Introduction

Students will learn how to plan and implement an operating system deployment strategy, as well as how to implement an update strategy.

Students will learn key components of management and co-management strategies. This course also covers what it takes to incorporate Microsoft Intune into your organization. Students will also learn about methods for deployment and management of apps and browser-based applications. Students will be introduced to the key concepts of security in modern management including authentication, identities, access, and compliance policies. Students will be introduced to technologies such Azure Active Directory, Azure Information Protection and Windows Defender Advanced Threat Protection, as well as how to leverage them to protect devices and data.

Course Objectives

After completing this course, learners should be able to

• Plan, develop, and implement an Operating System deployment, upgrade, and update strategy.

• Understand the benefits and methods of co-management strategies.

• Plan and implement device enrollment and configuration.

• Manage and deploy applications and plan a mobile application management strategy.

• Manage users and authentication using Azure AD and Active Directory DS.

• Describe and implement methods used to protect devices and data.

Target Audience

• Deploying, configuring, securing, managing, and monitoring devices and client applications in enterprise environments
• Managing identity, access, policies, updates, and applications across modern endpoints
• Collaborating with Microsoft 365 Enterprise Administrators to design and implement device strategies aligned with business needs
• Working with Microsoft 365 workloads and cloud-based services
• Deploying, configuring, and maintaining Windows 10 and non-Windows devices
• Focusing on cloud management technologies rather than traditional on-premises solutions

Course Outlines

Day 1: Deployment Strategy & Windows 10 Planning

• Planning an Operating System Deployment Strategy
• The Enterprise Desktop
• Assessing Deployment Readiness
• Deployment Tools & Strategies
• Implementing Windows 10
• Upgrading Devices to Windows 10

Day 2: Deployment, Migration & Imaging

• Deploying New Devices and Refreshing
• Migrating Devices to Windows 10
• Alternate Deployment Methods
• Imaging Considerations

Day 3: Windows 10 Updates & Analytics

• Managing Updates for Windows 10
• Updating Windows 10
• Windows Update for Business
• Introduction to Windows Analytics

Day 4: Device Enrollment & Intune Management

• Device Enrollment
• Device Management Options
• Microsoft Intune Overview
• Managing Intune Device Enrollment and Inventory
• Managing Devices with Intune
• Configuring Device Profiles
• Managing User Profiles
• Monitoring Devices

Day 5: Applications, Identity & Security

• Application Management
• Mobile Application Management (MAM)
• Deploying and Updating Applications
• Administering Applications
• Application Inventory and License Management
• Azure Active Directory Overview
• Managing Identities in Azure AD
• Identity Protection in Azure AD
• Device Authentication Management
• Device Access and Compliance Management
• Device Compliance Policies
• Device Data Protection
• Windows Defender ATP Management
• Windows Defender in Windows 10
• Security Capabilities and Device Protection
• Windows Defender Settings Deployment and Management