Overview
Modern desktop administrators deploy, configure, secure, manage, and monitor devices and client applications in an enterprise environment.
In this MD-101T00: Managing Modern Desktops course, students will learn how to plan and implement an operating system deployment strategy using modern deployment methods, as well as how to implement an update strategy. Students will be introduced to key components of modern management and co-management strategies.
This course also covers what it takes to incorporate Microsoft Intune into your organization. Students will also learn about methods for deployment and management of apps and browser-based applications. Students will be introduced to the key concepts of security in modern management including authentication, identities, access, and compliance policies. Students will be introduced to technologies such Azure Active Directory, Azure Information Protection and Windows Defender Advanced Threat Protection, as well as how to leverage them to protect devices and data.
Are you currently retrenched? If yes, check out our PERKESO EIS: Get Back into the Workforce through Upskilling program.
Skills Covered
After completing this course, learners should be able to:
- Plan, develop, and implement an Operating System deployment, upgrade, and update strategy.
- Understandthe benefits and methods of co-management strategies.
- Plan and implement device enrollment and configuration.
- Manage and deploy applications and plan a mobile application management strategy.
- Manage users and authentication using Azure AD and Active Directory DS.
- Describe and implement methods used to protect devices and data.
Who Should Attend
The Modern Desktop Administrator deploys, configures, secures, manages, and monitors devices and client applications in an enterprise environment. Responsibilities include managing identity, access, policies, updates, and apps. The MDA collaborates with the M365 Enterprise Administrator to design and implement a device strategy that meets the business needs of a modern organization.
The Modern Desktop Administrator must be familiar with M365 workloads and must have strong skills and experience of deploying, configuring, and maintaining Windows 10 and non-Windows devices. The MDA role focuses on cloud services rather than on-premises management technologies.
Course Curriculum
Prerequisites
The Modern Desktop Administrator must be familiar with M365 workloads and must have strong skills and experience of deploying, configuring, and maintaining Windows 10 and non-Windows devices. The MDA role focuses on cloud services rather than on-premises management technologies. It is recommended students complete course MD-100T00: Windows 10, prior to taking this course.
Download Course Syllabus
Course Modules
This module introduces the student to the concepts of modern management and the enterprise desktop lifecycle.
Learning objectives
After completing this module, you will be able to:
- Describe the benefits of Modern Management.
- Explain the enterprise desktop life-cycle model.
- Describe considerations for planning hardware strategies.
- Describe the steps in planning OS and app deployment.
- Describe considerations for post-deployment and retirement.
Prerequisites
- Strong technical skills installing, maintaining, and troubleshooting the Windows 10 OS or later.
- Strong understanding of computer networking, client security, and application concepts.
- Experience using Active Directory Domain Services.
This module introduces students to the concepts of Azure Active Directory.
Learning objectives
After this module, you should be able to:
- Describe Azure AD.
- Compare Azure AD to Active Directory Domain Services (AD DS).
- Describe how Azure AD is used as a directory for cloud apps.
- Describe Azure AD Premium P1 and P2.
- Describe Azure AD Domain Services.
Prerequisites
- Strong technical skills installing, maintaining, and troubleshooting the Windows 10 OS or later.
- Strong understanding of computer networking, client security, and application concepts.
- Experience using Active Directory Domain Services.
This module introduces students to identity concepts including role-based access control and managing groups.
Learning objectives
After this module, you should be able to:
- Describe RBAC and user roles in Azure AD.
- Create and manage users in Azure AD.
- Create and manage groups in Azure AD.
- Use Windows PowerShell cmdlets to manage Azure AD.
- Describe how you can synchronize objects from AD DS to Azure AD.
Prerequisites
- Strong technical skills installing, maintaining, and troubleshooting the Windows 10 OS or later.
- Strong understanding of computer networking, client security, and application concepts.
- Experience using Active Directory Domain Services.
In this module, you will learn about device authentication and management in Azure Active Directory.
Learning objectives
After completing this module, you will be able to:
- Describe Azure AD join.
- Describe Azure AD join prerequisites, limitations and benefits.
- Join device to Azure AD.
- Manage devices joined to Azure AD.
Prerequisites
- Strong technical skills installing, maintaining, and troubleshooting the Windows 10 OS or later.
- Strong understanding of computer networking, client security, and application concepts.
- Experience using Active Directory Domain Services.
This module introduces students to client deployment options and some of the high-level management and monitoring options that are available using Configuration Manager.
Learning objectives
After completing this module, you will be able to:
- Describe Microsoft Endpoint Manager.
- Understand the advantages of managing a client with Configuration Manager.
- Deploy the Configuration Manager client.
- Monitor the Configuration Manager client.
- Manage Configuration Manager devices.
Prerequisites
- Strong technical skills installing, maintaining, and troubleshooting the Windows 10 OS or later.
- Strong understanding of computer networking, client security, and application concepts.
- Experience using Active Directory Domain Services
Students will learn how to configure and setup Intune to more easily manage Windows, Android, and iOS devices.
Learning objectives
After completing this module, you will be able to:
- Prepare Microsoft Intune for device enrollment.
- Configure Microsoft Intune for automatic enrollment.
- Explain how to enroll Windows, Android and iOS devices in Intune.
- Explain when and how to use Intune Enrollment Manager.
- Understand how to monitor and perform remote actions on enrolled devices.
Prerequisites
- Strong technical skills installing, maintaining, and troubleshooting the Windows 10 OS or later.
- Strong understanding of computer networking, client security, and application concepts.
- Experience using Active Directory Domain Services.
Students will learn about the various types of device profiles, and how to create and manage them.
Learning objectives
After completing this module, you will be able to:
- Describe the various types of device profiles in Intune.
- Explain the difference between built-in and custom profiles.
- Create and manage profiles.
Prerequisites
- Strong technical skills installing, maintaining, and troubleshooting the Windows 10 OS or later.
- Strong understanding of computer networking, client security, and application concepts.
- Experience using Active Directory Domain Services.
This module introduces students to monitoring profiles to ensure correct assignments and resolving conflicts when multiple profiles are applied.
Learning objectives
After completing this module, you will be able to:
- Monitor the assignments of profiles.
- Understand how profiles are synchronized and how to manually force synchronization.
- Use PowerShell to execute and monitor scripts on devices.
Prerequisites
- Strong technical skills installing, maintaining, and troubleshooting the Windows 10 OS or later.
- Strong understanding of computer networking, client security, and application concepts.
- Experience using Active Directory Domain Services.
Students will learn about the benefits of various Windows user profiles, how to manage them, and how to facilitate profile data synchronization across multiple devices.
Learning objectives
After completing this module, you will be able to:
- Explain the various user profile types that exist in Windows.
- Describe how a user profile works.
- Configure user profiles to conserve space.
- Explain how to deploy and configure Folder Redirection.
- Explain Enterprise State Roaming.
- Configure Enterprise State Roaming for Azure AD devices.
Prerequisites
- Strong technical skills installing, maintaining, and troubleshooting the Windows 10 OS or later.
- Strong understanding of computer networking, client security, and application concepts.
- Experience using Active Directory Domain Services.
This module introduces Mobile Application Management (MAM). Students will learn about considerations for implementing MAM and will be introduced to the management of MAM using Microsoft Endpoint Manager.
Learning objectives
After this module, you should be able to:
- Explain Mobile Application Management
- Understand application considerations in MAM
- Explain how to use Configuration Manager for MAM
- Use Intune for MAM
- Implement and manage MAM policies
Prerequisites
- Strong technical skills installing, maintaining, and troubleshooting the Windows 10 OS or later
- Strong understanding of computer networking, client security, and application concepts
- Experience using Active Directory Domain Services
In this module, you will be introduced to application deployment in Intune and Microsoft Store for Business.
Learning objectives
After this module, you should be able to:
- Explain how to deploy applications using Intune
- Learn how to deploy applications using Group Policy
- Understand Microsoft Store for Business
- Learn how to configure Microsoft Store for Business
- Explain how to use Microsoft Store for Business
Prerequisites
- Strong technical skills installing, maintaining, and troubleshooting the Windows 10 OS or later
- Strong understanding of computer networking, client security, and application concepts
- Experience using Active Directory Domain Services
In this module, you will be introduced to managing apps on Intune managed devices. The module will then conclude with an overview of how to use IE Mode with Microsoft Edge.
Learning objectives
After this module, you should be able to:
- Explain how to manage apps in Intune
- Understand how to manage apps on non-enrolled devices
- Understand how to deploy Microsoft 365 Apps using Intune
- Learn how to configure and manage IE mode in Microsoft Edge
- Learn about app inventory options in Intune
Prerequisites
- Strong technical skills installing, maintaining, and troubleshooting the Windows 10 OS or later
- Strong understanding of computer networking, client security, and application concepts
- Experience using Active Directory Domain Services
This module describes how you can use Intune to create and manage WIP policies that manage this protection. The module also covers implementing BitLocker and Encrypting File System.
Learning objectives
After this module, you should be able to:
- Describe Windows Information Protection
- Plan for Windows Information Protection usage
- Implement and use Windows Information Protection
- Describe the Encrypting File System (EFS)
- Describe BitLocker
Prerequisites
- Strong technical skills installing, maintaining, and troubleshooting the Windows 10 OS or later
- Strong understanding of computer networking, client security, and application concepts
- Experience using Active Directory Domain Services
This module explores using Microsoft Defender for Endpoint to provide additional protection and monitor devices against threats.
Learning objectives
After this module, you should be able to:
- Describe Microsoft Defender for Endpoint
- Describe key capabilities of Microsoft Defender for Endpoint
- Describe Microsoft Defender Application Guard
- Describe Microsoft Defender Exploit Guard
- Describe Windows Defender System Guard
Prerequisites
- Strong technical skills installing, maintaining, and troubleshooting the Windows 10 OS or later
- Strong understanding of computer networking, client security, and application concepts
- Experience using Active Directory Domain Services
This module explains the built-in security features of Windows clients and how to implement them using policies.
Learning objectives
After this module, you should be able to:
- Describe Windows Security capabilities
- Describe Windows Defender Credential Guard
- Manage Microsoft Defender Antivirus
- Manage Windows Defender Firewall
- Manage Windows Defender Firewall with Advanced Security
Prerequisites
- Strong technical skills installing, maintaining, and troubleshooting the Windows 10 OS or later
- Strong understanding of computer networking, client security, and application concepts
- Experience using Active Directory Domain Services
This module introduces students to the various authentication methods used to protect identities.
Learning objectives
After this module, you should be able to:
- Describe Windows Hello for Business
- Describe Windows Hello deployment and management
- Describe Azure AD Identity Protection
- Describe and manage self-service password reset in Azure AD
- Describe and manage multi-factor authentication
Prerequisites
- Strong technical skills installing, maintaining, and troubleshooting the Windows 10 OS or later
- Strong understanding of computer networking, client security, and application concepts
- Experience using Active Directory Domain Services
This module describes how clients can be configured to access organizational resources using a virtual private network (VPN).
Learning objectives
- Describe how you can access corporate resources
- Describe VPN types and configuration
- Describe Always On VPN
- Describe how to configure Always On VPN
Prerequisites
- Strong technical skills installing, maintaining, and troubleshooting the Windows 10 OS or later
- Strong understanding of computer networking, client security, and application concepts
- Experience using Active Directory Domain Services
This module describes how to use compliance and conditional access policies to help protect access to organizational resources.
Learning objectives
After this module, you should be able to:
- Describe device compliance policy
- Deploy a device compliance policy
- Describe conditional access
- Create conditional access policies
Prerequisites
- Strong technical skills installing, maintaining, and troubleshooting the Windows 10 OS or later
- Strong understanding of computer networking, client security, and application concepts
- Experience using Active Directory Domain Services
This module describes how to use Microsoft Endpoint Manager and Power BI to create compliance and custom reports.
Learning objectives
After this module, you should be able to:
- Generate inventory reports and Compliance reports using Microsoft Intune
- Report and monitor device compliance
- Create custom reports using the Intune Data Warehouse
- Use the Microsoft Graph API for building custom reports
Prerequisites
- Strong technical skills installing, maintaining, and troubleshooting the Windows 10 OS or later
- Strong understanding of computer networking, client security, and application concepts
- Experience using Active Directory Domain Services
Discusses some of the tools that you can use to perform detailed assessments of existing deployments, and describes some of the challenges that you may face.
Learning objectives
After completing this module, you will be able to:
- Describe the guidelines for an effective enterprise desktop deployment.
- Explain how to assess the current environment.
- Describe the tools that you can use to assess your current environment.
- Describe the methods of identifying and mitigating application compatibility issues.
- Explain considerations for planning a phased rollout.
Prerequisites
- Strong technical skills installing, maintaining, and troubleshooting the Windows 10 OS or later
- Strong understanding of computer networking, client security, and application concepts
- Experience using Active Directory Domain Services
Discusses the shifts from traditional to modern management and where on-premises solutions best fit in today’s enterprise.
Learning objectives
After completing this module, you will be able to:
- Describe the fundamentals of using images in traditional deployment methods.
- Describe the key benefits, limitations, and decisions when planning a deployment of – Windows using Microsoft Deployment Toolkit (MDT).
- Describe how Configuration Manager builds upon MDT and how both can work in harmony.
- Explain the different options and considerations when choosing the user interaction experience during deployment, and which methods and tools support these experiences.
Prerequisites
- Strong technical skills installing, maintaining, and troubleshooting the Windows 10 OS or later
- Strong understanding of computer networking, client security, and application concepts
- Experience using Active Directory Domain Services
This module explains the common day to day tasks that Administrators would use Configuration Manager to perform.
Learning objectives
After completing this module, you’ll be able to:
- Describe the capabilities of Configuration Manager.
- Describe the key components of Configuration Manager.
- Describe how to troubleshoot Configuration Manager deployments.
Prerequisites
- Strong technical skills installing, maintaining, and troubleshooting the Windows 10 OS or later
- Strong understanding of computer networking, client security, and application concepts
- Experience using Active Directory Domain Services
Use Autopilot to deploy new hardware or refreshing an existing hardware with the organization’s desired configuration, without using the traditional imaging process.
Learning objectives
After completing this module, you will be able to:
- Explain the benefits of modern deployment for new devices.
- Describe the process of preparing for an Autopilot deployment.
- Describe the process of registering devices in Autopilot.
- Describe the different methods and scenarios of Autopilot deployments.
- Describe how to troubleshoot common Autopilot issues.
- Describe the process of deployment using traditional methods.
Prerequisites
- Strong technical skills installing, maintaining, and troubleshooting the Windows 10 OS or later
- Strong understanding of computer networking, client security, and application concepts
- Experience using Active Directory Domain Services
Use dynamic provisioning methods such as Subscription Activation, Provisioning packages, and Azure AD join to reconfigure an existing operating system.
Learning objectives
After completing this module, you will be able to:
- Describe how Subscription Activation works.
- Describe the benefits of Provisioning Packages.
- Explain how Windows Configuration Designer creates Provisioning Packages.
- Describe the benefits of using MDM enrollment with Azure AD join.
Prerequisites
- Strong technical skills installing, maintaining, and troubleshooting the Windows 10 OS or later
- Strong understanding of computer networking, client security, and application concepts
- Experience using Active Directory Domain Services
Explore considerations and review the planning of transitioning to modern management, focusing on migration and newly provisioned devices.
Learning objectives
After completing this module, you should be able to:
- Identify usage scenarios for Azure AD join.
- Identify workloads that you can transition to Intune.
- Identify prerequisites for co-management.
- Identify considerations for transitioning to modern management.
- Plan a transition to modern management using existing technologies.
- Plan a transition to modern management using Microsoft Intune.
Prerequisites
- Strong technical skills installing, maintaining, and troubleshooting the Windows 10 OS or later
- Strong understanding of computer networking, client security, and application concepts
- Experience using Active Directory Domain Services
Use Endpoint Manager to manage Azure Virtual Desktops and Windows 365 cloud PCs.
Learning objectives
After completing this module, you should be able to:
- Describe the differences between Azure Virtual Desktop and Windows 365.
- Configure Windows 365 using Endpoint Manager admin center.
- Create a provisioning policy to deploy a Windows 365 desktop.
- Reprovision and resize Windows 365 desktops.
Prerequisites
- Strong technical skills installing, maintaining, and troubleshooting the Windows 10 OS or later
- Strong understanding of computer networking, client security, and application concepts
- Experience using Active Directory Domain Services
Explore the Windows servicing channels and use tools such as Windows Server Update Service (WSUS) to manage Windows update deployments.
Learning objectives
After completing this module, you will be able to:
- Describe Windows servicing options and channels.
- Explain available methods for applying updates to Windows.
- Configure Windows Update settings in Windows.
- Describe available Group Policy settings for configure Windows Update.
- Explain how Windows Insider for Business works.
Prerequisites
- Strong technical skills installing, maintaining, and troubleshooting the Windows 10 OS or later
- Strong understanding of computer networking, client security, and application concepts
- Experience using Active Directory Domain Services
Leverage Windows Update for Business to control the distribution and methods for Windows update delivery.
Learning objectives
After completing this module, you’ll be able to:
- Describe Windows Update for Business.
- Configure Windows Update for Business.
- Identify scenarios for using Windows Update for Business.
Prerequisites
- Strong technical skills installing, maintaining, and troubleshooting the Windows 10 OS or later
- Strong understanding of computer networking, client security, and application concepts
- Experience using Active Directory Domain Services
Use Desktop Analytics to evaluate clients health information to plan an update deployment.
Learning objectives
After completing this module, you will be able to:
- Describe the benefits of Desktop Analytics.
- Describe how Desktop Analytics is configured.
- Explain how Desktop Analytics can assess compatibility and monitor health.
- Describe how Desktop Analytics can be used to create a deployment plan.
Prerequisites
- Strong technical skills installing, maintaining, and troubleshooting the Windows 10 OS or later
- Strong understanding of computer networking, client security, and application concepts
- Experience using Active Directory Domain Services
Use Endpoint analytics to help identify policies or hardware issues that ultimately create a poor user experience, and help remediate those issues.
Learning objectives
After completing this module, you will be able to:
- Describe the benefits of Endpoint Analytics.
- Describe how Endpoint Analytics can monitor performance and the user experience.
- Describe how Endpoint Analytics can identify application issues.
- Describe how Endpoint Analytics can be used to help transition to modern management and Windows 11.
Prerequisites
- Strong technical skills installing, maintaining, and troubleshooting the Windows 10 OS or later
- Strong understanding of computer networking, client security, and application concepts
- Experience using Active Directory Domain Services
Request More Information
Training Options
Exam & Certification
Microsoft 365 Certified: Modern Desktop Administrator Associate.
Modern Desktop Administrators deploy, configure, secure, manage, and monitor devices and client applications in an enterprise environment.
Training & Certification Guide
Modern Desktop Administrators deploy, configure, secure, manage, and monitor devices and client applications in an enterprise environment.
Candidates for this exam are Administrators who deploy, configure, secure, manage, and monitor devices and client applications in an enterprise environment. Candidates manage identity, access, policies, updates, and apps.
As an Administrator, candidates typically collaborate with the Microsoft 365 Enterprise Administrator to design and implement a device strategy that meets the business needs of a modern organization.
Candidates must be familiar with Microsoft 365 workloads and must be proficient and experienced in deploying, configuring, and maintaining Windows 10 and non-Windows devices and technologies.
This exam measures your ability to accomplish the following technical tasks: deploy and upgrade operating systems; manage policies and profiles; manage and protect devices; and manage apps and data. If you passed Exam 70-698 before it expired on March 31, 2019, you only need to take MD-101 to earn the Modern Desktop certification.
- Deploy and upgrade operating systems (25-30%)
- Manage policies and profiles (20-25%)
- Manage and protect devices (30-35%)
- Manage apps and data (10-15%)
Frequently Asked Questions
Earning a Microsoft Certification is globally recognized and industry-endorsed evidence of mastering real world skills. It shows you demonstrate proficiency in keeping pace with technology. It’s a career move that yields many positive results.
Getting a Microsoft Certification is also a great way to break into the tech industry. A Microsoft Certification immediately confers a level of authority and expertise, especially helpful for someone new to the industry.
The number of questions on a certification exam is subject to change as Microsoft make updates to ensure it aligns with current changes in the technology and job role. Most Microsoft Certification exams typically contain between 40-60 questions; and around 60-140 minutes.
Starting June 30 2021, all newly earned role-based and specialty certifications will be valid for one year from the date the certification was earned.
To stay up to date, IT pros are constantly learning and adding skills. The IDC study concluded that Microsoft Learning Partners are well positioned to help organizations achieve their business and learning goals. The IT leaders who were surveyed found the most value from a Learning Partner that provides:
- An end-to-end solution which starts with identifying skill gaps, simplifies the learning experience, and finishes by evaluating how well the Learning Partner met the organization goals.
- Scale, flexibility, and speed to train teams of any size, in any location, amid changing circumstances.
- Value-added services, such as hands-on labs, classroom training, and custom content that help the skills development program succeed.
- High-quality content and delivery, meaning accurate, relevant courseware, top-notch instructors, and a path to certification, if needed.
Achieve more with innovative Office apps, intelligent cloud services, and world-class security on Microsoft 365 with these recommended courses:
MS-100T00: Microsoft 365 Identity and Services
This course covers three central elements of Microsoft 365 enterprise administration – Microsoft 365 tenant and service management, Office 365 management, and Microsoft 365 identity management. In Microsoft 365 tenant and service management, you will examine all the key components that must be planned for when designing your Microsoft 365 tenant
MS-101T00: Microsoft 365 Mobility and Security
This course covers three central elements of Microsoft 365 enterprise administration – Microsoft 365 security management, Microsoft 365 compliance management, and Microsoft 365 device management. In Microsoft 365 security management, you will examine all the common types of threat vectors and data breaches facing organizations today, and you will learn how Microsoft 365’s security solutions address these security threats.
MS-203T00: Microsoft 365 Messaging
Microsoft 365 Messaging Administrators deploy, configure, manage, troubleshoot, and monitor recipients, permissions, mail protection, mail flow, and public folders in hybrid and cloud enterprise environments.
Learn key elements of Microsoft 365 messaging administration in this official 5-days Microsoft 365 certification training course.
MS-500T00: Microsoft 365 Security Administration
Gain expertise required to proactively secure your organization’s Microsoft 365 enterprise and hybrid environments and learn about threat protection technologies to protect your Microsoft 365 environment, respond to threats and enforce data governance with the Microsoft 365 Security Administrator Associate certification.
MS-600T00: Building applications and solutions with Microsoft 365 core services
Learn to design, build, test, and maintain applications and solutions that are optimized for the productivity and collaboration needs of organizations using the Microsoft 365 platform.
This course covers five central elements of Microsoft 365 platform – implementing Microsoft Identity, working with Microsoft Graph, extending and customizing SharePoint, extending Teams, and extending Office.
MS-700T00: Managing Microsoft Teams
In this course, you will learn about various Teams management tools, security and compliance feature for Teams, network requirement for Teams deployment as well as different Teams settings and policies for managing collaboration and communication experience in Teams.
MS-720T00: Microsoft Teams Voice Engineer
In this course, you will learn how to plan, design, configure, maintain, and troubleshoot an integrated communications solution at an organization using Microsoft Teams. The course will cover Teams Phone with Calling Plans, Direct Routing, and Operator Connect, in addition to Teams devices, audio/video conferencing, and voice migration. Students will learn troubleshooting methodologies and how to resolve common telephony and voice problems.