Course Overview
This 5-day course provides administrators with the knowledge and skills needed to deploy and manage Windows 10 desktops, devices, and applications in an enterprise environment. Students learn how to plan and implement Windows 10 deployments in large organizations. Students also learn how to manage the Windows 10 installations after deployment to provide secure identity and data access using technologies related to Group Policy, Remote Access, and Device Registration. To support a variety of device and data management solutions, Microsoft Azure Active Directory, Microsoft Intune, and Microsoft Azure Rights Management are introduced. These services are part of the Enterprise Mobility Suite which provide identity and access management, cloud-based device, application, and update management, and secure data access to information stored both in the cloud and on any location within your corporate network.
Prerequisites
Syllabus
Module 1: Managing Desktops and Devices in an Enterprise EnvironmentThis module explains the most current trends and information related to desktop and device management in the enterprise. It also provides an overview on how to extend device management to the cloud.LessonManaging Windows 10 in the EnterpriseManaging a Mobile WorkforceSupporting Devices in the EnterpriseExtending IT Management and Services to the CloudLab : Planning for Windows 10 and Device Management in the EnterpriseAfter completing this module, students will be able to:Manage Windows 10 in the enterprise.Manage a mobile workforce.Support devices in the enterprise.Extend IT management and services to the cloud.Module 2: Deploying Windows 10 Enterprise DesktopsThis module explains the various deployment scenarios of Windows 10 and the considerations to keep in mind while performing these deployments. This module also explains how to deploy Windows 10 by using the Windows Assessment and Deployment Kit (WADK) and the Microsoft Deployment Toolkit (MDT). This module also explains how to maintain Windows 10 by using DISM and Windows Imaging and Configuration Designer (ICD).LessonOverview of Windows 10 Enterprise DeploymentCustomizing Enterprise Desktop DeploymentsDeploying Windows 10 by Using the Microsoft Deployment ToolkitMaintaining a Windows 10 InstallationManaging Volume License Activation for Windows 10Lab : Building a Reference Image by Using WADK ToolsLab : Using MDT to Deploy Windows 10 DesktopsLab : Maintaining a Windows 10 Installation using Windows ICDAfter completing this module, students will be able to:Describe the deployment options for Windows 10 desktops.Customize enterprise desktop deployments.Deploy Windows 10 by using the Microsoft Deployment Toolkit.Maintain a Windows 10 installation.Manage volume license activation for Windows 10.Module 3: Managing User Profiles and User State VirtualizationThis module explains user states and user state virtualization and explains how to deploy and maintain user experience virtualization (UE-V). This module also explains how to use tools such as ScanState and LoadState to migrate user states.LessonManaging User Profile and User StateImplementing User State Virtualization by Using Group PolicyConfiguring User Experience VirtualizationManaging User State MigrationLab : Configuring User Profiles and User State VirtualizationLab : Migrating User State by Using USMTAfter completing this module, students will be able to:Manage user profile and user state.Implement user state virtualization by using Group Policy.Configure UE-V.Manage user state migration.Module 4: Managing Windows 10 Sign-In and IdentityThis module explains the concept of identity and the methods to enhance identity security. This module also explains cloud identities and the use of Azure Active Directory Premium in enterprise organizations.LessonOverview of Enterprise IdentityPlanning for Cloud Identity IntegrationLab : Integrating a Microsoft Account with a Domain AccountLab : Joining Windows 10 to Azure Active DirectoryAfter completing this module, students will be able to:Describe the concept of enterprise identity.Plan for cloud identity integration.Module 5: Managing Desktop and Application Settings by Using Group PolicyThis module explains how to manage Group Policy inheritance, administrative templates, and common enterprise desktop settings. This module also explains how to apply policies using targeting and filtering.LessonManaging Group Policy ObjectsConfiguring Enterprise Desktops Using Group PolicyOverview of Group Policy PreferencesLab : Configuring Group Policy Objects and SettingsLab : Using Group Policy Preferences to Manage Desktop SettingsAfter completing this module, students will be able to:Manage Group Policy objects.Configure enterprise desktops by using Group Policy.Describe Group Policy preferences.Module 6: Managing Data Access for Windows-based DevicesThis module explains how to implement Device Registrations and Work Folders. This module also explains how to configure and share data stored in Microsoft OneDrive.LessonOverview of Data Access SolutionsImplementing Device RegistrationImplementing Work FoldersManaging Online Data Using Cloud-Based Storage SolutionsLab : Configuring Data Access for Non-Domain Joined DevicesLab : Managing Data Access Using OneDriveAfter completing this module, students will be able to:Describe the solutions for accessing data.Implement Device Registration.Implement Work Folders.Manage online data by using cloud-based storage solutions.Module 7: Managing Remote Access SolutionsThis module explains how to configure a virtual private network (VPN) and DirectAccess in Windows 10. This module also explains how to publish applications in Microsoft Azure RemoteApp.LessonOverview of Remote Access SolutionsConfiguring VPN Access to Remote NetworksUsing DirectAccess with Windows 10Supporting RemoteAppLab : Implementing DirectAccessLab : Configuring Azure RemoteAppAfter completing this module, students will be able to:Describe the types of remote access solutions.Configuring VPN access to remote networks.Use DirectAccess with Windows 10.Support RemoteApp.Module 8: Configuring and Managing Client Hyper-VThis module explains how to create virtual switches, virtual hard disks, and virtual machines.LessonInstalling and Configuring Client Hyper-VConfiguring Virtual SwitchesCreating and Managing Virtual Hard DisksCreating and Managing Virtual MachinesLab : Configuring Virtual Machines by Using Client Hyper-VAfter completing this module, students will be able to:Install and configure client Hyper-V.Configure virtual switches.Create and manage virtual hard disks.Create and manage virtual machines.Module 9: Managing Windows 10 Devices Using Enterprise Mobility SolutionsThis module explains the use of the Enterprise Mobility Suite and its components, Azure Active Directory Premium, Azure Rights Management, and Microsoft Intune.LessonOverview of the Enterprise Mobility SuiteOverview of Azure Active Directory PremiumOverview of Azure Rights ManagementOverview of Microsoft IntuneLab : Implementing a Microsoft Intune SubscriptionAfter completing this module, students will be able to:Describe the use and components of the Enterprise Mobility Suite.Manage directory services by using Azure Active Directory Premium.Protect devices by using Azure Rights Management.Explore the options in Microsoft Intune.Module 10: Managing Desktop and Mobile Clients Using Microsoft IntuneThis module explains how to configure and assign configuration policies. This module also explains how to create Mobile Device Management (MDM) policies and enroll mobile devices to Intune.LessonDeploying the Intune Client SoftwareOverview of Microsoft Intune PoliciesMobile Device Management Using IntuneLab : Installing the Intune Client Software and Configuring PoliciesLab : Managing Mobile Devices Using Microsoft IntuneAfter completing this module, students will be able to:Deploying the Intune client software.Configure Intune policies.Manage mobile devices using Intune.Module 11: Managing Updates and Endpoint Protection Using Microsoft IntuneThis module explains how to configure updates and Endpoint Protection settings and reports.LessonManaging Updates Using Microsoft IntuneManaging Endpoint ProtectionLab : Managing Updates and Endpoint Protection Using Microsoft IntuneAfter completing this module, students will be able to:Manage updates by using Intune.Manage Endpoint Protection.Module 12: Application and Resource Access Using Microsoft IntuneThis module explains how to use the Microsoft Intune Software Publisher and deploy applications to managed clients. This module also explains the use of certificate profiles, Wi-Fi profiles, and VPN profiles to control access to company resources.LessonOverview of Application Management Using IntuneThe Application Deployment ProcessControlling Access to Company ResourcesLab : Deploying Applications by Using Microsoft IntuneLab : Managing Resource Access by Using Microsoft IntuneAfter completing this module, students will be able to:Describe application management by using Intune.Describe the application deployment process.Control access to company resources.
