Introduction
As organizations continue to embrace digital transformation and hybrid work environments, effective endpoint management and security have become essential for maintaining operational efficiency and protecting corporate assets. Microsoft Intune and Microsoft Defender provide a comprehensive cloud-based platform for managing devices, enforcing security policies, protecting endpoints, and ensuring compliance across enterprise environments.
This comprehensive 5-day training program, developed by Global Horizon Training Center, equips IT professionals with the knowledge and practical skills required to deploy, configure, manage, secure, monitor, and troubleshoot modern endpoint environments using Microsoft Intune and Microsoft Defender. Through practical demonstrations and hands-on exercises, participants will gain the expertise required to manage device enrollment, identity integration, endpoint security, application deployment, compliance, data protection, monitoring, and troubleshooting using Microsoft’s modern endpoint management platform.
Training Objectives
By the end of this training program, participants will be able to:
- Understand Microsoft Intune architecture and modern endpoint management concepts.
- Configure Microsoft Intune tenant settings and administrative roles.
- Integrate Microsoft Entra ID with Microsoft Intune.
- Implement Windows Autopilot deployment and device enrollment.
- Configure device configuration profiles and compliance policies.
- Implement Conditional Access based on Zero Trust principles.
- Integrate Microsoft Defender for Endpoint with Microsoft Intune.
- Configure endpoint security policies including Microsoft Defender Antivirus, Firewall, Attack Surface Reduction (ASR), and Endpoint Detection and Response (EDR).
- Deploy and manage enterprise applications using Microsoft Intune.
- Implement Microsoft Purview Sensitivity Labels and Endpoint Data Loss Prevention (DLP).
- Monitor endpoint health, security posture, and compliance.
- Troubleshoot deployment, policy, and security-related issues.
- Apply enterprise best practices for endpoint management and security administration.
Target Audience
This training program is designed for:
Microsoft Intune AdministratorsMicrosoft 365 AdministratorsSecurity AdministratorsSystem AdministratorsInfrastructure EngineersEndpoint Management EngineersCloud AdministratorsCybersecurity EngineersIT Support EngineersIT Professionals responsible for endpoint management and security operations
Training Program Outline
Day 1: Microsoft Intune Fundamentals, Tenant Setup & Microsoft Entra ID
- Introduction to Microsoft Intune and Endpoint Management Architecture
- Understanding Mobile Device Management (MDM) vs. Mobile Application Management (MAM)
- Microsoft Intune Licensing and Prerequisites
- Navigating the Microsoft Intune Admin Center
- Configuring Tenant Settings and Validating Readiness
- Exploring Administrative Roles and Permissions
- Implementing Role-Based Access Control (RBAC)
- Assigning and Testing Administrative Access
- Microsoft Entra ID Fundamentals & Identity Integration with Microsoft Intune
- Understanding Device Identity Types: Entra Joined, Registered, and Hybrid Joined
- Enrollment Prerequisites and Supported Device Scenarios
- Configuring Enrollment Restrictions
- Creating Device and User Groups & Building Dynamic Membership Rules
- Automating Device Targeting and Testing Registration Workflows
Day 2: Windows Autopilot Deployment & Device Configuration Profiles
- Windows Autopilot Deployment Concepts and Lifecycle
- Understanding Hardware Hashes and Deployment Preparation
- Creating Deployment Profiles and Configuring Enrollment Status Page (ESP)
- Assigning Devices to Autopilot Groups and Uploading Hardware IDs
- Performing Clean Device Provisioning and Enrollment Validation
- Introduction to Configuration Profiles
- Comparing Settings Catalog and Administrative Templates
- Creating Device Restriction Policies and Configuring Wi-Fi Deployment Profiles
- Applying User Interface Customization Settings
- Understanding Profile Assignment Logic and Managing Policy Conflicts
- Validation Testing and Device Configuration Best Practices
Day 3: Compliance Policies & Conditional Access
- Understanding Compliance States and Evaluation Flow
- Creating Compliance Policies for Password Security
- Configuring BitLocker Encryption Validation
- Setting Operating System Version Compliance Requirements
- Compliance Monitoring and Reporting
- Introduction to Conditional Access Architecture & Zero Trust Access Controls
- Creating Conditional Access Policies Requiring Compliant Devices
- Conditional Access Signals, Decision Engine Processing, Grant Controls, and Session Controls
- Integrating Multi-Factor Authentication (MFA)
- Building Advanced Access Restriction Scenarios and Location-Based Access Rules
- Restricting Unmanaged Device Access
- Testing Conditional Access Behavior and Troubleshooting Policy Evaluation Results
Day 4: Microsoft Defender Integration, Endpoint Security & Application Management
- Integrating Microsoft Defender for Endpoint with Microsoft Intune
- Understanding Unified Endpoint Security Management & Service-to-Service Connector Integration
- Configuring Endpoint Onboarding Packages
- Deploying Microsoft Defender Antivirus Security Baselines & Firewall Policies
- Validating Device Protection Posture and Reviewing Endpoint Security Status Reports
- Understanding Microsoft Security Baselines & Configuring Endpoint Security Policies
- Microsoft Store Application Integration
- Understanding Win32 Application Packaging and Deployment
- Creating Application Deployment Assignments & Configuring Install/Uninstall Commands
- Deploying Applications to Target User and Device Groups & Monitoring Deployment Status
- Configuring Attack Surface Reduction (ASR) Rules & Endpoint Detection and Response (EDR)
- Implementing Endpoint Hardening Best Practices and Troubleshooting Endpoint Security Policies
Day 5: Data Protection, Monitoring, Reporting & Advanced Troubleshooting
- Introduction to Microsoft Purview and Data Classification Concepts
- Sensitivity Labels Fundamentals, Creation, Configuration, and Publishing Policies
- Applying and Testing Label Enforcement
- Understanding Endpoint Data Loss Prevention (DLP) and Configuring Endpoint DLP Policies
- Validating Protection and Data Governance Scenarios
- Navigating Microsoft Intune Reporting Dashboards & Intune Management Extension Logs
- Collecting and Analyzing Device Diagnostics
- Identifying Common Enrollment and Deployment Failures
- Reviewing Microsoft Defender Security Alerts
- Investigating Compliance and Policy Deployment Issues
- Validating Conditional Access Reporting Results
- Performing End-to-End Troubleshooting Exercises
- Reviewing Operational Best Practices for Enterprise Endpoint Management
- Final Practical Hands-on Lab, Course Review and Q&A