Microsoft 365 - computer management with Group Policy and Intune

The course is intended for administrators and architects of security and IT infrastructure primarily built on Active Directory (AD DS) and Azure Active Directory (AAD) or Entra ID (EntraID)

Knowledge in the range of courses listed in the sections Previous courses and Related courses
Good knowledge of TCP/IP and DNS
technologies

Introduction to the technologies of central management of cloud and on-prem clients and servers Intune, Azure, Entra ID and Active Directory
Connecting clients to Active Directory (domain join)
Management of computers using Group Policy (GPO)
Basics and principles of functioning of GPO
GPUPDATE and GPUPDATE /force
Administrative templates (administrative templates, ADMX)
Security policy and Windows Firewall
Filtering and applying GPOs above the OU hierarchy
Security filters and groups (security filtering)
User policies and settings
Group Policy Preferences and their options and item filtering
Loopback processing
WMI filtering
Scripting and automation for Group Policy
Monitoring and troubleshooting Group Policy
Backup, restore and GPO transfers and migrations
BitLocker and its management
Overview of Intune, Azure, Azure Active Directory (AAD) or Entra ID (EntraID)
Connecting clients to Azure AD (Entra ID) and hybrid scenarios with on-prem Active Directory Domain Services (ADDS)
Entra ID registration (WPJ), Entra ID join (AADJ), hybrid Entra ID join (DJ++)
Synchronization of user accounts and computers (devices) from on-prem ADDS to Entra ID (AAD, EntraID) using Azure AD Connect (AAD Connect, Entra ID Connect)
Controlling who can connect computers to AAD/EntraID
Windows Autopilot and hardware hash collection from the device
Management of options for connecting computers to Intune/MDM
Connecting Windows computers to Intune (MDM enrollment)
Use of Windows Autopilot, autoenrollment and provisioning packages technology
Management of Windows computers using Intune - configuration profiles
Management of Windows computers using Intune - scripts and PowerShell
Management of Windows computers using Intune - BitLocker
Management of Windows computers using Intune - Windows Firewall
Management of Windows computers using Intune - LAPS (Local Admin Password Solution)
Scripting and automation in Intune and Intune itself
Monitoring and troubleshooting Intune reports, diagnostic logs and CSP (Configuration Settings Provider)
Device compliance (compliance)
Scripts for compliance and PowerShell
Installing applications from the Microsoft Store
Installing applications from MSI
Installation of applications from EXE and BAT and PowerShell
Hybrid management using Group Policy and Intune
Group Policy Analytics tool
Device disposal - remote wipe, retire, clean start, sysprep

For Microsoft certification exams, apart from MCM certifications, participation in the official MOC course is not a necessary condition for passing the exam
Microsoft's official MOC courses as well as our own GOC courses are a suitable part of the preparation for Microsoft certification exams such as MTA, MCP, MCSA, MCSE, or MCM
However, the primary goal of the course is not directly preparation for certification exams, but the mastery of theoretical principles and the acquisition of practical skills necessary to work effectively with the given product
MOC courses usually cover almost all areas required for the corresponding certification exams. However, their discussion in the course is not always given exactly the same time and emphasis as required by the certification exam
For example, books from MS Press (so-called Self-paced Training Kit) and electronic self-test software can be used as additional preparation for certification exams.

Previous courses

Windows 11/10 - effective administration deep-dive [GOC214]

Windows Server - implementing Active Directory services [GOC220]

Microsoft 365 - administrator [GOC227]

Windows Server - administering accounts and resources [GOC205]

Next courses

PowerShell and PowerShell Core basics [GOC216]

Alernative courses

Windows Server - managing computers with Group Policy and LAPS [GOC242]

Microsoft 365 - managing Windows computers with Intune deep-dive [GOC243]