Manage and secure Microsoft 365 endpoints by using Intune

Prerequisites

Before attending this course, learners should have:

• Experience administering Microsoft 365 environments, including Microsoft Intune and Microsoft Entra ID
• Practical knowledge of deploying, configuring, and maintaining Windows client devices
• Familiarity with managing non-Windows devices in an organisational environment
• An understanding of device management, networking, and cloud-based services
• Experience implementing security policies, managing user access, and troubleshooting endpoint issues

Previous experience in an endpoint administration role is recommended.

No mandatory prerequisite certification is required.

Target audience

This course is designed for IT professionals responsible for deploying, managing, and securing devices and applications within Microsoft 365 environments.

It is particularly relevant for:

• Endpoint administrators managing Windows and non-Windows devices
• Microsoft 365 administrators responsible for device configuration and security
• IT professionals implementing Microsoft Intune and Microsoft Entra ID
• Systems administrators transitioning to cloud-based endpoint management
• Security administrators responsible for device compliance and endpoint protection
• IT professionals preparing for the Microsoft MD-102 certification exam

The course also supports administrators who collaborate with architects, security teams, and other technology specialists to implement modern workplace strategies.

Manage and secure Microsoft 365 endpoints by using Intune Course Content

Prepare infrastructure for devices using Microsoft Intune and Microsoft Entra ID

Understand the foundations of modern endpoint management and prepare the infrastructure required to deploy and manage organisational devices.

Topics covered:

• Understand endpoint management strategies and the capabilities of Microsoft Intune
• Explore unified endpoint management across different operating systems and device types
• Configure Microsoft Entra ID for device and policy management
• Administer device identities and authentication using Microsoft Entra ID
• Plan and implement device enrolment using Microsoft Intune
• Deploy Windows devices using Windows Autopilot

You'll develop the knowledge needed to establish a scalable endpoint management environment, supporting secure device deployment and consistent configuration across an organisation.

Manage and maintain devices using Microsoft Intune

Learn how to configure, monitor, update, and troubleshoot devices throughout their operational lifecycle.

Topics covered:

• Create and manage device configuration profiles using Microsoft Intune
• Implement device policies to support organisational requirements
• Monitor device status and maintain managed endpoints
• Manage Windows updates and device lifecycle processes
• Investigate device configuration and policy issues
• Troubleshoot common endpoint management problems

You'll gain practical experience maintaining device configurations, supporting reliable updates, and resolving issues that affect endpoint management.

Manage applications using Microsoft Intune

Develop the skills to deploy, protect, maintain, and monitor applications across managed devices.

Topics covered:

• Deploy and manage applications using Microsoft Intune
• Implement application protection and security policies
• Manage application lifecycles and user experience
• Monitor and optimise application performance
• Manage applications through the Enterprise App Catalog

You'll learn how to support consistent application deployment and maintenance while protecting organisational information.

Protect devices using Microsoft Intune

Explore endpoint security technologies and learn how to implement controls that protect devices, applications, and organisational data.

Topics covered:

• Implement endpoint security using Microsoft Defender and Microsoft Intune
• Configure device encryption and security policies
• Implement advanced threat protection using Microsoft Defender
• Enforce device compliance and remediate security issues
• Secure mobile access using Microsoft Tunnel
• Implement certificate management using Microsoft Cloud PKI

You'll develop the skills to strengthen endpoint security, enforce organisational policies, and respond to device compliance and protection requirements.

Automate and optimise endpoint management using Microsoft Intune

Discover how automation, AI, and endpoint performance monitoring can improve the efficiency of device administration.

Topics covered:

• Automate endpoint management tasks using PowerShell
• Use Microsoft Graph to support device management automation
• Explore AI-powered administration using Microsoft Security Copilot and related tools
• Monitor endpoint performance using Microsoft Intune
• Identify opportunities to optimise device management processes

You'll explore how automation and AI-assisted capabilities can reduce repetitive administration and help teams manage endpoints more efficiently.

Support operational excellence and readiness using Microsoft Intune

Learn how to maintain visibility, control administrative access, and support the operational health of a Microsoft Intune environment.

Topics covered:

• Implement reporting and data visibility using Microsoft Intune
• Review endpoint management information to support operational decisions
• Apply role-based access control in Microsoft Intune
• Configure delegated administration responsibilities
• Maintain tenant health and operational readiness

You'll learn how to support effective administration, improve reporting visibility, and maintain appropriate access controls across managed environments.

Extend endpoint capabilities using Microsoft Intune Suite

Explore advanced Microsoft Intune Suite capabilities that extend device management, troubleshooting, and security.

Topics covered:

• Understand Microsoft Intune Suite capabilities
• Implement Remote Help scenarios using Microsoft Intune
• Analyse advanced device signals using Microsoft Intune Suite
• Evaluate Endpoint Privilege Management capabilities

You'll discover how these additional capabilities can support device troubleshooting, provide deeper operational insights, and strengthen endpoint administration.

Deliver cloud-hosted desktops using Azure Virtual Desktop and Windows 365

Understand how cloud-hosted desktop technologies support modern working environments and integrate with Microsoft Intune.

Topics covered:

• Explore Windows 365 and cloud PC deployment
• Understand Windows 365 management capabilities
• Configure and manage Windows 365 using Microsoft Intune
• Explore Azure Virtual Desktop and its capabilities
• Integrate Azure Virtual Desktop with Microsoft Intune

You'll gain an understanding of how to deliver and manage cloud-hosted desktop environments while maintaining consistent device administration and security practices.

Exams and assessments

This course supports preparation for the Microsoft MD-102: Endpoint Administrator certification exam, which is associated with the Microsoft 365 Certified: Endpoint Administrator Associate certification.

The exam evaluates skills across five areas:

• Prepare infrastructure for devices – 24%
• Manage and maintain devices – 29%
• Protect devices – 17%
• Manage and secure applications – 16%
• Optimise endpoint operations using automation, monitoring, and reporting – 14%

Microsoft requires a passing score of 700 or higher.

Throughout the course, learners can reinforce their understanding through module knowledge checks, instructor-led discussions, and practical exercises.

Microsoft also provides a free practice assessment to support exam preparation.

The certification exam is separate from the course. Please contact your account manager to purchase a voucher..

Hands-on learning

This course includes six hands-on labs, providing approximately 9 hours and 50 minutes of practical experience.

Learners work through connected scenarios in a simulated organisational environment, applying their knowledge to realistic endpoint administration tasks.

Practical exercises include:

• Foundation – identity, enrolment, and Autopilot: Configure identities, device registration, enrolment, and Windows Autopilot
• Manage and maintain devices: Implement configuration profiles, manage updates, and troubleshoot device policies
• Manage applications: Deploy and protect applications, manage application lifecycles, and explore the Enterprise App Catalog
• Protect devices: Configure endpoint security, encryption, Microsoft Defender for Endpoint, Microsoft Tunnel, and Microsoft Cloud PKI
• Automate and operate: Use Microsoft Graph PowerShell, reporting, remediation, and delegated administration
• Extend capabilities: Explore Endpoint Privilege Management, Remote Help, advanced analytics, Windows 365, and Azure Virtual Desktop

Each lab builds on previous exercises, helping learners develop practical experience across the endpoint management lifecycle.