MECER MS-MD102T00 Microsoft 365 Endpoint Administrator User Guide

MECER MS-MD102T00 Microsoft 365 Endpoint Administrator

Product Information

The product is a training course called “Microsoft 365 Modern Desktop Administrator”. It is designed for individuals who want to become proficient in managing and maintaining Windows 11 and later, as well as non-Windows devices. The course covers various modules that teach concepts related to endpoint management, Windows OS editions, Azure Active Directory, device authentication, enrolling devices using Microsoft Configuration Manager and Microsoft Intune, executing and overseeing device profiles, maintaining user profiles, mobile application management, deploying and updating applications, administering endpoint applications, and protecting identities in Active Directory Domain Services.

Product Usage Instructions:

To use the Microsoft 365 Modern Desktop Administrator training course effectively, follow these steps:

1. Start with Module 1: Explore the Enterprise Desktop. This module provides an overview of modern endpoint management and enterprise desktop lifecycle concepts. It covers the planning, deployment, and maintenance stages of the lifecycle.
2. Proceed to Module 2: Explore Windows Editions. In this module, you will learn about different Windows OS editions, their features, and installation methods.
3. Move on to Module 3: Understand Azure Active Directory. This module explains Azure AD and compares it to AD DS. You will also learn about Azure AD Premium P1 and P2, as well as Azure AD Domain Services for managing domain-joined devices and apps in the cloud.
4. Continue with Module 4: Manage Azure Active Directory identities. This module focuses on using Azure AD effectively. Topics covered include RBAC, user roles, creating and managing users and groups, using PowerShell cmdlets, and synchronizing objects from AD DS to Azure AD.
5. Proceed to Module 5: Manage device authentication. In this module, you will learn about device authentication and management in Azure Active Directory.
6. Move on to Module 6: Enroll devices using Microsoft Configuration Manager. This module introduces client deployment options and high-level management and monitoring options available using Configuration Manager.
7. Continue with Module 7: Enroll devices using Microsoft Intune. In this module, you will learn how to configure and set up Intune for easier management of Windows, Android, and iOS devices.
8. Proceed to Module 8: Execute device profiles. This module covers the various types of device profiles and how to create and manage them.
9. Move on to Module 9: Oversee device profiles. This module focuses on monitoring profiles to ensure correct assignments and resolving conflicts when multiple profiles are applied.
10. Continue with Module 10: Maintain user profiles. In this module, you will learn about the benefits of different Windows user profiles, how to manage them, and how to facilitate profile data synchronization across multiple devices.
11. Proceed to Module 11: Execute mobile application management. This module introduces Mobile Application Management (MAM) and covers considerations for implementing MAM using Intune and Configuration Manager.
12. Move on to Module 12: Deploy and update applications. In this module, you will master deploying applications using Intune, Configuration Manager, Group Policy, and Microsoft Store Apps.
13. Continue with Module 13: Administer endpoint applications. This module focuses on managing apps on Intune managed devices and provides an overview of using IE Mode with Microsoft Edge.
14. Proceed to Module 14: Protect identities in Active Directory Domain Services. This module introduces various authentication methods used to protect identities.

By following these usage instructions and completing all the modules of the training course, you will gain comprehensive knowledge and skills in managing and maintaining modern desktop environments using Microsoft 365.

MS-MD102T00 Microsoft 365 Endpoint Administrator

INTRODUCTION

In this course, students will learn to plan and execute an endpoint deployment strategy using contemporary deployment techniques and implementing update strategies. The course introduces essential elements of modern management, co- management approaches, and Microsoft Intune integration. It covers app deployment, management of browser-based applications, and key security concepts such as authentication, identities, access, and compliance policies. Technologies like Azure Active Directory, Azure Information Protection, and Microsoft Defender for Endpoint are explored to protect devices and data.

AUDIENCE PROFILE
The Microsoft 365 Endpoint Administrator is responsible for deploying, configuring, securing, managing, and monitoring devices and client applications in a corporate setting. Their duties include managing identity, access, policies, updates, and apps. They work alongside the M365 Enterprise Administrator to develop and execute a device strategy that aligns with the requirements of a modern organization. Microsoft 365 Endpoint Administrators should be well-versed in M365 workloads and possess extensive skills and experience in deploying, configuring, and maintaining Windows 11 and later, as well as non-Windows devices. Their role emphasizes cloud services over on- premises management technologies.

PREREQUISITES
The Modern Desktop Administrator must be familiar with M365 workloads and must have strong skills and experience of deploying, configuring, and maintaining Windows 11 and later, and non-Windows devices.

COURSE CONTENT

• Module 1: Explore the Enterprise Desktop
  This module covers modern endpoint management and enterprise desktop lifecycle concepts. It teaches the stages of the lifecycle (planning, deployment, maintenance) and provides a foundation for future learning.

• Module 2: Explore Windows Editions
  This module covers Windows OS editions, features, and installation methods. Learners gain a deeper understanding of the available editions and corresponding installation processes.

• Module 3: Understand Azure Active Directory
  This module explains Azure AD. You’ll compare Azure AD to AD DS, learn about Azure AD Premium P1 and P2, and explore Azure AD Domain Services for managing domain-joined devices and apps in the cloud.

• Module 4: Manage Azure Active Directory identities
  This module teaches how to use Azure AD effectively. You’ll learn about RBAC, user roles, creating and managing users and groups, using PowerShell cmdlets, and synchronizing objects from AD DS to Azure AD.

• Module 5: Manage device authentication
  In this module, you learn about device authentication and management in Azure Active Directory.

• Module 6: Enroll devices using Microsoft Configuration Manager
  This module introduces students to client deployment options and some of the high-level management and monitoring options that are available using Configuration Manager.

• Module 7: Enroll devices using Microsoft Intune
  Students will learn how to configure and setup Intune to more easily manage Windows, Android, and iOS devices.

• Module 8: Execute device profiles
  Students learn about the various types of device profiles, and how to create and manage them.

• Module 9: Oversee device profiles
  This module introduces students to monitoring profiles to ensure correct assignments and resolving conflicts when multiple profiles are applied.

• Module 10: Maintain user profiles
  Students learn about the benefits of various Windows user profiles, how to manage them, and how to facilitate profile data synchronization across multiple devices.

• Module 11: Execute mobile application management
  This module introduces Mobile Application Management (MAM). Students will learn about considerations for implementing MAM and will be introduced to the management of MAM using Intune and Configuration Manager.

• Module 12: Deploy and update applications
  In this module, you’ll master deploying applications using Intune, Configuration Manager, Group Policy, and Microsoft Store Apps. These powerful tools and techniques will equip you to manage and maintain diverse applications across your organization effectively.

• Module 13: Administer endpoint applications
  In this module, you’re introduced to managing apps on Intune managed devices. The module will then conclude with an overview of how to use IE Mode with Microsoft Edge.

• Module 14: Protect identities in Active Directory Domain Services
  This module introduces students to the various authentication methods used to protect identities.

• Module 15: Deploy device data protection
  This module describes how you can use Intune to create and manage WIP policies that manage this protection. The module also covers implementing BitLocker and Encrypting File System.

• Module 16: Manage Microsoft Defender for Endpoint
  This module explores using Microsoft Defender for Endpoint to provide additional protection and monitor devices against threats.

• Module 17: Manage Microsoft Defender in Windows client
  This module explains the built-in security features of Windows clients and how to implement them using policies.

• Module 18: Manage Microsoft Defender for Cloud Apps
  This module covers Microsoft Defender for Cloud Apps, focusing on securing sensitive data, its relevance in dynamic work settings, and effective utilization for improved security posture.

• Module 19: Assess deployment readiness
  Discusses some of the tools that you can use to perform detailed assessments of existing deployments, and describes some of the challenges that you may face.

• Module 20: Deploy using the Microsoft Deployment Toolkit
  Discusses the shifts from traditional to modern management and where on- premises solutions best fit in today’s enterprise.

• Module 21: Deploy using Microsoft Configuration Manager
  This module explains the common day to day tasks that Administrators would use Configuration Manager to perform.

• Module 22: Deploy Devices using Windows Autopilot
  Use Autopilot to deploy new hardware or refreshing an existing hardware with the organization’s desired configuration, without using the traditional imaging process.
  Module 23: Implement dynamic deployment methods

• Use dynamic provisioning methods such as Subscription Activation, Provisioning packages, and Azure AD join to reconfigure an existing operating system.

• Module 24: Plan a transition to modern endpoint management
  Explore considerations and review the planning of transitioning to modern management, focusing on migration and newly provisioned devices.

• Module 25: Manage Windows 365
  This module teaches managing Microsoft’s cloud-based PC management solution, Windows 365, offering personalized, secure Windows 11 experience from any device. Learn features, setup, management, security, deployment options, and licensing to optimize your environment.

• Module 26: Manage Azure virtual desktop
  Learn to manage Azure Virtual Desktop, a cloud-based VDI solution

ASSOCIATED CERTIFICATIONS & EXAM
This course will prepare delegates to write the Microsoft MD-102: Microsoft 365 Endpoint Administrator exam.

Read User Manual Online (PDF format)

Read User Manual Online (PDF format)  >>

Download This Manual (PDF format)

Download this manual  >>