The Microsoft 365 Endpoint Administrator Training (MD-102) is a comprehensive training programme designed to equip learners with the knowledge and skills needed to plan and execute an endpoint deployment strategy using contemporary deployment techniques and implementing update strategies.

Utbildningsmål

• Plan and execute an endpoint deployment strategy.
• Deploy and manage applications.
• Implement and manage security policies.
• Configure and manage Azure Active Directory.
• Manage device authentication.
• Implement and manage mobile application management (MAM) policies.
• Implement device compliance policies.
• Manage Microsoft Defender for Endpoint.
• Deploy using the Microsoft Deployment Toolkit (MDT) and Configuration Manager.
• Manage Windows 365 and Azure Virtual Desktop.

Målgrupp

Both the certification exam and the courseware are based on the Microsoft 365 Endpoint Administrator role.
A Microsoft 365 Endpoint Administrator is responsible for deploying, configuring, protecting, managing, and monitoring devices and client applications in both a Microsoft 365 environment, and On-premises.

They manage identity, security, access, policies, updates, and apps for endpoints, and implement solutions for efficient deployment and management of endpoints on various operating systems, platforms, and device types. They work with other administrators to plan and implement a modern workplace strategy that meets the business needs of an organisation. Candidates for this role must have experience with Azure AD and Microsoft 365 technologies, including Intune, and must have strong skills in deploying, configuring, and maintaining Windows client and non-Windows devices

Förkunskaper

The Modern Desktop Administrator must be familiar with M365 workloads and must have strong skills and experience of deploying, configuring, and maintaining Windows 11 and later, and non-Windows devices.

Innehåll

Module 1: Indroduction

Explore the Enterprise Desktop

• Describe the benefits of Modern Management
• Explain the enterprise desktop life-cycle model
• Describe considerations for planning hardware strategies
• Describe considerations for post-deployment and retirement

Explore Windows Editions

• Explain the differences between the different editions of Windows
• Select the most suitable Windows device for your needs
• Describe the minimum recommended hardware requirements for installing Windows 11

Module 2: Azure Active Directory

Understand Azure Active Directory

• Describe Azure AD
• Compare Azure AD to Active Directory Domain Services (AD DS)
• Describe how Azure AD is used as a directory for cloud apps
• Describe Azure AD Premium P1 and P2
• Describe Azure AD Domain Services

Manage Azure Active Directory identities

• Describe RBAC and user roles in Azure AD
• Create and manage users in Azure AD
• Create and manage groups in Azure AD
• Use Windows PowerShell cmdlets to manage Azure AD
• Describe how you can synchronize objects from AD DS to Azure AD

Module 3: Authenticating and Enrolling Devices

Manage device authentication

• Describe Azure AD join
• Describe Azure AD join prerequisites, limitations and benefits
• Join device to Azure AD
• Manage devices joined to Azure AD

Enroll devices using Microsoft Configuration Manager

• Describe Microsoft Endpoint Manager
• Understand the advantages of managing a client with Configuration Manager
• Deploy the Configuration Manager client
• Monitor the Configuration Manager client
• Manage Configuration Manager devices

Enroll devices using Microsoft Intune

• Prepare Microsoft Intune for device enrollment
• Configure Microsoft Intune for automatic enrollment
• Explain how to enroll Windows, Android and iOS devices in Intune
• Explain when and how to use Intune Enrollment Manager
• Understand how to monitor and perform remote actions on enrolled devices

Module 4: Managing Profiles

Execute device profiles

• Describe the various types of device profiles in Intune
• Explain the difference between built-in and custom profiles
• Create and manage profiles

Oversee device profiles

• Monitor the assignments of profiles
• Understand how profiles are synchronized and how to manually force synchronisation
• Use PowerShell to execute and monitor scripts on devices

Maintain user profiles

• Explain the various user profile types that exist in Windows
• Describe how a user profile works
• Configure user profiles to conserve space
• Explain how to deploy and configure Folder Redirection
• Explain Enterprise State Roaming
• Configure Enterprise State Roaming for Azure AD devices

Module 5: Managing Applications

Execute mobile application management

• Explain Mobile Application Management
• Understand application considerations in MAM
• Explain how to use Configuration Manager for MAM
• Use Intune for MAM
• Implement and manage MAM policies

Deploy and update applications

• Explain how to deploy applications using Intune and Configuration Manager
• Learn how to deploy applications using Group Policy
• Understand Microsoft Store Apps
• Learn how to deploy apps using Microsoft Store Apps
• Learn how to configure Microsoft Store Apps

Administer endpoint applications

• Explain how to manage apps in Intune
• Understand how to manage apps on non-enrolled devices
• Understand how to deploy Microsoft 365 Apps using Intune
• Learn how to configure and manage IE mode in Microsoft Edge
• Learn about app inventory options in Intune

Module 6: Managing Network Access

Protect identities in Active Directory Domain Services

• Describe Windows Hello for Business
• Describe Windows Hello deployment and management
• Describe Azure AD Identity Protection
• Describe and manage self-service password reset in Azure AD
• Describe and manage multi-factor authentication

Enable organisational access

• Describe how you can access corporate resources
• Describe VPN types and configuration
• Describe Always On VPN
• Describe how to configure Always On VPN

Module 7: Device Compliance and Data Protection

Implement device compliance

• Describe device compliance policy
• Deploy a device compliance policy
• Describe conditional access
• Create conditional access policies

Generate inventory and compliance reports

• Generate inventory reports and Compliance reports using Microsoft Intune
• Report and monitor device compliance
• Create custom reports using the Intune Data Warehouse
• Use the Microsoft Graph API for building custom reports

Deploy device data protection

• Describe Windows Information Protection
• Plan for Windows Information Protection usage
• Implement and use Windows Information Protection
• Describe the Encrypting File System (EFS)
• Describe BitLocker

Module 8: Microsoft Defender Across Apps

Manage Microsoft Defender for Endpoint

• Describe Microsoft Defender for Endpoint
• Describe key capabilities of Microsoft Defender for Endpoint
• Describe Microsoft Defender Application Guard
• Describe Microsoft Defender Exploit Guard
• Describe Windows Defender System Guard

Manage Microsoft Defender in Windows client

• Describe Windows Security capabilities
• Describe Windows Defender Credential Guard
• Manage Microsoft Defender Antivirus
• Manage Windows Defender Firewall
• Manage Windows Defender Firewall with Advanced Security

Manage Microsoft Defender for Cloud Apps

• Describe Microsoft Defender for Cloud Apps
• Plan for Microsoft Defender for Cloud Apps usage
• Implement and use Microsoft Defender for Cloud Apps

Module 9: Deployment

Assess deployment readiness

• Describe the guidelines for an effective enterprise desktop deployment
• Explain how to assess the current environment
• Describe the tools that you can use to assess your current environment
• Describe the methods of identifying and mitigating application compatibility issues
• Explain considerations for planning a phased rollout

Deploy using the Microsoft Deployment Toolkit

• Describe the fundamentals of using images in traditional deployment methods
• Describe the key benefits, limitations, and decisions when planning a deployment of - Windows using the Microsoft Deployment Toolkit (MDT)
• Describe how Configuration Manager builds upon MDT and how both can work in harmony
• Explain the different options and considerations when choosing the user interaction experience during deployment and which methods and tools support these experiences

Deploy using Microsoft Configuration Manager

• Describe the capabilities of Configuration Manager
• Describe the key components of Configuration Manager
• Describe how to troubleshoot Configuration Manager deployments

Deploy Devices using Windows Autopilot

• Explain the benefits of modern deployment for new devices
• Describe the process of preparing for an Autopilot deployment
• Describe the process of registering devices in Autopilot
• Describe the different methods and scenarios of Autopilot deployments
• Describe how to troubleshoot common Autopilot issues
• Describe the process of deployment using traditional methods

Implement dynamic deployment methods

• Describe how Subscription Activation works
• Describe the benefits of Provisioning Packages
• Explain how Windows Configuration Designer creates Provisioning Packages
• Describe the benefits of using MDM enrollment with Azure AD join

Module 10: Additional Endpoint Management Systems

Plan a transition to modern endpoint management

• Identify usage scenarios for Azure AD join
• Identify workloads that you can transition to Intune
• Identify prerequisites for co-management
• Identify considerations for transitioning to modern management
• Plan a transition to modern management using existing technologies
• Plan a transition to modern management using Microsoft Intune

Manage Windows 365

• Describe the key features of Windows 365
• Describe the Windows 365 management experience
• Describe the Windows 365 security model
• Describe the Windows 365 deployment options
• Describe the Windows 365 licensing model

Manage Azure virtual desktop

• Describe the key features of Azure Virtual Desktop
• Describe the Azure Virtual Desktop management experience
• Describe the Azure Virtual Desktop security model
• Describe the Azure Virtual Desktop deployment options

 

Kursen levereras genom utbildningspartner: Learning Tree