Who is this training for?
This course is primarily for people who manage Windows, Mac, Android, and IoS devices in a corporate environment
Training objectives
- Understand the principles of managing devices and apps with Microsoft Intune
- Configure and manage security, compliance, and conditional access policies
- Deploy and administer mobile devices and desktops
- Manage data and app protection policies
- Monitor, Troubleshoot and optimize an Intune environment Integrate Intune with Microsoft Entra ID (Azure AD) and Microsoft 365 services
Summary
This course is for modern device management professionals who want to manage their corporate devices using Microsoft Intune. This course covers enrollment, application management, endpoint security, and Windows Autopilot, as well as Azure Active Directory conditional access and identity protection. Participants will learn how to enroll devices, deploy applications, and manage them to maximize user productivity and device security.
Course outline
Module 1: Introduction to Microsoft Intune
This module introduces the Microsoft Intune product family and related Azure Active Directory features.
- Mobile device management
- Microsoft Intune
- Azure Active Directory
- AAD identity protection
- AAD Conditional Access
Lab: Environment configuration and conditional access
- Create users and groups
- Create identity protection policies
Module 2: Microsoft Intune device management
This module describes the capabilities and implementation of mobile device management using Microsoft Intune, including registration, compliance, configuration, and operating system updates.
- Device Enrollment
- Device Compliance
- Device Profiles
- Device Updates
Lab: Windows Device Enrollment
- Prepare for Enrollment
- Enroll a Windows Device
- Enroll an IOS Device (Optional)
- Enroll an Android Device (Optional)
- Create and Deploy Compliance and Conditional Access Policies
- Create and Deploy Configuration Profiles
Module 3: Microsoft Intune app management
This module describes how to deploy and manage apps using Microsoft Intune on both enrolled and unenrolled devices.
- Application Management
- Application Deployment
- Application Configuration
- Application Management
- Rule Sets and Guided Scenarios
Lab: Deploying Applications
- Deploying Remote Desktop and M365 Apps for Enterprise to Managed Client Machines
- Deploying Notepad++ (Optional)
- Deploying Applications to IOS (Optional)
- Deploying Applications to Android (Optional)
Module 4: Microsoft Intune Endpoint Security
This module describes the features and Centralized endpoint security policies in Microsoft Intune.
- Security baselines and tasks
- Antivirus
- Disk encryption
- Firewall
- Attack surface reduction
- Endpoint detection and response
- Account protection
Lab: Manage endpoint security in Microsoft Intune
- Implement Windows security baseline
- Implement Microsoft Edge security baseline
- Implement attack surface reduction policies
Module 5: Deploy Windows with Windows Autopilot
This module describes the Windows Autopilot product suite and how to deploy Windows operating systems using Windows Autopilot.
- Introduction to Windows Autopilot
- Prepare for Windows Autopilot deployment
- Windows 11 deployment using Windows Autopilot
Lab: Deploy Windows 11 using Windows Autopilot
- Prepare AAD for Windows Autopilot
- Prepare a Windows client for Windows Autopilot
- Deploy Windows 11 using Windows Autopilot
Module 6: Additional and Premium features of Microsoft Intune
This module introduces some additional and premium features Microsoft Intune current and upcoming releases.
- Remote Help
- Mobile Application Management Tunnel
- Endpoint Privilege Management
- Advanced Endpoint Analysis
Lab:
There is no lab associated with this module. The instructor could ask the learners to do directed laboratories
Approach and methodology
- Guided demonstrations of key Intune features
- Hands-on labs to configure policies, deployment, and security
- Real-world scenarios inspired by business situations (deployment, compliance, secure access)
- Troubleshooting and operational management
- Exchanges and best practices in managing modern environments
Prerequisites
- Basic knowledge of Windows operating systems Understanding of network concepts (DNS, access, authentication)
- Notions of identity administration (Active Directory / Azure AD)
- Familiarity with Microsoft 365 or cloud environments
- Basics of desktop and mobile device management
Recommendations
- Experience in systems administration or IT support
- Familiarity with Microsoft 365 tools (Teams, Azure, Endpoint Manager)
- Knowledge of IT security and access management Understand device management issues (MDM/MAM)
- Interest in modern endpoint management and data security
