Managing Modern Desktops (MD-101)

Name: Managing Modern Desktops (MD-101)
Rating: 4.6 (25 reviews)

Certificate Exam Preparatory Course

Highest Rated

Created byStone River eLearning

Last updated 6/2023

English

What you'll learn

Plan and implement Windows 10 deployment strategies using various deployment methods
Manage devices and policies using Microsoft Endpoint Manager
Configure and maintain device security by implementing various security features and settings
Manage updates and device compliance using Microsoft Endpoint Manager
Implement remote access solutions, such as VPN and DirectAccess
Manage apps and data on Windows 10 devices using Microsoft Store for Business and other tools

Course content

3 sections • 64 lectures • 23h 42m total length

Windows Dynamic Deployment23:27
Explore Windows dynamic deployment through dynamic provisioning, configuring enterprise devices with minimal IT effort. Examine subscription activation with Azure Active Directory and Intune MDM, and provisioning packages.
Windows Dynamic Deployment Part 226:45
Explore provisioning packages for Windows dynamic deployment, using the Windows configuration designer and ADK to enroll devices in Azure AD, apply apps and policies, and enable modern desktops.
Windows Autopilot34:13
Windows Autopilot uses hardware IDs to auto-configure enterprise devices via Intune. It enables Azure AD join and deployment profiles to streamline provisioning and repurposing.
Upgrade Windows 1020:53
Identify supported upgrade and downgrade paths to Windows 10, perform in-place upgrades, and upgrade Windows 10 editions using tools such as MDM, provisioning packages, command line, or product keys.
Windows Analytics27:45
Explore Windows Analytics, focusing on device health, update compliance, and upgrade readiness; configure a Log Analytics workspace in Azure, obtain a commercial ID, and run an upgrade readiness assessment.
Windows Analytics Part 228:38
Explore provisioning packages in Windows dynamic deployment: create with Windows Configuration Designer from the Windows ADK, enroll devices in Azure Active Directory, and apply MDM policies and apps.
Windows Analytics Part 330:59
Learn how Windows analytics supports upgrade readiness by identifying and prioritizing business-critical apps and drivers, resolving issues, deploying by group, and monitoring upgrades with queries and logs.
Migrate User Profiles28:13
Migrate user profiles with the USMT tool from the Windows ADK, capturing and loading user data, documents, and application settings across devices using MigApp, MigDocs, and MigUser configurations.
Migrate User Profiles Part 231:43
migrate user profiles part 2 from Windows 8 to Windows 10 using usmt with scanstate and loadstate, and configure migapp and miguser while managing logs.
Manage Updates24:19
Explain delivery optimization for Windows updates, including peer-to-peer sharing, local network and internet sources, and integration with Windows Update, Windows Update for Business, and WSUS.
Manage Updates Part 229:52
Configure Windows Update for Business with deployment rings, test releases, and policy controls using Group Policy and Intune, balancing feature and quality updates with driver options.
Manage Updates Part 314:51
Monitor update compliance for Windows updates across devices using Azure, upgrade readiness, and Windows analytics to ensure devices stay in ring schedules and remain up to date.
Manage Authentication Policies22:03
Manage authentication policies in Azure Active Directory by configuring MFA and self-service password reset, and selecting verification methods. Apply password protection and custom security questions to strengthen security.
Manage Authentication Policies Part 224:52
Learn to implement multi-factor authentication, conditional access policies, and password reset in Azure Active Directory, including trusted locations, app passwords for non-browser apps, and policy setup.
Manage Authentication Policies Part 326:16
Explore self-service password reset in Azure Active Directory, including authentication methods, registration, and on-premises integration, to reduce help desk workload and improve user productivity.
Manage Sign-on Options18:32
Explore sign-on options in Windows 10 by using Microsoft accounts alongside local accounts, enabling cross-device synchronization, OneDrive, and cloud services, while illustrating enterprise policy to block consumer Microsoft accounts.
Manage Sign-on Options Part 222:13
Explore Windows Hello and Windows Hello for Business sign-in options, including PIN, biometrics, picture passwords, and dynamic lock, with governance via Group Policy and Intune.
Perform Azure AD Join17:28
Learn how to join Windows devices to Azure Active Directory, enroll them with Intune, and manage Azure AD joined, registered, and hybrid scenarios for modern desktops.

Implement Co-Management29:07
Explain co-management of Windows 10 devices using gp and mdm in a hybrid environment, and demonstrate precedence rules and the control policy conflict setting.
Implement Co-Management Part 228:27
Understand migrating group policy to MDM policies with Intune in a hybrid co-management setup, using MMAT to compare settings and plan the migration from on-premises group policy to MDM.
Conditional Access29:45
Learn how conditional access works with compliance policies in Intune and Azure to gate cloud resources, enforce device standards like firewall, and manage BYOD scenarios.
Conditional Access Part 229:10
Build and test conditional access by configuring device compliance policies, notifications, and locations in Intune, then apply Windows Defender settings and future conditional access policy blocks in Azure AD.
Conditional Access Part 324:01
Learn to create conditional access policies that pair device compliance with grants or blocks on Azure resources using Intune, with terms of use and multi-factor authentication.
Configure Device Profiles25:08
Plan, configure, and deploy device profiles with Intune, using pilot groups and assignments, monitor per-device or per-user policies, and resolve cross-platform conflicts.
Configure Device Profiles Part 221:14
Configure device configuration profiles in Intune, monitor deployments, and troubleshoot conflicts. View status by device, user, and per setting, and resolve conflicts to ensure correct policy application.
Manage User Profiles30:08
Manage user profiles with folder redirection, roaming profiles, and enterprise state roaming. Learn to configure group policy and network shares to provide per-user folders across machines.
Manage User Profiles Part 230:05
Set up and test folder redirection and roaming profiles using group policy and AD, configure shares and permissions, and compare instant redirection with roaming behavior while noting offline file options.
Manage User Profiles Part 324:41
Configure roaming user profiles and folder redirection to streamline logon and data access, and enable enterprise state roaming to synchronize settings across devices via Azure AD.
Windows Defender Application Guard29:24
Discover how Windows Defender Application Guard isolates untrusted sites by running Edge in a Hyper-V container and supports standalone and enterprise modes with Group Policy, Local Policy, and Intune.
Windows Defender Credential Guard18:11
Explore Windows Defender Credential Guard, a virtualization-based security feature that isolates credentials in an isolated Local Security Authority to protect login data, deployable via Group Policy or Intune.
Windows Defender Exploit Guard20:29
Protect devices from exploits by configuring Windows Defender Exploit Guard's four components: exploit protection, attack surface reduction, network protection, and control folder access, through Windows Security, group policy, and Intune.
Windows Defender Exploit Guard Part 223:03
Learn how to implement Windows Defender Exploit Guard, including attack surface reduction rules and exploit protection, using Intune, Group Policy, and PowerShell, with emphasis on GUIDs, audit mode, and exclusions.
Windows Defender Exploit Guard Part 328:13
Windows Defender Exploit Guard part 3 explores network protection, control folder access, and customization options, with methods via group policy, PowerShell, Intune, and Windows Security.
Windows Defender Application Control29:38
Explore Windows Defender application control, a whitelist-based security that protects system, kernel, and user modes, supports audit mode, and guides policy creation and deployment via group policy.
Windows Defender Application Control Part 223:26
Learn to create and merge device guard policies using Windows Defender Application Control, run in audit mode to harvest blocked items, then enforce a single merged policy with binary deployment.
Windows Defender Antivirus23:00
Discover windows defender antivirus, built into windows 10 and managed with windows security, with real-time protection, updates via windows update, cloud delivered protection, and automatic sample submission, flexible scan options.
Enable Device Enrollment11:48
Enable device enrollment by setting Intune as the mobile device management authority in Azure Active Directory, assigning licenses to users, and selecting supported platforms, with enrollment restrictions.
Intune Terms and Conditions22:25
Discover how to implement Intune and Azure Active Directory terms of use for device enrollment and access control. Create multi-language terms, deploy via conditional access, and manage user consent.
Intune Enrollment Restrictions15:29
Explore how Intune enrollment restrictions control device type and device limit, apply platform and version filters, and assign policies to groups in the Azure portal.
Intune Device Categories16:10
Learn how to create and use Intune device categories to automatically assign devices to dynamic groups in Azure Active Directory, enabling category-based policies for iOS, Android, and Windows enrollments.
Intune Corporate Identifiers8:47
Identify corporate devices in Intune using imei numbers or serial numbers, import a csv or enter data manually, and enforce enrollment rules for corporate versus personal devices.
Device Enrollment Manager7:19
Configure a device enrollment manager in Intune to enroll up to 1,000 devices without user affinity using a licensed generic account; note each device requires an Intune license.
Enroll Windows Devices21:20
Enable automatic enrollment of Windows devices via Microsoft Intune and configure MDM scope. Create DNS CNAME records for enterprise enrollment and enterprise registration to simplify enrollment for roaming users.
Enroll Apple Devices21:03
Enroll Apple devices with Intune by obtaining an Apple MDM Push certificate, generating and uploading a CSR, then using Apple configurator or BYOD with the company portal.
Enroll Apple Devices Part 216:14
Enroll Apple devices part two guides enrolling macOS devices in Intune, including Apple MDM push certificate setup and portal, noting macOS apps cannot be deployed yet but devices are manageable.
Enroll Android Devices27:58
Enroll Android devices by installing the Company Portal and signing in to Intune. Set up enrollment restrictions and work profiles to separate personal and work data.
Device Inventory Reports15:56
Learn to view and customize device inventories in Intune, add or remove columns, apply filters by ownership and OS, and export reports to CSV for external analysis.
Monitor Device Health20:31
Learn to monitor device health and compliance using Intune, tracking device actions, audit logs, and log analytics to detect security risks and policy gaps.
Monitor Device Health Part 211:47
Explore the next steps in monitoring device health with Windows Health attestation, configuring Intune device compliance (BitLocker, secure boot, code integrity), and tracking threat agent status and Defender updates.

Deploy Microsoft Store Apps17:30
Learn to deploy Microsoft Store apps with Intune by adding Microsoft Store apps, configuring details, obtaining the store URL, and assigning to groups for company portal delivery.
Deploy Google Play Store Apps14:17
Learn to deploy Google Play Store apps to Android devices via Microsoft Intune and Managed Google Play. Create approvals, sync catalogs, and assign apps to groups within the work profile.
Deploy Apple App Store Apps10:11
Learn to deploy Apple App Store apps with Intune by configuring Apple enrollment and MDM push certificates, selecting and assigning iOS store apps to groups, and testing in the portal.
Microsoft Store for Business16:34
Explore how to create and manage a private Microsoft Store for Business, synchronize it with Intune, and deploy store apps to groups via a private store and assignments.
Deploy Office 365 ProPlus18:44
Deploy Office 365 Pro Plus with Microsoft Intune, using configuration designer or XML data, meeting Windows 10 Creator Update, Pro Plus licenses, MSI removal, and group-based deployment.
Deploy Office 365 ProPlus to macOS6:28
Learn to deploy Office 365 Pro Plus to macOS via Microsoft Intune, selecting the macOS suite, and assigning the full Word, Excel, PowerPoint, Outlook, and OneNote apps with auto-update.
Sideloading Apps29:24
Learn to sideload universal Windows platform apps by enabling sideloading, signing with trusted certificates, and deploying via GUI, group policy, or PowerShell, including handling dependencies and provisioning for images.
Implement Assigned Access17:10
enable kiosk mode (assigned access) in Windows 10 Enterprise or Education to lock a device to a single app or multiple apps, configured via Settings or Intune.
Configure IE Enterprise Mode18:43
Explore how to configure IE enterprise mode to automate browser compatibility, using a centralized XML site list, group policy deployment, and Edge compatibility to ensure older sites render correctly.
Gather Office Readiness Data22:35
Assess readiness for an Office 365 upgrade with the Office readiness toolkit, analyzing VBA and add-ins in your most recently used documents to generate actionable readiness reports.
Implement and Manage MAM Policies24:00
Learn to implement and manage mobile application management policies with Microsoft Intune across iOS, Android, and Windows, protecting corporate data on BYOD and managed devices, preventing data leakage.
Configure Windows Information Protection25:32
Explore configuring Windows information protection for Windows 10 devices using mobile application management with Intune, including policy creation, protected apps, and corporate data controls.
Configure Azure Information Protection23:04
Configure Azure information protection to classify and protect data with labeling and rights management. Apply labels to emails and documents, enforcing permissions across devices and the cloud.
Configure Azure Information Protection Part 221:17
Configure Azure information protection by creating labels with protection options like header, footer, and watermark, assign them via policies, and enable unified labeling for cross-platform use.
Configure Azure Information Protection Part 319:53
Configure azure information protection by deploying the azure information protection client, applying labels and policies in Office apps, and enforcing do not forward and read-only permissions to protect data.

Requirements

The Managing Modern Desktops (MD-101) course has some recommended prerequisites to ensure that students have the foundational knowledge necessary to successfully complete the course. These include:
Experience with Windows 10: Students should have experience using and administering Windows 10 in an enterprise environment, including knowledge of features such as Windows Update, Windows Defender, and Remote Desktop.
Basic knowledge of Active Directory: Students should have a basic understanding of Active Directory, including user accounts, group policy objects (GPOs), and domain-joined devices.
Familiarity with Microsoft Intune: Students should have a basic understanding of Microsoft Intune, including device management and app deployment.
Familiarity with networking concepts: Students should have a basic understanding of networking concepts, including TCP/IP, DNS, and DHCP.

Description

Modern Desktop Administrators deploy, configure, secure, manage, and monitor devices and client applications in an enterprise environment. The MD-101 exam measures your ability to accomplish the following technical tasks: deploy and update operating systems; manage policies and profiles; manage and protect devices; and manage apps and data.

Managing Modern Desktops (MD-101) is a course designed to help IT professionals gain the knowledge and skills necessary to manage and maintain Windows 10 desktops and devices in an enterprise environment. The course covers topics such as:

Deploying Windows 10
Managing devices and policies using Microsoft Endpoint Manager
Configuring and maintaining device security
Managing updates and device compliance
Implementing remote access solutions
Managing apps and data on Windows 10 devices

Through hands-on labs, simulations, and interactive lectures, students will learn how to manage Windows 10 devices efficiently and effectively. This course is intended for IT professionals who manage and deploy desktops, devices, and apps in an enterprise environment. Prior experience with Windows 10 and basic knowledge of Active Directory, Microsoft Intune, and networking concepts are recommended before taking this course. Upon completion, students will have the skills necessary to pass the Microsoft MD-101 certification exam.

Plan and implement Windows 10 deployment strategies using various deployment methods
Manage devices and policies using Microsoft Endpoint Manager
Configure and maintain device security by implementing various security features and settings
Manage updates and device compliance using Microsoft Endpoint Manager
Implement remote access solutions, such as VPN and DirectAccess
Manage apps and data on Windows 10 devices using Microsoft Store for Business and other tools

Who this course is for:

IT professionals who are responsible for deploying, configuring, and managing Windows 10 devices and apps in an enterprise environment
System administrators who manage devices, policies, and security for Windows 10 devices in an enterprise environment
IT professionals who need to learn how to manage and maintain Windows 10 devices using Microsoft Endpoint Manager and other tools
IT professionals who want to earn the Microsoft Certified: Modern Desktop Administrator Associate certification

Managing Modern Desktops (MD-101)

What you'll learn

Explore related topics

Course content

Plan and implement Windows 10 by using dynamic deployment18 lectures • 7hr 33min

Manage Policies and Profiles31 lectures • 11hr 24min

Manage Apps and Data15 lectures • 4hr 45min

Requirements

Description

Who this course is for: