MD-102: Microsoft 365 Endpoint Administrator

Course Description:

In the MD-102: Microsoft 365 Endpoint Administrator course, students will learn to plan and execute an endpoint deployment strategy using contemporary deployment techniques and implementing update strategies.

The course introduces essential elements of modern management, co-management approaches, and Microsoft Intune integration. It covers app deployment, management of browser-based applications, and key security concepts such as authentication, identities, access, and compliance policies. Technologies like Microsoft Entra ID, Azure Information Protection, and Microsoft Defender for Endpoint are explored to protect devices and data.

Who Should Attend?

The Microsoft 365 Endpoint Administrator is responsible for deploying, configuring, securing, managing, and monitoring devices and client applications in a corporate setting. Their duties include managing identity, access, policies, updates, and apps.

They work alongside the M365 Enterprise Administrator to develop and execute a device strategy that aligns with the requirements of a modern organization. Microsoft 365 Endpoint Administrators should be well-versed in M365 workloads and possess extensive skills and experience in deploying, configuring, and maintaining Windows 11 and later, as well as non-Windows devices. Their role emphasizes cloud services over on-premises management technologies.

Module 1 - Exploring the Enterprise Desktop
Examining benefits of modern management
Examining the enterprise desktop life-cycle model
Examining planning and purchasing
Examining desktop deployment
Planning an application deployment
Planning for upgrades and retirement

Module 2 - Exploring Windows Editions
Examining Windows client editions and capabilities
Selecting client edition
Examining hardware requirements

Module 3 - Understand Microsoft Entra ID
Examining Microsoft Entra ID
Comparing Microsoft Entra ID and Active Directory Domain Services
Examining Microsoft Entra ID as a directory service for cloud apps
Comparing Microsoft Entra ID P1 and P2 plans
Examining Microsoft Entra Domain Services

Module 4 - Manage Microsoft Entra identities
Examining RBAC and user roles in Microsoft Entra ID
Creating and managing users in Microsoft Entra ID
Creating and managing groups in Microsoft Entra ID
Managing Microsoft Entra objects with PowerShell
Synchronize objects from AD DS to Microsoft Entra ID

Module 5 - Manage device authentication
Describe Microsoft Entra join
Examining Microsoft Entra join prerequisites limitations and benefits
Join devices to Microsoft Entra ID
Manage devices joined to Microsoft Entra ID

Module 6 - Enroll devices using Microsoft Configuration Manager
Deploy the Microsoft Configuration Manager client
Monitor the Microsoft Configuration Manager client
Manage the Microsoft Configuration Manager client

Module 7 - Enroll devices using Microsoft Intune
Manage mobile devices with Intune
Enable mobile device management
Explain considerations for device enrollment
Manage corporate enrollment policy
Enroll Windows devices in Intune
Enroll Android devices in Intune
Enroll iOS devices in Intune
Exploring device enrollment manager
Monitor device enrollment
Manage devices remotely

Module 8 - Execute device profiles
Exploring Intune device profiles
Create device profiles
Create a custom device profile

Module 9 - Oversee device profiles
Monitor device profiles in Intune
Manage device sync in Intune
Manage devices in Intune using scripts

Module 10 - Maintain user profiles
Examining user profile
Exploring user profile types
Examining options for minimizing user profile size
Deploy and configure folder redirection
Sync user state with Enterprise State Roaming
Configure Enterprise State Roaming in Azure

Module 11 - Execute mobile application management
Examining mobile application management
Examining considerations for mobile application management
Prepare line-of-business apps for app protection policies
Implement mobile application management policies in Intune
Manage mobile application management policies in Intune

Module 12 - Deploy and update applications
Deploy applications with Intune
Add apps to Intune
Manage Win32 apps with Intune
Deploy applications with Configuration Manager
Deploying applications with Group Policy
Assign and publish software
Exploring Microsoft Store for Business
Implement Microsoft Store Apps
Update Microsoft Store Apps with Intune
Assign apps to company employees

Module 13 - Administer endpoint applications
Manage apps with Intune
Manage Apps on non-enrolled devices
Deploy Microsoft 365 Apps with Intune
Additional Microsoft 365 Apps Deployment Tools
Configure Microsoft Edge Internet Exploringr mode
App Inventory Review

Module 14 - Protect identities in Microsoft Entra ID
Exploring Windows Hello for Business
Deploy Windows Hello
Manage Windows Hello for Business
Exploring Microsoft Entra ID Protection
Manage self-service password reset in Microsoft Entra ID
Implement multi-factor authentication

Module 15 - Enable organizational access
Enable access to organization resources
Exploring VPN types and configuration
Exploring Always On VPN
Deploy Always On VPN

Module 16 - Implement device compliance
Protect access to resources using Intune
Exploring device compliance policy
Deploy a device compliance policy
Exploring conditional access
Create conditional access policies

Module 17 - Generate inventory and compliance reports
Report enrolled devices inventory in Intune
Monitor and report device compliance
Build custom Intune inventory reports
Access Intune using Microsoft Graph API

Module 18 - Deploy device data protection
Exploring Windows Information Protection
Plan Windows Information Protection
Implement and use Windows Information Protection
Exploring Encrypting File System in Windows client
Exploring BitLocker

Module 19 - Manage Microsoft Defender for Endpoint
Exploring Microsoft Defender for Endpoint
Examining key capabilities of Microsoft Defender for Endpoint
Exploring Windows Defender Application Control and Device Guard
Exploring Microsoft Defender Application Guard
Examining Windows Defender Exploit Guard
Exploring Windows Defender System Guard

Module 20 - Manage Microsoft Defender in Windows client
Exploring Windows Security Center
Exploring Windows Defender Credential Guard
Managing Microsoft Defender Antivirus
Managing Windows Defender Firewall
Exploring Windows Defender Firewall with Advanced Security

Module 21 - Manage Microsoft Defender for Cloud Apps
Exploring Microsoft Defender for Cloud Apps
Planning Microsoft Defender for Cloud Apps
Implement Microsoft Defender for Cloud Apps

Module 22 - Assess deployment readiness
Examining deployment guidelines
Exploring readiness tools
Assess application compatibility
Exploring tools for application compatibility mitigation
Prepare network and directory for deployment
Planning a pilot

Module 23 - Deploy using the Microsoft Deployment Toolkit
Evaluating traditional deployment methods
Setting up the Microsoft Deployment Toolkit for client deployment
Manage and deploy images using the Microsoft Deployment Toolkit

Module 24 - Deploy using Microsoft Configuration Manager
Exploring client deployment using Configuration Manager
Examining deployment components of Configuration Manager
Managing client deployment using Configuration Manager
Plan in-place upgrades using Configuration Manager

Module 25 - Deploy Devices using Windows Autopilot
Use Autopilot for modern deployment
Examining requirements for Windows Autopilot
Preparing device IDs for Autopilot
Implementing device registration and out-of-the-box customization
Examining Autopilot scenarios
Troubleshoot Windows Autopilot

Module 26 - Implement dynamic deployment methods
Examining subscription activation
Deploy using provisioning packages
Use Windows Configuration Designer
Use Microsoft Entra join with automatic MDM enrollment

Module 27 - Plan a transition to modern endpoint management
Exploring using co-management to transition to modern endpoint management
Examining prerequisites for co-management
Evaluating modern management considerations
Evaluating upgrades and migrations in modern transitioning
Migrating data when modern transitioning
Migrating workloads when modern transitioning

Module 28 - Manage Windows 365
Exploring Windows 365
Configure Windows 365
Administer Windows 365

Module 29 - Manage Azure Virtual Desktop
Examining Azure Virtual Desktop
Exploring Azure Virtual Desktop
Configure Azure Virtual Desktop
Administer Azure Virtual Desktop

We offer live-instructor group training classes for your team.

Upskill your team from the comfort of your office or online.

Benefits of Group Training Include:

• Experienced Professional Instructor Trains Your Team
• Content Focused On Your Team's Needs
• Convenient Scheduling and Class Setup
• Significant Per/Student Cost Savings
• Online, On-Site and Blended Options Available

Get A Free Consultation