Optimizing and Managing Windows 365 Cloud PCs Course

Lesson 1 • Core Infrastructure Components

Identifies Azure Virtual Network integration, Microsoft Entra ID, and Intune as foundational pillars. Connects infrastructure roles to provisioning and management workflows covered later.

Lesson 2 • Windows 365 Editions and Licensing Tiers

Examines Business and Enterprise editions, SKU differences, and per-user licensing mechanics. Enables learners to select the correct tier for organisational requirements.

Lesson 3 • Windows 365 Portal and Admin Centre Navigation

Introduces the Microsoft 365 admin centre, Intune portal, and Windows 365 blade layout. Builds navigation fluency required for all hands-on tasks in subsequent chapters.

Lesson 1 • Provisioning Policy Creation

Teaches building provisioning policies that define image, network, and region settings for Cloud PCs. Policies directly control the configuration of every provisioned device.

Lesson 2 • Provisioning Troubleshooting and Retry

Addresses common provisioning failures, error codes, and the retry mechanism. Learners gain the diagnostic skills needed to resolve deployment issues quickly.

Lesson 3 • Azure Network Connection Setup

Covers creating and validating Azure Network Connections (ANCs) that link Cloud PCs to corporate networks. Proper ANC configuration is a prerequisite for all provisioning policies.

Lesson 1 • Image Versioning and Lifecycle Management

Covers versioning strategies, deprecation workflows, and updating images without disrupting active users. Ensures Cloud PCs always run approved, up-to-date software baselines.

Lesson 2 • Application Integration in Images

Explains embedding line-of-business apps, drivers, and configurations directly into custom images. Reduces post-provisioning configuration time and ensures consistent app availability.

Lesson 3 • Gallery Images and Microsoft-Managed Baselines

Reviews available gallery images, Windows versions, and Microsoft 365 app bundles included by default. Establishes the starting point for all image customisation decisions.

Lesson 1 • Windows Update for Business Policies

Configures update rings, feature update deferrals, and quality update schedules for Cloud PCs. Balances security patching urgency with user productivity and business continuity.

Lesson 2 • Enrolling Cloud PCs in Intune

Explains automatic Intune enrollment triggered by provisioning and the enrollment status page flow. Establishes management authority over Cloud PCs from the moment they are created.

Lesson 3 • Configuration Profiles for Cloud PCs

Covers building and assigning device configuration profiles tailored to Cloud PC use cases. Profiles enforce settings such as display resolution, power, and peripheral access.

Lesson 4 • Compliance Policies and Conditional Access

Teaches defining compliance rules and linking them to Conditional Access policies that gate resource access. Ensures only healthy, policy-compliant Cloud PCs can reach corporate data.

Lesson 1 • Data Loss Prevention and Information Protection

Applies Microsoft Purview sensitivity labels, DLP policies, and clipboard/drive redirection restrictions. Prevents unauthorised data exfiltration from Cloud PC sessions.

Lesson 2 • Privileged Access and Role Management

Configures Privileged Identity Management, local administrator settings, and least-privilege access for Cloud PCs. Limits blast radius of compromised accounts in the Cloud PC environment.

Lesson 3 • Multi-Factor Authentication and Passwordless

Configures MFA enforcement and passwordless authentication methods for Cloud PC sign-in. Reduces credential-based attack surface while maintaining a smooth user experience.

Lesson 4 • Microsoft Entra ID Join Strategies

Compares Microsoft Entra ID join and hybrid join models and their security and management implications. Choosing the correct join type determines authentication flow and policy scope.

Lesson 1 • Azure Monitor and Log Analytics Integration

Connects Cloud PC diagnostic data to Azure Monitor workspaces for advanced querying and alerting. Enables custom dashboards and long-term trend analysis beyond built-in reports.

Lesson 2 • Remote Actions and On-Demand Diagnostics

Demonstrates using Intune remote actions and the Cloud PC troubleshoot tool to diagnose live issues. Reduces mean time to resolution by enabling admin intervention without user disruption.

Lesson 3 • Endpoint Analytics for Cloud PCs

Configures Endpoint Analytics to measure startup performance, app reliability, and user experience scores. Provides data-driven insights for optimising Cloud PC configurations.

Lesson 1 • Storage and Profile Performance

Addresses FSLogix profile container sizing, disk caching, and OneDrive Known Folder Move for Cloud PCs. Profile strategy significantly impacts login times and session responsiveness.

Lesson 2 • User Experience and Display Settings

Configures display resolution, colour depth, multimedia redirection, and Teams optimisation for Cloud PCs. Tuning these settings maximises perceived performance on varied client devices.

Lesson 3 • Cost Optimisation Strategies

Analyses utilisation reports to identify idle Cloud PCs, right-size SKUs, and apply organisational policies. Reduces total spend while maintaining service levels across the user base.

Lesson 4 • Network Performance Optimisation

Covers RDP Shortpath, Quality of Service tagging, and network routing best practices for low-latency sessions. Network quality directly determines perceived Cloud PC responsiveness.

Lesson 1 • Automation with Microsoft Graph API

Uses Microsoft Graph API endpoints to automate provisioning, reporting, and lifecycle actions at scale. Automation reduces manual effort and enforces consistency across large deployments.

Lesson 2 • Lifecycle Management and Deprovisioning

Manages Cloud PC end-of-life through graceful deprovisioning, data retention, and license reclamation. Proper offboarding prevents orphaned resources and unnecessary licensing costs.

Lesson 3 • Role-Based Access Control for Administrators

Defines custom Intune and Entra ID roles scoped to Cloud PC administration tasks. Proper RBAC prevents over-privileged access while enabling distributed management teams.

Lesson 4 • Governance Policies and Organisational Settings

Configures Windows 365 organisational settings, user-initiated restore points, and cross-tenant access policies. Governance settings enforce organisational standards at the service level.