Microsoft 365 Endpoint Administrator

Microsoft 365 Endpoint Administrator (MD-102T00)

Course Length: 5 days
Delivery Methods: Multiple delivery options
Course Overview

Learn the skills and knowledge required to effectively manage and secure modern desktop environments in this live training class from a Microsoft Certified Trainer. Students will dive into a variety of subjects including the deployment, configuration, and maintenance of Windows and non-Windows devices within an enterprise setting. The curriculum emphasizes the importance of modern management techniques, leveraging Microsoft's suite of tools such as Microsoft Intune, Microsoft Entra ID, Azure Virtual Desktop, and Windows 365 to streamline and enhance the management of devices and applications. By exploring the integration of cloud technologies with traditional on-premises management approaches, students will learn to implement robust security measures, manage identities and access, and ensure compliance across all devices. The course covers critical topics such as device enrollment, application management, data protection, and the deployment of security solutions like Microsoft Defender for Endpoint to safeguard against advanced threats. With a focus on practical, real-world applications, this course prepares students to meet the challenges of modern endpoint management in a dynamic and evolving IT landscape.

Audience Profile

This course is specifically tailored for IT professionals aiming to become proficient in the management and security of modern enterprise environments. Ideal for those in roles such as IT Systems Administrators, Microsoft 365 Endpoint Administrators, and Security Managers, it caters to individuals responsible for overseeing device management, security, and compliance within their organizations. Participants are expected to have a foundational understanding of Microsoft 365 workloads and should possess skills in deploying, managing, and configuring devices and applications. This course is particularly beneficial for professionals looking to enhance their expertise in modern management strategies, cloud-based solutions, and security best practices, enabling them to effectively implement and manage a secure, compliant, and efficient digital workspace. The emphasis is on empowering administrators to leverage cloud technologies and modern management practices to deliver a seamless and secure user experience across all devices.

Course Benefits
  • Gain a comprehensive understanding of modern management principles and the enterprise desktop lifecycle.
  • Learn to differentiate between various Windows editions and select the most suitable devices based on requirements and hardware compatibility.
  • Acquire knowledge on Microsoft Entra ID, comparing it with traditional Active Directory services, and its application in cloud environments.
  • Master the management of Microsoft Entra identities, including role-based access control, user and group management, and synchronization with AD DS.
  • Understand device authentication mechanisms, specifically Azure AD join processes, including their prerequisites, limitations, and benefits.
  • Get hands-on experience with Microsoft Configuration Manager and Microsoft Intune for device enrollment and management, understanding the advantages and deployment strategies of each.
  • Develop skills in creating and managing device and user profiles in Intune, including mobile application management and deployment of applications across platforms.
  • Learn about device data protection, including Windows Information Protection, BitLocker, and the Encrypting File System.
  • Enhance security knowledge with modules on Microsoft Defender for Endpoint, Microsoft Defender in Windows, and Microsoft Defender for Cloud Apps, covering deployment, management, and key capabilities.
  • Understand the deployment readiness, including assessment tools and techniques, application compatibility, and planning phased rollouts.
  • Explore dynamic deployment methods such as Windows Autopilot and Provisioning Packages, learning the benefits and scenarios for their use.
  • Prepare for a career in IT management by learning about modern endpoint management strategies, including transitioning to modern management with Intune and managing Windows 365 and Azure Virtual Desktop environments.
  • Gain the ability to generate inventory and compliance reports, create device compliance policies, and understand conditional access to enhance organizational security and compliance.
Available Delivery Methods
Public Class
Public expert-led online training from the convenience of your home, office or anywhere with an internet connection. Guaranteed to run .
Private Class
Private classes are delivered for groups at your offices or a location of your choice.
Microsoft Certified Partner

Webucator is a Microsoft Certified Partner for Learning Solutions (CPLS). This class uses official Microsoft courseware and will be delivered by a Microsoft Certified Trainer (MCT).

Course Outline
  1. Explore the Enterprise Desktop
    1. Examine benefits of modern management
    2. Examine the enterprise desktop life-cycle model
    3. Examine planning and purchasing
    4. Examine desktop deployment
    5. Plan an application deployment
    6. Plan for upgrades and retirement
  2. Explore Windows Editions
    1. Examine Windows client editions and capabilities
    2. Select client edition
    3. Examine hardware requirements
  3. Understand Microsoft Entra ID
    1. Examine Microsoft Entra ID
    2. Compare Microsoft Entra ID and Active Directory Domain Services
    3. Examine Microsoft Entra ID as a directory service for cloud apps
    4. Compare Microsoft Entra ID P1 and P2 plans
    5. Examine Microsoft Entra Domain Services
  4. Manage Microsoft Entra identities
    1. Examine RBAC and user roles in Microsoft Entra ID
    2. Create and manage users in Microsoft Entra ID
    3. Create and manage groups in Microsoft Entra ID
    4. Manage Microsoft Entra objects with PowerShell
    5. Synchronize objects from AD DS to Microsoft Entra ID
  5. Manage device authentication
    1. Describe Microsoft Entra join
    2. Examine Microsoft Entra join prerequisites limitations and benefits
    3. Join devices to Microsoft Entra ID
    4. Manage devices joined to Microsoft Entra ID
  6. Enroll devices using Microsoft Configuration Manager
    1. Deploy the Microsoft Configuration Manager client
    2. Monitor the Microsoft Configuration Manager client
    3. Manage the Microsoft Configuration Manager client
  7. Enroll devices using Microsoft Intune
    1. Manage mobile devices with Intune
    2. Enable mobile device management
    3. Explain considerations for device enrollment
    4. Manage corporate enrollment policy
    5. Enroll Windows devices in Intune
    6. Enroll Android devices in Intune
    7. Enroll iOS devices in Intune
    8. Explore device enrollment manager
    9. Monitor device enrollment
    10. Manage devices remotely
  8. Execute device profiles
    1. Explore Intune device profiles
    2. Create device profiles
    3. Create a custom device profile
  9. Oversee device profiles
    1. Monitor device profiles in Intune
    2. Manage device sync in Intune
    3. Manage devices in Intune using scripts
  10. Maintain user profiles
    1. Examine user profile
    2. Explore user profile types
    3. Examine options for minimizing user profile size
    4. Deploy and configure folder redirection
    5. Sync user state with Enterprise State Roaming
    6. Configure Enterprise State Roaming in Azure
  11. Execute mobile application management
    1. Examine mobile application management
    2. Examine considerations for mobile application management
    3. Prepare line-of-business apps for app protection policies
    4. Implement mobile application management policies in Intune
    5. Manage mobile application management policies in Intune
  12. Deploy and update applications
    1. Deploy applications with Intune
    2. Add apps to Intune
    3. Manage Win32 apps with Intune
    4. Deploy applications with Configuration Manager
    5. Deploying applications with Group Policy
    6. Assign and publish software
    7. Explore Microsoft Store for Business
    8. Implement Microsoft Store Apps
    9. Update Microsoft Store Apps with Intune
    10. Assign apps to company employees
  13. Administer endpoint applications
    1. Manage apps with Intune
    2. Manage Apps on non-enrolled devices
    3. Deploy Microsoft 365 Apps with Intune
    4. Additional Microsoft 365 Apps Deployment Tools
    5. Configure Microsoft Edge Internet Explorer mode
    6. App Inventory Review
  14. Protect identities in Microsoft Entra ID
    1. Explore Windows Hello for Business
    2. Deploy Windows Hello
    3. Manage Windows Hello for Business
    4. Explore Microsoft Entra ID Protection
    5. Manage self-service password reset in Microsoft Entra ID
    6. Implement multi-factor authentication
  15. Enable organizational access
    1. Enable access to organization resources
    2. Explore VPN types and configuration
    3. Explore Always On VPN
    4. Deploy Always On VPN
  16. Implement device compliance
    1. Protect access to resources using Intune
    2. Explore device compliance policy
    3. Deploy a device compliance policy
    4. Explore conditional access
    5. Create conditional access policies
  17. Generate inventory and compliance reports
    1. Report enrolled devices inventory in Intune
    2. Monitor and report device compliance
    3. Build custom Intune inventory reports
    4. Access Intune using Microsoft Graph API
  18. Deploy device data protection
    1. Explore Windows Information Protection
    2. Plan Windows Information Protection
    3. Implement and use Windows Information Protection
    4. Explore Encrypting File System in Windows client
    5. Explore BitLocker
  19. Manage Microsoft Defender for Endpoint
    1. Explore Microsoft Defender for Endpoint
    2. Examine key capabilities of Microsoft Defender for Endpoint
    3. Explore Windows Defender Application Control and Device Guard
    4. Explore Microsoft Defender Application Guard
    5. Examine Windows Defender Exploit Guard
    6. Explore Windows Defender System Guard
  20. Manage Microsoft Defender in Windows client
    1. Explore Windows Security Center
    2. Explore Windows Defender Credential Guard
    3. Manage Microsoft Defender Antivirus
    4. Manage Windows Defender Firewall
    5. Explore Windows Defender Firewall with Advanced Security
  21. Manage Microsoft Defender for Cloud Apps
    1. Explore Microsoft Defender for Cloud Apps
    2. Planning Microsoft Defender for Cloud Apps
    3. Implement Microsoft Defender for Cloud Apps
  22. Assess deployment readiness
    1. Examine deployment guidelines
    2. Explore readiness tools
    3. Assess application compatibility
    4. Explore tools for application compatibility mitigation
    5. Prepare network and directory for deployment
    6. Plan a pilot
  23. Deploy using the Microsoft Deployment Toolkit
    1. Evaluate traditional deployment methods
    2. Set up the Microsoft Deployment Toolkit for client deployment
    3. Manage and deploy images using the Microsoft Deployment Toolkit
  24. Deploy using Microsoft Configuration Manager
    1. Explore client deployment using Configuration Manager
    2. Examine deployment components of Configuration Manager
    3. Manage client deployment using Configuration Manager
    4. Plan in-place upgrades using Configuration Manager
  25. Deploy Devices using Windows Autopilot
    1. Use Autopilot for modern deployment
    2. Examine requirements for Windows Autopilot
    3. Prepare device IDs for Autopilot
    4. Implement device registration and out-of-the-box customization
    5. Examine Autopilot scenarios
    6. Troubleshoot Windows Autopilot
  26. Implement dynamic deployment methods
    1. Examine subscription activation
    2. Deploy using provisioning packages
    3. Use Windows Configuration Designer
    4. Use Microsoft Entra join with automatic MDM enrollment
  27. Plan a transition to modern endpoint management
    1. Explore using co-management to transition to modern endpoint management
    2. Examine prerequisites for co-management
    3. Evaluate modern management considerations
    4. Evaluate upgrades and migrations in modern transitioning
    5. Migrate data when modern transitioning
    6. Migrate workloads when modern transitioning
  28. Manage Windows 365
    1. Explore Windows 365
    2. Configure Windows 365
    3. Administer Windows 365
  29. Manage Azure Virtual Desktop
    1. Examine Azure Virtual Desktop
    2. Explore Azure Virtual Desktop
    3. Configure Azure Virtual Desktop
    4. Administer Azure Virtual Desktop
Class Materials

Each student will receive a comprehensive set of materials, including course notes and all the class examples.

Class Prerequisites

Experience in the following is required for this Microsoft 365 Administration class:

  • Basic understanding of networking fundamentals.
  • Familiarity with Windows operating systems and their functionality.
  • Understanding of Active Directory Domain Services (AD DS) principles.
  • Basic knowledge of management tools and technologies like PowerShell.

Experience in the following would be useful for this Microsoft 365 Administration class:

  • Experience with Windows 10 or Windows 11 deployment and management.
  • Prior exposure to Microsoft Azure services.
  • Knowledge of mobile device management (MDM) principles.
  • Understanding of cloud-based identity and authentication services.
Live Public Class
$2,935.10 / student
Please select a class.
Live Private Class
  • Private Class for your Team
  • Live training
  • Online or On-location
  • Customizable
  • Expert Instructors
Request Proposal