: Teams Administrator Associate certification - validated through the MS-700 exam - is structured around four domains, each targeting a distinct slice of the Teams administrator role. Domain 2 sits at the heart of day-to-day administration. While Domain 1 focuses on planning and configuring a Teams environment at a foundational level, Domain 2 pushes you into the operational reality of managing that environment once it's live.
For anyone pursuing this certification seriously, understanding the weight and scope of each domain is critical to allocating study time correctly. If you haven't already reviewed how the domains fit together, the MS-700 Exam Domains 2026: Complete Guide to All 4 Content Areas provides essential context before diving deep into any single domain.
Domain 2 specifically tests whether you can operate Microsoft Teams as a configured, production-grade environment - not just set it up. That distinction shapes everything about how Microsoft writes questions for this section. You won't just be asked what a setting does; you'll be placed in a scenario where a business problem exists and you need to select the right policy, permission level, or PowerShell cmdlet to resolve it.
Domain 2 Topic-by-Topic Breakdown
Domain 2 covers managing Teams collaboration, communication, and governance features in a live Microsoft 365 environment. The key areas Microsoft tests within this domain include:
Managing Teams, Channels, and Membership
Administrators must understand how to create, configure, and govern Teams and channels at scale - including private channels, shared channels, and org-wide teams.
- Configuring team creation policies and who can create Teams
- Managing membership, ownership, and guest access at the team level
- Understanding the difference between private, standard, and shared channels - and when each is appropriate
- Setting expiration policies and archiving or deleting stale teams
- Using sensitivity labels to classify and protect Teams data
Managing Meetings and Meeting Policies
Meeting policy configuration is one of the most frequently tested sub-topics in Domain 2. Microsoft expects you to understand how policies interact and who they apply to.
- Global (org-wide default) policy versus user-specific policy assignments
- Configuring audio and video settings, including meeting recording permissions
- Managing lobby settings, who can bypass, and presenter roles
- Live events configuration and attendee policies
- Compliance recording vs. convenience recording - a distinction Microsoft loves to test
Managing Messaging Policies and App Permissions
Messaging policies control what users can do in chat and channel conversations. App permission policies control which apps users and specific groups can access.
- Enabling or disabling read receipts, priority notifications, and Giphy content ratings
- Configuring app setup policies to pin specific apps for user groups
- Managing org-wide app settings versus per-user app permission policies
- Understanding third-party and custom app governance in Teams Admin Center
Configuring and Managing Teams Phone (Voice)
Voice configuration within Domain 2 includes dial plan management, call routing, and emergency calling policies - areas where many candidates lose points.
- Configuring calling policies and call park policies
- Assigning phone numbers to users and resource accounts
- Understanding auto attendants and call queues at the configuration level
- Emergency calling policies and dynamic emergency addresses
How Microsoft Tests Domain 2 Knowledge
The MS-700 exam uses several question formats, and Domain 2 features all of them. Understanding the format is as important as knowing the content - especially for scenario-based questions where multiple answers seem plausible.
Scenario-Based Multiple Choice
Most Domain 2 questions follow a pattern: a company has a specific business requirement or problem, and you must select which policy, setting, or administrative action resolves it. For example, you might be told that external users from a partner organization can join Teams meetings but are landing in the lobby instead of joining directly - and you need to identify the correct meeting policy setting to fix this.
Multi-Select Questions
Some questions require you to select two or three correct answers from a list of five or six. These test depth of knowledge because partial credit is not awarded - you need to identify all correct answers. Domain 2's policy interaction questions frequently appear in this format.
PowerShell Identification Questions
You won't typically be asked to write PowerShell scripts from scratch, but you will be shown cmdlets and asked to identify whether a command achieves a stated objective. Common cmdlets tested include Set-CsTeamsMeetingPolicy, Grant-CsTeamsMeetingPolicy, New-CsTeamsMessagingPolicy, and Set-CsOnlineVoiceRoutingPolicy.
New-Cs* creates; Grant-Cs* assigns. Getting this wrong under exam pressure is one of the most avoidable errors. Practice this distinction until it's automatic.
Core Technical Concepts You Must Master
Domain 2 is not a domain you can pass by memorizing feature lists. You need to understand how components interact. The following concepts are the ones most likely to determine whether you pass or struggle.
The Policy Hierarchy in Microsoft Teams
Microsoft Teams uses a layered policy model. Org-wide default policies apply to everyone unless overridden. Policies can be assigned directly to individual users or assigned to groups (via group policy assignment). When both a direct assignment and a group assignment exist for the same user, direct assignment takes precedence. When a user is in multiple groups, the policy from the group with the highest rank wins.
Understanding this hierarchy - and being able to reason through edge cases - is essential. The exam will absolutely place you in scenarios where you need to determine which policy a specific user actually has in effect.
Guest Access vs. External Access
These two terms are tested heavily and are frequently confused by candidates. Guest access applies to individuals added to a Team as members (Azure AD guest accounts). External access (federation) allows users from other Teams or Skype for Business organizations to search for and communicate with your users - but they are not team members. The controls for each are in different sections of Teams Admin Center, and the exam will test whether you can select the right one for a given scenario.
Shared Channels and B2B Direct Connect
Shared channels introduced a third collaboration model that doesn't rely on guest accounts. Instead, it uses Azure AD B2B direct connect, which requires mutual trust configuration in both organizations' Azure AD tenants. This is a newer area that Microsoft has increased its testing emphasis on - candidates preparing with outdated study materials may not have adequate coverage here.
Compliance Recording vs. Convenience Recording
Teams supports two types of recording. Convenience recording is user-initiated and stored in OneDrive or SharePoint. Compliance recording is policy-based, automatic, and managed through certified recording partners - it cannot be stopped by the user. Questions in this area typically focus on the requirements and configuration steps for compliance recording, since it involves additional licensing and policy configuration beyond what most administrators set up by default.
| Feature | Convenience Recording | Compliance Recording |
|---|---|---|
| Initiated by | User (in-meeting) | Policy (automatic) |
| Storage location | OneDrive / SharePoint | Third-party compliance solution |
| User can stop | Yes | No |
| Additional licensing required | No (included in most plans) | Yes (certified recording partner) |
| Admin policy involved | Teams Meeting Policy | Teams Compliance Recording Policy |
Hands-On Practice Priorities
No amount of reading substitutes for time in a live Microsoft 365 tenant. If you don't have access through an employer, Microsoft offers a developer tenant through the Microsoft 365 Developer Program at no cost. Setting one up before your Domain 2 study phase begins is strongly recommended.
What to Practice in the Teams Admin Center
- Create custom meeting policies and assign them to specific users - then verify the assignment using PowerShell
- Configure guest access settings and test what an external guest account can and cannot do
- Create an auto attendant and call queue, then assign them to a resource account with a phone number
- Set up a sensitivity label in Microsoft Purview and apply it to a Team - observe how it restricts guest access or external sharing
- Practice creating and modifying org-wide app permission policies versus user-specific ones
Hands-on lab work reinforces the conceptual knowledge that the exam tests, but you also need to validate your recall with targeted questions. The practice tests at MS-700 Exam Prep are structured to reflect the scenario-based format Microsoft uses, making them particularly useful for Domain 2 preparation.
Key Takeaway
For Domain 2, the sequence matters: learn the concept, configure it in a lab tenant, then test yourself with scenario-based questions. Skipping the lab phase is the most common reason candidates find Domain 2 questions harder than expected on exam day.
Domain 2 Study Schedule
Domain 2 typically requires the most dedicated study time of all four domains because of its breadth and its emphasis on applied knowledge. The following schedule assumes roughly 90 minutes of study per day.
Teams, Channels, and Governance
- Study team creation policies, channel types, and sensitivity labels
- Lab: Create standard, private, and shared channels; configure expiration policies
- Review Microsoft Learn modules on Teams governance
Meeting Policies and Messaging Policies
- Study meeting policy hierarchy, lobby settings, and recording types
- Lab: Create and assign custom meeting policies; test lobby bypass scenarios
- Study messaging policies - read receipts, Giphys, external chat
App Policies and Voice Configuration
- Study app permission policies vs. app setup policies
- Lab: Configure auto attendant + call queue with resource account
- Study dial plans, calling policies, and emergency calling
Review, Practice Tests, and Gap Closure
- Take timed Domain 2 practice sets at MS-700 Exam Prep
- Review every incorrect answer - identify whether the error was conceptual or policy-hierarchy related
- Re-lab any areas where practice test performance was weak
Where Candidates Go Wrong in Domain 2
Understanding the failure patterns of Domain 2 is one of the most efficient ways to avoid them. Based on the structure and scope of the exam, these are the areas where candidates most commonly drop points:
Confusing Where Settings Live
Teams settings are spread across Teams Admin Center, Microsoft Entra ID (Azure AD), Microsoft Purview, and PowerShell. A question about external collaboration might require you to configure settings in Azure AD B2B settings, not Teams Admin Center - and if you don't know this, the answer that looks right (a Teams Admin Center setting) will be wrong.
Ignoring the Group Policy Assignment Model
Direct user policy assignment versus group policy assignment is a concept many candidates study superficially. But the exam will test edge cases - particularly what happens when a user is in two groups with conflicting policies, or when both a direct assignment and a group assignment exist. Review this model in detail and practice reasoning through scenarios.
Underestimating Voice Configuration Complexity
Many Teams administrators in real-world roles don't manage voice infrastructure regularly, which means they arrive underprepared for dial plan and call routing questions. Domain 2 voice questions are specific - they test whether you know the difference between a calling plan, operator connect, and direct routing, and which configuration steps apply to each.
For a broader view of difficulty patterns across the entire exam, the How Hard Is the MS-700 Exam? Complete Difficulty Guide 2026 provides useful perspective on where Domain 2 fits relative to the others.
You can also review the companion articles for the other domains - including MS-700 Domain 1: Domain 1 - Complete Study Guide 2026, MS-700 Domain 3: Domain 3 - Complete Study Guide 2026, and MS-700 Domain 4: Domain 4 - Complete Study Guide 2026 - to make sure your overall exam preparation is complete and balanced.
If you're weighing whether the time and investment make sense for your career, the MS-700 Study Guide 2026: How to Pass on Your First Attempt walks through the full preparation strategy, while the Is the MS-700 Certification Worth It? Complete ROI Analysis 2026 addresses the career and salary dimension directly.
Frequently Asked Questions
Microsoft does not publish exact percentage weights for individual domains in the MS-700 exam. However, Domain 2 is broadly considered one of the heavier content areas given its scope across meetings, messaging, apps, governance, and voice. Treating it as a major focus area of your preparation is the right approach.
Yes. While you won't write scripts from scratch, you need to recognize correct PowerShell cmdlets for Teams administration tasks. Specifically, know the Cs* cmdlet family - particularly New-Cs*, Set-Cs*, and Grant-Cs* patterns - and be able to distinguish between creating and assigning policies via PowerShell.
Voice configuration appears throughout the MS-700 exam, including in Domain 2. You need to understand calling policies, resource account configuration for auto attendants and call queues, dial plan normalization, and emergency calling policies. Candidates without day-to-day voice administration experience should dedicate extra lab time to these areas.
App permission policies control which apps users are allowed to install and use - they govern availability. App setup policies control which apps are pre-installed or pinned in the Teams client for users - they govern the user experience. Both can be configured at the org-wide level or assigned to specific users or groups, and both appear in Domain 2 exam questions.
A roughly proportional approach based on domain complexity works well. Domain 2 and Domain 3 typically deserve more preparation time than Domains 1 and 4 due to their operational depth. Use practice test results to identify your weakest sub-areas within Domain 2 and redistribute time accordingly rather than following a rigid equal split. The four-week schedule outlined in this article is a practical starting point.