MD-102T00: Microsoft 365 Endpoint Administrator
About this Course
In this course, students will learn to plan and execute an endpoint deployment strategy using contemporary deployment techniques and implementing update strategies. The course introduces essential elements of modern management, co-management approaches, and Microsoft Intune integration. It covers app deployment, management of browser-based applications, and key security concepts such as authentication, identities, access, and compliance policies. Technologies like Azure Active Directory, Azure Information Protection, and Microsoft Defender for Endpoint are explored to protect devices and data.
Audience Profile
Candidates for this exam have subject matter expertise deploying, configuring, protecting, managing, and monitoring devices and client applications in a Microsoft 365 environment. They manage identity, security, access, policies, updates, and apps for endpoints. They implement solutions for efficient deployment and management of endpoints on various operating systems, platforms, and device types. Page 1 Trainer Preparation Guide: Course MD-102 April 2023 They implement and manage endpoints at scale by using Microsoft Intune, Windows 365, Windows Autopilot, Microsoft Defender for Endpoint, and Microsoft Entra ID (Formerly Azure AD), part of Microsoft Entra.
At Course Completion
Outline
Learning Path 1: Explore Modern Management
This learning path is designed to provide a comprehensive understanding of enterprise desktops, Windows editions, and Microsoft Entra ID (Formerly Azure AD). It includes exploring various Windows editions, including their features and installation methods. It delves into Microsoft Entra ID (Formerly Azure AD), highlighting its similarities and differences with AD DS and how to synchronize the two. Furthermore, learners will better understand managing Microsoft Entra ID (Formerly Azure AD) identities. Overall, this learning path equips learners with the necessary knowledge and skills to effectively support enterprise desktops and manage Microsoft Entra ID (Formerly Azure AD) identities.
Modules
- The Enterprise Desktop
- Microsoft Entra ID (Formerly Azure AD) Overview
- Managing Identities in Microsoft Entra ID (Formerly Azure AD)
- Manage Microsoft Entra ID (Formerly Azure AD) identities
Labs:
- Managing identities in Microsoft Entra ID (Formerly Azure AD)
- Using Microsoft Entra ID (Formerly Azure AD) Connect to connect Active Directories
Learning Path 2: Execute Device Enrollment
This learning path will cover Microsoft Entra ID (Formerly Azure AD) join and will introduce Microsoft Endpoint Manager. We'll also discuss how to configure policies for enrolling devices to Configuration Manager and Microsoft Intune.
Modules
- Manage Device Authentication
- Enroll device using Microsoft Endpoint Configuration Manager
- Enroll device using Microsoft Intune
Labs:
- Configuring and managing Microsoft Entra ID (Formerly Azure AD) join
- Manage Microsoft Entra ID (Formerly Azure AD) device registration
- Manage Device Enrollment into Intune
- Enrolling Devices into Intune
Learning Path 3: Configuring Profiles for User and Devices
This learning path explores Intune device profiles, the benefits of user profiles and how to synchronize profile data across multiple devices.
Modules
- Execute Device Profiles
- Oversee Device Profiles
- Maintain User Profiles
Labs:
- Creating and Deploying Configuration Profiles
- Using a Configuring Profile to configure Kiosk mode
- Using a Configuring Profile to configure iOS and iPadOS Wi-Fi settings
- Using Group Policy Analytics to validate GPO support in Intune
- Monitor device and user activity in Intune
Learning Path 4: Examine Application Management
In this Learning Path, Learners will examine application management methods using on-premises and cloud-based solutions.
Modules
- Execute Mobile Application Management (MAM)
- Deploying and updating applications
- Administering endpoint applications
Labs:
- Deploying Cloud Apps using Intune
- Configure App Protection Policies for Mobile Devices
- Deploy Apps using Endpoint Configuration Manager
- Deploy Apps using Microsoft Store for Business
- Deploy Apps using Microsoft Store for Business
Learning Path 5: Managing Authentication and Compliance
This learning path covers the various solutions for managing authentication. Students will also learn about the different types of VPNs, as well as compliance and conditional access policies.
Modules
- Protecting Identities in Microsoft Entra ID (Formerly Azure AD)
- Enabling Organization Access
- Implement Device Compliance Policies
- Generate inventory and compliance reports
Labs:
- Configuring Multi-Factor Authentication
- Configuring Self-Service password reset
- Configuring and validating Device Compliance
- Creating device inventory reports
Learning Path 6: Managing Endpoint Security
In this learning path, students will learn about data protection and protecting endpoints against threats. This path will also cover the key capabilities of Microsoft Defender solutions.
Modules
- Deploy device data protection
- Manage Microsoft Defender to Endpoint
- Managing Windows Defender for client
- Managing Windows Defender for cloud apps
Labs:
- Configure and Deploy Windows Information Protection Policies by using Intune
- Configuring Endpoint security using Intune
- Configuring Disk Encryption using Intune
- Describe the methods protecting device data.
Learning Path 7: Deploy using on-premise based tools
Students are introduced to deployment using the Microsoft Deployment Toolkit and Configuration Manager.
Modules
- Assess Deployment Readiness
- Deploy using the Microsoft Deployment Toolkit (MDT)
- Deploy using Microsoft Configuration Manager
Labs:
- Deploying Windows 10 using Microsoft Deployment Toolkit
- Deploying Windows 10 using Endpoint Configuration Manager
Learning Path 8: Deploy using cloud-based tools
This Learning Path Students will learn about using Windows Autopilot and deployment using Microsoft Intune. Students will also learn how co-management can be used to transition to modern management.
Modules
- Deploy Devices using Windows Autopilot
- Implement dynamic deployment methods
- Plan a transition to modern endpoint management
- Manage Windows 365
- Manage Azure virtual desktop
Labs:
-
- Deploying Windows 10 with Autopilot
- Refreshing Windows with Autopilot Reset and Self-Deploying mode
- Configuring Cloud Attach and Co-Management Using Configuration Manager
Prerequisites
Before attending this course, students must have:
- Completed a role-based administrator course such as Messaging, Teamwork, Security and Compliance, or Collaboration.
- A proficient understanding of DNS and basic functional experience with Microsoft 365 services.
- A proficient understanding of general IT practices.
- A working knowledge of PowerShell.