Introduction

As organizations continue to embrace digital transformation and hybrid work environments, effective endpoint management and security have become essential for maintaining operational efficiency and protecting corporate assets. Microsoft Intune and Microsoft Defender provide a comprehensive cloud-based platform for managing devices, enforcing security policies, protecting endpoints, and ensuring compliance across enterprise environments.

This comprehensive 5-day training program, developed by Global Horizon Training Center, equips IT professionals with the knowledge and practical skills required to deploy, configure, manage, secure, monitor, and troubleshoot modern endpoint environments using Microsoft Intune and Microsoft Defender. Through practical demonstrations and hands-on exercises, participants will gain the expertise required to manage device enrollment, identity integration, endpoint security, application deployment, compliance, data protection, monitoring, and troubleshooting using Microsoft's modern endpoint management platform.

Objectives

By the end of this training program, participants will be able to:

• Understand Microsoft Intune architecture and modern endpoint management concepts.
• Configure Microsoft Intune tenant settings and administrative roles.
• Integrate Microsoft Entra ID with Microsoft Intune.
• Implement Windows Autopilot deployment and device enrollment.
• Configure device configuration profiles and compliance policies.
• Implement Conditional Access based on Zero Trust principles.
• Integrate Microsoft Defender for Endpoint with Microsoft Intune.
• Configure endpoint security policies including Microsoft Defender Antivirus, Firewall, Attack Surface Reduction (ASR), and Endpoint Detection and Response (EDR).
• Deploy and manage enterprise applications using Microsoft Intune.
• Implement Microsoft Purview Sensitivity Labels and Endpoint Data Loss Prevention (DLP).
• Monitor endpoint health, security posture, and compliance.
• Troubleshoot deployment, policy, and security-related issues.
• Apply enterprise best practices for endpoint management and security administration.

Target Audience

This training program is designed for:

• Microsoft Intune Administrators
• Microsoft 365 Administrators
• Security Administrators
• System Administrators
• Infrastructure Engineers
• Endpoint Management Engineers
• Cloud Administrators
• Cybersecurity Engineers
• IT Support Engineers
• IT Professionals responsible for endpoint management and security operations

Training Program Outline

Day 1: Microsoft Intune Fundamentals, Tenant Setup & Microsoft Entra ID

• Introduction to Microsoft Intune and Endpoint Management Architecture
• Understanding Mobile Device Management (MDM) vs. Mobile Application Management (MAM)
• Microsoft Intune Licensing and Prerequisites
• Navigating the Microsoft Intune Admin Center
• Configuring Tenant Settings and Validating Readiness
• Exploring Administrative Roles and Permissions
• Implementing Role-Based Access Control (RBAC)
• Assigning and Testing Administrative Access
• Microsoft Entra ID Fundamentals
• Identity Integration with Microsoft Intune
• Understanding Device Identity Types: Entra Joined, Registered, and Hybrid Joined
• Enrollment Prerequisites and Supported Device Scenarios
• Configuring Enrollment Restrictions
• Creating Device and User Groups
• Building Dynamic Membership Rules
• Automating Device Targeting
• Testing Registration Workflows

Day 2: Windows Autopilot Deployment & Device Configuration Profiles

• Windows Autopilot Deployment Concepts and Lifecycle
• Understanding Hardware Hashes and Deployment Preparation
• Creating Deployment Profiles
• Configuring Enrollment Status Page (ESP)
• Assigning Devices to Autopilot Groups
• Uploading Hardware IDs
• Performing Clean Device Provisioning and Enrollment Validation
• Introduction to Configuration Profiles
• Comparing Settings Catalog and Administrative Templates
• Creating Device Restriction Policies
• Configuring Wi-Fi Deployment Profiles
• Applying User Interface Customization Settings
• Understanding Profile Assignment Logic
• Managing Policy Conflicts
• Validation Testing
• Device Configuration Best Practices

Day 3: Compliance Policies & Conditional Access

• Understanding Compliance States and Evaluation Flow
• Creating Compliance Policies for Password Security
• Configuring BitLocker Encryption Validation
• Setting Operating System Version Compliance Requirements
• Compliance Monitoring and Reporting
• Introduction to Conditional Access Architecture
• Applying Zero Trust Access Controls
• Creating Conditional Access Policies Requiring Compliant Devices
• Conditional Access Signals and Decision Engine Processing
• Grant Controls and Session Controls
• Integrating Multi-Factor Authentication (MFA)
• Building Advanced Access Restriction Scenarios
• Configuring Location-Based Access Rules
• Restricting Unmanaged Device Access
• Testing Conditional Access Behavior
• Troubleshooting Policy Evaluation Results

Day 4: Microsoft Defender Integration, Endpoint Security & Application Management

• Integrating Microsoft Defender for Endpoint with Microsoft Intune
• Understanding Unified Endpoint Security Management
• Enabling Service-to-Service Connector Integration
• Configuring Endpoint Onboarding Packages
• Deploying Microsoft Defender Antivirus Security Baselines
• Configuring Microsoft Defender Firewall Policies
• Validating Device Protection Posture
• Reviewing Endpoint Security Status Reports
• Understanding Microsoft Security Baselines
• Configuring Endpoint Security Policies
• Microsoft Store Application Integration
• Understanding Win32 Application Packaging and Deployment
• Creating Application Deployment Assignments
• Configuring Install and Uninstall Commands
• Deploying Applications to Target User and Device Groups
• Monitoring Application Deployment Status
• Configuring Attack Surface Reduction (ASR) Rules
• Introduction to Endpoint Detection and Response (EDR)
• Implementing Endpoint Hardening Best Practices
• Validating Endpoint Security Configuration
• Troubleshooting Endpoint Security Policies

Day 5: Data Protection, Monitoring, Reporting & Advanced Troubleshooting

• Introduction to Microsoft Purview
• Understanding Data Classification Concepts
• Sensitivity Labels Fundamentals
• Creating and Configuring Sensitivity Labels
• Publishing Label Policies to Users and Groups
• Applying and Testing Label Enforcement
• Understanding Endpoint Data Loss Prevention (DLP)
• Configuring Endpoint DLP Policies
• Validating Protection and Data Governance Scenarios
• Navigating Microsoft Intune Reporting Dashboards
• Understanding Intune Management Extension Logs
• Collecting and Analyzing Device Diagnostics
• Identifying Common Enrollment and Deployment Failures
• Reviewing Microsoft Defender Security Alerts
• Investigating Compliance and Policy Deployment Issues
• Validating Conditional Access Reporting Results
• Performing End-to-End Troubleshooting Exercises
• Reviewing Operational Best Practices for Enterprise Endpoint Management
• Final Practical Hands-on Lab
• Course Review and Q&A