Ideal candidate for this course:
- please be aware that this 5-day training is no beginner´s class
- Basic understanding of Active Directory, Azure Active Directory, WSUS and SQL
- Basic knowledge and working experience with Configuration Manager
You will be able to design, deploy, manage, and troubleshoot Microsoft Configuration Manager, Microsoft 365, and Windows endpoints in your environment. The course focuses on automation and understanding how to optimize your Windows management with Configuration Manager, Microsoft 365 services and Microsoft Azure.
The course is always based on the latest available documentation.
After the course, you will have a solid understanding of the design options, flow of the major features, and troubleshooting techniques.
Likewise, you will have a solid understanding of how Configuration Manager and Microsoft 365 can be used to secure Windows endpoint deployments.
Prerequisites and Summary:
understanding of Active Directory
Active Directory
and SQL
knowledge and working experience with Configuration Manager
ll walk you through advanced design, installation, configuration, cloud integration, and troubleshooting of key features in Configuration Manager and Windows endpoints
The course focuses on:
rating Configuration Manager with Microsoft Azure using services such as Cloud Management Gateway, Windows Autopilot, Microsoft Defender for Endpoints, and co-management.
n Enterprise client management
lling and troubleshooting clients
t Health
tory management
cation deployment
are updates & Windows Servicing
iance Settings
ting System Deployment including Autopilot
soft Azure integration with Cloud Management Gateway
ws endpoint modern management using Microsoft Endpoint Manager and co-management
ng with Tenant attach
ws security options
leshooting tools
soft Defender for Endpoints
Day 1
Introduction to Modern IT and Modern Workplace
- How Microsoft thinks about Modern Management o Cloud Values for Configuration Manager
- Manage modern Windows and MacOS devices using Configuration Manager and Intune
- Intune only compared to Configuration Manager with Intune Integration
- The transition to a Modern client
- How can we get from the on prem world to the cloud world
- Issues we have seen in our projects
Azure AD and Device authentication
- Planning the directory synchronization
- Windows 10 device authentication (Hybrid Join, AAD Join, Device registration)
- Device Enrollment
- Identity Models
- Azure AD Connect Installation and Configuration
Integrating the Cloud Management Gateway (CMG) to support Internet based users
Troubleshooting Cloud Management Gateway
- Understanding the Cloud Management Gateway in-depth
- How to troubleshoot
- Understanding log files
Configuration manager client management
- Installing, configuring and troubleshooting clients
- Installing the client for Internet based Windows devices (Intune / CMG)
Day 2:
Co-management and cloud attach
- Introduction
- The pros and the cons
- Understanding co-management in-depth
- Preparing Endpoint Manager to support the workloads
- Configure co-management in Configuration Manager
- Working with cloud attach
- Understanding Endpoint Analytics
- Working with real-time actions
- Working with the Intune Admin Center
Content distribution and sharing
- Working with content distribution in distributed environments
- Working with BranchCache
- Working with Delivery optimization
- Integrating the Cloud Distribution Point
- Content Distribution for roaming clients without VPN (CMG managed)
- Content Distribution for VPN clients (with- and without split tunnel VPN)
Managing Windows endpoints
- Develop a Windows endpoint management strategy
- Understanding the Windows MDM management options
- Manage modern Windows endpoint devices using Intune
Deploying Windows endpoints with operating system deployment (Configuration Manager)
- Windows endpoints servicing and Greenfield environments
- Deploying images
- Deploy an Operating System over Cloud Management Gateway
- Troubleshooting operating system deployment
Day 3:
Deploying Windows endpoints using Autopilot
- Windows 10 Autopilot integration
- Scenarios (User-driven, self-deploying, Autopilot Reset, Pre-provisioning,
- Autopilot for existing devices)
- Windows Autopilot Administration
- Troubleshooting Windows Autopilot
Settings Management
- Device Management concepts
- Group Policies vs. MDM
- Co-management strategy
- Controlling device features and settings with Configuration Manager
- Controlling device features and settings with Intune
- Migrate group policy to MDM policies
- Monitor the settings deployment
Day 4:
Application deployment
- Working with the Configuration Manager application model
- Working with the Endpoint Manager application model
- Troubleshooting application deployments
- ConfigMgr Collections / Intune Groups – Pros and Cons
- Deploying Windows Store applications
- Windows Store for Business integration
- Deploying Win32 applications
- Software Center, Company Portal and Windows Store for Business
Software Updates
- Creating and designing the software update infrastructure
- Deploying and troubleshooting Microsoft software updates
- Working with Windows Autopatch
- Deploying 3rd. party updates
- Develop a Windows Servicing model
Automation using Microsoft Graph
- Introducing Microsoft Graph
- Automating Windows management using Graph
Day 5:
Managing Microsoft Defender for Endpoint
- Understand and implement the Microsoft Defender for Endpoint security options
- Working with Microsoft Defender for Endpoints
- Working with Microsoft Security Center
- Conditional Access
- Multifactor authentication
https://www.etc.at/seminare/MEMCM