Az öt napos tanfolyam során a hallgatók megismerkednek a modern eszközmenedzsment alapvető elemeivel, a co-menedzsment megközelítésekkel és a Microsoft Intune integrációval. Jártasságot szereznek a böngésző alapú alkalmazások kezelését illetően és megtanulják a kulcsfontosságú biztonsági fogalmakat és technológiákat.

Cél

A tanfolyam célja, hogy a hallgatók elsajátítsák és saját környezetükben önállóan is alkalmazni tudják azt a tudásanyagot, amellyel végpont-telepítési stratégiákat tervezhetnek és alkothatnak modern telepítési technikákkal, és ezt követően pedig hatékonyan tudják menedzselni azt, az adatok védelme érdekében.

Kiknek ajánljuk

A tanfolyamot olyan hallgatóknak ajánljuk, akiknek feladata, vagy feladata lesz a vállalati eszközök teljes menedzsmentje, beleértve azok konfigurálását, karbantartását, biztonsági beállításait és monitorozását.

Előfeltétel

A hallgatóknak előismeretekkel kell rendelkezni a következő témakörökben: M365 workloads; Windows 11 és nem-Windows eszközök telepítése, konfigurálása és karbantartása.

Tematika

Explore the Enterprise Desktop
- • Examine benefits of modern management
- • Examine the enterprise desktop life-cycle mod
- • elExamine planning and purchasing
- • Examine desktop deployment
- • Plan an application deployment
- • Plan for upgrades and retirement
Explore Windows Editions
- • Examine Windows client editions and capabilities
- • Select client edition
- • Examine hardware requirements
Understand Azure Active Directory
- • Examine Azure Active Directory
- • Compare Azure AD and Active Directory Domain Services
- • Examine Azure AD as a directory services for cloud apps
- • Compare Azure AD Premium P1 and P2 plans
- • Examine Azure AD Domain Services
Manage Azure Active Directory identities
- • Examine RBAC and user roles in Azure AD
- • Create and manage users in Azure AD
- • Create and manage groups in Azure AD
- • Manage Azure AD objects from AD objects with PowerShell
- • Synchronize objects from AD DS to Azure AD
Manage device authentication
- • Describe Azure AD join
- • Examine Azure AD join prerequisites limitations and benefits
- • Join devices to Azure AD
- • Manage devices joined to Azure AD
Enroll devices using Microsoft Configuration Manager
- • Deploy the Microsoft Configuration Manager client
- • Monitor the Microsoft Configuration Manager client
- • Manage the Microsoft Configuration Manager client
Enroll devices using Microsoft Intune
- • Manage mobile devices with Intune
- • Enable mobile device management
- • Explain considerations for device enrollment
- • Manage corporate enrollment policy
- • Enroll Windows devices in Intune
- • Enroll Android devices in Intune
- • Enroll iOS devices in Intune
- • Explore device enrollment manager
- • Monitor device enrollment
- • Manage devices remotely
Execute device profiles
- • Explore Intune device profiles
- • Create device profiles
- • Create a custom device profile
Oversee device profiles
- • Monitor device profiles in Intune
- • Manage device sync in Intune
- • Manage devices in Intune using scripts
Maintain user profiles
- • Examine user profile
- • Explore user profile types
- • Examine options for minimizing user profile size
- • Deploy and configure folder redirection
- • Sync user state with Enterprise State Roaming
- • Configure Enterprise State Roaming in Azure
Execute mobile application management
- • Examine mobil application management
- • Examine considerations for mobile application management
- • Prepare line-of-business apps for app protection policies
- • Implement mobile application management policies in Intune
- • Manage mobile application management policies in Intune
Deploy and update applications
- • Deploy application with Intune
- • Add apps to Intune
- • Manage Win32 apps with Intune
- • Deploy applications with Configuration Manager
- • Deploying applications with Group Policy
- • Assign and publish software
- • Explore Microsoft Store for Business
- • Implement Microsoft Store Apps
- • Update Microsoft Store Apps with Intune
- • Assign aqpps to company employees
Administer endpoint applications
- • Manage apps with Intune
- • Manage Apps on non-enrolled devices
- • Deploy Microsoft 365 Apps with Intune
- • Additional Microsoft 365 Apps Deployment Tools
- • Configure Microsoft Edge Internet Explorer mode
- • App Inventory Review
Protect identities in Active Directory Domain Services
- • Explore Windows Hello for Business
- • Deploy Windows Hello
- • Manage Windows Hello for Business
- • Explore Azure AD identity protection
- • Manage self-service password reset in Azure AD
- • Implement multi-factor authentication
Enable organizational access
- • Enable access to organization resources
- • Explore VPN types and configuration
- • Explore Always On VPN
- • Deploy Always On VPN
Implement device compliance
- • Protect access to resources using Intune
- • Explore device compliance policy
- • Deploy a device compliance policy
- • Explore conditional access
- • Create conditional access policies
Generate inventory and compliance reports
- • Report enrolled devices inventory in Intune
- • Monitor and report device compliance
- • Build custom Intune inventory reports
- • Access Intune using Microsoft Graph API
Deploy device data protection
- • Explore Windows Information Protection
- • Plan Windows Information Protection
- • Implement and use Windows information Protection
- • Explore Encrypting File System in Windows client
- • Explore BitLocker
Manage Microsoft Defender for Endpoint
- • Explore Microsoft Defender for Endpoint
- • Examine key capabilities of Microsoft Defender for Endpoint
- • Explore Windows Defender Application Control and Device Guard
- • Explore Microsoft Defender Applicationn Guard
- • Examine Windows Defender Exploit Guard
- • Explore Windows Defender System Guard
Manage Microsoft Defender in Windows client
- • Explore Windows Security Center
- • Explore Windows Defender Credential Guard
- • Manage Microsoft Defender Antivirus
- • Manage Windows Defender Firewall
- • Explore Windows Defender Firewall with Advanced Security
Manage Microsoft Defender for Cloud Apps
- • Explore Microsoft Defender for Cloud Apps
- • Planning for Microsoft Defender Cloud Apps
- • Implement Microsoft Defender Cloud Apps
Assess deployment readiness
- • Examine deployment guidelines
- • Explore readiness tools • Assess application compatibility
- • Assess application compatibility
- • Explore tools for application compatibility mitigation
- • Prepare network and directory for deployment
- • Plan a pilot
Deploy using the Microsoft Deployment Toolkit
- • Evaluate traditional deployment methods
- • Set up the Microsoft Deployment Toolkit for client deployment
- • Manage and deploy images using the Microsoft Deployment Toolkit
Deploy using Microsoft Configuration Manager
- • Explore client deploymentusing Configuration Manager
- • Examine deployment components of Configuration Manager
- • Manage client deployment using Configuration Manager
- • Plan in-place upgrades using Configuration Manager
Deploy devices using Windows Autopilot
- • Use Autopilot for modern deployment
- • Examine requirements for Windows Autopilot
- • Prepare device IDs for Autopilot
- • Implement device registration and out-of-the-box customization
- • Examine Autopilot scenarios
- • Troubleshoot Windows Autopilot
Implement dynamic deployment methods
- • Examine subscription activation
- • Deploy using provisioning packages
- • Use Windows Configuration Designer
- • Use Azure AD join with automatic MDM enrollment
Plan a transition to modern endpoint management
- • Explore using co-management to transition to modern endpoint management
- • Examine prerequisites for co-management
- • Evaluate modern management considerations
- • Evaluate upgrades and migrations in modern transitioning
- • Migrate data when modern transitioning
- • Migrate workloads when modern transitioning
Manage Windows 365
- • Explore Windows 365
- • Configure Windows 365
- • Administer Windows 365
Manage Azure virtual desktop
- • Examine Azure Virtual Desktop
- • Explore Azure Virtual Desktop
- • Configure Azure Virtual Desktop