Microsoft 365 Administration
Microsoft 365 Endpoint Administrator (MD‑102T00)
Deploy, configure, secure and manage devices with Microsoft 365.
5 daysIntermediate30 modulesMD‑102T00Microsoft 365 Certified: Modern Desktop Administrator Associate
About this course
Deploy, configure, secure and manage devices with Microsoft 365. Over five days you will manage identities in Entra ID, enrol devices, apply configuration and compliance policies, deploy apps and protect endpoints, preparing for MD-102 and the Modern Desktop Administrator Associate certification.
Curriculum
30 modules
- Examine benefits of modern management
- Examine the enterprise desktop life-cycle model
- Examine planning and purchasing
- Examine desktop deployment
- Plan an application deployment
- Plan for upgrades and retirement
- Examine Windows client editions and capabilities
- Select client edition
- Examine hardware requirements
- Examine Microsoft Entra ID
- Compare Microsoft Entra ID and Active Directory Domain Services
- Examine Microsoft Entra ID as a directory service for cloud apps
- Compare Microsoft Entra ID P1 and P2 plans
- Examine Microsoft Entra Domain Services
- Examine RBAC and user roles in Microsoft Entra ID
- Create and manage users in Microsoft Entra ID
- Create and manage groups in Microsoft Entra ID
- Manage Microsoft Entra objects with Microsoft Graph PowerShell
- Synchronize objects from AD DS to Microsoft Entra ID
- Describe Microsoft Entra join
- Examine Microsoft Entra join prerequisites limitations and benefits
- Join devices to Microsoft Entra ID
- Manage devices joined to Microsoft Entra ID
- Deploy the Microsoft Configuration Manager client
- Monitor the Microsoft Configuration Manager client
- Manage the Microsoft Configuration Manager client
- Manage mobile devices with Intune
- Enable mobile device management
- Explain considerations for device enrollment
- Manage corporate enrollment policy
- Enroll Windows devices in Intune
- Enroll Android devices in Intune
- Enroll iOS devices in Intune
- Explore device enrollment manager
- Monitor device enrollment
- Manage devices remotely
- Explore Intune device profiles
- Create device profiles
- Create a custom device profile
- Monitor device profiles in Intune
- Manage device sync in Intune
- Manage devices in Intune using scripts
- Examine user profile
- Explore user profile types
- Examine options for minimizing user profile size
- Deploy and configure folder redirection
- Sync user state with Enterprise State Roaming
- Configure Enterprise State Roaming in Azure
- Examine mobile application management
- Examine considerations for mobile application management
- Prepare line-of-business apps for app protection policies
- Implement mobile application management policies in Intune
- Manage mobile application management policies in Intune
- Deploy applications with Intune
- Add apps to Intune
- Manage Win32 apps with Intune
- Deploy applications with Configuration Manager
- Deploying applications with Group Policy
- Assign and publish software
- Explore Microsoft Store for Business
- Implement Microsoft Store Apps
- Update Microsoft Store Apps with Intune
- Assign apps to company employees
- Manage apps with Intune
- Manage Apps on non-enrolled devices
- Deploy Microsoft 365 Apps with Intune
- Additional Microsoft 365 Apps Deployment Tools
- Configure Microsoft Edge Internet Explorer mode
- App Inventory Review
- Explore Windows Hello for Business
- Deploy Windows Hello
- Manage Windows Hello for Business
- Explore Microsoft Entra ID Protection
- Manage self-service password reset in Microsoft Entra ID
- Implement multi-factor authentication
- Enable access to organization resources
- Explore VPN types and configuration
- Explore Always On VPN
- Deploy Always On VPN
- Protect access to resources using Intune
- Explore device compliance policy
- Deploy a device compliance policy
- Explore conditional access
- Create conditional access policies
- Report enrolled devices inventory in Intune
- Monitor and report device compliance
- Build custom Intune inventory reports
- Access Intune using Microsoft Graph API
- Explore Windows Information Protection
- Plan Windows Information Protection
- Implement and use Windows Information Protection
- Explore Encrypting File System in Windows client
- Explore BitLocker
- Explore Microsoft Defender for Endpoint
- Examine key capabilities of Microsoft Defender for Endpoint
- Explore Windows Defender Application Control and Device Guard
- Explore Microsoft Defender Application Guard
- Examine Windows Defender Exploit Guard
- Explore Windows Defender System Guard
- Explore Windows Security Center
- Explore Windows Defender Credential Guard
- Manage Microsoft Defender Antivirus
- Manage Windows Defender Firewall
- Explore Windows Defender Firewall with Advanced Security
- Explore Microsoft Defender for Cloud Apps
- Planning Microsoft Defender for Cloud Apps
- Implement Microsoft Defender for Cloud Apps
- Examine deployment guidelines
- Explore readiness tools
- Assess application compatibility
- Explore tools for application compatibility mitigation
- Prepare network and directory for deployment
- Plan a pilot
- Evaluate traditional deployment methods
- Set up the Microsoft Deployment Toolkit for client deployment
- Manage and deploy images using the Microsoft Deployment Toolkit
- Explore client deployment using Configuration Manager
- Examine deployment components of Configuration Manager
- Manage client deployment using Configuration Manager
- Plan in-place upgrades using Configuration Manager
- Use Autopilot for modern deployment
- Examine requirements for Windows Autopilot
- Prepare device IDs for Autopilot
- Implement device registration and out-of-the-box customization
- Examine Autopilot scenarios
- Troubleshoot Windows Autopilot
- Examine subscription activation
- Deploy using provisioning packages
- Use Windows Configuration Designer
- Use Microsoft Entra join with automatic MDM enrollment
- Explore using co-management to transition to modern endpoint management
- Examine prerequisites for co-management
- Evaluate modern management considerations
- Evaluate upgrades and migrations in modern transitioning
- Migrate data when modern transitioning
- Migrate workloads when modern transitioning
- Explore Windows 365
- Configure Windows 365
- Administer Windows 365
- Examine Azure Virtual Desktop
- Explore Azure Virtual Desktop
- Configure Azure Virtual Desktop
- Administer Azure Virtual Desktop
- Discover essentials of Microsoft Intune Suite
- Applying Zero Trust security using the Microsoft Intune Suite
- Implement Endpoint Privilege Management
- Understand enterprise app management
- Explore Advanced Analytics
- Provide Remote Help
- Deploy Microsoft Tunnel for mobile applications
Who it's for
Endpoint and desktop administrators managing Windows and mobile devices.
Before you start
- The Modern Desktop Administrator must be familiar with M365 workloads and must have strong skills and experience of deploying, configuring, and maintaining Windows 11 and later, and non-Windows devices.
Prepares for
Related courses
More in Microsoft 365 Administration →FoundationMS-900T01
Microsoft 365 Fundamentals (MS-900T01/MS-900 Certification Training)
Microsoft 365 Administration
View course →Intermediate55348
Administering Microsoft Endpoint Configuration Manager (55348)
Microsoft 365 Administration
View course →Intermediate
Administering Microsoft Endpoint Configuration Manager (SCCM) - Intermediate
Microsoft 365 Administration
View course →IntermediateMS-700T00
Manage Microsoft Teams (MS-700T00)
Microsoft 365 Administration
View course →Intermediate55399
Microsoft Intune: Implementing and Managing Devices (55399)
Microsoft 365 Administration
View course →FoundationMS-102T00
MS-102T00 Microsoft 365 Administrator Essentials
Microsoft 365 Administration
View course →Let's plan your next step together.
Tell us the course or certification you have in mind and we'll send the outline, upcoming dates, fees and private-team options.