เกี่ยวกับหลักสูตรนี้
MD-102 ครอบคลุมทักษะการจัดการ Endpoint ใน Microsoft 365 Tenant โดยใช้ Microsoft Intune, Windows Autopilot, Microsoft Defender for Endpoint และ Microsoft Entra ID สำหรับ Device ทุกประเภท
ผู้เข้าอบรมจะได้ฝึกปฏิบัติการ Deploy, Configure และ Protect Endpoint บน Windows, iOS/iPadOS, Android และ macOS เพื่อเตรียมพร้อมสำหรับการสอบรับรอง MD-102
เนื้อหาวิชา
Module 1: Add devices to Microsoft Entra ID
- Choose an appropriate device join type
- Join and register devices to Microsoft Entra ID
- Plan and implement groups for devices in Microsoft Entra ID
Module 2: Enroll devices to Microsoft Intune
- Configure enrollment settings
- Configure automatic enrollment for Windows and bulk enrollment for iOS/iPadOS and Android
- Configure enrollment profiles for Android devices (fully managed, dedicated, corporate owned, work profile)
Module 3: Implement identity and compliance
- Manage roles in Intune
- Implement compliance policies for all supported device platforms by using Intune
- Implement Microsoft Entra Conditional Access policies that require a compliance status
- Configure Windows Hello for Business
- Implement and manage Windows LAPS and manage local groups on Windows devices
Module 4: Deploy and upgrade Windows clients by using cloud-based tools
- Choose between Windows Autopilot and provisioning packages
- Choose a Windows Autopilot deployment mode and apply a device name template
- Implement Windows client deployment by using Windows Autopilot
- Create an Enrollment Status Page (ESP)
- Plan and implement provisioning packages and device upgrades for Windows 11
- Implement a Windows 365 Cloud PC deployment
Module 5: Plan and implement device configuration profiles
- Create device configuration profiles for Windows, including importing ADMX files
- Create device configuration profiles for Android, iOS/iPadOS, and macOS
- Create profiles for Windows 11 Enterprise multi-session devices
- Target a profile by using filters
Module 6: Implement Intune Suite add-on capabilities
- Configure Endpoint Privilege Management
- Manage applications by using the Enterprise App Catalog
- Implement Microsoft Intune Advanced Analytics
- Configure Microsoft Intune Remote Help
- Identify use cases for Microsoft Cloud PKI and implement Microsoft Tunnel for MAM
Module 7: Perform remote actions on devices
- Sync, restart, retire, or wipe devices
- Perform bulk remote actions
- Update Microsoft Defender Antivirus security intelligence
- Rotate BitLocker recovery keys
- Run a device query by using KQL
Module 8: Deploy and update apps
- Prepare and deploy apps by using Intune
- Deploy Microsoft 365 Apps by using Intune and configure policies for Office apps
- Deploy Microsoft 365 Apps as part of a Windows Autopilot deployment (ODT/OCT)
- Manage Microsoft 365 Apps by using the Microsoft 365 Apps admin center
- Deploy apps from platform-specific app stores by using Intune
Module 9: Plan and implement app protection and app configuration policies
- Plan and implement app protection policies
- Implement Microsoft Entra Conditional Access policies for app protection policies
- Plan and implement app configuration policies for managed apps and managed devices
Module 10: Configure endpoint security
- Create antivirus, disk encryption, and firewall policies
- Configure Attack surface reduction policies
- Plan and implement security baselines
- Integrate Intune with Microsoft Defender for Endpoint and onboard devices
Module 11: Manage device updates by using Intune
- Plan for device updates
- Create and manage update rings and update policies for Windows, iOS/iPadOS, and macOS
- Manage Android updates using configuration profiles or FOTA deployments
- Configure Windows client Delivery Optimization by using Intune
- Monitor updates