Manage and secure Microsoft 365 endpoints by using Intune

Develop the skills to deploy, configure, secure, and manage Microsoft 365 endpoints using Microsoft Intune and Microsoft Entra ID.

This five-day course provides IT professionals with practical experience in managing devices, applications, identities, and endpoint security across an organisation. You'll learn how to implement modern device management strategies, automate administrative tasks, and maintain secure, compliant endpoints.

Explore Microsoft Intune, Windows Autopilot, Microsoft Defender for Endpoint, and the Microsoft Intune Suite. You'll also discover how PowerShell, Microsoft Graph, and AI-powered tools such as Microsoft Security Copilot can improve endpoint management efficiency.

Through six hands-on labs, you'll apply your knowledge to realistic administration scenarios, from device enrolment and application deployment to security configuration and troubleshooting.

The course also covers cloud-hosted desktops using Windows 365 and Azure Virtual Desktop, helping you support flexible and secure working environments.

Prerequisites

Before attending this course, learners should have:

• Experience administering Microsoft 365 environments, including Microsoft Intune and Microsoft Entra ID
• Practical knowledge of deploying, configuring, and maintaining Windows client devices
• Familiarity with managing non-Windows devices in an organisational environment
• An understanding of device management, networking, and cloud-based services
• Experience implementing security policies, managing user access, and troubleshooting endpoint issues

Previous experience in an endpoint administration role is recommended.

No mandatory prerequisite certification is required.

Target audience

This course is designed for IT professionals responsible for deploying, managing, and securing devices and applications within Microsoft 365 environments.

It is particularly relevant for:

• Endpoint administrators managing Windows and non-Windows devices
• Microsoft 365 administrators responsible for device configuration and security
• IT professionals implementing Microsoft Intune and Microsoft Entra ID
• Systems administrators transitioning to cloud-based endpoint management
• Security administrators responsible for device compliance and endpoint protection
• IT professionals preparing for the Microsoft MD-102 certification exam

The course also supports administrators who collaborate with architects, security teams, and other technology specialists to implement modern workplace strategies.

Prepare infrastructure for devices using Microsoft Intune and Microsoft Entra ID

Understand the foundations of modern endpoint management and prepare the infrastructure required to deploy and manage organisational devices.

Topics covered:

• Understand endpoint management strategies and the capabilities of Microsoft Intune
• Explore unified endpoint management across different operating systems and device types
• Configure Microsoft Entra ID for device and policy management
• Administer device identities and authentication using Microsoft Entra ID
• Plan and implement device enrolment using Microsoft Intune
• Deploy Windows devices using Windows Autopilot

You'll develop the knowledge needed to establish a scalable endpoint management environment, supporting secure device deployment and consistent configuration across an organisation.

Manage and maintain devices using Microsoft Intune

Learn how to configure, monitor, update, and troubleshoot devices throughout their operational lifecycle.

Topics covered:

• Create and manage device configuration profiles using Microsoft Intune
• Implement device policies to support organisational requirements
• Monitor device status and maintain managed endpoints
• Manage Windows updates and device lifecycle processes
• Investigate device configuration and policy issues
• Troubleshoot common endpoint management problems

You'll gain practical experience maintaining device configurations, supporting reliable updates, and resolving issues that affect endpoint management.

Manage applications using Microsoft Intune

Develop the skills to deploy, protect, maintain, and monitor applications across managed devices.

Topics covered:

• Deploy and manage applications using Microsoft Intune
• Implement application protection and security policies
• Manage application lifecycles and user experience
• Monitor and optimise application performance
• Manage applications through the Enterprise App Catalog

You'll learn how to support consistent application deployment and maintenance while protecting organisational information.

Protect devices using Microsoft Intune

Explore endpoint security technologies and learn how to implement controls that protect devices, applications, and organisational data.

Topics covered:

• Implement endpoint security using Microsoft Defender and Microsoft Intune
• Configure device encryption and security policies
• Implement advanced threat protection using Microsoft Defender
• Enforce device compliance and remediate security issues
• Secure mobile access using Microsoft Tunnel
• Implement certificate management using Microsoft Cloud PKI

You'll develop the skills to strengthen endpoint security, enforce organisational policies, and respond to device compliance and protection requirements.

Automate and optimise endpoint management using Microsoft Intune

Discover how automation, AI, and endpoint performance monitoring can improve the efficiency of device administration.

Topics covered:

• Automate endpoint management tasks using PowerShell
• Use Microsoft Graph to support device management automation
• Explore AI-powered administration using Microsoft Security Copilot and related tools
• Monitor endpoint performance using Microsoft Intune
• Identify opportunities to optimise device management processes

You'll explore how automation and AI-assisted capabilities can reduce repetitive administration and help teams manage endpoints more efficiently.

Support operational excellence and readiness using Microsoft Intune

Learn how to maintain visibility, control administrative access, and support the operational health of a Microsoft Intune environment.

Topics covered:

• Implement reporting and data visibility using Microsoft Intune
• Review endpoint management information to support operational decisions
• Apply role-based access control in Microsoft Intune
• Configure delegated administration responsibilities
• Maintain tenant health and operational readiness

You'll learn how to support effective administration, improve reporting visibility, and maintain appropriate access controls across managed environments.

Extend endpoint capabilities using Microsoft Intune Suite

Explore advanced Microsoft Intune Suite capabilities that extend device management, troubleshooting, and security.

Topics covered:

• Understand Microsoft Intune Suite capabilities
• Implement Remote Help scenarios using Microsoft Intune
• Analyse advanced device signals using Microsoft Intune Suite
• Evaluate Endpoint Privilege Management capabilities

You'll discover how these additional capabilities can support device troubleshooting, provide deeper operational insights, and strengthen endpoint administration.

Deliver cloud-hosted desktops using Azure Virtual Desktop and Windows 365

Understand how cloud-hosted desktop technologies support modern working environments and integrate with Microsoft Intune.

Topics covered:

• Explore Windows 365 and cloud PC deployment
• Understand Windows 365 management capabilities
• Configure and manage Windows 365 using Microsoft Intune
• Explore Azure Virtual Desktop and its capabilities
• Integrate Azure Virtual Desktop with Microsoft Intune

You'll gain an understanding of how to deliver and manage cloud-hosted desktop environments while maintaining consistent device administration and security practices.

Exams and assessments

This course supports preparation for the Microsoft MD-102: Endpoint Administrator certification exam, which is associated with the Microsoft 365 Certified: Endpoint Administrator Associate certification.

The exam evaluates skills across five areas:

• Prepare infrastructure for devices – 24%
• Manage and maintain devices – 29%
• Protect devices – 17%
• Manage and secure applications – 16%
• Optimise endpoint operations using automation, monitoring, and reporting – 14%

Microsoft requires a passing score of 700 or higher.

Throughout the course, learners can reinforce their understanding through module knowledge checks, instructor-led discussions, and practical exercises.

Microsoft also provides a free practice assessment to support exam preparation.

The certification exam is separate from the course. Please contact your account manager to purchase a voucher..

Hands-on learning

This course includes six hands-on labs, providing approximately 9 hours and 50 minutes of practical experience.

Learners work through connected scenarios in a simulated organisational environment, applying their knowledge to realistic endpoint administration tasks.

Practical exercises include:

• Foundation – identity, enrolment, and Autopilot: Configure identities, device registration, enrolment, and Windows Autopilot
• Manage and maintain devices: Implement configuration profiles, manage updates, and troubleshoot device policies
• Manage applications: Deploy and protect applications, manage application lifecycles, and explore the Enterprise App Catalog
• Protect devices: Configure endpoint security, encryption, Microsoft Defender for Endpoint, Microsoft Tunnel, and Microsoft Cloud PKI
• Automate and operate: Use Microsoft Graph PowerShell, reporting, remediation, and delegated administration
• Extend capabilities: Explore Endpoint Privilege Management, Remote Help, advanced analytics, Windows 365, and Azure Virtual Desktop

Each lab builds on previous exercises, helping learners develop practical experience across the endpoint management lifecycle.

By the end of this course, learners will be able to:

• Prepare and manage endpoint infrastructure using Microsoft Intune and Microsoft Entra ID, including device identities, authentication, enrolment, and Windows Autopilot deployment
• Configure, monitor, maintain, and troubleshoot managed devices, including configuration profiles, device policies, Windows updates, and lifecycle management
• Deploy and manage applications using Microsoft Intune, implementing application protection policies, managing application lifecycles, and maintaining application performance
• Protect organisational devices and data using Microsoft Defender for Endpoint, device encryption, compliance policies, Microsoft Tunnel, and Microsoft Cloud PKI
• Automate endpoint management using PowerShell and Microsoft Graph, and explore how AI-powered tools can support administration, monitoring, and troubleshooting
• Improve endpoint operations through reporting, role-based access control, delegated administration, tenant health monitoring, and Microsoft Intune Suite capabilities
• Configure and manage cloud-hosted desktops using Windows 365 and Azure Virtual Desktop, integrating these services with Microsoft Intune