Get in Touch
 Duration 21 hours

Course Outline

Module 1: Overview and Core Principles

  • Definition and scope of Microsoft Intune / Endpoint Manager
  • Interoperability with Configuration Manager, including co-management and cloud attach models
  • Operational advantages of modern endpoint management strategies
  • Foundational elements: hardware, software, data, and user identities
  • Architectural components, administrative roles, and licensing requirements

Module 2: Identity Framework and Access Control

  • Core concepts of Microsoft Entra ID / Azure Active Directory
  • Directory synchronization via Azure AD Connect
  • Device join mechanisms: Azure AD Join and Hybrid AD Join
  • Management of roles, security groups, and permission assignments within Intune
  • Integration of Conditional Access policies with Intune compliance

Module 3: Device Onboarding and Enrollment

  • Enrollment workflows for Windows, iOS, Android, and macOS platforms
  • Windows Autopilot: core concepts, configuration profiles, and processing workflows
  • Automated enrollment protocols using Apple DEP and Android zero-touch provisioning
  • Distinction between personal (BYOD) and corporate-owned device management
  • Differentiating Mobile Device Management (MDM) from Mobile Application Management (MAM)

Module 4: Configuration Standards and Compliance Controls

  • Definition and enforcement of device compliance rules
  • Establishment of configuration policies and profiles
  • Implementation of device restrictions and security controls
  • Application of App Protection Policies (APP)
  • Conditional access enforcement based on compliance status

Module 5: Software Lifecycle Management

  • Categorization of software in Intune: Line of Business (LOB), Win32, Store, and web applications
  • Processes for deployment, installation, removal, and patching of applications
  • Strategies for safeguarding application data
  • Differentiating application policies from corporate data protection
  • Management of software licensing and user assignments

Module 6: Update and Patch Administration

  • Integration of Windows Update for Business with Intune
  • Policies governing feature and quality updates
  • Design of deployment ring models
  • Monitoring of update status and compliance
  • Update strategies tailored for corporate environments

Module 7: Security Posture and Defense Mechanisms

  • Integration of Microsoft Defender for Endpoint with Intune
  • Application of Microsoft security baselines and templates
  • Threat protection measures, including antimalware and firewall settings
  • Device encryption via BitLocker and associated encryption policies
  • Management of certificates and secure VPN/Wi-Fi profiles

Module 8: Surveillance, Analytics, and Problem Resolution

  • Utilization of dashboards and standard reporting features
  • Analysis of logs and diagnostics for enrollment and policy issues
  • Application of support and troubleshooting tools within Intune
  • Use of administrative portals for device and user management
  • Configuration of alerts and notification systems

Module 9: Advanced Implementation and Service Integration

  • Co-management strategies with Configuration Manager
  • Device management scenarios without traditional enrollment
  • Integration with broader Microsoft services, such as Defender, Azure, and Copilot
  • Automation techniques using PowerShell and the Graph API
  • Governance strategies and enterprise-scale structural design
  • Best practices for architectural design and deployment

Summary and Recommended Next Steps

Requirements

  • Proficiency in Microsoft 365 and Azure infrastructure
  • Practical experience with Windows or mobile device administration
  • Knowledge of organizational IT security principles and standards

Target Audience

  • System administrators
  • Endpoint management specialists
  • IT professionals responsible for enterprise device security and policy enforcement for government

Number of participants


Price per participant

Testimonials (1)

Upcoming Courses

Related Categories