Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 21 hours
Course Outline
Module 1: Introduction and Core Fundamentals
- Overview of Microsoft Intune and Endpoint Manager
- Integration with Configuration Manager (co-management and cloud attach models)
- Advantages of adopting modern endpoint management
- Core concepts: devices, applications, data, and users
- Intune architecture, role definitions, and licensing details
Module 2: Identity and Access Control
- Key concepts of Microsoft Entra ID (formerly Azure AD)
- Directory synchronization from AD to Entra ID using Azure AD Connect
- Device join methodologies: Azure AD Join and Hybrid AD Join
- Management of roles, groups, and permissions within Intune
- Conditional Access policies and their synergy with Intune
Module 3: Device Enrollment Strategies
- Enrollment techniques for Windows, iOS, Android, and macOS
- Windows Autopilot: core concepts, profile management, and processes
- Automated enrollment via DEP (Apple) and Zero-touch deployment (Android)
- Differences between Personal Device (BYOD) and corporate device management
- Distinctions between MDM and MAM (Mobile Device Management vs. Mobile Application Management)
Module 4: Configuration and Compliance Policy Management
- Defining and applying device compliance policies
- Creating configuration policies (Configuration Profiles)
- Implementing device restrictions and security controls
- Developing App Protection Policies
- Linking conditional access to compliance status
Module 5: Application Lifecycle Management
- Categorizing applications in Intune: Line of Business (LOB), Win32, Microsoft Store, and web apps
- Managing app deployment, installation, removal, and updates
- Strategies for protecting application data
- Differentiating application policies from corporate data security
- Overseeing license allocation and user assignments
Module 6: Updates and Patch Management
- Integrating Windows Update for Business with Intune
- Setting feature and quality update policies
- Utilizing deployment ring models
- Monitoring update compliance and status
- Formulating update strategies for corporate environments
Module 7: Security and Threat Protection
- Combining Microsoft Defender for Endpoint with Intune
- Applying Microsoft security baselines and templates
- Enhancing threat protection through antimalware and firewall settings
- Configuring device encryption (BitLocker) and related policies
- Managing certificates and secure VPN/Wi-Fi profiles
Module 8: Monitoring, Reporting, and Troubleshooting
- Interpreting dashboards and default reports
- Analyzing logs and diagnostics for enrollment and policy issues
- Leveraging Intune’s built-in support and troubleshooting utilities
- Utilizing administration portals, including device and company portals
- Configuring alerts and notification systems
Module 9: Advanced Scenarios and Integrations
- Implementing co-management with Configuration Manager
- Managing devices without traditional enrollment (Autopilot for existing devices)
- Integrating with broader Microsoft services such as Defender, Azure, and Copilot
- Automation capabilities using PowerShell and Graph API
- Designing governance strategies for enterprise-scale structures
- Best practices for architectural design and implementation
Summary and Future Directions
Requirements
- Solid knowledge of Microsoft 365 and Azure ecosystems
- Practical experience in managing Windows or mobile devices
- Knowledge of organizational IT security frameworks
Target Audience
- System Administrators
- Specialists in Endpoint Management
- IT professionals responsible for enterprise device and security policy oversight
Testimonials (1)
Easy to follow instructions and trainer was very helpfully when I had issues
