Overview
Unleashing the Power of Microsoft 365: Get Certified as a Modern Desktop Administrator Associate today.
In this Microsoft 365 Endpoint Administrator course, students will learn to plan and execute an endpoint deployment strategy using contemporary deployment techniques and implementing update strategies.
The course introduces essential elements of modern management, co-management approaches, and Microsoft Intune integration. It covers app deployment, management of browser-based applications, and key security concepts such as authentication, identities, access, and compliance policies.
Technologies like Azure Active Directory, Azure Information Protection, and Microsoft Defender for Endpoint are explored to protect devices and data.
Elevate your career with the Microsoft 365 Certified: Modern Desktop Administrator Associate certification. It’s more than just a certification – it’s a testament to your expertise and your dedication to staying at the forefront of the rapidly evolving tech landscape. Don’t just be part of the future, shape it with Microsoft 365.
Skills Covered
- Deploy Windows
- Manage devices and data
- Configure connectivity
- Maintain Windows
- Deploy and update operating systems
- Manage policies and profiles
- Manage and protect devices
- Manage apps and data
Who Should Attend
The Microsoft 365 Endpoint Administrator is responsible for deploying, configuring, securing, managing, and monitoring devices and client applications in a corporate setting. Their duties include managing identity, access, policies, updates, and apps. They work alongside the M365 Enterprise Administrator to develop and execute a device strategy that aligns with the requirements of a modern organization.
Microsoft 365 Endpoint Administrators should be well-versed in M365 workloads and possess extensive skills and experience in deploying, configuring, and maintaining Windows 11 and later, as well as non-Windows devices. Their role emphasizes cloud services over on-premises management technologies.
Course Curriculum
Prerequisites
The Modern Desktop Administrator must be familiar with M365 workloads and must have strong skills and experience of deploying, configuring, and maintaining Windows 11 and later, and non-Windows devices.
Download Course Syllabus
Course Modules
This module covers modern endpoint management and enterprise desktop lifecycle concepts. It teaches the stages of the lifecycle (planning, deployment, maintenance) and provides a foundation for future learning.
Learning objectives
After completing this module, you’ll be able to:
- Describe the benefits of Modern Management.
- Explain the enterprise desktop life-cycle model.
- Describe considerations for planning hardware strategies.
- Describe considerations for post-deployment and retirement.
Prerequisites
- Strong technical skills installing, maintaining, and troubleshooting the Windows 11 OS or later.
- Strong understanding of computer networking, client security, and application concepts.
- Experience using Active Directory Domain Services.
This module covers Windows OS editions, features, and installation methods. Learners gain a deeper understanding of the available editions and corresponding installation processes.
Learning objectives
After completing this module, you’ll be able to:
- Explain the differences between the different editions of Windows.
- Select the most suitable Windows device for your needs.
- Describe the minimum recommended hardware requirements for installing Windows 11.
Prerequisites
- Students should have a basic understanding of computer networks and hardware concepts.
- Students should have a basic understanding of OS and Application concepts.
- Students should have experience with using Windows 11 or later.
This module teaches how to use Azure AD effectively. You’ll learn about RBAC, user roles, creating and managing users and groups, using PowerShell cmdlets, and synchronizing objects from AD DS to Azure AD.
Learning objectives
After this module, you should be able to:
- Describe RBAC and user roles in Azure AD.
- Create and manage users in Azure AD.
- Create and manage groups in Azure AD.
- Use Windows PowerShell cmdlets to manage Azure AD.
- Describe how you can synchronize objects from AD DS to Azure AD.
Prerequisites
- Strong technical skills installing, maintaining, and troubleshooting the Windows 11 OS or later.
- Strong understanding of computer networking, client security, and application concepts.
- Experience using Active Directory Domain Services.
In this module, you learn about device authentication and management in Azure Active Directory
Learning objectives
After completing this module, you will be able to:
- Describe Azure AD join.
- Describe Azure AD join prerequisites, limitations and benefits.
- Join device to Azure AD.
- Manage devices joined to Azure AD.
Prerequisites
- Strong technical skills installing, maintaining, and troubleshooting the Windows 10 OS or later.
- Strong understanding of computer networking, client security, and application concepts.
- Experience using Active Directory Domain Services.
This module introduces students to client deployment options and some of the high-level management and monitoring options that are available using Configuration Manager.
Learning objectives
After completing this module, you will be able to:
- Describe Microsoft Endpoint Manager.
- Understand the advantages of managing a client with Configuration Manager.
- Deploy the Configuration Manager client.
- Monitor the Configuration Manager client.
- Manage Configuration Manager devices.
Prerequisites
- Strong technical skills installing, maintaining, and troubleshooting the Windows 10 OS or later.
- Strong understanding of computer networking, client security, and application concepts.
- Experience using Active Directory Domain Services.
Students will learn how to configure and setup Intune to more easily manage Windows, Android, and iOS devices.
Learning objectives
After completing this module, you will be able to:
- Prepare Microsoft Intune for device enrollment.
- Configure Microsoft Intune for automatic enrollment.
- Explain how to enroll Windows, Android and iOS devices in Intune.
- Explain when and how to use Intune Enrollment Manager.
- Understand how to monitor and perform remote actions on enrolled devices.
Prerequisites
- Strong technical skills installing, maintaining, and troubleshooting the Windows 10 OS or later.
- Strong understanding of computer networking, client security, and application concepts.
- Experience using Active Directory Domain Services.
Students learn about the various types of device profiles, and how to create and manage them.
Learning objectives
After completing this module, you will be able to:
- Describe the various types of device profiles in Intune.
- Explain the difference between built-in and custom profiles.
- Create and manage profiles.
Prerequisites
- Strong technical skills installing, maintaining, and troubleshooting the Windows 10 OS or later.
- Strong understanding of computer networking, client security, and application concepts.
- Experience using Active Directory Domain Services.
This module introduces students to monitoring profiles to ensure correct assignments and resolving conflicts when multiple profiles are applied.
Learning objectives
After completing this module, you will be able to:
- Monitor the assignments of profiles.
- Understand how profiles are synchronized and how to manually force synchronization.
- Use PowerShell to execute and monitor scripts on devices.
Prerequisites
- Strong technical skills installing, maintaining, and troubleshooting the Windows 10 OS or later.
- Strong understanding of computer networking, client security, and application concepts.
- Experience using Active Directory Domain Services.
Students learn about the benefits of various Windows user profiles, how to manage them, and how to facilitate profile data synchronization across multiple devices.
Learning objectives
After completing this module, you will be able to:
- Explain the various user profile types that exist in Windows.
- Describe how a user profile works.
- Configure user profiles to conserve space.
- Explain how to deploy and configure Folder Redirection.
- Explain Enterprise State Roaming.
- Configure Enterprise State Roaming for Azure AD devices.
Prerequisites
- Strong technical skills installing, maintaining, and troubleshooting the Windows 10 OS or later.
- Strong understanding of computer networking, client security, and application concepts.
- Experience using Active Directory Domain Services.
This module introduces Mobile Application Management (MAM). Students will learn about considerations for implementing MAM and will be introduced to the management of MAM using Intune and Configuration Manager.
Learning objectives
After this module, you should be able to:
- Explain Mobile Application Management
- Understand application considerations in MAM
- Explain how to use Configuration Manager for MAM
- Use Intune for MAM
- Implement and manage MAM policies
Prerequisites
- Strong technical skills installing, maintaining, and troubleshooting the Windows 10 OS or later
- Strong understanding of computer networking, client security, and application concepts
- Experience using Active Directory Domain Services
In this module, you’ll master deploying applications using Intune, Configuration Manager, Group Policy, and Microsoft Store Apps. These powerful tools and techniques will equip you to manage and maintain diverse applications across your organization effectively.
Learning objectives
After this module, you should be able to:
- Explain how to deploy applications using Intune and Configuration Manager
- Learn how to deploy applications using Group Policy
- Understand Microsoft Store Apps
- Learn how to deploy apps using Microsoft Store Apps
- Learn how to configure Microsoft Store Apps
Prerequisites
- Strong technical skills installing, maintaining, and troubleshooting the Windows 11 OS or later
- Strong understanding of computer networking, client security, and application concepts
- Experience using Active Directory Domain Services
In this module, you’re introduced to managing apps on Intune managed devices. The module will then conclude with an overview of how to use IE Mode with Microsoft Edge.
Learning objectives
After this module, you should be able to:
- Explain how to manage apps in Intune
- Understand how to manage apps on non-enrolled devices
- Understand how to deploy Microsoft 365 Apps using Intune
- Learn how to configure and manage IE mode in Microsoft Edge
- Learn about app inventory options in Intune
Prerequisites
- Strong technical skills installing, maintaining, and troubleshooting the Windows 11 OS or later.
- Strong understanding of computer networking, client security, and application concepts.
- Experience using Active Directory Domain Services.
This module introduces students to the various authentication methods used to protect identities.
Learning objectives
After this module, you should be able to:
- Describe Windows Hello for Business
- Describe Windows Hello deployment and management
- Describe Azure AD Identity Protection
- Describe and manage self-service password reset in Azure AD
- Describe and manage multi-factor authentication
Prerequisites
- Strong technical skills installing, maintaining, and troubleshooting the Windows 10 OS or later
- Strong understanding of computer networking, client security, and application concepts
- Experience using Active Directory Domain Services
This module describes how clients can be configured to access organizational resources using a virtual private network (VPN).
Learning objectives
After this module, you should be able to:
- Describe how you can access corporate resources
- Describe VPN types and configuration
- Describe Always On VPN
- Describe how to configure Always On VPN
Prerequisites
- Strong technical skills installing, maintaining, and troubleshooting the Windows 10 OS or later
- Strong understanding of computer networking, client security, and application concepts
- Experience using Active Directory Domain Services
This module describes how to use compliance and conditional access policies to help protect access to organizational resources.
Learning objectives
After this module, you should be able to:
- Describe device compliance policy
- Deploy a device compliance policy
- Describe conditional access
- Create conditional access policies
Prerequisites
- Strong technical skills installing, maintaining, and troubleshooting the Windows 10 OS or later
- Strong understanding of computer networking, client security, and application concepts
- Experience using Active Directory Domain Services
This module describes how to use Microsoft Endpoint Manager and Power BI to create compliance and custom reports.
Learning objectives
After this module, you should be able to:
- Generate inventory reports and Compliance reports using Microsoft Intune
- Report and monitor device compliance
- Create custom reports using the Intune Data Warehouse
- Use the Microsoft Graph API for building custom reports
Prerequisites
- Strong technical skills installing, maintaining, and troubleshooting the Windows 10 OS or later
- Strong understanding of computer networking, client security, and application concepts
- Experience using Active Directory Domain Services
This module describes how you can use Intune to create and manage WIP policies that manage this protection. The module also covers implementing BitLocker and Encrypting File System.
Learning objectives
After this module, you should be able to:
- Describe Windows Information Protection
- Plan for Windows Information Protection usage
- Implement and use Windows Information Protection
- Describe the Encrypting File System (EFS)
- Describe BitLocker
Prerequisites
- Strong technical skills installing, maintaining, and troubleshooting the Windows 10 OS or later
- Strong understanding of computer networking, client security, and application concepts
- Experience using Active Directory Domain Services
This module explores using Microsoft Defender for Endpoint to provide additional protection and monitor devices against threats.
Learning objectives
After this module, you should be able to:
- Describe Microsoft Defender for Endpoint
- Describe key capabilities of Microsoft Defender for Endpoint
- Describe Microsoft Defender Application Guard
- Describe Microsoft Defender Exploit Guard
- Describe Windows Defender System Guard
Prerequisites
- Strong technical skills installing, maintaining, and troubleshooting the Windows 10 OS or later
- Strong understanding of computer networking, client security, and application concepts
- Experience using Active Directory Domain Services
This module explains the built-in security features of Windows clients and how to implement them using policies.
Learning objectives
After this module, you should be able to:
- Describe Windows Security capabilities
- Describe Windows Defender Credential Guard
- Manage Microsoft Defender Antivirus
- Manage Windows Defender Firewall
- Manage Windows Defender Firewall with Advanced Security
Prerequisites
- Strong technical skills installing, maintaining, and troubleshooting the Windows 10 OS or later
- Strong understanding of computer networking, client security, and application concepts
- Experience using Active Directory Domain Services
This module covers Microsoft Defender for Cloud Apps, focusing on securing sensitive data, its relevance in dynamic work settings, and effective utilization for improved security posture.
Learning objectives
- Describe Microsoft Defender for Cloud Apps
- Plan for Microsoft Defender for Cloud Apps usage
- Implement and use Microsoft Defender for Cloud Apps
Prerequisites
- Strong technical skills installing, maintaining, and troubleshooting the Windows 10 OS or later
- Strong understanding of computer networking, client security, and application concepts
- Experience using Active Directory Domain Services
Discusses some of the tools that you can use to perform detailed assessments of existing deployments, and describes some of the challenges that you may face.
Learning objectives
After completing this module, you will be able to:
- Describe the guidelines for an effective enterprise desktop deployment.
- Explain how to assess the current environment.
- Describe the tools that you can use to assess your current environment.
- Describe the methods of identifying and mitigating application compatibility issues.
- Explain considerations for planning a phased rollout.
Prerequisites
- Strong technical skills installing, maintaining, and troubleshooting the Windows 10 OS or later
- Strong understanding of computer networking, client security, and application concepts
- Experience using Active Directory Domain Services
Discusses the shifts from traditional to modern management and where on-premises solutions best fit in today’s enterprise.
Learning objectives
After completing this module, you will be able to:
- Describe the fundamentals of using images in traditional deployment methods.
- Describe the key benefits, limitations, and decisions when planning a deployment of – Windows using Microsoft Deployment Toolkit (MDT).
- Describe how Configuration Manager builds upon MDT and how both can work in harmony.
- Explain the different options and considerations when choosing the user interaction experience during deployment, and which methods and tools support these experiences.
Prerequisites
- Strong technical skills installing, maintaining, and troubleshooting the Windows 10 OS or later
- Strong understanding of computer networking, client security, and application concepts
- Experience using Active Directory Domain Services
This module explains the common day to day tasks that Administrators would use Configuration Manager to perform.
Learning objectives
After completing this module, you’ll be able to:
- Describe the capabilities of Configuration Manager.
- Describe the key components of Configuration Manager.
- Describe how to troubleshoot Configuration Manager deployments.
Prerequisites
- Strong technical skills installing, maintaining, and troubleshooting the Windows 10 OS or later
- Strong understanding of computer networking, client security, and application concepts
- Experience using Active Directory Domain Services
Use Autopilot to deploy new hardware or refreshing an existing hardware with the organization’s desired configuration, without using the traditional imaging process.
Learning objectives
After completing this module, you will be able to:
- Explain the benefits of modern deployment for new devices.
- Describe the process of preparing for an Autopilot deployment.
- Describe the process of registering devices in Autopilot.
- Describe the different methods and scenarios of Autopilot deployments.
- Describe how to troubleshoot common Autopilot issues.
- Describe the process of deployment using traditional methods.
Prerequisites
- Strong technical skills installing, maintaining, and troubleshooting the Windows 10 OS or later
- Strong understanding of computer networking, client security, and application concepts
- Experience using Active Directory Domain Services
Use dynamic provisioning methods such as Subscription Activation, Provisioning packages, and Azure AD join to reconfigure an existing operating system.
Learning objectives
After completing this module, you will be able to:
- Describe how Subscription Activation works.
- Describe the benefits of Provisioning Packages.
- Explain how Windows Configuration Designer creates Provisioning Packages.
- Describe the benefits of using MDM enrollment with Azure AD join.
Prerequisites
- Strong technical skills installing, maintaining, and troubleshooting the Windows 10 OS or later
- Strong understanding of computer networking, client security, and application concepts
- Experience using Active Directory Domain Services
Explore considerations and review the planning of transitioning to modern management, focusing on migration and newly provisioned devices.
Learning objectives
After completing this module, you should be able to:
- Identify usage scenarios for Azure AD join.
- Identify workloads that you can transition to Intune.
- Identify prerequisites for co-management.
- Identify considerations for transitioning to modern management.
- Plan a transition to modern management using existing technologies.
- Plan a transition to modern management using Microsoft Intune.
Prerequisites
- Strong technical skills installing, maintaining, and troubleshooting the Windows 10 OS or later
- Strong understanding of computer networking, client security, and application concepts
- Experience using Active Directory Domain Services
This module teaches managing Microsoft’s cloud-based PC management solution, Windows 365, offering personalized, secure Windows 11 experience from any device. Learn features, setup, management, security, deployment options, and licensing to optimize your environment.
Learning objectives
After completing this module, you should be able to:
- Describe the key features of Windows 365
- Describe the Windows 365 management experience
- Describe the Windows 365 security model
- Describe the Windows 365 deployment options
- Describe the Windows 365 licensing model
Prerequisites
- Strong technical skills installing, maintaining, and troubleshooting the Windows 11 OS or later
- Strong understanding of computer networking, client security, and application concepts
- Experience using Active Directory Domain Services
Learn to manage Azure Virtual Desktop, a cloud-based VDI solution providing personalized, secure Windows 11 experiences. Understand key features, management, security, and deployment options for optimizing your environment.
Learning objectives
After completing this module, you should be able to:
- Describe the key features of Azure Virtual Desktop
- Describe the Azure Virtual Desktop management experience
- Describe the Azure Virtual Desktop security model
- Describe the Azure Virtual Desktop deployment options
Prerequisites
- Strong technical skills installing, maintaining, and troubleshooting the Windows 10 OS or later
- Strong understanding of computer networking, client security, and application concepts
- Experience using Active Directory Domain Services
Request More Information
Training Options
- ILT: Instructor-Led Training
- VILT: Virtual Instructor-Led Training
Exam & Certification
Microsoft Certified: Endpoint Administrator (beta)
Candidates for this exam have subject matter expertise deploying, configuring, protecting, managing, and monitoring devices and client applications in a Microsoft 365 environment. They manage identity, security, access, policies, updates, and apps for endpoints. They implement solutions for efficient deployment and management of endpoints on various operating systems, platforms, and device types. They implement and manage endpoints at scale by using Microsoft Intune, Windows 365, Windows Autopilot, Microsoft Defender for Endpoint, and Azure Active Directory (Azure AD), part of Microsoft Entra.
Endpoint administrators collaborate with architects, Microsoft 365 administrators, security administrators, and other workload administrators to plan and implement a modern workplace strategy that meets the business needs of an organization.
Candidates for this exam have experience with Azure AD and Microsoft 365 technologies including Intune. They must have strong skills and experience in deploying, configuring, and maintaining Windows client and non-Windows devices.
Training & Certification Guide
How Cloud Architects Shape the Future of Digital Transformation
As organizations increasingly adopt cloud technologies to remain competitive, the role of cloud architects has become more critical than ever. This article explores how cloud architects are shaping the future of digital transformation, the strategic importance of their role, and the essential skills and certifications required to excel in this field.
The Future of Cloud Careers in Malaysia 2024
This article explores the current state of cloud careers in Malaysia, key roles and career pathways, and emerging cloud trends that are shaping the future of cloud technology.
Navigating the Cloud: Essential Skills for Cloud Administrators
In Malaysia, the demand for cloud administrators is growing as more sectors undergo digital transformation. This article explores the essential skills required for cloud administrators, the importance of industry-recognized certifications, and how emerging trends in cloud technologies are shaping this role.
In-demand Cloud Technology Skills – Insights from Malaysia’s Job Market
According to MDEC’s Digital Talent Snapshot for Q1 2024, the number of cloud-related job vacancies in Malaysia has significantly increased, reflecting the growing need for expertise in this domain. This article dives into the most in-demand cloud technology skills in Malaysia, backed by market data and insights from industry reports, and highlights the key roles that are shaping the future of cloud technology.
AI Mastery Program: Learn AI with Microsoft in 2024
Artificial Intelligence (AI) has been one of the hottest topics in the tech industry for the past decade. With its rapid advancements and potential to impact our daily lives, learning AI has become a highly sought-after skill.
We are thrilled to announce the launch of our Microsoft AI Mastery Program in 2024, made possible through our partnership with Microsoft, a renowned leader in AI technology. This program is tailored for individuals and tech professionals passionate about acquiring and mastering the fundamental and advanced principles of AI.
Maximize Your Productivity with Microsoft Copilot: A Complete Guide
Microsoft Copilot is an AI assistant within Microsoft 365 apps like Word, Excel, and Teams. It automates tasks and offers smart insights to boost productivity. This guide shows what Microsoft Copilot is, how it works, and ways it can simplify your tasks.
Top Microsoft Applied Skills Courses to Boost Your Career
Microsoft Applied Skills are scenario-based practical credentials that confirm your ability to tackle real-world challenges using Microsoft technologies.
In this article, we will dive into what these skills are, how they differ from traditional certifications, and the benefits they bring to your career. Expect insights on top courses, the assessment process, and tips for success.
Frequently Asked Questions
Earning a Microsoft Certification is globally recognized and industry-endorsed evidence of mastering real world skills. It shows you demonstrate proficiency in keeping pace with technology. It’s a career move that yields many positive results.
Getting a Microsoft Certification is also a great way to break into the tech industry. A Microsoft Certification immediately confers a level of authority and expertise, especially helpful for someone new to the industry.
The number of questions on a certification exam is subject to change as Microsoft make updates to ensure it aligns with current changes in the technology and job role. Most Microsoft Certification exams typically contain between 40-60 questions; and around 60-140 minutes.
Starting June 30 2021, all newly earned role-based and specialty certifications will be valid for one year from the date the certification was earned.
To stay up to date, IT pros are constantly learning and adding skills. The IDC study concluded that Microsoft Learning Partners are well positioned to help organizations achieve their business and learning goals. The IT leaders who were surveyed found the most value from a Learning Partner that provides:
- An end-to-end solution which starts with identifying skill gaps, simplifies the learning experience, and finishes by evaluating how well the Learning Partner met the organization goals.
- Scale, flexibility, and speed to train teams of any size, in any location, amid changing circumstances.
- Value-added services, such as hands-on labs, classroom training, and custom content that help the skills development program succeed.
- High-quality content and delivery, meaning accurate, relevant courseware, top-notch instructors, and a path to certification, if needed.
