Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Course Outline
Module 1: Introduction and Fundamentals
- Understanding Microsoft Intune / Endpoint Manager.
- The relationship with Configuration Manager (co-management, cloud attach).
- Benefits of modern endpoint management.
- Core concepts: devices, applications, data, and users.
- Intune architecture, roles, and licensing models.
Module 2: Identity and Access
- Microsoft Entra ID / Azure AD: Core concepts.
- Synchronization from AD to Entra ID (Azure AD Connect).
- Device join types: Azure AD Join, Hybrid AD Join.
- Roles, groups, and permissions within Intune.
- Conditional Access and its integration with Intune.
Module 3: Device Enrollment
- Enrollment methods for Windows, iOS, Android, and macOS.
- Windows Autopilot: concepts, profiles, and processes.
- Automated enrollment using DEP (Apple) and Zero-touch (Android).
- Distinguishing between personal device (BYOD) and corporate device management.
- Understanding MDM vs MAM (Mobile Device Management / Mobile Application Management).
Module 4: Configuration and Compliance Policies
- Device compliance policies.
- Configuration policies (Configuration Profiles).
- Device restrictions (security controls and restrictions).
- App Protection Policies.
- Conditional access policies driven by compliance status.
Module 5: Application Management
- Application types in Intune: Line of Business (LOB), Win32, Microsoft Store, and web apps.
- Managing application deployment, installation, uninstallation, and updates.
- Securing application data.
- Differentiating between application policies and corporate data handling.
- Licensing and assignment management for applications.
Module 6: Updates and Patches
- Integrating Windows Update for Business with Intune.
- Managing feature and quality update policies.
- Implementing deployment ring models.
- Monitoring update status.
- Adopting update strategies suitable for corporate environments.
Module 7: Security and Protection
- Microsoft Defender for Endpoint integration with Intune.
- Leveraging Microsoft security baselines and templates.
- Threat protection measures (antimalware, firewall, etc.).
- Device encryption using BitLocker and associated policies.
- Certificate management and establishing secure VPN/Wi-Fi profiles.
Module 8: Monitoring, Reporting, and Troubleshooting
- Navigating dashboards and utilizing default reports.
- Analyzing logs and diagnostics (e.g., enrollment errors, policy management issues).
- Leveraging support and troubleshooting tools within Intune.
- Utilizing administration portals such as Device Portal and Company Portal.
- Managing alerts and notifications.
Module 9: Advanced Scenarios and Integrations
- Co-management with Configuration Manager.
- Device management without traditional enrollment ("Autopilot for existing devices").
- Integrations with other Microsoft services (Defender, Azure, Copilot, etc.).
- Automation techniques using PowerShell and Graph API.
- Developing governance strategies and enterprise-scale structures.
- Adopting best practices for design and implementation.
Summary and Next Steps
Requirements
- A solid understanding of Microsoft 365 and Azure environments.
- Experience in Windows or mobile device management.
- Familiarity with organizational IT security principles.
Target Audience
- System administrators.
- Endpoint management specialists.
- IT professionals responsible for managing enterprise devices and security policies.
21 Hours
Testimonials (1)
Easy to follow instructions and trainer was very helpfully when I had issues
