Get in Touch
 Duration 21 hours

Course Outline

Module 1: Introduction and Core Concepts

  • Overview of Microsoft Intune and Endpoint Manager
  • Integration with Configuration Manager (co-management, cloud attach)
  • Advantages of modern endpoint management strategies
  • Essential concepts: devices, applications, data, and users
  • Intune architecture, administrative roles, and licensing models

Module 2: Identity and Access Control

  • Key concepts of Microsoft Entra ID / Azure AD
  • Identity synchronization from on-premises AD to Entra ID (Azure AD Connect)
  • Device registration types: Azure AD Join and Hybrid AD Join
  • Managing roles, groups, and permissions within Intune
  • Conditional Access policies and their integration with Intune

Module 3: Device Enrollment Procedures

  • Enrollment strategies for Windows, iOS, Android, and macOS
  • Windows Autopilot: core concepts, profile setup, and workflows
  • Automated enrollment using DEP (Apple) and Zero-touch (Android)
  • Distinguishing between BYOD (Personal) and corporate device management
  • Differences and applications of MDM vs MAM

Module 4: Configuration and Compliance Management

  • Establishing device compliance standards
  • Creating and applying configuration profiles
  • Implementing device restrictions and security controls
  • Formulating App Protection Policies
  • Defining Conditional Access rules based on compliance status

Module 5: Application Lifecycle Management

  • Managing application types in Intune: LOB, Win32, Microsoft Store, and web apps
  • Processes for deploying, installing, uninstalling, and updating applications
  • Strategies for protecting application data
  • Balancing application policies with corporate data security
  • Managing software licenses and user assignments

Module 6: Update and Patch Administration

  • Leveraging Windows Update for Business alongside Intune
  • Defining feature and quality update policies
  • Utilizing deployment ring models for staged rollouts
  • Tracking and monitoring update status
  • Developing update strategies for enterprise environments

Module 7: Security and Threat Protection

  • Integrating Microsoft Defender for Endpoint with Intune
  • Applying Microsoft security baselines and templates
  • Implementing threat protection measures (antimalware, firewalls)
  • Managing device encryption (BitLocker) and encryption policies
  • Handling certificate management and secure VPN/Wi-Fi profiles

Module 8: Monitoring, Reporting, and Issue Resolution

  • Utilizing dashboards and standard reports
  • Analyzing logs and diagnostics for enrollment and policy issues
  • Employing Intune support and troubleshooting utilities
  • Navigating administration portals (device portal, company portal)
  • Configuring alerts and notification systems

Module 9: Advanced Scenarios and Integrations

  • Co-management strategies with Configuration Manager
  • Managing existing devices without full enrollment (Autopilot scenarios)
  • Integrating with broader Microsoft services (Defender, Azure, Copilot)
  • Automation using PowerShell and Graph API
  • Developing governance strategies for enterprise scale
  • Best practices for architectural design and implementation

Summary and Future Recommendations

Requirements

  • Familiarity with Microsoft 365 and Azure infrastructures
  • Practical experience in Windows or mobile device management
  • Knowledge of organizational IT security frameworks

Target Audience

  • System administrators
  • Endpoint management specialists
  • IT professionals responsible for enterprise device and security policy management

Number of participants


Price per participant

Testimonials (1)

Upcoming Courses

Related Categories