Microsoft 365 Modern Desktop Administrator Certification

Five Days • Virtual Training

Gain the skills needed to meet the business needs of a modern organization. The Modern Desktop Administrator has expertise to deploy, configure, secure, manage, and monitor devices and client applications in an enterprise environment.

Audience

The Modern Desktop Administrator deploys, configures, secures, manages, and monitors devices and client applications in an enterprise environment. Responsibilities include managing identity, access, policies, updates, and apps. The MDA collaborates with the M365 Enterprise Administrator to design and implement a device strategy that meets the business needs of a modern organization.

The Modern Desktop Administrator must be familiar with M365 workloads and must have strong skills and experience of deploying, configuring, and maintaining Windows 10 and non-Windows devices. The MDA role focuses on cloud services rather than on-premises management technologies.

Course Outline

Deploy Windows
Deploy Windows 10

  • configure language packs
  • perform a clean installation
  • migrate user data
  • perform an in-place upgrade (using tools such as MDT, WDS, ADK, etc.)
  • select the appropriate Windows edition
  • troubleshoot activation issues

Perform post-installation configuration

  • configure Edge and Internet Explorer
  • configure mobility settings
  • configure sign-in options
  • customize the Windows desktop

Manage devices and data
Manage local users, local groups, and devices

  • manage devices in directories
  • manage local groups
  • manage local users

Configure data access and protection

  • configure NTFS permissions
  • configure shared permissions

Configure devices by using local policies

  • configure local registry
  • implement local policy
  • troubleshoot group policies on devices

Manage Windows security

  • configure user account control (UAC)
  • configure Windows Defender Firewall
  • implement encryption

Configure connectivity
Configure networking

  • configure client IP settings
  • configure mobile networking
  • configure VPN client
  • troubleshoot networking
  • configure Wi-Fi profiles

Configure remote connectivity

  • configure remote management
  • enable PowerShell Remoting
  • configure remote desktop access

Maintain Windows
Configure system and data recovery

  • perform file recovery (including OneDrive)
  • recover Windows 10
  • troubleshoot startup/boot process

Manage updates

  • check for updates
  • troubleshoot updates
  • validate and test updates
  • select the appropriate servicing channel
  • configure Windows update options

Monitor and manage Windows

  • configure and analyze event logs
  • manage performance
  • manage Windows 10 environment

Deploy and update operating systems
Plan and implement Windows 10 by using dynamic deployment

  • evaluate and select an appropriate deployment options
  • pilot deployment
  • manage and troubleshoot provisioning packages

Plan and implement Windows 10 by using Windows Autopilot

  • evaluate and select an appropriate deployment options
  • pilot deployment
  • create, validate, and assign deployment profile
  • extract device HW information to CSV file
  • import device HW information to cloud service
  • troubleshoot deployment

Upgrade devices to Windows 10

  • identify upgrade and downgrade paths
  • manage in-place upgrades
  • configure a Windows analytics environment
  • perform Upgrade Readiness assessment
  • migrate user profiles

Manage updates

  • configure Windows 10 delivery optimization
  • configure Windows Update for Business
  • deploy Windows updates
  • implement feature updates
  • monitor Windows 10 updates

Manage device authentication

  • manage authentication policies
  • manage sign-on options
  • perform Azure AD join

Manage policies and profiles
Plan and implement co-management

  • implement co-management precedence
  • migrate group policy to MDM policies
  • recommend a co-management strategy

Implement conditional access and compliance policies for devices

  • implement conditional access policies
  • manage conditional access policies
  • plan conditional access policies
  • implement device compliance policies
  • manage device compliance policies
  • plan device compliance policies

Configure device profiles

  • implement device profiles
  • manage device profiles
  • plan device profiles

Manage user profiles

  • configure user profiles
  • configure Enterprise State Roaming in Azure AD
  • configure sync settings
  • implement Folder Redirection (including OneDrive)

Manage and protect devices
Manage Windows Defender

  • implement and manage Windows Defender Application Guard
  • implement and manage Windows Defender Credential Guard
  • implement and manage Windows Defender Exploit Guard
  • implement Windows Defender Advanced Threat Protection
  • integrate Windows Defender Application Control
  • manage Windows Defender Antivirus

Manage Intune device enrollment and inventory

  • configure enrollment settings
  • configure Intune automatic enrollment
  • enable device enrollment
  • enroll non-Windows devices
  • enroll Windows devices
  • generate custom device inventory reports
  • review device inventory

Monitor devices

  • monitor device health (e.g., log analytics, Windows Analytics, or other cloud-based tools)
  • monitor device security

Manage apps and data
Deploy and update applications

  • assign apps to groups
  • deploy apps by using Intune
  • deploy apps by using Microsoft Store for Business
  • deploy O365 ProPlus; enable sideloading of apps into images
  • gather Office readiness data
  • configure IE Enterprise mode
  • configure and implement assigned access or public devices

Implement Mobile Application Management (MAM)

  • implement MAM policies
  • manage MAM policies
  • plan MAM
  • configure Windows Information Protection
  • implement Azure Information Protection templates
  • securing data by using Intune