Deploying, Managing and Protecting Modern Desktops


As desktops has evolved, so have methods for deploying and updating them. In this course, you'll learn how to plan and implement an operating system deployment strategy. During this course, you’ll be introduced to key components of modern management strategies. You’ll examine what it takes to incorporate Microsoft Intune into your organization and how to use it to manage modern desktops and devices. You’ll also learn about methods for deployment and management of apps and browser-based applications. Modern environments require the Desktop Administrator be able to manage and support phones, tablets, and computers, whether it be owned by the organization or personally owned by the employee. At the same time, IT must still be able to protect the data that these devices access. In this course, the student will be introduced to the key concepts of security in modern management. This course covers authentication, identities, and access, as well as about how to protect these categories. The student will be introduced to Azure Active Directory and learn how to use Microsoft Intune to protect devices and data with compliance policies. Finally, this course will cover key capabilities of Azure Information Protection and Windows Defender Advanced Threat Protection and how to implement these capabilities.

Accredited course for Continuing Education of Pedagogical Staff

Course length: 4 days (8:30 - 16:00)

List price: 29 900 CZK (without VAT)

This course has no dates set. If you are interested in setting a new one, please contact

PDF to download Expand allCollapse all

  • Students will be able to

    • Develop an Operating System deployment and upgrade strategy
    • Understand the different methods of deployment.
    • Understand which scenarios on-premise and cloud-based solutions can be used for.
    • Deploy and migrate desktops to Windows 10.
    • Plan and configure Windows Update policies.
    • Understand the benefits and methods of co-management strategies.
    • Configuring Intune
    • Enroll devices in Intune and configure device policies
    • Manage user profiles and folder redirection
    • Plan a mobile application management strategy
    • Manage and deploy apps, including Office 365 ProPlus and Internet
    • Explorer settings
    • Describe the benefits and capabilities of Azure AD.
    • Manage users using Azure AD with Active Directory DS.
    • Implement Windows Hello for Business.
    • Configure conditional access rules based on compliance policies.
    • Describe the various tools used to secure devices and data.
    • Implement Windows Defender Advanced Threat Protection.
  • Course requirements

    The Modern Desktop Administrator must be familiar with M365 workloads and must have strong skills and experience of deploying, configuring, and maintaining Windows 10 and non-Windows devices. The MDA role focuses on cloud services rather than on-premises management technologies.

  • This course is intended for

    The Modern Desktop Administrator deploys, configures, secures, manages, and monitors devices and client applications in an
    enterprise environment. Responsibilities include managing identity, access, policies, updates, and apps. The MDA
    collaborates with the M365 Enterprise Administrator to design and implement a device strategy that meets the business
    needs of a modern organization.

  • Literature

    All participants will get original Microsoft student materials.

  • Hardware

    Classrooms are equipped with high-performance computers with Internet access and the possibility of wireless connection.

  • Syllabus

    Module 1: Planning an Operating System Deployment Strategy

    • Overview of Windows as a service
    • Windows 10 Deployment options
    • Considerations for Windows 10 deployment

    Module 2: Implementing Windows 10

    • Implementing Windows 10 by using dynamic deployment
    • Implementing Windows 10 by using Windows Autopilot
    • Upgrading devices to Windows 10

    Module 3: Managing Updates for Windows 10

    • Implementing Windows 10 by using dynamic deployment
    • Implementing Windows 10 by using Windows Autopilot
    • Upgrading devices to Windows 10

    Module 4: Device Enrollment

    • Device management options
    • Manage Intune device enrollment and inventory

    Module 5: Configuring Profiles

    • Configuring device profiles
    • Managing user profiles
    • Monitoring devices

    Module 6: Application Management

    • Implement Mobile Application Management (MAM)
    • Deploying and updating applications
    • Administering applications

    Module 7: Managing Authentication in Azure AD

    • Azure AD Overview
    • Managing identities in Azure AD
    • Protecting identities in Azure AD
    • Managing device authentication
    • Enabling corporate access

    Module 8: Managing Devices and Device Policies

    • Microsoft Intune Overview
    • Managing devices with Intune
    • Implement device compliance policies

    Module 9: Managing Security

    • Implement device data protection
    • Managing Windows Defender ATP
    • Managing Windows Defender in Windows 10

Prices do not include VAT. OKsystem a.s. reserves the right to change dates and prices of courses.