Course Overview
Explore the Enterprise Desktop
- Describe the benefits of Modern Management.
- Explain the enterprise desktop life-cycle model.
- Describe considerations for planning hardware strategies.
- Describe considerations for post-deployment and retirement.
- Examine benefits of modern management
- Examine the enterprise desktop life-cycle model
- Examine planning and purchasing
- Examine desktop deployment
- Plan an application deployment
- Plan for upgrades and retirement
Explore Windows Editions
- Explain the differences between the different editions of Windows.
- Select the most suitable Windows device for your needs.
- Describe the minimum recommended hardware requirements for installing Windows 11.
- Examine windows client editions and capabilities
- Select client edition
- Examine hardware requirements
Understand Microsoft Entra ID
- Describe Microsoft Entra ID.
- Compare Microsoft Entra ID to Active Directory Domain Services (AD DS).
- Describe how Microsoft Entra ID is used as a directory for cloud apps.
- Describe Microsoft Entra ID P1 and P2.
- Describe Microsoft Entra Domain Services.
- Examine Microsoft Entra ID
- Compare Microsoft Entra ID and Active Directory Domain Services
- Examine Microsoft Entra ID as a directory service for cloud apps
- Compare Microsoft Entra ID P1 and P2 plans
- Examine Microsoft Entra Domain Services
Manage Microsoft Entra identities
- Describe RBAC and use roles in Microsoft Entra ID
- Create and manage users in Microsoft Entra ID
- Create and manager groups in Microsoft Entra ID
- Use Windows PowerShell cmdlets to manager Micrososft Entra ID
- Describe how you can synchronize objects from AD DS to Microsoft Entra ID
- Examine RBAC and user roles in Microsoft Entra ID
- Create and manage users in Microsoft Entra ID
- Create and manager groups in Microsoft Entra ID
- Manager Microsoft Entra objects with Microsoft Graph PowerShell
- Synchronize objects from AD DS to Microsoft Entra ID
Manage device authentication
- Describe Microsoft Entra join
- Describe Microsoft Entra join prerequisites, limiatations, and benefits
- Join device to Microsoft Entra ID
- Manager devices joined to Microsoft Entra ID
- Describe Microsoft Entra join
- Examine Microsoft Entra join prerequisites limitations and benefits
- Join devices to Microsoft Entra ID
- Manager devices joined to Microsoft Entra ID
Enroll devices using MIcrosoft Configuration Manager
- Describe Microsoft Endpoint Manager
- Understand the advantages of managing a client with Configuration Manager
- Deploy the Configuration Manager client
- Monitor the Configuration Manager Client
- Manager Configuration Manager devices
- Deploy the Microsoft Configuration Manager client
- Monitor the Microsoft Configuration Manager client
- Manage the Microsoft Configuration Manager client
Enroll devices using Microsoft Intune
- Prepare Microsoft Intune for device enrollment
- Configure Micrososft Intune for automatic enrollment
- Explain how to enroll Windows, Android and iOS devices in Intune
- Explain when and how to use Intune Enrollment Manager
- Understand how to monitor and perform remote actions on enrolled devices
- Manage mobile device with Intune
- Enable mobile device manager
- Explain considerations for device enrollment
- Manage corporate enrollment policy
- Enroll Windows devices in Intune
- Enroll Android devices in Intune
- Enroll iOS devices in Intune
- Explore device enrollment manager
- Monitor device enrollment
- Manage devices remotely
Execute device profiles
- Describe the various types of device profiles in Intune
- Explain the difference between built-in and custom profiles
- Create and manage profiles
- Explore Intrune device profiles
- Create device profiles
- Create a custom device profile
Oversee device profiles
- Monitor the assignments of profiles
- Understand how profiles are synchronized and how to manually force synchronization
- Use PowerShell to execute and monitor scripts on devices
- Monitor device profiles in Intune
- Manage device sync in Intune
- ​Manage devices in Intune using scripts
Maintain User Profiles
- Explain the various user profile types that exist in Windows
- Describe how a user profile works
- Configure user profiles to conserve space
- Explain how to deploy and configure Folder Redirection
- Explain Enterprise State Roaming
- Configure Enterprise State Roaming for Azure AD device
- Examine user profile
- Explore user profile types
- Examine options for minimizing user profile size
- Deploy and configure folder redirection
- Sync user state with Enterprise State Roaming
- Configure Enterprise State Roaming in Azure
Execute mobile application management
- Explain Mobile Application Management.
- Understand application considerations in MAM.
- Explain how to use Configuration Manager for MAM.
- Use Intune for MAM.
- Implement and manage MAM policies.
- Examine mobile application management
- Examine considerations for mobile application management
- Prepare line-of-business apps for app protection policies
- Implement mobile application management policies in Intune
- Manage mobile application management policies in Intune
Deploy and update applications
- Explain how to deploy applications using Intune and Configuration Manager
- Learn how to deploy applications using Group Policy
- Understand Microsoft Store Apps
- Learn how to deply apps using Microsoft Store Apps
- Learn how to configure Microsoft Store Apps
- Deploy applications with Intune
- Add apps to Intune
- Manage Win32 apps with Intune
- Deploy applications with Configuration Manager
- Deploying applications with Group Policy
- Assign and publish software
- Explore Microsoft Store for Business
- Implement Microsoft Apps
- Update Microsoft Store Apps with Intune
- Assign apps to company employees
Administer endpoint applications
- Explain how to manage apps in Intune.
- Understand how to manage apps on nonenrolled devices.
- Understand how to deploy Microsoft 365 Apps using Intune.
- Learn how to configure and manage IE mode in Microsoft Edge.
- Learn about app inventory options in Intune.
- Manage apps with Intune
- Manage apps on non-enrolled devices
- Deploy Microsoft 365 Apps with Intune
- Additional Microsoft 365 Apps Deployment Tools
- Configure Microsoft Edge Internet Explorer mode
- App Inventory Review
Protect identities in Microsoft Entra ID
Describe Windows Hello for Business
Describe Windows Hello deployment and management
Describe Microsoft Entra ID Protection
Describe and manage self-service password reset in Microsoft Entra ID
Describe and manage multi-factor authentication
Explore Windows Hello for Business
Deploy Windows Hello
Manage Windows Hellos for Business
Explore Microsoft Entra ID Protection
Manage self-service password reset in MIcrosoft Entra ID
Implement multi-factor authentication
Enable organizational access
Describe how you can access corporate resources
Describe VPN types and configuration
Describe Always On VPN
Describe how to configure Always On VPN
Enable access to organization resources
Explore VPN types and configuration
Explore Always on VPN
Deploy Always on VPN
Implement device compliance
Describe device compliance policy
Deploy a device compliance policy
Describe conditional access
Create conditional access policies
Protect access to resources using Intune
Explore device compliance policy
Deploy a device compliance policy
Explore conditional access
Create conditional access policies
Generate inventory and compliance
Generate inventory reports and Compliance reports using Microsoft Intune
Report and monitor device compliance
Create custom reports using the Intune Data Warehouse
Use the Microsoft Graph API for building custom reports
Report enrolled devices inventory in Intune
Monitor and report device compliance
Build custom Intune inventory reports
Access Intune using MIcrosoft Graph API
Deploy device data protection
Describe Windows Information Protection
Plan for Windows Information Protection usage
Implement and use Windows Information Protection
Describe the Encrypting File System (EFS)
Describe BitLocker
Explore Windows Information Protection
Plan Windows Information Protection
Implement and use Windows Information Protection
Explore Encrypting File System in Windows client
Explore BitLocker
Manage Microsoft Defender for Endpoint
Describe Microsoft Defender for Endpoint
Describe key capabilities of Microsoft Defender for Endpoint
Describe Microsoft Defender Application Guard
Describe Microsoft Defender Exploit Guard
Describe Windows Defender System Guard
Explore Microsoft Defender for Endpoint
Examine key capabilities of Microsoft Defender for Endpoint
Explore Windows Defender Application Control and Device Guard
Explore Microsoft Defender Application Guard
Examine Windows Defender Exploit Guard
Explore Windows Defender System Guard
Manage Microsoft Defender in Windows Client
- Describe Windows Security capabilities
Describe Windows Defender Credential Guard
Manage Microsoft Defender Antivirus
Manage Windows Defender Firewall
Manage Windows Defender Firewall with Advanced Security
Explore Windows Security Center
Explore Windows Defender Credential Guard
Manage Microsoft Defender Antivirus
Manage Windows Defender Firewall
Explore Windows Defender Firewall with Advanced Security
Manage Microsoft Defender for Cloud Apps
- Describe Microsoft Defender for Cloud Apps
Plan for Microsoft Defender for Cloud Apps usage
Implement and use Microsoft Defender for Cloud Apps
Explore Microsoft Defender for Cloud Apps
Planning Microsoft Defender for Cloud Apps
Implement Microsoft Defender for Cloud Apps
Assess deployment readiness
- Describe the guidelines for an effective enterprise desktop deployment
Explain how to assess the current environment
Describe the tools that you can use to assess your current environment
Describe the methods of identifying and mitigating application compatibilty issues
Explain considerations for planning a phased rollout
Examine deployment guidelines
Explore readiness tools
Assess application compatibility
Explore tools for application complatibility mitigation
Prepare network and directory for deployment
Plan a pilot
Deploy using the Microsoft Deployment Toolkit
- Describe the fundamentals of using images in traditional deployment methods.
Describe the key benefits, limitations, and decisions when planning a deployment of – Windows using Microsoft Deployment Toolkit (MDT).
Describe how Configuration Manager builds upon MDT and how both can work in harmony.|
Explain the different options and considerations when choosing the user interaction experience during deployment, and which methods and
tools support these experiences.
Evaluate traditional deployment methods
Set up the Microsoft Deployment Toolkit for client deployment
Manage and deploy images using the Microsoft Deployment Toolkit
Deploy using Microsoft Configuration Manager
- Describe the capabilities of Configuration Manager.
Describe the key components of Configuration Manager.
Describe how to troubleshoot Configuration Manager deployments.
Explore client deployment using Configuration Manager
Examine deployment components of Configuration Manager
Manage client deployment using Configuration Manager
Plan in place upgrades using Configuration Manager
Deploy Devices using Windows Autopilot
Implement dynamic deployment methods
Plan a transition to modern endpoint management
Manage Windows 365
Manage Azure Virtual Desktop
