Microsoft 365 Endpoint Administrator(MD-102T00)

COURSE OUTLINE

Module 1: Explore the Enterprise Desktop

This module covers modern endpoint management and enterprise desktop lifecycle concepts. It teaches the stages of the lifecycle (planning, deployment, maintenance) and provides a foundation for future learning.

Lessons

• Introduction
• Examine benefits of modern management
• Examine the enterprise desktop life-cycle model
• Examine planning and purchasing
• Examine desktop deployment
• Plan an application deployment
• Plan for upgrades and retirement
• Knowledge check
• Summary

Module 2: Explore Windows Editions

This module covers Windows OS editions, features, and installation methods. Learners gain a deeper understanding of the available editions and corresponding installation processes.

Lessons

• Introduction
• Examine Windows client editions and capabilities
• Select client edition
• Examine hardware requirements
• Knowledge check
• Summary

Module 3: Manage Azure Active Directory identities

This module teaches how to use Azure AD effectively. You’ll learn about RBAC, user roles, creating and managing users and groups, using PowerShell cmdlets, and synchronizing objects from AD DS to Azure AD.

Lessons

• Introduction
• Examine RBAC and user roles in Azure AD
• Create and manage users in Azure AD
• Create and manage groups in Azure AD
• Manage Azure AD objects with PowerShell
• Synchronize objects from AD DS to Azure AD
• Knowledge check
• Summary

Module 4: Manage device authentication

In this module, you learn about device authentication and management in Azure Active Directory

Lessons

• Introduction
• Describe Azure AD join
• Examine Azure AD join prerequisites limitations and benefits
• Join devices to Azure AD
• Manage devices joined to Azure AD
• Knowledge check
• Summary

Module 5: Enroll devices using Microsoft Configuration Manager

This module introduces students to client deployment options and some of the high-level management and monitoring options that are available using Configuration Manager.

Lessons

• troduction
• Deploy the Microsoft Configuration Manager client
• Monitor the Microsoft Configuration Manager client
• Manage the Microsoft Configuration Manager client
• Knowledge check
• Summary

Module 6: Enroll devices using Microsoft Intune

Students will learn how to configure and setup Intune to more easily manage Windows, Android, and iOS devices.

Lessons

• Introduction
• Manage mobile devices with Intune
• Enable mobile device management
• Explain considerations for device enrollment
• Manage corporate enrollment policy
• Enroll Windows devices in Intune
• Enroll Android devices in Intune
• Enroll iOS devices in Intune
• Explore device enrollment manager
• Monitor device enrollment
• Manage devices remotely
• Knowledge check
• Summary

Module 7: Execute device profiles

Students learn about the various types of device profiles, and how to create and manage them.

Lessons

• Introduction
• Explore Intune device profiles
• Create device profiles
• Create a custom device profile
• Knowledge check
• Summary

Module 8: Oversee device profiles

This module introduces students to monitoring profiles to ensure correct assignments and resolving conflicts when multiple profiles are applied.

Lessons

• Introduction
• Monitor device profiles in Intune
• Manage device sync in Intune
• Manage devices in Intune using scripts
• Knowledge check
• Summary

Module 9: Maintain user profiles

Students learn about the benefits of various Windows user profiles, how to manage them, and how to facilitate profile data synchronization across multiple devices.

Lessons

• Introduction
• Examine user profile
• Explore user profile types
• Examine options for minimizing user profile size
• Deploy and configure folder redirection
• Sync user state with Enterprise State Roaming
• Configure Enterprise State Roaming in Azure
• Knowledge check
• Summary

Module 10: Execute mobile application management

This module introduces Mobile Application Management (MAM). Students will learn about considerations for implementing MAM and will be introduced to the management of MAM using Intune and Configuration Manager.

Lessons

• Introduction
• Examine mobile application management
• Examine considerations for mobile application management
• Prepare line-of -business apps for app protection policies
• Implement mobile application management policies in Intune
• Manage mobile application management policies in Intune
• Knowledge check
• Summary

Module 11: Deploy and update applications

In this module, you’ll master deploying applications using Intune, Configuration Manager, Group Policy, and Microsoft Store Apps. These powerful tools and techniques will equip you to manage and maintain diverse applications across your organization effectively.

Lessons

• Introduction
• Deploy applications with Intune
• Add apps to Intune
• Manage Win32 apps with Intune
• Deploy applications with Configuration Manager
• Deploying applications with Group Policy
• Assign and publish software
• Explore Microsoft Store for Business
• Implement Microsoft Store Apps
• Update Microsoft Store Apps with Intune
• Assign apps to company employees
• Knowledge check
• Summary

Module 12: Administer endpoint applications

In this module, you’re introduced to managing apps on Intune managed devices. The module will then conclude with an overview of how to use IE Mode with Microsoft Edge.

Lessons

• Introduction
• Manage apps with Intune
• Manage Apps on non-enrolled devices
• Deploy Microsoft 365 Apps with Intune
• Additional Microsoft 365 Apps Deployment Tools
• Configure Microsoft Edge Internet Explorer mode
• App Inventory Review
• Knowledge check
• Summary

Module 13: Protect identities in Azure Active Directory

This module introduces students to the various authentication methods used to protect identities.

Lessons

• Introduction
• Explore Windows Hello for Business
• Deploy Windows Hello
• Manage Windows Hello for Business
• Explore Azure AD identity protection
• Manage self-service password reset in Azure AD
• Implement multi-factor authentication
• Knowledge check
• Summary

Module 14: Enable organizational access

This module describes how clients can be configured to access organizational resources using a virtual private network (VPN).

Lessons

• Introduction
• Enable access to organization resources
• Explore VPN types and configuration
• Explore Always On VPN
• Deploy Always On VPN
• Knowledge check
• Summary

Module 15: Implement device compliance

This module describes how to use compliance and conditional access policies to help protect access to organizational resources.

Lessons

• Introduction
• Protect access to resources using Intune
• Explore device compliance policy
• Deploy a device compliance policy
• Explore conditional access
• Create conditional access policies
• Knowledge check
• Summary

Module 16: Generate inventory and compliance reports

This module describes how to use Microsoft Endpoint Manager and Power BI to create compliance and custom reports.

Lessons

• Introduction
• Report enrolled devices inventory in Intune
• Monitor and report device compliance
• Build custom Intune inventory reports
• Access Intune using Microsoft Graph API
• Knowledge check
• Summary

Module 17: Deploy device data protection

This module describes how you can use Intune to create and manage WIP policies that manage this protection. The module also covers implementing BitLocker and Encrypting File System.

Lessons

• Introduction
• Explore Windows Information Protection
• Plan Windows Information Protection
• Implement and use Windows Information Protection
• Explore Encrypting File System in Windows client
• Explore BitLocker
• Knowledge check
• Summary

Module 18: Manage Microsoft Defender for Endpoint

This module explores using Microsoft Defender for Endpoint to provide additional protection and monitor devices against threats.

Lessons

• Introduction
• Explore Microsoft Defender for Endpoint
• Examine key capabilities of Microsoft Defender for Endpoint
• Explore Windows Defender Application Control and Device Guard
• Explore Microsoft Defender Application Guard
• Examine Windows Defender Exploit Guard
• Explore Windows Defender System Guard
• Knowledge check
• Summary

Module 19: Assess deployment readiness

Discusses some of the tools that you can use to perform detailed assessments of existing deployments, and describes some of the challenges that you may face.

Lessons

• Introduction
• Examine deployment guidelines
• Explore readiness tools
• Assess application compatibility
• Explore tools for application compatibility mitigation
• Prepare network and directory for deployment
• Plan a pilot
• Knowledge check
• Summary

Module 20: Deploy using the Microsoft Deployment Toolkit

Discusses the shifts from traditional to modern management and where on-premises solutions best fit in today’s enterprise.

Lessons

• Introduction
• Evaluate traditional deployment methods
• Set up the Microsoft Deployment Toolkit for client deployment
• Manage and deploy images using the Microsoft Deployment Toolkit
• Knowledge check
• Summary

Module 21: Deploy using Microsoft Configuration Manager

This module explains the common day to day tasks that Administrators would use Configuration Manager to perform.

Lessons

• Introduction
• Explore client deployment using Configuration Manager
• Examine deployment components of Configuration Manager
• Manage client deployment using Configuration Manager
• Plan in-place upgrades using Configuration Manager
• Knowledge check
• Summary

Module 22: Deploy Devices using Windows Autopilot

Use Autopilot to deploy new hardware or refreshing an existing hardware with the organization’s desired configuration, without using the traditional imaging process.

Lessons

• Introduction
• Use Autopilot for modern deployment
• Examine requirements for Windows Autopilot
• Prepare device IDs for Autopilot
• Implement device registration and out-of-the-box customization
• Examine Autopilot scenarios
• Troubleshoot Windows Autopilot
• Knowledge check
• Summary

Module 23: Implement dynamic deployment methods

Use dynamic provisioning methods such as Subscription Activation, Provisioning packages, and Azure AD join to reconfigure an existing operating system.

Lessons

• Introduction
• Examine subscription activation
• Deploy using provisioning packages
• Use Windows Configuration Designer
• Use Azure AD join with automatic MDM enrollment
• Knowledge check
• Summary

Module 24: Plan a transition to modern endpoint management

Explore considerations and review the planning of transitioning to modern management, focusing on migration and newly provisioned devices.

Lessons

• Introduction
• Explore using co-management to transition to modern endpoint management
• Examine prerequisites for co-management
• Evaluate modern management considerations
• Evaluate upgrades and migrations in modern transitioning
• Migrate data when modern transitioning
• Migrate workloads when modern transitioning
• Knowledge check
• Summary

Module 25: Manage Windows 365

This module teaches managing Microsoft’s cloud-based PC management solution, Windows 365, offering personalized, secure Windows 11 experience from any device. Learn features, setup, management, security, deployment options, and licensing to optimize your environment.

Lessons

• Introduction
• Explore Windows 365
• Configure Windows 365
• Administer Windows 365
• Knowledge check
• Summary

Module 26: Manage Azure Virtual Desktop

Learn to manage Azure Virtual Desktop, a cloud-based VDI solution providing personalized, secure Windows 11 experiences. Understand key features, management, security, and deployment options for optimizing your environment.

Lessons

• Introduction
• Examine Azure Virtual Desktop
• Explore Azure Virtual Desktop
• Configure Azure Virtual Desktop
• Administer Azure Virtual Desktop
• Knowledge check
• Summary