Intune for Microsoft Enterprises

Overview

This course delivers real-world, hands-on skills for deploying, managing, and securing Windows devices using Microsoft Intune. Designed in a short-form, demo-driven format, each lesson targets a focused task or concept that administrators perform daily, such as licensing users, deploying apps, configuring security baselines, or integrating with Entra ID and Azure. The course progresses from initial setup and portal orientation to advanced topics like Autopilot provisioning and dynamic policy assignment.

By the end of this course, students will be equipped to build and manage a functional Intune environment, automate Windows device enrollment, configure compliance and security policies, deploy enterprise apps, and troubleshoot integrations across Microsoft 365 and on-premises infrastructure. This course emphasizes practical application over theory, enabling learners to confidently implement Intune in real-world scenarios.

COURSE INSTRUCTOR

Samuel Burr, Microsoft

COURSE DIFFICULTY

Intermediate

COURSE DURATION

4h 30m

Skills Learned

After completing this online training course, students will be able to:

Set up and navigate the Microsoft Intune administration portal
Assign licenses to users individually and in bulk
Configure and manage device enrollment settings, including Autopilot provisioning
Integrate Intune with Microsoft Entra ID and Azure AD Connect
Deploy, manage, and update Windows 11 devices remotely
Create and apply security and compliance policies effectively
Deploy enterprise and Line-of-Business (LOB) apps to managed devices
Automate device provisioning and enrollment through dynamic groups and filters
Implement Windows security features, such as BitLocker encryption and Microsoft Defender
Monitor and troubleshoot Intune integrations and configurations
Deploy and manage Microsoft 365 applications, Microsoft Edge, and Microsoft Teams via Intune
Use Endpoint Analytics and Delivery Optimization to improve device update efficiency

Endpoint Administrators
Microsoft 365 Administrators
Windows Administrators

None, but we highly recommend that students have some experience with Microsoft Active Directory, M365, and Microsoft Entra ID.

01. Introduction & Environment Setup

Introduction to Intune
- Basic Terminology
- Home and Tenant Status
- Devices
- Apps
- Endpoint Security
- Tenant Administration
Setting Up Environment
- Manually Assigning Licenses
- Bulk License Assignment
- Adding Custom Domain
- Creating Security Groups in Entra ID
- Static vs. Dynamic Group
- Adding Individual Users
- Targeting Devices
Basic Policies & Portal Configuration
- Tenant Customization
- Device Enrollment & App Push Notifications
- Blocking Specific Platforms
- Setting Priority Order

02. Microsoft Entra ID Basics

Microsoft Entra ID Basics
- Manual User Creation
- Bulk User Import
- Group Types
- Built-in Admin Roles
- Assigning Least Privilege
Azure Portal Essentials
- Subscription Options
- Organizing Resources
- App Registrations
- Monitoring Sign-in Logs
M365 & Intune Integration
- Check Service Health
- Confirm Intune Enabled
- Create Conditional Access Policy

03. On-Premises Integration & CMG

On-Premises Lab Deployment
- Install Domain Controller
- Configure Domain
Azure AD Connect
- Install AD Connect
- Sync Filtering
- Sync Rules
- Monitor Sync Health

04. Windows 11 Deployment & Update Optimization

Deployment Approaches
- Auto Enrollment
- Device Limits
Optimizing Updates
- Endpoint Analytics
- Delivery Optimization
Patch Management
- Create Update Rings

05. Windows Autopilot & Modern Provisioning

Autopilot Basics
- Compare Solutions
- Gather ID Manually
- Create Group
- Create Autopilot Profile
- Configure ESP
OOBE & Pre-Provisioning
- Create Device Group
- Add Service Principle
- Create User Group
- Create Prep Policy
Migrating Existing Devices
- Register Existing Device

06. Managing Windows 11 Devices

Enrollment Scenarios
- Enroll BYOD
- Enroll Corp Device
- Enroll Corp Device P2
- Register vs. Join Entra
- Enable Hello for Business
Config Profiles & OMA-URI
- Device Settings Profile
- Device Properties Profile
- Device Profile Template
- Custom OMA-URI
Dynamic Management
- Build Assignment Filters
- Create Dynamic Group
- Resolve Policy Conflict

07. App Deployment & Management

Win32 Apps
- Package Win32 App
- Set App Requirements
- Define Detection Rules
- Configure Supersedence
M365 Apps & Remote Help
- Deploy M365 App Suite
- Enable Remote Help
- Deploy Remote Help
- Create User Role
Enterprise & LOB Apps
- Upload LOB App
- Remove App

08. Microsoft Edge & Teams

Deploying Edge
- Deploy Edge
Edge Policies & IE Mode
- Deploy Edge Policy
- Alt Edge Policy
- Enable IE Mode
Teams Deployment & Filters
- Deploy Teams via MSI
- Control Install Timing

09. Compliance & Security

BitLocker & Encryption
- Deploy BitLocker
- Recover BitLocker Key
- Audit Encryption State
Defender & Baselines
- Configure Defender AV
- Apply Security Baseline
- View Security Baseline

SKILLS LEARNED

Skills Learned

After completing this online training course, students will be able to:

Set up and navigate the Microsoft Intune administration portal
Assign licenses to users individually and in bulk
Configure and manage device enrollment settings, including Autopilot provisioning
Integrate Intune with Microsoft Entra ID and Azure AD Connect
Deploy, manage, and update Windows 11 devices remotely
Create and apply security and compliance policies effectively
Deploy enterprise and Line-of-Business (LOB) apps to managed devices
Automate device provisioning and enrollment through dynamic groups and filters
Implement Windows security features, such as BitLocker encryption and Microsoft Defender
Monitor and troubleshoot Intune integrations and configurations
Deploy and manage Microsoft 365 applications, Microsoft Edge, and Microsoft Teams via Intune
Use Endpoint Analytics and Delivery Optimization to improve device update efficiency

WHO SHOULD ATTEND

Endpoint Administrators
Microsoft 365 Administrators
Windows Administrators

PREREQUISITES

None, but we highly recommend that students have some experience with Microsoft Active Directory, M365, and Microsoft Entra ID.

COURSE OUTLINE

01. Introduction & Environment Setup

Introduction to Intune
- Basic Terminology
- Home and Tenant Status
- Devices
- Apps
- Endpoint Security
- Tenant Administration
Setting Up Environment
- Manually Assigning Licenses
- Bulk License Assignment
- Adding Custom Domain
- Creating Security Groups in Entra ID
- Static vs. Dynamic Group
- Adding Individual Users
- Targeting Devices
Basic Policies & Portal Configuration
- Tenant Customization
- Device Enrollment & App Push Notifications
- Blocking Specific Platforms
- Setting Priority Order

02. Microsoft Entra ID Basics

Microsoft Entra ID Basics
- Manual User Creation
- Bulk User Import
- Group Types
- Built-in Admin Roles
- Assigning Least Privilege
Azure Portal Essentials
- Subscription Options
- Organizing Resources
- App Registrations
- Monitoring Sign-in Logs
M365 & Intune Integration
- Check Service Health
- Confirm Intune Enabled
- Create Conditional Access Policy

03. On-Premises Integration & CMG

On-Premises Lab Deployment
- Install Domain Controller
- Configure Domain
Azure AD Connect
- Install AD Connect
- Sync Filtering
- Sync Rules
- Monitor Sync Health

04. Windows 11 Deployment & Update Optimization

Deployment Approaches
- Auto Enrollment
- Device Limits
Optimizing Updates
- Endpoint Analytics
- Delivery Optimization
Patch Management
- Create Update Rings

05. Windows Autopilot & Modern Provisioning

Autopilot Basics
- Compare Solutions
- Gather ID Manually
- Create Group
- Create Autopilot Profile
- Configure ESP
OOBE & Pre-Provisioning
- Create Device Group
- Add Service Principle
- Create User Group
- Create Prep Policy
Migrating Existing Devices
- Register Existing Device

06. Managing Windows 11 Devices

Enrollment Scenarios
- Enroll BYOD
- Enroll Corp Device
- Enroll Corp Device P2
- Register vs. Join Entra
- Enable Hello for Business
Config Profiles & OMA-URI
- Device Settings Profile
- Device Properties Profile
- Device Profile Template
- Custom OMA-URI
Dynamic Management
- Build Assignment Filters
- Create Dynamic Group
- Resolve Policy Conflict

07. App Deployment & Management

Win32 Apps
- Package Win32 App
- Set App Requirements
- Define Detection Rules
- Configure Supersedence
M365 Apps & Remote Help
- Deploy M365 App Suite
- Enable Remote Help
- Deploy Remote Help
- Create User Role
Enterprise & LOB Apps
- Upload LOB App
- Remove App

08. Microsoft Edge & Teams

Deploying Edge
- Deploy Edge
Edge Policies & IE Mode
- Deploy Edge Policy
- Alt Edge Policy
- Enable IE Mode
Teams Deployment & Filters
- Deploy Teams via MSI
- Control Install Timing

09. Compliance & Security

BitLocker & Encryption
- Deploy BitLocker
- Recover BitLocker Key
- Audit Encryption State
Defender & Baselines
- Configure Defender AV
- Apply Security Baseline
- View Security Baseline

Intune for Microsoft Enterprises

Overview

Skills Learned

Set up and navigate the Microsoft Intune administration portal

Assign licenses to users individually and in bulk

Configure and manage device enrollment settings, including Autopilot provisioning

Integrate Intune with Microsoft Entra ID and Azure AD Connect

Deploy, manage, and update Windows 11 devices remotely

Create and apply security and compliance policies effectively

Deploy enterprise and Line-of-Business (LOB) apps to managed devices

Automate device provisioning and enrollment through dynamic groups and filters

Implement Windows security features, such as BitLocker encryption and Microsoft Defender

Monitor and troubleshoot Intune integrations and configurations

Deploy and manage Microsoft 365 applications, Microsoft Edge, and Microsoft Teams via Intune

Use Endpoint Analytics and Delivery Optimization to improve device update efficiency

Skills Learned

Set up and navigate the Microsoft Intune administration portal

Assign licenses to users individually and in bulk

Configure and manage device enrollment settings, including Autopilot provisioning

Integrate Intune with Microsoft Entra ID and Azure AD Connect

Deploy, manage, and update Windows 11 devices remotely

Create and apply security and compliance policies effectively

Deploy enterprise and Line-of-Business (LOB) apps to managed devices

Automate device provisioning and enrollment through dynamic groups and filters

Implement Windows security features, such as BitLocker encryption and Microsoft Defender

Monitor and troubleshoot Intune integrations and configurations

Deploy and manage Microsoft 365 applications, Microsoft Edge, and Microsoft Teams via Intune

Use Endpoint Analytics and Delivery Optimization to improve device update efficiency

Say Hi to Mike!