IMDMBMTMaster ClassMT-IMDMB1.0<p>After completing this workshop, participants will have knowledge in the following areas:</p> <ul> <li>Setup and operation of hybrid Microsoft Entra ID environments for all platforms</li><li>Implementation of various enrollment strategies for Windows, macOS, iOS and Android</li><li>Automated device management with Windows Autopilot and Apple Business Manager</li><li>Android Enterprise Deployment</li><li>Extended compliance and conditional access strategies, cross-platform</li><li>Mobile Application Management (MAM) for iOS and Android</li><li>PowerShell-based automation and community tools</li></ul><h5>Required:</h5><ul> <li>Sound Windows 10/11 Administration</li><li>Active Directory Domain Services experience</li><li>PowerShell basic knowledge</li><li>Basic understanding of network and PKI</li><li>Basic understanding of iOS and Android platforms</li></ul><h5>Recommended:</h5><ul> <li>Microsoft 365/Microsoft Entra ID experience</li><li>Group Policy Management knowledge</li><li>SCCM/Configuration Manager Background</li></ul><ul> <li>IT professionals who want to centrally manage all device platforms with Intune</li><li>System Engineers with a focus on Modern Device Management (Desktop &amp; Mobile)</li><li>People migrating from traditional MDM solutions to Microsoft Intune</li><li>IT consultants who carry out complete Intune implementations</li><li>Mobile device managers who want to expand their desktop skills</li><li>This workshop is aimed at experienced IT professionals who want to master the full spectrum of modern device management. Ideal for teams who need a comprehensive yet efficient introduction to all Intune platforms.</li></ul><ul> <li>Microsoft 365 Tenant Setup for Desktop Management</li><li>Hybrid Identity with Entra Connect</li><li>Device Identity Strategies</li><li>Windows Autopilot Deployment</li><li>Windows Configuration Management</li><li>Application Deployment for Windows</li><li>Apple Business Manager Integration</li><li>macOS Enrollment and Management</li><li>Cross-Platform Compliance and Security</li><li>iOS/iPadOS Enrollment Strategies</li><li>iOS Configuration Management</li><li>iOS Application Management</li><li>iOS Security and Compliance</li><li>Android Enterprise Framework</li><li>Android Device Management</li><li>Android Application Management</li></ul><h4>Day 1: Foundation &amp; Hybrid Identity</h4><h5>Microsoft 365 Tenant Setup for Desktop Management</h5><ul> <li>Microsoft Entra ID Tenant configuration and licensing</li><li>Intune Service Setup and DNS-Integration</li><li>Integration with existing AD DS environments</li></ul><h5>Hybrid Identity with Entra Connect</h5><ul> <li>Password Hash Sync vs. Passthrough Authentication</li><li>Microsoft Entra Connect Health Monitoring</li><li>Seamless SSO configuration for Windows and macOS</li><li>Troubleshooting synchronization problems</li></ul><h5>Device Identity Strategien</h5><ul> <li>Microsoft Entra ID Registration vs. Entra ID Domain Join</li><li>Hybrid Entra ID Join implementation</li><li>Device-based Conditional Access Policies</li><li>Kerberos authentication in hybrid scenarios</li></ul><h4>Day 2: Windows Management Basics</h4><h5>Windows Autopilot Deployment</h5><ul> <li>Hardware Hash Import and Device Registration</li><li>Self-Deploying Mode and User-Driven Deployment</li><li>Autopilot Reset and Reprovisioning</li><li>Windows Autopilot device preparation (Autopilot V2)</li></ul><h5>Windows Configuration Management</h5><ul> <li>Settings Catalog for Windows 11 specific settings</li><li>Security Baselines Implementation</li><li>Windows Update for Business Integration</li><li>Custom Configuration Service Provider (CSP) Policies</li></ul><h5>Application Deployment for Windows</h5><ul> <li>MSI, Store and Win32 App Deployment</li><li>PowerShell Script Deployment with Intune Management Extension</li><li>Microsoft Store App Management</li><li>App Installation Monitoring and Reporting</li></ul><h4>Day 3: macOS Management &amp; Cross-Platform Security Features</h4><h5>Apple Business Manager Integration</h5><ul> <li>Apple Business Manager Account Setup</li><li>Apple Push Certificates Management</li><li>Device Enrollment Program (DEP) Konfiguration</li><li>Volume Purchase Program (VPP) for app licenses</li></ul><h5>macOS Enrollment and Management</h5><ul> <li>Automated Device Enrollment (ADE) for macOS</li><li>User Enrollment vs. Device Enrollment Strategien</li><li>macOS Configuration Profiles</li><li>Shell Script Deployment for macOS</li></ul><h5>Cross-Platform Compliance and Security</h5><ul> <li>Unified Compliance Policies for Windows und macOS</li><li>Conditional access for both platforms</li><li>BitLocker and FileVault Management</li><li>Certificate-based Authentication (SCEP/PKCS)</li><li>Microsoft Defender for Windows and macOS</li></ul><h4>Day 4: iOS Management &amp; Apple Enterprise Integration</h4><h5>iOS/iPadOS Enrollment Strategies</h5><ul> <li>Automated Device Enrollment (ADE) Configuration</li><li>User Enrollment vs. Device Enrollment</li><li>Apple Configurator Enrollment</li><li>BYOD Scenarios with Apple Account Integration/Federation</li></ul><h5>iOS Configuration Management</h5><ul> <li>iOS Configuration Profiles</li><li>Supervised vs. Unsupervised Device Management</li><li>Restrictions and Compliance Policies f&uuml;r iOS</li><li>HomeScreen Layout and App Organization</li></ul><h5>iOS Application Management</h5><ul> <li>App Store apps via VPP</li><li>Line-of-Business (LOB) apps for iOS</li><li>App Protection Policies (MAM) for iOS</li><li>Per-app VPN configuration for iOS</li></ul><h5>iOS Security and Compliance</h5><ul> <li>iOS Passcode Policies and Touch/Face ID</li><li>iOS Device Compliance Requirements</li><li>Conditional Access for iOS Devices</li><li>iOS Data Loss Prevention (DLP)</li></ul><h4>Day 5: Android Enterprise</h4><h5>Android Enterprise Framework</h5><ul> <li>Android Enterprise Enrollment Modi (Work Profile, Fully Managed, Dedicated)</li><li>Google Play Console Integration</li><li>Managed Google Play Store Setup</li><li>Android Zero-Touch Enrollment</li></ul><h5>Android Device Management</h5><ul> <li>Android Enterprise Work Profile Management</li><li>Fully Managed Device Scenarios</li><li>Android Dedicated Device (Kiosk) Configuration</li><li>Samsung Knox Integration</li></ul><h5>Android Application Management</h5><ul> <li>Managed Google Play Apps</li><li>Private Apps n the Managed Google Play Store</li><li>App Protection Policies (MAM) for Android</li></ul>After completing this workshop, participants will have knowledge in the following areas: - Setup and operation of hybrid Microsoft Entra ID environments for all platforms - Implementation of various enrollment strategies for Windows, macOS, iOS and Android - Automated device management with Windows Autopilot and Apple Business Manager - Android Enterprise Deployment - Extended compliance and conditional access strategies, cross-platform - Mobile Application Management (MAM) for iOS and Android - PowerShell-based automation and community toolsRequired: - Sound Windows 10/11 Administration - Active Directory Domain Services experience - PowerShell basic knowledge - Basic understanding of network and PKI - Basic understanding of iOS and Android platforms Recommended: - Microsoft 365/Microsoft Entra ID experience - Group Policy Management knowledge - SCCM/Configuration Manager Background- IT professionals who want to centrally manage all device platforms with Intune - System Engineers with a focus on Modern Device Management (Desktop & Mobile) - People migrating from traditional MDM solutions to Microsoft Intune - IT consultants who carry out complete Intune implementations - Mobile device managers who want to expand their desktop skills - This workshop is aimed at experienced IT professionals who want to master the full spectrum of modern device management. Ideal for teams who need a comprehensive yet efficient introduction to all Intune platforms.- Microsoft 365 Tenant Setup for Desktop Management - Hybrid Identity with Entra Connect - Device Identity Strategies - Windows Autopilot Deployment - Windows Configuration Management - Application Deployment for Windows - Apple Business Manager Integration - macOS Enrollment and Management - Cross-Platform Compliance and Security - iOS/iPadOS Enrollment Strategies - iOS Configuration Management - iOS Application Management - iOS Security and Compliance - Android Enterprise Framework - Android Device Management - Android Application ManagementDay 1: Foundation & Hybrid Identity Microsoft 365 Tenant Setup for Desktop Management - Microsoft Entra ID Tenant configuration and licensing - Intune Service Setup and DNS-Integration - Integration with existing AD DS environments Hybrid Identity with Entra Connect - Password Hash Sync vs. Passthrough Authentication - Microsoft Entra Connect Health Monitoring - Seamless SSO configuration for Windows and macOS - Troubleshooting synchronization problems Device Identity Strategien - Microsoft Entra ID Registration vs. Entra ID Domain Join - Hybrid Entra ID Join implementation - Device-based Conditional Access Policies - Kerberos authentication in hybrid scenarios Day 2: Windows Management Basics Windows Autopilot Deployment - Hardware Hash Import and Device Registration - Self-Deploying Mode and User-Driven Deployment - Autopilot Reset and Reprovisioning - Windows Autopilot device preparation (Autopilot V2) Windows Configuration Management - Settings Catalog for Windows 11 specific settings - Security Baselines Implementation - Windows Update for Business Integration - Custom Configuration Service Provider (CSP) Policies Application Deployment for Windows - MSI, Store and Win32 App Deployment - PowerShell Script Deployment with Intune Management Extension - Microsoft Store App Management - App Installation Monitoring and Reporting Day 3: macOS Management & Cross-Platform Security Features Apple Business Manager Integration - Apple Business Manager Account Setup - Apple Push Certificates Management - Device Enrollment Program (DEP) Konfiguration - Volume Purchase Program (VPP) for app licenses macOS Enrollment and Management - Automated Device Enrollment (ADE) for macOS - User Enrollment vs. Device Enrollment Strategien - macOS Configuration Profiles - Shell Script Deployment for macOS Cross-Platform Compliance and Security - Unified Compliance Policies for Windows und macOS - Conditional access for both platforms - BitLocker and FileVault Management - Certificate-based Authentication (SCEP/PKCS) - Microsoft Defender for Windows and macOS Day 4: iOS Management & Apple Enterprise Integration iOS/iPadOS Enrollment Strategies - Automated Device Enrollment (ADE) Configuration - User Enrollment vs. Device Enrollment - Apple Configurator Enrollment - BYOD Scenarios with Apple Account Integration/Federation iOS Configuration Management - iOS Configuration Profiles - Supervised vs. Unsupervised Device Management - Restrictions and Compliance Policies für iOS - HomeScreen Layout and App Organization iOS Application Management - App Store apps via VPP - Line-of-Business (LOB) apps for iOS - App Protection Policies (MAM) for iOS - Per-app VPN configuration for iOS iOS Security and Compliance - iOS Passcode Policies and Touch/Face ID - iOS Device Compliance Requirements - Conditional Access for iOS Devices - iOS Data Loss Prevention (DLP) Day 5: Android Enterprise Android Enterprise Framework - Android Enterprise Enrollment Modi (Work Profile, Fully Managed, Dedicated) - Google Play Console Integration - Managed Google Play Store Setup - Android Zero-Touch Enrollment Android Device Management - Android Enterprise Work Profile Management - Fully Managed Device Scenarios - Android Dedicated Device (Kiosk) Configuration - Samsung Knox Integration Android Application Management - Managed Google Play Apps - Private Apps n the Managed Google Play Store - App Protection Policies (MAM) for Android5 days4995.004995.004995.004995.00