Microsoft Intune: Modern Endpoint Management and Security Training Course

Module 1: Introduction and Core Concepts

• Defining Microsoft Intune / Endpoint Manager
• Integration with Configuration Manager (co-management, cloud attach)
• Advantages of modern endpoint management
• Foundational elements: devices, applications, data, users
• Intune architecture, roles, and licensing

Module 2: Identity and Access Control

• Core concepts of Microsoft Entra ID / Azure AD
• Synchronizing from AD to Entra ID (Azure AD Connect)
• Device join methods: Azure AD Join, Hybrid AD Join
• Intune roles, groups, and permission management
• Conditional Access and its interplay with Intune

Module 3: Device Enrollment Strategies

• Enrollment approaches (Windows, iOS, Android, macOS)
• Windows Autopilot: concepts, profiles, and workflows
• Automated enrollment via DEP (Apple) and Zero-touch (Android)
• Managing personal (BYOD) versus corporate devices
• Distinguishing MDM from MAM (Mobile Device Management / Mobile Application Management)

Module 4: Configuration and Compliance Policies

• Defining device compliance policies
• Setting configuration policies (Configuration Profiles)
• Applying device restrictions and security controls
• Implementing App Protection Policies
• Conditional access rules driven by compliance status

Module 5: Application Management

• Categorizing Intune applications: Line of Business (LOB), Win32, Microsoft Store, web apps
• Managing app deployment, installation, removal, and updates
• Safeguarding application data
• Separating application policies from corporate data
• Managing licenses and assignments

Module 6: Updates and Patching

• Integrating Windows Update for Business with Intune
• Managing feature and quality update policies
• Implementing deployment ring models
• Monitoring update status
• Strategizing updates in corporate settings

Module 7: Security and Protection Measures

• Integrating Microsoft Defender for Endpoint with Intune
• Applying Microsoft security baselines and templates
• Threat mitigation (antimalware, firewall, etc.)
• Device encryption (BitLocker) and encryption policies
• Managing certificates and secure VPN/Wi-Fi profiles

Module 8: Monitoring, Reporting, and Troubleshooting

• Utilizing dashboards and default reports
• Analyzing logs and diagnostics (e.g., enrollment errors, policy management)
• Leveraging Intune support and troubleshooting tools
• Using administration portals (device portal, company portal)
• Managing alerts and notifications

Module 9: Advanced Scenarios and Integrations

• Co-management with Configuration Manager
• Managing devices without full enrollment (“Autopilot for existing devices”)
• Integrating with other Microsoft services (Defender, Azure, Copilot, etc.)
• Automation using PowerShell and Graph API
• Establishing governance strategies and enterprise-scale structures
• Best practices for design and implementation

Summary and Next Steps