Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 21 hours
Course Outline
Module 1: Overview and Core Principles
- Definition and scope of Microsoft Intune / Endpoint Manager
- Interoperability with Configuration Manager, including co-management and cloud attach models
- Operational advantages of modern endpoint management strategies
- Foundational elements: hardware, software, data, and user identities
- Architectural components, administrative roles, and licensing requirements
Module 2: Identity Framework and Access Control
- Core concepts of Microsoft Entra ID / Azure Active Directory
- Directory synchronization via Azure AD Connect
- Device join mechanisms: Azure AD Join and Hybrid AD Join
- Management of roles, security groups, and permission assignments within Intune
- Integration of Conditional Access policies with Intune compliance
Module 3: Device Onboarding and Enrollment
- Enrollment workflows for Windows, iOS, Android, and macOS platforms
- Windows Autopilot: core concepts, configuration profiles, and processing workflows
- Automated enrollment protocols using Apple DEP and Android zero-touch provisioning
- Distinction between personal (BYOD) and corporate-owned device management
- Differentiating Mobile Device Management (MDM) from Mobile Application Management (MAM)
Module 4: Configuration Standards and Compliance Controls
- Definition and enforcement of device compliance rules
- Establishment of configuration policies and profiles
- Implementation of device restrictions and security controls
- Application of App Protection Policies (APP)
- Conditional access enforcement based on compliance status
Module 5: Software Lifecycle Management
- Categorization of software in Intune: Line of Business (LOB), Win32, Store, and web applications
- Processes for deployment, installation, removal, and patching of applications
- Strategies for safeguarding application data
- Differentiating application policies from corporate data protection
- Management of software licensing and user assignments
Module 6: Update and Patch Administration
- Integration of Windows Update for Business with Intune
- Policies governing feature and quality updates
- Design of deployment ring models
- Monitoring of update status and compliance
- Update strategies tailored for corporate environments
Module 7: Security Posture and Defense Mechanisms
- Integration of Microsoft Defender for Endpoint with Intune
- Application of Microsoft security baselines and templates
- Threat protection measures, including antimalware and firewall settings
- Device encryption via BitLocker and associated encryption policies
- Management of certificates and secure VPN/Wi-Fi profiles
Module 8: Surveillance, Analytics, and Problem Resolution
- Utilization of dashboards and standard reporting features
- Analysis of logs and diagnostics for enrollment and policy issues
- Application of support and troubleshooting tools within Intune
- Use of administrative portals for device and user management
- Configuration of alerts and notification systems
Module 9: Advanced Implementation and Service Integration
- Co-management strategies with Configuration Manager
- Device management scenarios without traditional enrollment
- Integration with broader Microsoft services, such as Defender, Azure, and Copilot
- Automation techniques using PowerShell and the Graph API
- Governance strategies and enterprise-scale structural design
- Best practices for architectural design and deployment
Summary and Recommended Next Steps
Requirements
- Proficiency in Microsoft 365 and Azure infrastructure
- Practical experience with Windows or mobile device administration
- Knowledge of organizational IT security principles and standards
Target Audience
- System administrators
- Endpoint management specialists
- IT professionals responsible for enterprise device security and policy enforcement for government
Testimonials (1)
Easy to follow instructions and trainer was very helpfully when I had issues