MS-MD102T00 Microsoft 365 Endpoint Administrator
Product Information:
The product is a training course called “Microsoft 365 Modern
Desktop Administrator”. It is designed for individuals who want to
become proficient in managing and maintaining Windows 11 and later,
as well as non-Windows devices. The course covers various modules
that teach concepts related to endpoint management, Windows OS
editions, Azure Active Directory, device authentication, enrolling
devices using Microsoft Configuration Manager and Microsoft Intune,
executing and overseeing device profiles, maintaining user
profiles, mobile application management, deploying and updating
applications, administering endpoint applications, and protecting
identities in Active Directory Domain Services.
Product Usage Instructions:
To use the Microsoft 365 Modern Desktop Administrator training
course effectively, follow these steps:
- Start with Module 1: Explore the Enterprise Desktop. This
module provides an overview of modern endpoint management and
enterprise desktop lifecycle concepts. It covers the planning,
deployment, and maintenance stages of the lifecycle. - Proceed to Module 2: Explore Windows Editions. In this module,
you will learn about different Windows OS editions, their features,
and installation methods. - Move on to Module 3: Understand Azure Active Directory. This
module explains Azure AD and compares it to AD DS. You will also
learn about Azure AD Premium P1 and P2, as well as Azure AD Domain
Services for managing domain-joined devices and apps in the
cloud. - Continue with Module 4: Manage Azure Active Directory
identities. This module focuses on using Azure AD effectively.
Topics covered include RBAC, user roles, creating and managing
users and groups, using PowerShell cmdlets, and synchronizing
objects from AD DS to Azure AD. - Proceed to Module 5: Manage device authentication. In this
module, you will learn about device authentication and management
in Azure Active Directory. - Move on to Module 6: Enroll devices using Microsoft
Configuration Manager. This module introduces client deployment
options and high-level management and monitoring options available
using Configuration Manager. - Continue with Module 7: Enroll devices using Microsoft Intune.
In this module, you will learn how to configure and set up Intune
for easier management of Windows, Android, and iOS devices. - Proceed to Module 8: Execute device profiles. This module
covers the various types of device profiles and how to create and
manage them. - Move on to Module 9: Oversee device profiles. This module
focuses on monitoring profiles to ensure correct assignments and
resolving conflicts when multiple profiles are applied. - Continue with Module 10: Maintain user profiles. In this
module, you will learn about the benefits of different Windows user
profiles, how to manage them, and how to facilitate profile data
synchronization across multiple devices. - Proceed to Module 11: Execute mobile application management.
This module introduces Mobile Application Management (MAM) and
covers considerations for implementing MAM using Intune and
Configuration Manager. - Move on to Module 12: Deploy and update applications. In this
module, you will master deploying applications using Intune,
Configuration Manager, Group Policy, and Microsoft Store Apps. - Continue with Module 13: Administer endpoint applications. This
module focuses on managing apps on Intune managed devices and
provides an overview of using IE Mode with Microsoft Edge. - Proceed to Module 14: Protect identities in Active Directory
Domain Services. This module introduces various authentication
methods used to protect identities.
By following these usage instructions and completing all the
modules of the training course, you will gain comprehensive
knowledge and skills in managing and maintaining modern desktop
environments using Microsoft 365.
5 Days
Intermediate
Microsoft 365
Instructor-led
NA
In this course, students will learn to plan and execute an endpoint deployment strategy using contemporary deployment techniques and implementing update strategies. The course introduces essential elements of modern management, comanagement approaches, and Microsoft Intune integration. It covers app deployment, management of browser-based applications, and key security concepts such as authentication, identities, access, and compliance policies. Technologies like Azure Active Directory, Azure Information Protection, and Microsoft Defender for Endpoint are explored to protect devices and data.
The Microsoft 365 Endpoint Administrator is responsible for deploying, configuring, securing, managing, and monitoring devices and client applications in a corporate setting. Their duties include managing identity, access, policies, updates, and apps. They work alongside the M365 Enterprise Administrator to develop and execute a device strategy that aligns with the requirements of a modern organization. Microsoft 365 Endpoint Administrators should be well-versed in M365 workloads and possess extensive skills and experience in deploying, configuring, and maintaining Windows 11 and later, as well as non-Windows devices. Their role emphasizes cloud services over on-premises management technologies.
The Modern Desktop Administrator must be familiar with M365 workloads and must have strong skills and experience of deploying, configuring, and maintaining Windows 11 and later, and non-Windows devices.
Module 1: Explore the Enterprise Desktop This module covers modern endpoint management and enterprise desktop lifecycle concepts. It teaches the stages of the lifecycle (planning, deployment, maintenance) and provides a foundation for future learning.
Module 2: Explore Windows Editions This module covers Windows OS editions, features, and installation methods. Learners gain a deeper understanding of the available editions and corresponding installation processes.
Module 3: Understand Azure Active Directory This module explains Azure AD. You’ll compare Azure AD to AD DS, learn about Azure AD Premium P1 and P2, and explore Azure AD Domain Services for managing domain-joined devices and apps in the cloud.
Module 4: Manage Azure Active Directory identities
This module teaches how to use Azure AD effectively. You’ll learn about RBAC, user roles, creating and managing users and groups, using PowerShell cmdlets, and synchronizing objects from AD DS to Azure AD.
Module 5: Manage device authentication In this module, you learn about device authentication and management in Azure Active Directory.
Module 6: Enroll devices using Microsoft Configuration Manager This module introduces students to client deployment options and some of the high-level management and monitoring options that are available using Configuration Manager.
Module 7: Enroll devices using Microsoft Intune Students will learn how to configure and setup Intune to more easily manage Windows, Android, and iOS devices.
Module 8: Execute device profiles
Students learn about the various types of device profiles, and how to create and manage them.
Module 9: Oversee device profiles
This module introduces students to monitoring profiles to ensure correct assignments and resolving conflicts when multiple profiles are applied.
Module 10: Maintain user profiles
Students learn about the benefits of
various Windows user profiles, how
to manage them, and how to
facilitate
profile
data
synchronization across multiple
devices.
Module 11: Execute mobile application management
This module introduces Mobile Application Management (MAM). Students will learn about considerations for implementing MAM and will be introduced to the management of MAM using Intune and Configuration Manager.
Module 12: Deploy and update applications
In this module, you’ll master deploying applications using Intune, Configuration Manager, Group Policy, and Microsoft Store Apps. These powerful tools and techniques will equip you to manage and maintain diverse applications across your organization effectively.
Module 13: Administer endpoint applications In this module, you’re introduced to managing apps on Intune managed devices. The module will then conclude with an overview of how to use IE Mode with Microsoft Edge.
Module 14: Protect identities in Active Directory Domain Services This module introduces students to the various authentication methods used to protect identities.
Module 15: Deploy device data protection This module describes how you can use Intune to create and manage WIP policies that manage this protection. The module also covers implementing BitLocker and Encrypting File System.
Module 16: Manage Microsoft Defender for Endpoint This module explores using Microsoft Defender for Endpoint to provide additional protection and monitor devices against threats.
Module 17: Manage Microsoft Defender in Windows client
This module explains the built-in security features of Windows clients and how to implement them using policies.
Module 18: Manage Microsoft Defender for Cloud Apps
This module covers Microsoft Defender for Cloud Apps, focusing on securing sensitive data, its relevance in dynamic work settings, and effective utilization for improved security posture.
Module 19: Assess deployment
readiness
Discusses some of the tools that you
can use to perform detailed
assessments
of
existing
deployments, and describes some
of the challenges that you may face.
Module 20: Deploy using the Microsoft Deployment Toolkit
Discusses the shifts from traditional to modern management and where on-premises solutions best fit in today’s enterprise.
Module 21: Deploy using Microsoft Configuration Manager
This module explains the common day to day tasks that Administrators would use Configuration Manager to perform.
Module 22: Deploy Devices using Windows Autopilot
Use Autopilot to deploy new hardware or refreshing an existing hardware with the organization’s
desired configuration, without using the traditional imaging process.
Module 23: Implement dynamic deployment methods
Use dynamic provisioning methods such as Subscription Activation, Provisioning packages, and Azure AD join to reconfigure an existing operating system.
Module 24: Plan a transition to modern endpoint management
Explore considerations and review the planning of transitioning to modern management, focusing on migration and newly provisioned devices.
Module 25: Manage Windows 365
This module teaches managing Microsoft’s cloud-based PC management solution, Windows 365, offering personalized, secure Windows 11 experience from any device. Learn features, setup, management, security, deployment options, and licensing to optimize your environment.
Module 26: Manage Azure virtual
desktop
Learn to manage Azure Virtual
Desktop, a cloud-based VDI solution
providing personalized, secure
Windows 11 experiences.
Understand
key
features,
management, security, and
deployment options for optimizing
your environment.
This course will prepare delegates to write the Microsoft MD-102: Microsoft 365 Endpoint Administrator exam.
