Microsoft 365 Endpoint Administrator

Microsoft 365 Endpoint Administrator (MD-102) Overview:

The Microsoft 365 Endpoint Administrator (MD-102) course is designed to equip professionals with the expertise needed for effective management and security of various endpoints in a modern corporate environment.

This course is particularly beneficial for those who are already familiar with Microsoft 365 workloads and possess skills in deploying, configuring, and maintaining environments based on Windows 11 and beyond, as well as managing non-Windows devices. Participants will gain insights into the nuances of enterprise-level device and application management, ensuring they can adeptly handle real-world challenges in diverse IT landscapes.

As part of this comprehensive training, learners will delve into the advanced methodologies of endpoint management pertinent to today’s fast-evolving technological space. The curriculum encompasses in-depth exploration of cutting-edge deployment strategies, effective update management, and the intricacies of co-management and integration with Microsoft Intune.

Essential themes such as application deployment, managing applications through web browsers, and robust security protocols are thoroughly covered.

Participants will explore key technologies including Azure Active Directory, Azure Information Protection, and Microsoft Defender for Endpoint, gaining the ability to secure both devices and data against emerging threats. This course is an invaluable resource for those aiming to excel in the field of endpoint administration within Microsoft 365-centric environments.

Prerequisites

Before attending this course, students must have:

• Strong technical skills installing, maintaining, and troubleshooting the Windows 10 OS or later
• Strong understanding of computer networking, client security, and application concepts
• Experience using Active Directory Domain Services
• Strong skills and experience in deploying, configuring, and maintaining Windows client and non-Windows devices.

Audience

As a candidate for this exam, you have subject matter expertise managing devices and client applications in a Microsoft 365 tenant by using Microsoft Intune. You’re responsible for:

• Implementing solutions for efficient deployment and management of endpoints on various operating systems, platforms, and device types.
• Implementing and managing endpoints at scale by using Microsoft Intune, Microsoft Intune Suite, Windows Autopilot, Microsoft Copilot for Security, Microsoft Defender for Endpoint, Microsoft Entra ID, Azure Virtual Desktop, and Windows 365.
• Implementing identity, security, access, policies, updates, and apps for endpoint.

Microsoft 365 Endpoint Administrator (MD-102) Outline

Explore Modern Management

This learning path is designed to provide a comprehensive understanding of enterprise desktops, Windows editions, and Microsoft Entra ID (Formerly Azure AD). It includes exploring various Windows editions, including their features and installation methods. It delves into Microsoft Entra ID (Formerly Azure AD), highlighting its similarities and differences with AD DS and how to synchronize the two. Furthermore, learners will better understand managing Microsoft Entra identities. Overall, this learning path equips learners with the necessary knowledge and skills to effectively support enterprise desktops and manage Microsoft Entra (Formerly Azure AD) identities.

Modules

• Understand Azure Entra ID (Entra ID) (Formerly Azure AD)
• Manage Azure Entra ID (Entra ID) (Formerly Azure AD) identities

Labs:

• Managing identities in Azure Entra ID (Formerly Azure AD)
• Synchronizing Identities by using Azure AD Connect

Execute Device Enrollment

Modules:

• Manage Device Authentication
• Enroll devices using Microsoft Endpoint Configuration Manager
• Enroll devices using Microsoft Intune

Labs:

• Configuring and managing Azure AD join
• Managing Azure AD device registration
• Managing Device Enrollment into Intune
• Enrolling Devices into Intune

Configure Profiles for Users and Devices

Modules:

• Execute Device Profiles
• Oversee Device Profiles
• Maintain User Profiles

Labs:

• Creating and Deploying Configuration Profiles
• Using a Configuration Profile to set up Kiosk mode
• Using a Configuration Profile to configure iOS and iPadOS Wi-Fi settings
• Using Group Policy Analytics to validate GPO support in Intune
• Monitoring device and user activity in Intune

Examine Application Management

Modules:

• Protecting Identities in Microsoft Entra ID (Formerly Azure AD)
• Enabling Organization Access
• Implement Device Compliance Policies
• Generate inventory and compliance reports

Labs:

• Deploying Cloud Apps using Intune
• Configuring App Protection Policies for Mobile Devices

Managing Authentication and Compliance

Modules:

• Protecting Identities in Azure AD
• Enabling Organization Access
• Implementing Device Compliance Policies
• Generating inventory and compliance reports

Labs:

• Configuring Multi-Factor Authentication
• Configuring Self-Service password reset for user accounts in Microsoft Entra (Formerly Azure AD)
• Configuring and validating Device Compliance
• Creating device inventory reports

Managing Endpoint Security

Modules:

• Deploying device data protection
• Managing Microsoft Defender for Endpoint
• Managing Windows Defender for client
• Managing Windows Defender for cloud apps

Labs:

• Configuring and Deploying Windows Information Protection Policies using Intune
• Configuring Endpoint security using Intune
• Configuring Disk Encryption using Intune

Deploy using on-premise based tools

Modules:

• Assessing Deployment Readiness
• Deploying using the Microsoft Deployment Toolkit (MDT)
• Deploying using Microsoft Configuration Manager

Labs:

• Deploying Windows 11 using Microsoft Deployment Toolkit

Deploy using cloud-based tools

Modules:

• Deploy Devices using Windows Autopilot
• Implement dynamic deployment methods
• Plan a transition to modern endpoint management
• Manage Windows 365
• Manage Azure virtual desktop
• Explore Microsoft Intune Suite

Labs:

• Deploying Windows 11 with Autopilot
• Refreshing Windows with Autopilot Reset and Self-Deploying mode