Microsoft Intune training

Lesson 1 • Intune Architecture and Components

Explains the cloud-based architecture underpinning Intune. Learners map data flow between devices, the Intune service, and Azure Active Directory.

Lesson 2 • Navigating the Intune Admin Center

Guides learners through the Microsoft Intune admin center interface. Builds confidence in locating key workloads and dashboard widgets.

Lesson 3 • Licensing and Subscription Requirements

Covers the licensing tiers that include Intune and how to assign licenses to users. Ensures learners can validate prerequisites before deployment.

Lesson 1 • macOS Enrollment and Management

Addresses macOS enrollment via Apple Business Manager and direct enrollment options. Learners apply platform-specific settings to bring Macs under Intune management.

Lesson 2 • iOS and iPadOS Enrollment Methods

Explains Apple Business Manager integration and user-driven enrollment for iOS. Learners configure ADE and supervised mode for corporate devices.

Lesson 3 • Enrollment Concepts and Prerequisites

Introduces enrollment terminology and the Azure AD and DNS prerequisites required. Connects enrollment readiness to successful device management outcomes.

Lesson 4 • Windows Device Enrollment Methods

Covers Autopilot, bulk enrollment, and manual enrollment for Windows devices. Learners choose the right method based on deployment scale and ownership model.

Lesson 1 • macOS Configuration Profiles

Covers preference domain payloads, kernel extensions, and system extension policies for macOS. Learners deploy profiles that enforce macOS-specific security and productivity settings.

Lesson 2 • Configuration Profile Fundamentals

Defines profile types, assignment scopes, and the policy processing order. Provides the conceptual model learners need before building any profile.

Lesson 3 • Profile Troubleshooting and Reporting

Teaches how to diagnose profile assignment failures using Intune reports and device logs. Learners resolve common conflicts and verify successful policy application.

Lesson 4 • Mobile Platform Configuration Profiles

Creates iOS, iPadOS, and Android configuration profiles for email, Wi-Fi, and VPN. Learners apply platform-specific payload options to meet corporate requirements.

Lesson 1 • Conditional Access Integration

Connects Intune compliance signals to Azure AD Conditional Access policies. Learners restrict cloud app access based on device compliance and user risk.

Lesson 2 • Compliance Policy Fundamentals

Explains compliance policy structure, evaluation logic, and grace periods. Establishes how compliance state feeds into access decisions downstream.

Lesson 3 • Building Platform Compliance Policies

Creates compliance policies for Windows, iOS, Android, and macOS with appropriate health checks. Learners configure OS version, encryption, and password requirements.

Lesson 1 • App Reporting and Troubleshooting

Uses Intune app install reports and troubleshooting blade to diagnose deployment failures. Learners interpret error codes and resolve common Win32 and store app issues.

Lesson 2 • App Types and Deployment Methods

Surveys app types supported by Intune including store apps, LOB apps, and Win32 apps. Learners select the correct app type and deployment intent for each scenario.

Lesson 3 • Win32 App Deployment Deep Dive

Covers the full Win32 app lifecycle from packaging to detection rules and supersedence. Learners build reliable Win32 deployments with dependency and requirement rules.

Lesson 4 • App Protection Policies

Creates MAM policies to protect corporate data in apps on managed and unmanaged devices. Learners configure data transfer restrictions, PIN requirements, and selective wipe.

Lesson 1 • Disk Encryption Policies

Configures BitLocker for Windows and FileVault for macOS through Intune encryption policies. Learners manage recovery keys and monitor encryption status across the fleet.

Lesson 2 • Security Baselines

Deploys Microsoft-recommended security baseline profiles for Windows and Edge. Learners customize baselines and resolve conflicts with existing configuration profiles.

Lesson 3 • Microsoft Defender for Endpoint Integration

Connects Intune to Microsoft Defender for Endpoint for risk-based Conditional Access. Learners onboard devices, view threat signals, and trigger remediation from Intune.

Lesson 4 • Privileged Access and Account Protection

Configures Windows LAPS through Intune and enforces account protection policies. Learners rotate local admin passwords and restrict credential exposure on endpoints.

Lesson 1 • Audit Logs and Compliance Reporting

Uses Intune audit logs and built-in reports to demonstrate administrative accountability. Learners export logs to a SIEM and build compliance dashboards for stakeholders.

Lesson 2 • Multi-Admin Approval Workflows

Configures access policies requiring peer approval before sensitive Intune actions execute. Learners implement approval workflows to reduce risk from unilateral admin changes.

Lesson 3 • Custom Roles and Scope Tags

Creates custom roles with granular permissions and applies scope tags to limit object visibility. Learners segment administrative access by geography, department, or device type.

Lesson 1 • Intune Remediations and Scripts

Deploys proactive remediations and PowerShell scripts to detect and fix device issues at scale. Learners schedule remediations and interpret detection and remediation output.

Lesson 2 • Monitoring, Alerts, and Operational Health

Configures Intune service health alerts and integrates monitoring with Azure Monitor. Learners build operational dashboards to track enrollment, compliance, and app health.

Lesson 3 • Bulk Operations and Policy Cloning

Performs bulk device actions and clones policies across tenants using Graph API and community tools. Learners reduce repetitive configuration work in large-scale deployments.

Lesson 4 • PowerShell Automation for Intune

Uses the Microsoft.Graph PowerShell SDK to automate policy export, import, and reporting. Learners build reusable scripts for common Intune administrative tasks.