Mastering Microsoft Intune

Don’t miss the chance to join a training with our MVPs Jan Ketil Skanke, Sandy Zeng, Maurice Daly.

In this training you you will participate in a detailed walk-through to configure and administer Microsoft Intune.  If you want to master Microsoft Intune, this LIVE Training is for You!

As with all our academy courses, the info presented is up to date, and gathered from real-world implementations of Microsoft Intune. The online class is hosted by ViaMonstra Online Academy. Read more and register today!

This LIVE Online Training is unique in important ways. It has been developed by many of the best Intune experts in the world. It is based on real-life systems management and is always performed on the latest versions of Windows clients, Windows servers, and Windows systems management components.

Hands-on-Labs
In this Masterclass, you also find time dedicated to hands-on labs and exercises, all of which are based on actual real-life scenarios and realistic methods tested and verified to work in real-world production environments.

Added Bonus
The best part of this LIVE Online Training is that you get access to all the sample files and sample scripts used during training. We will even provide you with a proven solution to build a complete lab environment upon completing the training.

Masterclass Outline
Module 1: Introduction to Microsoft Intune

– Primer for Windows 10 and Windows 11 Management Using Microsoft Intune
– Integration with ConfigMgr (Co-management and Tenant Attach)
– Setting Up Azure Active Directory, DNS, and Custom Domains
– Creating Users and Groups and Assigning Licenses
– Enrolling Windows 10 and Windows 11 Devices to Intune and Creating Device Groups
– Azure AD vs. Azure Registration vs. Hybrid Join
– Understanding Azure and Intune Security
– Common Workloads #1: Deploying Updates, Applications, and Scripts
– Common Workloads #2: Configuring Profiles and Conditional Access

Module 2: Deploying Applications and PowerShell Scripts in Intune

– Understanding the Intune Application Options
– Creating and Deploying Win32 Applications
– Using the Microsoft Win32 Content Prep Tool
– Configuring Delivery Optimization Settings for Application Deployments
– Troubleshooting Application Installs
– Creating and Deploying PowerShell Scripts for Windows 10 and Windows 11 Devices
– Troubleshooting PowerShell Scripts

Module 3: Configuring Windows 10 and Windows 11 Devices and Delegating Access

– Introduction to Endpoint Security Features in Intune
– Configuring BitLocker
– Configuring Antivirus and Firewall Policies
– Working with Device Configuration Profiles, Templates, and the Settings Catalog
– ADMX-backed Policy Considerations
– Managing Local Administrators with Azure AD and Intune
– Always On VPN Deployment for Windows 10 and Windows 11
– Configuring Microsoft Edge
– Setting Up Role-based Administration for Access Delegation
– Creating and Assigning Custom Roles
– Integrating with Azure AD Privileged Identity Management

Module 4: Always on VPN: Infrastructure Requirements and Deployment Options in Depth

– Always On VPN Infrastructure Requirements
– Deployment Options (On-premises and Cloud-based)
– Implementation and Security Best Practices
– How to Avoid Common Mistakes when Deploying Always On VPN
– Provisioning and Managing Always On VPN Profiles Using Microsoft Configuration – Manager/Intune
– Understanding Current Limitations and Workarounds

Module 5: Securing Your Mobile Devices with Microsoft Intune – Introduction and Overview

– Securing Access to Your Environment Using Azure AD Conditional Access and Intune
– What Are Microsoft Intune Mobile Device Management (MDM) and Mobile Application Management (MAM)
– Planning for Mobile Device Management: Determining Management Type (Enrollment Type) and Understanding the Platform Nuances of Personal Devices vs. Organization-owned Devices
– Tenant Configuration (Branding, Licenses, and Device enrollment Restrictions)
– Prerequisites for Each Platform (Apple Enrollment, Google Play for Work)

Module 6: Managing Android Devices

– Configuring Deployment Type Profiles: Android Work Profile, Fully Managed, and Kiosk/Dedicated
– App Deployment Prerequisites
– App Deployment Best Practices
– Filters and User or Device Group-based Targeting: When and Where to Use What
– Static or Dynamic Groups: The Differences, Highlights, and Pitfalls
– Deploying Android Apps through Google Managed Play
– Configuration Profiles: Android Work Profile, Fully Managed, and Kiosk/Dedicated
– Android and the Power of OEM Config

Module 7: Managing Apple Devices

Configuring Deployment Type Profiles: User Enrollment, Device Enrollment, and Apple Automated Enrollment
– IOS Supervised Mode – What Is It, and Do You Need It?
– App Deployment Prerequisites
– App Deployment Best Practices
– Apple Store or VPP – Which Is Right for You?
– Filters and User or Device Group-based Targeting: When and Where to Use What
– Static or Dynamic Groups: The Differences, Highlights, and Pitfalls

Module 8: Implementing Windows Autopilot

– Configuring Windows Autopilot Prerequisites
– Bringing Windows 10 and Windows 11 Devices under Management
– Windows Autopilot Deployment Scenarios
– OEM Vendor Support
– Understanding Autopilot Deployment Profiles
– Configuring Enrollment Status Pages
– Autopilot Housekeeping and Other Operations Tasks
– Automating via Microsoft Graph
– Integrating Intune and Autopilot with OS Deployment
– Rapid Hyper-V Provisioning for Autopilot Testing
– Troubleshooting Windows Autopilot

Module 9: Managing Software Updates and Windows 10/Windows 11 Servicing Using Intune

– Managing Software Updates for Windows 10 and Windows 11 Devices
– Creating Windows Update Policies
– Configuring User Experience Settings
– Managing Windows 10 and Windows 11 Feature Updates
– Creating Windows 10 and Windows 11 Update Rings
– Working with Software Update Compliance
– Integrating Third-Party Patch Management via PatchMyPC in Microsoft Intune

Module 10: Introducing Microsoft Graph and Intune

– Introduction to Microsoft Graph API
– Connecting to Intune Using Graph API with PowerShell
– Creating Intune Configuration Policies with PowerShell
– Creating Intune Applications using PowerShell
– Device Management with Graph API

Module 11: Microsoft Intune, Reporting, and Update Compliance

– Introduction to Reporting in Microsoft Intune
– Setting Up Log Analytics
– Adding Proactive Remediation Scripts for Additional Data
– Creating and Customizing Workbooks in Microsoft Intune
– Implementing the Windows Update Compliance Dashboard Community Solution

Module 12: Troubleshooting Microsoft Intune

– Using the Intune Tenant Status Page and Service Health Dashboard
– Using Reports to Monitor Health and Activity of Windows 10 and Windows 11 Devices
– Using Audit Logs to Monitor Events in Intune
– Understanding Intune Logging
– Troubleshooting Device Enrollment and Policies
– Troubleshooting Device Actions in Intune
– Collecting Logs from Windows 10 and Windows 11 Devices
– Troubleshooting BitLocker Issues Using the Intune Encryption Report
– Using the Intune Troubleshooting Portal

Module 13: Cloud Imaging and Microsoft Intune

– OS Deployment over HTTPS via Cloud Management Gateway
– OS Deployment over HTTPS via MDT and PSD
– Setting Up Deployment Servers in Azure or AWS
– Implementing iPXE for Boot over the Internet (Third Party)
– Configuring Vendor BIOS/EUFI for Cloud Imaging
– Extending MDT with PSD for HTTPS and P2P Support
– Running Task Sequences via Microsoft Intune

Module 14: Managing BIOS and Drivers via Intune

– Solutions Available for BIOS and Driver Management
– Extending Hardware Inventory
– Proactive Remediations
– Reporting

Module 15: Microsoft Intune Community Jewels

– Introduction to Commonly Used Community Solutions for Microsoft Intune