M55399A Implementing and Managing Microsoft Intune

Duration : 3 Days

© AFI Expertise inc.

This course is intended for modern device management professionals who wish to manage their enterprise devices using Microsoft Intune. The course covers enrollment, application management, endpoint security, and Windows Autopilot, as well as conditional access to Azure Active Directory and identity protection. Participants will learn to enroll devices, deploy applications, and manage them to maximize user productivity and device security.

Audience

This course is primarily intended for individuals who manage Windows, Mac, Android, and iOS devices in an enterprise environment.

Contents

Module 1: Introduction to Microsoft Intune

This module introduces the Microsoft Intune product family and associated Azure Active Directory features.

• Mobile Device Management
• Microsoft Intune
• Azure Active Directory
• AAD Identity Protection
• AAD Conditional Access

Lab: Environment Setup and Conditional Access

• Sign up for the M365 E5 trial
• Create users and groups
• Create identity protection policies

Module 2: Microsoft Intune Device Management

This module describes the features and implementation of mobile device management using Microsoft Intune, including enrollment, compliance, configuration, and OS updates.

• Device Enrollment
• Device Compliance
• Device Profiles
• Device Updates

Lab: Windows Device Enrollment

• Enrollment preparation
• Enroll a Windows device
• Enroll an iOS device (optional)
• Enroll an Android device (optional)
• Create and deploy compliance and conditional access policies
• Create and deploy configuration profile

Module 3: Microsoft Intune Application Management

This module describes the deployment and management of applications using Microsoft Intune on both enrolled and non-enrolled devices.

• Application Management
• Application Deployment
• Application Configuration
• Application Management
• Rule Sets and Guided Scenarios

Lab: Application Deployment

• Deploy Remote Desktop and M365 Apps for Enterprise on managed client machines
• Deploy Notepad++ (optional)
• Deploy applications to iOS (optional)Deploy applications to Android (optional)

Module 4: Microsoft Intune Endpoint Security

This module describes the centralized endpoint security features and policies in Microsoft Intune.

• Security Baselines and Tasks
• Antivirus
• Disk Encryption
• Firewall
• Attack Surface Reduction
• Endpoint Detection and ResponseAccount Protection

Lab: Manage Endpoint Security in Microsoft Intune

• Implement Windows security baseline
• Implement Microsoft Edge security baseline
• Implement attack surface reduction policies

Module 5: Deploying Windows with Windows Autopilot

• This module describes the Windows Autopilot product suite and how to deploy Windows operating systems using Windows Autopilot.
• Introduction to Windows Autopilot
• Prepare for Windows Autopilot deployment
• Deploy Windows 11 using Windows Autopilot
• Lab: Deploy Windows 11 using Windows Autopilot
• Prepare AAD for Windows Autopilot
• Prepare a Windows client for Windows AutopilotDeploy Windows 11 using Windows Autopilo

Module 6: Additional and Premium Features of Microsoft Intune

This module presents some current and upcoming additional and premium features of Microsoft Intune.

• Remote Help
• Tunnel for Mobile Application Management
• Endpoint Privilege Management
• Advanced Endpoint Analytics

Lab: Perform Remote Help on a Windows 11 Client

• Sign up for the Remote Help trial
• Configure Remote Help
• Conduct a Remote Help session