Get in Touch
 Duration 21 hours

Course Outline

Module 1: Introduction and Fundamentals

  • Understanding Microsoft Intune and Endpoint Manager
  • Integration with Configuration Manager (co-management, cloud attach)
  • Advantages of modern endpoint management
  • Core concepts: devices, applications, data, and users
  • Intune architecture, roles, and licensing

Module 2: Identity and Access

  • Key concepts of Microsoft Entra ID and Azure AD
  • Synchronization from AD to Entra ID via Azure AD Connect
  • Device join types: Azure AD Join and Hybrid AD Join
  • Roles, groups, and permissions within Intune
  • Conditional Access and its integration with Intune

Module 3: Device Enrollment

  • Enrollment methods for Windows, iOS, Android, and macOS
  • Windows Autopilot: concepts, profiles, and processes
  • Automated enrollment using DEP (Apple) and Zero-touch (Android)
  • Managing personal devices (BYOD) versus corporate devices
  • Distinguishing between MDM and MAM (Mobile Device Management and Mobile Application Management)

Module 4: Configuration and Compliance Policies

  • Device compliance policies
  • Configuration policies (Configuration Profiles)
  • Device restrictions and security controls
  • App Protection Policies
  • Conditional access policies driven by compliance status

Module 5: Application Management

  • Application types in Intune: Line of Business (LOB), Win32, Microsoft Store, and web apps
  • App deployment, installation, uninstallation, and updates
  • Protecting application data
  • Differentiating application policies from corporate data
  • Managing licenses and assignments

Module 6: Updates and Patches

  • Integration of Windows Update for Business with Intune
  • Policies for feature and quality updates
  • Deployment ring models
  • Monitoring update statuses
  • Update strategies in corporate environments

Module 7: Security and Protection

  • Integrating Microsoft Defender for Endpoint with Intune
  • Microsoft security baselines and templates
  • Threat protection measures (antimalware, firewall, etc.)
  • Device encryption (BitLocker) and encryption policies
  • Certificate management and secure VPN/Wi-Fi profiles

Module 8: Monitoring, Reporting, and Troubleshooting

  • Dashboards and default reports
  • Logs and diagnostics (e.g., enrollment errors, policy management)
  • Support and troubleshooting tools within Intune
  • Utilizing administration portals (device portal, company portal)
  • Alerts and notifications

Module 9: Advanced Scenarios and Integrations

  • Co-management with Configuration Manager
  • Device management without traditional enrollment (“Autopilot for existing devices”)
  • Integrations with other Microsoft services (Defender, Azure, Copilot, etc.)
  • Automation using PowerShell and Graph API
  • Governance strategies and enterprise-scale structures
  • Best practices for design and implementation

Summary and Next Steps

Requirements

  • Proficiency with Microsoft 365 and Azure environments
  • Experience in Windows or mobile device management
  • Familiarity with organizational IT security principles

Target Audience

  • System administrators
  • Endpoint management specialists
  • IT professionals responsible for managing enterprise devices and security policies

Number of participants


Price per participant

Testimonials (1)

Upcoming Courses

Related Categories