Microsoft Intune: Modern Endpoint Management and Security Training Course

Module 1: Introduction and Core Concepts

• Defining Microsoft Intune and Endpoint Manager
• Integration with Configuration Manager (co-management, cloud attach)
• Advantages of modern endpoint management strategies
• Fundamental elements: devices, applications, data, and users
• Intune architecture, administrative roles, and licensing models

Module 2: Identity and Access Management

• Core concepts of Microsoft Entra ID and Azure AD
• Directory synchronization from AD to Entra ID (via Azure AD Connect)
• Device registration types: Azure AD Join and Hybrid AD Join
• Managing roles, groups, and permissions within Intune
• Implementing Conditional Access and its synergy with Intune

Module 3: Device Enrollment Strategies

• Enrollment methodologies for Windows, iOS, Android, and macOS
• Windows Autopilot: underlying concepts, profile configurations, and workflows
• Automated enrollment processes using DEP (Apple) and Zero-touch (Android)
• Distinguishing between personal (BYOD) and corporate device management
• Comparing MDM and MAM (Mobile Device Management vs. Mobile Application Management)

Module 4: Configuration and Compliance Policies

• Establishing device compliance standards
• Defining configuration policies (Configuration Profiles)
• Applying device restrictions and security controls
• Implementing App Protection Policies
• Linking Conditional Access policies to compliance status

Module 5: Application Management

• Classifying applications in Intune: Line of Business (LOB), Win32, Microsoft Store, and web apps
• Processes for deploying, installing, removing, and updating applications
• Safeguarding application data
• Managing application policies versus corporate data integrity
• Overseeing license allocation and user assignments

Module 6: Updates and Patch Management

• Aligning Windows Update for Business with Intune
• Managing feature and quality update policies
• Utilizing deployment ring models
• Tracking and monitoring update status
• Strategizing update rollouts in enterprise settings

Module 7: Security and Protection

• Enhancing security via Microsoft Defender for Endpoint and Intune integration
• Applying Microsoft security baselines and templates
• Implementing threat protections (antimalware, firewall configurations)
• Managing device encryption (BitLocker) and related policies
• Handling certificate management and secure VPN/Wi-Fi profiles

Module 8: Monitoring, Reporting, and Troubleshooting

• Utilizing dashboards and standard reports
• Analyzing logs and diagnostics (e.g., enrollment issues, policy management)
• Leveraging built-in support and troubleshooting tools in Intune
• Navigating administrative portals (device portal, company portal)
• Configuring alerts and notifications

Module 9: Advanced Scenarios and Integrations

• Implementing co-management with Configuration Manager
• Managing existing devices without traditional enrollment (Autopilot scenarios)
• Connecting with other Microsoft services (Defender, Azure, Copilot, etc.)
• Automation techniques using PowerShell and Graph API
• Developing governance strategies and enterprise-scale architectures
• Applying best practices for design and deployment

Summary and Future Directions