MD-101: Managing Modern Desktops
MD-101: Managing Modern Desktops MD-101: Managing Modern Desktops

Course Description

In this course, students will learn how to plan and implement an operating system deployment strategy using modern deployment methods, as well as how to implement an upgrade strategy. Students will be introduced to the key components of modern management and co-management strategies. This course also covers what it takes to bring Microsoft Intune into your organization. Students will also learn about methods for deploying and managing applications and browser-based applications. Students will be introduced to key security concepts in modern management, including authentication, identity, access, and compliance policies. Students will be introduced to technologies such as Azure Active Directory, Azure Information Protection, and Microsoft Defender for Endpoint, as well as how to leverage them to protect devices and data.

 

Audience Profile

Modern Desktop Administrator deploys, configures, secures, manages, and monitors client devices and applications in an enterprise environment. Responsibilities include identity, access, policy, update and application management. The MDA collaborates with the M365 enterprise administrator to design and implement an appliance strategy that meets the business needs of a modern organization. The Modern Desktop Administrator must be familiar with M365 workloads and must have strong skills and experience deploying, configuring, and maintaining Windows 10 and later and non-Windows devices. The MDA role focuses on cloud services rather than on-premises management technologies.

 

Items in this collection

  • Examine the enterprise desktop (10 Units)
  • Explore Azure Active Directory (8 Units)
  • Manage identities in Azure Active Directory (8 Units)
  • Manage device authentication (7 Units)
  • Enroll devices using Microsoft Endpoint Configuration Manager (6 Unidades)
  • Enroll devices using Microsoft Intune (13 Unidades)
  • Implement device profiles (6 Units)
  • Monitor device profiles (6 Units)
  • Manage user profiles (9 Units)
  • Implementation of mobile application management (8 Units)
  • Deploy and update applications (15 Unidades)
  • Administer applications (9 Units)
  • Implement Device Data Protection (8 Units)
  • Manage Microsoft Defender for Endpoint (9 Unidades)
  • Manage Microsoft Defender in Windows client (8 Unidades)
  • Identity protection in Azure AD (9 Units)
  • Enable organizational access (7 Unidades)
  • Implement device compliance policies (8 Unidades)
  • Generate inventory and compliance reports (7 Unidades)
  • Assess deployment readiness (9 Unidades)
  • Deploy using the Microsoft Deployment Toolkit (6 Unidades)
  • Deploy using Endpoint Configuration Manager (7 Unidades)
  • Deploy new devices (9 Units)
  • Implement dynamic deployment methods (7 Unidades)
  • Plan a transition to modern management (9 Units)
  • Manage virtual desktops (7 Units)
  • Update Windows client (8 Units)
  • Update clients using Windows Update for Business (7 Unidades)
  • Explore Desktop Analytics (9 Units)
  • Explore Endpoint Analytics (7 Units)

 

Previous requirements

The Modern Desktop Administrator must be familiar with Microsoft 365 workloads and must have strong skills and experience deploying, configuring, and maintaining Windows 10 and later and non-Windows devices. The MDA role focuses on cloud services rather than on-premises management technologies. Students are encouraged to complete the MD-100 Windows Clients course prior to taking this course.

 

course outline

Module 1: Modern Administration

This module explains the concepts of desktop compatibility throughout its life cycle. Students will learn the tools and strategies used for desktop deployment. Students will be introduced to the concept of a cloud directory with Azure AD. Students will learn the similarities and differences between Azure AD and Active Directory DS and how to sync between the two. Students will explore identity management in Azure AD and learn about identity protection with Windows Hello for Business, as well as Azure AD Identity Protection and multi-factor authentication.

lessons

  • Enterprise Desktop

  • Azure AD overview

  • Manage identities in Azure AD

Lab : Manage Identities in Azure AD

Lab : Use Azure AD Connect to connect Active Directory instances

After completing this module, students will be able to:

  • Describe the lifecycle of the enterprise desktop

  • Describe the capabilities of Azure AD

  • Manage users using Azure AD with Active Directory DS

  • Implement Windows Hello for Business

  • Join devices to Azure AD

Module 2: Device Enrollment

This module will also cover Azure AD and Microsoft Endpoint Manager, and learn how to configure policies to enroll devices in Endpoint Manager and Intune.

lessons

  • Manage device authentication

  • Enroll devices using Microsoft Endpoint Configuration Manager

  • Enroll devices using Microsoft Intune

Lab : Manage device enrollment in Intune

Lab : Configure and manage Azure AD join

Lab : Enroll devices in Microsoft Intune

After completing this module, students will be able to do the following:

  • Configure and join devices for Azure AD

  • Set up device enrollment in Microsoft Endpoint Manager

  • Enroll devices in Endpoint Configuration Manager and Intune

Module 3: Configure Profiles

This module takes a deeper dive into Intune device profiles, including the types of device profiles and the difference between built-in and custom profiles. The student will learn about assigning profiles to Azure AD groups and monitoring devices and profiles in Intune. You will be presented with the different types of user profiles that exist on local Windows devices. You will learn about the benefits of different profiles and how to switch between profile types. It will examine how folder redirection works and how to configure it. Next, the lesson will conclude with an introduction to Enterprise State Roaming and how to configure it for Azure AD devices.

lessons

  • Configure device profiles

  • Manage user profiles

Laboratorio: Configurar Enterprise State Roaming

Lab : Create and Deploy Configuration Profiles

Lab : Monitor device and user activity in Intune

After completing this module, students will be able to:

  • Describe the different types of device profiles in Intune

  • Create, manage and monitor profiles

  • Manage PowerShell scripts in Intune

  • Explain the different types of user profiles that exist in Windows

  • Explain how to implement and configure folder redirection

  • Configure Enterprise State Roaming for Azure AD Devices

Module 4: Manage Applications

In this module, students learn about application management using on-premises and cloud-based solutions. This module will cover how to manage Office 365 ProPlus deployments in Endpoint Manager, as well as how to manage apps on non-enrolled devices. The module will also include Win32 application management and deployment through the Microsoft Store for Business. This module will end with an introduction to Microsoft Edge and Enterprise Mode.

lessons

  • Implement mobile application management (MAM)

  • Deploy and update apps

  • Manage apps

Lab : Configure Mobile App Protection Policies

Lab : Deploy apps to the cloud using Intune

Lab : Deploy Applications Using Endpoint Configuration Manager

Lab : Deploy apps using Microsoft Store for Business

After completing this module, students will be able to:

  • Describe methods for managing applications

  • Deploy apps using Endpoint Manager and Group Policy

  • Configure Microsoft Store for Business

  • Implement Office365 ProPlus using Intune

  • Manage and report app inventory and licenses

Module 5: Manage authentication in Azure AD

This module covers the various solutions for managing authentication. The student will also learn about the different types of VPNs. This module also covers compliance policies and how to create Conditional Access policies.

lessons

  • Protect identities in Azure AD

  • Enable organization access

  • Implement device compliance policies

  • use reports

Lab : Create Device Inventory Reports

Lab : Configure and Validate Device Compliance

Lab : Configure Multi-Factor Authentication

Lab : Configure self-service password reset for user accounts in Azure AD

After completing this module, students will be able to:

  • Description of Windows Hello for Business

  • Describir Azure AD Identity Protection

  • Describe and manage multi-factor authentication

  • Describe VPN types and configuration

  • Implement device compliance and conditional access policies

  • Generate inventory reports and compliance reports using Endpoint Manager

Module 6: Manage Security

In this module, students will learn about data protection. Topics will include Windows and Azure Information Protection, and various encryption technologies supported by Windows. This module also covers the key capabilities of Microsoft Defender for Endpoint and how to implement these capabilities on devices in your organization. The module concludes with the use of Microsoft Defender and the use of features such as antivirus, firewall and Credential Guard.

lessons

  • Implement device data protection

  • Microsoft Defender Management for Endpoint

  • Microsoft Defender Administration on Windows Clients

Lab : Configure endpoint security using Intune

Laboratory: Configure and implement Windows Information Protection directives using Intune

Lab : Configure disk encryption using Intune

After completing this module, students will be able to:

  • Describe the methods that protect device data

  • Describe the features and benefits of Windows ATP

  • Deploy and manage configurations for Windows Defender clients

Module 7: Deploy Using Microsoft Endpoint Manager (Part 1)

In this two-part module, students are well introduced to deployment using Microsoft Endpoint Manager. Part 1 will cover tools to assess your infrastructure and plan a deployment, followed by deployment using the Microsoft Deployment Toolkit service and Endpoint Configuration Manager.

lessons

  • Assess deployment readiness

  • Local Implementation Strategies and Tools

Lab : Deploy Windows 10 Using the Microsoft Deployment Toolkit

Laboratorio: Implementar Windows 10 mediante Endpoint Configuration Manager

After completing this module, students will be able to:

  • Describe the tools for planning a deployment.

  • Deploy Windows clients by deploying the Microsoft Toolkit.

  • Deploy Windows clients using Endpoint Configuration Manager.

Module 8: Deploy Using Microsoft Endpoint Manager (Part 2)

This module continues with the deployment using Microsoft Endpoint Manager. In the second part, the student will learn how to use Windows Autopilot and deployment using Microsoft Intune. This module will also include dynamic OS deployment methods, such as subscription activation. The module concludes with explanations of how co-management can be used to transition to modern management. Finally, students will be introduced to Azure Virtual Desktop and how to set up and manage cloud PCs using Windows 365.

lessons

  • Deploy new devices

  • Dynamic Implementation Methods

  • Plan a transition to modern management

  • Virtual desktop management

Lab : Configure co-management using Configuration Manager

Lab : Deploy Windows 10 with Autopilot

After completing this module, students will be able to:

  • Deploy Windows 10 with Autopilot

  • Configure OS Deployment Using Subscription Activation and Provisioning Packages

  • Upgrade, migrate, and manage devices using modern management methods

Module 9: Managing Analytics Usage and Updates

This module covers update management for Windows. This module introduces maintenance options for Windows clients. Students will learn the different methods for deploying updates and how to configure Windows update policies. Finally, students will learn how to ensure and monitor updates using Desktop Analytics.

lessons

  • Windows client update

  • Windows Update for Business

  • desktop analytics

  • Analysis of connection points

Lab : Manage Windows 10 security and feature updates

After completing this module, students will be able to do the following:

  • Describe Windows client service channels

  • Configure a Windows update policy by using Group Policy settings

  • Configure Windows Update for Business to deploy operating system updates

  • Use Desktop Analytics to assess upgrade readiness

  • Use Endpoint Analytics to monitor user experience and assess readiness for Windows 11

 

Language:

  • English course
  • Labs: English
€695.00