Managing Windows 11 Using Microsoft Endpoint Manager: Configuration Manager and M365

You will be able to design, deploy, manage, and troubleshoot Microsoft Configuration Manager, Microsoft 365, and Windows endpoints in your environment. The course focuses on automation and understanding how to optimize your Windows management with Configuration Manager, Microsoft 365 services and Microsoft Azure.
The course is always based on the latest available documentation.

After the course, you will have a solid understanding of the design options, flow of the major features, and troubleshooting techniques.
Likewise, you will have a solid understanding of how Configuration Manager and Microsoft 365 can be used to secure Windows endpoint deployments.

Prerequisites and Summary:

• Basic understanding of Active Directory
• Azure Active Directory
• WSUS, and SQL
• Basic knowledge and working experience with Configuration Manager
• We will walk you through advanced design, installation, configuration, cloud integration, and troubleshooting of key features in Configuration Manager and Windows endpoints

The course focuses on:

• integrating Configuration Manager with Microsoft Azure using services such as Cloud Management Gateway, Windows Autopilot, Microsoft Defender for Endpoints, and co-management.
• Modern Enterprise client management
• Installing and troubleshooting clients
• Client Health
• Inventory management
• Application deployment
• Software updates & Windows Servicing
• Compliance Settings
• Operating System Deployment including Autopilot
• Microsoft Azure integration with Cloud Management Gateway
• Windows endpoint modern management using Microsoft Endpoint Manager and co-management
• Working with Tenant attach
• Windows security options
• Troubleshooting tools
• Microsoft Defender for Endpoints

Ideal candidate for this course:

• please be aware that this 5-day training is no beginner´s class
• Basic understanding of Active Directory, Azure Active Directory, WSUS and SQL
• Basic knowledge and working experience with Configuration Manager

Day 1
Introduction to Modern IT and Modern Workplace

• How Microsoft thinks about Modern Management o Cloud Values for Configuration Manager
• Manage modern Windows and MacOS devices using Configuration Manager and Intune
• Intune only compared to Configuration Manager with Intune Integration
• The transition to a Modern client
• How can we get from the on prem world to the cloud world
• Issues we have seen in our projects

Azure AD and Device authentication

• Planning the directory synchronization
• Windows 10 device authentication (Hybrid Join, AAD Join, Device registration)
• Device Enrollment
• Identity Models
• Azure AD Connect Installation and Configuration

Integrating the Cloud Management Gateway (CMG) to support Internet based users

Troubleshooting Cloud Management Gateway

• Understanding the Cloud Management Gateway in-depth
• How to troubleshoot
• Understanding log files

Configuration manager client management

• Installing, configuring and troubleshooting clients
• Installing the client for Internet based Windows devices (Intune / CMG)

Day 2:
Co-management and cloud attach

• Introduction
• The pros and the cons
• Understanding co-management in-depth
• Preparing Endpoint Manager to support the workloads
• Configure co-management in Configuration Manager
• Working with cloud attach
• Understanding Endpoint Analytics
• Working with real-time actions
• Working with the Intune Admin Center

Content distribution and sharing

• Working with content distribution in distributed environments
• Working with BranchCache
• Working with Delivery optimization
• Integrating the Cloud Distribution Point
• Content Distribution for roaming clients without VPN (CMG managed)
• Content Distribution for VPN clients (with- and without split tunnel VPN)

 Managing Windows endpoints

• Develop a Windows endpoint management strategy
• Understanding the Windows MDM management options
• Manage modern Windows endpoint devices using Intune

Deploying Windows endpoints with operating system deployment (Configuration Manager)

• Windows endpoints servicing and Greenfield environments
• Deploying images
• Deploy an Operating System over Cloud Management Gateway
• Troubleshooting operating system deployment

Day 3:
Deploying Windows endpoints using Autopilot

• Windows 10 Autopilot integration
• Scenarios (User-driven, self-deploying, Autopilot Reset, Pre-provisioning,
• Autopilot for existing devices)
• Windows Autopilot Administration
• Troubleshooting Windows Autopilot

Settings Management

• Device Management concepts
• Group Policies vs. MDM
• Co-management strategy
• Controlling device features and settings with Configuration Manager
• Controlling device features and settings with Intune
• Migrate group policy to MDM policies
• Monitor the settings deployment

Day 4:
Application deployment

• Working with the Configuration Manager application model
• Working with the Endpoint Manager application model
• Troubleshooting application deployments
• ConfigMgr Collections / Intune Groups - Pros and Cons
• Deploying Windows Store applications
• Windows Store for Business integration
• Deploying Win32 applications
• Software Center, Company Portal and Windows Store for Business

Software Updates

• Creating and designing the software update infrastructure
• Deploying and troubleshooting Microsoft software updates
• Working with Windows Autopatch
• Deploying 3rd. party updates
• Develop a Windows Servicing model

Automation using Microsoft Graph

• Introducing Microsoft Graph
• Automating Windows management using Graph

 Day 5:
Managing Microsoft Defender for Endpoint

• Understand and implement the Microsoft Defender for Endpoint security options
• Working with Microsoft Defender for Endpoints
• Working with Microsoft Security Center
• Conditional Access
• Multifactor authentication