This course teaches IT professionals how to use the Enterprise Mobility Suite to manage devices, users, and data. In addition, this course teaches students how to use other technologies, such as Group Policy and other Windows Server-based technologies, to manage devices and secure data. Students will learn how to design and implement cloud-based and on-premises solutions for managing Windows-based, iOS, and Android devices, and they will learn how to provide secure and efficient access to data and applications.
This course is intended for IT professionals and consultants who plan, deploy, and manage devices and applications in medium to large organizations. A significant portion of this audience works in on-premises Active Directory Domain Services (AD DS) environments with both domain-joined and non-domain joined devices, for which they need to provide mobile device management and secure data access. Devices in such environments typically run Windows 10, Windows 10 Mobile, iOS, and Android. They plan to extend on-premises AD DS to the cloud and they need to learn how to plan and implement Enterprise Mobility Suite.
After completing this course, students will be able to:
Module 1: Using devices in the enterprise environment
This is an overview module that introduces changes and challenges in today’s typical workplace, and the solutions to address them. The intention of this module is to set the stage for later modules, and to introduce the Enterprise Mobility Suite.
Lab : Planning for device management
Module 2: Implementing and administering Azure AD
In this module students will learn how to manage devices in an on-premises Active Directory environment. They will learn about cloud identity, and the features that Azure AD provides. They also will learn about Azure AD offerings, how to create and manage an Azure AD tenant, and how claims-based authentication works.
Lab : Working with Azure AD and providing access to claims-aware applications
Module 3: Connecting AD DS with Azure AD
In this module students will learn how to connect their on-premises AD DS with Azure AD. They will learn about Azure AD Connect, and how either to synchronize entire identities to Azure AD, including password hashes, or to establish federation with Azure AD.
Lab : Synchronizing on-premises AD DS with Azure AD
Module 4: Managing devices in Office 365
In this module students will learn about Office 365 and its main features. The focus of this module is on device management by using mobile device management for Office 365.
Lab : Managing devices in Office 365 (Part 1)
Lab : Managing devices in Office 365 (Part 2)
Configuring and testing mobile device management in Office 365
Module 5: Planning and implementing Microsoft Intune
In this module students will learn how to plan for Microsoft Intune, how to deploy an Intune client, and how to perform basic Intune administration.
Lab : Planning and implementing Intune
Module 6: Managing devices by using Intune
In this module students will learn how to enroll and manage mobile devices with Intune, create, manage and deploy different types of Intune policies, and manage updates and Windows Defender by using Microsoft Intune.
Lab : Using Microsoft Intune policies to manage devices
Lab : Managing updates and Windows Defender
Module 7: Using Microsoft Intune to manage applications and resource access
In this module students will learn how to manage application deployments by using Microsoft Intune. They will also learn how to deploy settings, such as VPN profiles, Wi-Fi profiles and certificates to Intune clients.
Lab : Using Intune to deploy and monitor applications
Using Intune to deploy and monitor applications
Lab : Using Intune to manage resource access
Module 8: Planning and implementing Azure RMS
In this module students will learn how to plan and implement Azure Rights Management to protect digital content. They also will learn which applications can integrate with Azure Rights Management, and how to use Azure Rights Management with Office 365 in an on-premises infrastructure.
Lab : Using Azure RMS to protect documents and data
Module 9: Planning and implementing app support
In this module students will learn how they can mitigate compatibility issues between applications on the same device, and between the application and the operating system. They also will learn about RemoteApp and Azure RemoteApp programs, which enable you to run Windows apps on any device with the Remote Desktop Protocol (RDP) client.
Lab : Publishing and using RemoteApp and Azure RemoteApp
Module 10: Planning and implementing remote access
In this module students will learn how to provide remote access from devices to a company network. They also will learn how to provide access to company infrastructure servers, data in work folders, and data that is stored in the cloud.
Lab : Configuring and using VPN and Work Folders
Lab : Using Offline Files and OneDrive
Module 11: Planning and implementing Dynamic Access Control and auditing
In this module students will learn how to implement Dynamic Access Control, and how to configure and use advanced auditing.
Lab : Implementing secure data access
Module 12: Planning and protecting data
In this module students will learn how to protect data on a device by using encryption or BitLocker. They will also learn about Enterprise Data Protection and how data can be remotely wiped if a device is lost or stolen.
Lab : Protecting data by using encryption and BitLocker
Module 13: Recovering data and operating systems
In this module students will learn how to plan and implement file recovery and device recovery of Windows 10 devices. They also will learn how to update a Windows 10 device, and learn about Windows Branch.
Lab : Implementing file recovery and device recovery
In addition to their professional experience, students who attend this training should already have the following technical knowledge: