Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 21 hours
Course Outline
Module 1: Introduction and Core Concepts
- Understanding Microsoft Intune and Endpoint Manager.
- Interoperability with Configuration Manager (co-management, cloud attach).
- Advantages of modern endpoint management strategies.
- Essential concepts: devices, applications, data, and users.
- Intune architecture, roles, and licensing models.
Module 2: Identity and Access Management
- Key concepts in Microsoft Entra ID / Azure AD.
- Synchronizing on-premises AD to Entra ID via Azure AD Connect.
- Device registration types: Azure AD Join and Hybrid AD Join.
- Managing roles, groups, and permissions within Intune.
- Integrating Conditional Access with Intune.
Module 3: Device Enrollment Strategies
- Enrollment methods for Windows, iOS, Android, and macOS.
- Windows Autopilot: concepts, profiles, and workflows.
- Automated enrollment using Apple DEP and Android Zero-touch.
- Distinguishing between personal (BYOD) and corporate device management.
- Comparing MDM and MAM (Mobile Device Management / Mobile Application Management).
Module 4: Configuration and Compliance Policies
- Defining device compliance policies.
- Creating configuration policies (Configuration Profiles).
- Applying device restrictions and security controls.
- Implementing App Protection Policies.
- Establishing Conditional Access rules based on compliance status.
Module 5: Application Management
- Managing various app types in Intune: Line of Business (LOB), Win32, Microsoft Store, and web apps.
- Processes for deploying, installing, removing, and updating applications.
- Safeguarding application data.
- Differentiating application policies from corporate data handling.
- Managing licenses and assignments.
Module 6: Updates and Patching
- Integrating Windows Update for Business with Intune.
- Defining feature and quality update policies.
- Implementing deployment ring models.
- Tracking and monitoring update status.
- Formulating update strategies for corporate environments.
Module 7: Security and Protection
- Enhancing security with Microsoft Defender for Endpoint and Intune integration.
- Utilizing Microsoft security baselines and templates.
- Implementing threat protection measures (antimalware, firewall, etc.).
- Configuring device encryption (BitLocker) and related policies.
- Managing certificates and securing VPN/Wi-Fi profiles.
Module 8: Monitoring, Reporting, and Troubleshooting
- Utilizing dashboards and standard reports.
- Analyzing logs and diagnostics (e.g., enrollment errors, policy issues).
- Using Intune support and troubleshooting utilities.
- Navigating administration portals (device portal, company portal).
- Configuring alerts and notifications.
Module 9: Advanced Scenarios and Integrations
- Co-management workflows with Configuration Manager.
- Managing existing devices without re-enrollment ("Autopilot for existing devices").
- Integration with broader Microsoft services (Defender, Azure, Copilot, etc.).
- Automation using PowerShell and Graph API.
- Developing governance strategies and enterprise-scale structures.
- Best practices for design and implementation.
Summary and Future Steps
Requirements
- A solid grasp of Microsoft 365 and Azure environments
- Practical experience in managing Windows or mobile devices
- Knowledge of fundamental IT security principles within an organizational context
Target Audience
- System administrators
- Endpoint management specialists
- IT professionals responsible for enterprise device and security policy management
Testimonials (1)
Easy to follow instructions and trainer was very helpfully when I had issues
