ABOUT THIS COURSE

In this course, students learn to plan and execute an endpoint deployment, configuration, and management strategy using Microsoft Intune as the unified endpoint management platform. The course covers preparing identity and device infrastructure with Microsoft Entra ID, enrolling and configuring devices, managing applications, and protecting endpoints and data. Students also explore automation with PowerShell and Microsoft Graph, AI-assisted management with Microsoft Security Copilot, the extended capabilities of the Microsoft Intune Suite, and the delivery of cloud-hosted desktops with Windows 365 and Azure Virtual Desktop. Technologies explored include Microsoft Intune, Microsoft Entra ID, Windows Autopilot, Microsoft Defender for Endpoint, Microsoft Tunnel, Microsoft Cloud PKI, the Microsoft Intune Suite, Windows 365, and Azure Virtual Desktop.

This course prepares you for a Microsoft certification. By passing exam MD-102 Endpoint Administrator you will attain Microsoft 365 Certified: Endpoint Administrator Associate.

Full Time

As a candidate for this course and the associated exam, you have subject matter expertise managing devices and client applications in a Microsoft 365 tenant by using Microsoft Intune. As an endpoint administrator, you collaborate with architects, Microsoft 365 administrators, security administrators, and other workload administrators to plan and implement a modern workplace strategy that meets the business needs of an organization. You are responsible for:

• Implementing solutions for efficient deployment and management of endpoints on various operating systems, platforms, and device types.
• Implementing and managing endpoints at scale by using Microsoft Intune, Microsoft Intune Suite, Windows Autopilot, Microsoft Security Copilot, Microsoft Defender for Endpoint, Microsoft Entra ID, Azure Virtual Desktop, and Windows 365.
• Implementing identity, security, access, policies, updates, and apps for endpoints.

5 Days

35 Hours

Learning Path: Prepare infrastructure for devices using Microsoft Intune and Microsoft Entra ID

This learning path covers the essential infrastructure for cloud-based device management using Microsoft Intune and Microsoft Entra ID. You'll learn how to configure identity, device registration, and policy targeting, manage device authentication and trust models, plan and troubleshoot device enrolment across major platforms, and deploy Windows devices using Windows Autopilot.

Modules

• Understand endpoint management strategies and Microsoft Intune
• Configure Microsoft Entra ID for device and policy management
• Administer device identity and authentication using Microsoft Entra ID
• Plan and implement device enrollment using Microsoft Intune
• Deploy Windows devices using Windows Autopilot

Learning Path: Manage and maintain devices using Microsoft Intune

Learn how to manage devices with Microsoft Intune after enrolment. This learning path covers device configuration and compliance policies, policy migration, Windows updates, device monitoring through Endpoint Analytics and reporting, and troubleshooting using diagnostic tools and automated remediation.

Modules

• Configure device profiles and policy management using Microsoft Intune
• Monitor and maintain devices using Microsoft Intune
• Manage Windows updates and lifecycle using Microsoft Intune
• Troubleshoot device and policy issues using Microsoft Intune

Learning Path: Manage applications using Microsoft Intune

Learn how to deploy, manage, and secure applications with Microsoft Intune. This learning path covers deploying business, web, store, and Microsoft 365 apps, implementing app protection and configuration policies, managing the application lifecycle, and monitoring app performance. You'll also learn to use the Enterprise App Catalog to publish, configure, and update Win32 applications with minimal packaging effort.

Modules

• Deploy and manage applications using Microsoft Intune
• Implement application protection and security using Microsoft Intune
• Manage application lifecycle and user experience using Microsoft Intune
• Monitor and optimise application performance using Microsoft Intune
• Manage Enterprise App Catalogue applications

Learning Path: Protect devices using Microsoft Intune

This learning path teaches you how to secure managed devices with Microsoft Intune and Microsoft Defender. You'll learn to integrate Defender for Endpoint, implement device encryption, configure advanced threat protection, enforce compliance and Conditional Access policies, and monitor device security. It also covers secure mobile access with Microsoft Tunnel and certificate management using Microsoft Cloud PKI.

Modules

• Implement endpoint security with Microsoft Defender and Microsoft Intune
• Implement device encryption and security policies using Microsoft Intune
• Implement advanced threat protection using Microsoft Intune and Microsoft Defender
• Enforce compliance and remediate security issues by using Microsoft Intune
• Secure mobile access using Microsoft Tunnel
• Implement Microsoft Cloud PKI

Learning Path: Automate and optimise endpoint management using Microsoft Intune

Learn how to automate, scale, and optimise endpoint management with Microsoft Intune, PowerShell, Microsoft Graph, and Copilot. This learning path covers automating routine Intune tasks, leveraging Copilot for policy creation and troubleshooting, and using Endpoint Analytics and Proactive Remediations to monitor and improve device performance, application reliability, and battery health at scale.

Modules

• Automate endpoint management using PowerShell and Microsoft Graph
• Optimise device management using AI and Copilot tools
• Monitor and optimise endpoint performance using Microsoft Intune

Learning Path: Support operational excellence and readiness using Microsoft Intune

Learn how to keep Microsoft Intune operationally healthy and production-ready. This learning path covers reporting and data visibility, including reports, API exports, and Power BI dashboards; role-based access control (RBAC) with built-in/custom roles, scope tags, and delegated administration; and tenant health management, including service monitoring, audit logs, licensing, and operational best practices.

Modules

• Implement reporting and data visibility using Microsoft Intune
• Apply RBAC and admin delegation in Microsoft Intune
• Maintain tenant health and support readiness

Learning Path: Extend endpoint capabilities using Microsoft Intune Suite

This learning path introduces the premium capabilities of Microsoft Intune Suite, including licensing, key components, and their use cases. You will learn to implement Remote Help for secure remote assistance, use Advanced Endpoint Analytics for deeper device insights and performance reporting, and apply Endpoint Privilege Management (EPM) to enable approved elevated actions for standard users while reducing local administrator risks.

Modules

• Explore Microsoft Intune Suite capabilities
• Implement Remote Help scenarios using Microsoft Intune
• Analyse advanced device signals with Microsoft Intune Suite
• Evaluate Endpoint Privilege Management with Microsoft Intune

Learning Path: Deliver cloud-hosted desktops using Azure Virtual Desktop and Windows 365

This learning path teaches you how to deliver and manage cloud-hosted Windows desktops using Windows 365, Azure Virtual Desktop (AVD), and Microsoft Intune. You will learn to provision, configure, and monitor Windows 365 Cloud PCs, explore AVD architecture and management, and compare both solutions to select the right platform for different workloads. The course concludes with integrating AVD session hosts with Intune to enable unified policy, application, and security management across physical and virtual Windows devices.

Modules

• Explore Windows 365 for cloud PC deployment
• Configure and manage Windows 365 with Microsoft Intune
• Explore Azure Virtual Desktop
• Integrate Azure Virtual Desktop with Microsoft Intune