MD-102T00: Manage and Secure Microsoft 365 Endpoints by Using Intune

About this Course

In this course, students learn to plan and execute an endpoint deployment, configuration, and management strategy using Microsoft Intune as the unified endpoint management platform. The course covers preparing identity and device infrastructure with Microsoft Entra ID, enrolling and configuring devices, managing applications, and protecting endpoints and data. Students also explore automation with PowerShell and Microsoft Graph, AI-assisted management with Microsoft Security Copilot, the extended capabilities of the Microsoft Intune Suite, and the delivery of cloud-hosted desktops with Windows 365 and Azure Virtual Desktop.

Audience Profile

As a candidate for this course and the associated exam, you have subject matter expertise managing devices and client applications in a Microsoft 365 tenant by using Microsoft Intune. As an endpoint administrator, you collaborate with architects, Microsoft 365 administrators, security administrators, and other workload administrators to plan and implement a modern workplace strategy that meets the business needs of an organization. You’re responsible for:

Implementing solutions for efficient deployment and management of endpoints on various operating systems, platforms, and device types.
Implementing and managing endpoints at scale by using Microsoft Intune, Microsoft Intune Suite, Windows Autopilot, Microsoft Copilot for Security, Microsoft Defender for Endpoint, Microsoft Entra ID, Azure Virtual Desktop, and Windows 365.
Implementing identity, security, access, policies, updates, and apps for endpoint.

At Course Completion

Outline

Learning Path 1: Prepare infrastructure for devices using Microsoft Intune and Microsoft Entra ID

In this learning path, you'll learn how to build the identity and enrollment infrastructure that supports cloud-based endpoint management with Microsoft Intune and Microsoft Entra ID.

Modules:

Understand endpoint management strategies and Microsoft Intune
Configure Microsoft Entra ID for device and policy management
Administer device identity and authentication using Microsoft Entra ID
Plan and implement device enrollment using Microsoft Intune
Deploy Windows devices using Windows Autopilot

Labs:

Coming soon

Learning Path 2: Manage and maintain devices using Microsoft Intune

In this learning path, you'll learn how to configure and manage devices after enrollment using Microsoft Intune.

Modules:

Configure device profiles and policy management using Microsoft Intune
Monitor and maintain devices using Microsoft Intune
Manage Windows updates and lifecycle using Microsoft Intune
Troubleshoot device and policy issues using Microsoft Intune

Labs:

Coming soon

Learning Path 3: Manage applications using Microsoft Intune

In this learning path, you'll learn how to deliver and govern applications across managed endpoints using Microsoft Intune.

Modules:

Deploy and manage applications using Microsoft Intune
Implement application protection and security using Microsoft Intune
Manage application lifecycle and user experience using Microsoft Intune
Monitor and optimize application performance using Microsoft Intune
Manage Enterprise App Catalog applications

Labs:

Coming soon

Learning Path 4: Protect devices using Microsoft Intune

In this learning path, you'll learn how to apply layered protection to managed endpoints using Microsoft Intune and the broader Microsoft Defender stack.

Modules:

Implement endpoint security with Microsoft Defender and Microsoft Intune
Implement device encryption and security policies using Microsoft Intune
Implement advanced threat protection using Microsoft Intune and Microsoft Defender
Enforce compliance and remediate security issues by using Microsoft Intune
Secure mobile access using Microsoft Tunnel
Implement Microsoft Cloud PKI

Labs:

Coming soon

Learning Path 5: Automate and optimize endpoint management using Microsoft Intune

In this learning path, you'll learn how to scale, automate, and optimize day-to-day endpoint management using Microsoft Intune, PowerShell, Microsoft Graph, and Copilot.

Modules:

Automate endpoint management using PowerShell and Microsoft Graph
Optimize device management using AI ad Copilot tools
Monitor and optimize endpoint performance using Microsoft Intune

Labs:

Coming soon

Learning Path 6: Support operational excellence and readiness using Microsoft Intune

In this learning path, you'll learn how to run Microsoft Intune as an operationally healthy service that other teams can depend on.

Modules:

Implement reporting and data visibility using Microsoft Intune
Apply RBAC and admin delegation in Microsoft Intune
Maintain tenant health and support readiness

Labs:

Coming soon

Learning Path 7: Extend endpoint capabilities using Microsoft Intune Suite

In this learning path, you'll learn how to extend Microsoft Intune with the premium capabilities delivered through Microsoft Intune Suite.

Modules:

Explore Microsoft Intune Suite capabilities
Implement Remote Help scenarios using Microsoft Intune
Analyze advanced device signals with Microsoft Intune Suite
Evaluate Endpoint Privilege Management with Microsoft Intune

Labs:

Coming soon

Learning Path 8: Deliver cloud-hosted desktops using Azure Virtual Desktop and Windows 365

In this learning path, you'll learn how to deliver cloud-hosted Windows desktops to users using Windows 365 and Azure Virtual Desktop, and how to manage those desktops alongside physical endpoints with Microsoft Intune.

Modules:

Explore Windows 365 for cloud PC deployments
Configure and manage Windows 365 with Microsoft Intune
Explore Azure Virtual Desktop
Integrate Azure Virtual Desktop with Microsoft Intune

Labs:

Coming soon

Prerequisites

Before attending this course, students must have:

Strong technical skills installing, maintaining, and troubleshooting the Windows 10 OS or later
Strong understanding of computer networking, client security, and application concepts
Experience using Active Directory Domain Services
Strong skills and experience in deploying, configuring, and maintaining Windows client and non-Windows devices