Get in Touch

Course Outline

Module 1: Introduction and Fundamentals

  • Understanding Microsoft Intune / Endpoint Manager
  • Relationship with Configuration Manager (co-management, cloud attach)
  • Advantages of modern endpoint management
  • Core concepts: devices, applications, data, and users
  • Intune architecture, roles, and licensing

Module 2: Identity and Access

  • Microsoft Entra ID / Azure AD: core concepts
  • Synchronization from AD to Entra ID (Azure AD Connect)
  • Device join types: Azure AD Join, Hybrid AD Join
  • Roles, groups, and permissions within Intune
  • Conditional Access and its integration with Intune

Module 3: Device Enrollment

  • Enrollment methods for Windows, iOS, Android, and macOS
  • Windows Autopilot: concepts, profiles, and processes
  • Automated enrollment with DEP (Apple) and Zero-touch (Android)
  • Distinctions between personal (BYOD) and corporate device management
  • MDM vs MAM (Mobile Device Management / Mobile Application Management)

Module 4: Configuration and Compliance Policies

  • Device compliance policies
  • Configuration policies (Configuration Profiles)
  • Device restrictions (restrictions, security controls)
  • App Protection Policies
  • Conditional access policies based on compliance status

Module 5: Application Management

  • Application types in Intune: Line of Business (LOB), Win32, Microsoft Store, and web apps
  • Deployment, installation, uninstallation, and updating of applications
  • Application data protection
  • Application policies versus corporate data handling
  • License and assignment management

Module 6: Updates and Patches

  • Windows Update for Business and its integration with Intune
  • Feature and quality update policies
  • Deployment ring models
  • Monitoring update status
  • Update strategies tailored for corporate environments

Module 7: Security and Protection

  • Microsoft Defender for Endpoint + integration with Intune
  • Microsoft security baselines and templates
  • Threat protection (antimalware, firewall, etc.)
  • Device encryption (BitLocker) and encryption policies
  • Certificate management and secure VPN/Wi-Fi profiles

Module 8: Monitoring, Reporting, and Troubleshooting

  • Dashboards and default reports
  • Logs and diagnostics (e.g., enrollment errors, policy management)
  • Support and troubleshooting tools within Intune
  • Utilization of administration portals (device portal, company portal)
  • Alerts and notifications

Module 9: Advanced Scenarios / Integrations

  • Co-management with Configuration Manager
  • Device management without enrollment (“Autopilot for existing devices”)
  • Integrations with other Microsoft services (Defender, Azure, Copilot, etc.)
  • Automation using PowerShell and Graph API
  • Governance strategies and enterprise-scale structures
  • Best practices for design and implementation

Summary and Next Steps

Requirements

  • A foundational understanding of Microsoft 365 and Azure environments
  • Practical experience with Windows or mobile device management
  • Familiarity with organizational IT security principles

Target Audience

  • System administrators
  • Endpoint management specialists
  • IT professionals responsible for managing enterprise devices and security policies
 21 Hours

Testimonials (1)

Related Categories