Microsoft Modern Desktop Administrator
- Course Duration 40 hours
- Assessment: Online
Overview
Modern desktop administrators deploy, configure, secure, manage, and monitor devices and client applications in an enterprise environment.
Pre-requisites:
- Basic understanding of computer networks and hardware concepts.
- Basic understanding of OS and Application concepts.
- Experience with using the Windows OS.
Topics
Course MD-100T00: Windows 10
Module 1: Installing Windows
This module covers installing the Windows 10 OS. Students will learn the different editions of Windows 10, requirements, and new features introduced. This module covers how to install the OS, as well as methods for migrations and upgrading. Students will also learn about common tools used in the deployment process.
Lessons
- Introducing Windows 10
- Windows 10 Editions and Requirements
- Installation Methods
- Upgrading and Migrating to Windows 10
- Deployment Methods
Lab : Deploying Windows using Windows ADK tools
Lab : Migrating User Settings using USMT
After completing this module, students will be able to:
- Understanding the different editions and features of Windows 10.
- Understand the Windows 10 client installation options.
- Practice installing Windows 10.
- Migrate content using the User State Migration Tool.
Module 2: Configuring Authorization & Authentication
This module introduces the tools and features of Windows 10 for authorizing access to Windows 10 clients. Students will learn about methods for how users sign-in to Windows 10. This module also covers restricting what users can or cannot do on a device through methods like UAC and account types.
Lessons
- Authentication
- Managing Users and Groups
- Configuring User Account Control
- Implementing Device Registration
Lab : Managing Domain Authentication
Lab : Managing Local User and Microsoft Account Authentication
Lab : Managing password and account options
Lab : Managing Azure AD Authentication
After completing this module, students will be able to:
- Describe the different methods for securing data and the Windows 10 OS.
- Describe the different types of user and service accounts.
- Configure Windows Hello.
- Configure user account control.
- Register a device with a domain.
Module 3: Post-installation Configuration and Personalization
This module covers common post-installation tasks in Windows 10. Students will learn how to customize the user interface, as well as using the control panel and settings app to configure common OS settings. This course will also introduce students to Windows PowerShell. This module will cover how device drivers work and how they work. Students will also be introduced to managing and configuring hardware peripherals such as printers.
Lessons
- Configure and Customize the Windows Start Menu
- Common Configuration Options
- Advanced Configuration Methods
- Managing Drivers and Devices
Lab : Managing local and network printers
Lab : Managing Windows 10 Settings
Lab : Synchronizing settings between devices
After completing this module, students will be able to:
- Customize the Windows 10 UI
- Configure device specific settings such as power plans and mobile device options.
- Use the Windows control panel and setting app to configure settings.
- Perform tasks using Windows PowerShell.
- Describe concepts related to drivers.
- Describe printer management concepts.
- Configure client-side printing and managing print server properties.
Module 4: Updating Windows
In this module, Students will learn about keeping Windows 10 up-to-date. Students will be introduced to the new Windows servicing model and how it applies to various scenarios. Students will learn the various different methods for updating Windows and applications, as well as managing updates using tools like group policy and Windows Update for Business.
Lessons
- Windows Servicing Model
- Updating Windows
Lab : Managing Windows Update Settings
After completing this module, students will be able to:
- Describe the Windows servicing model.
- Configure Windows update settings.
- Describe updating Windows using WSUS.
- Describe updating Windows using Windows Update for Business.
- Configure Windows update using group policy.
Module 5: Configuring Networking
In this module, Students will learn about networking concepts. This module will introduce to IPv4 and IPv6, and concepts like DNS. Students will learn how to configure network settings in Windows, as well as learn about wireless network technologies. The module will conclude with methods of managing Windows remotely.
Lessons
- Configure IP Network Connectivity
- Implement Name Resolution
- Implement Wireless Network Connectivity
- Remote Access Overview
- Remote Management
Lab : Configuring Network Connectivity
Lab : Configuring and Testing Name Resolution
Lab : Administering Windows 10 Using Remote Management
After completing this module, students will be able to:
- Configure IP network connectivity.
- Describe how name resolution works.
- Describe remote access technologies like VPNs.
- Configure Windows for remote management and access.
Module 6: Configuring Storage
This module covers storage configuration and management in Windows 10. Students will be introduced to local, cloud and virtual storage options. This course will also cover configuring storage on client devices and introduce storage spaces.
Lessons
- Managing Storage
- Managing Disks and Volumes
- Managing Storage Spaces
Lab : Creating a Storage Space
Lab : Managing Storage
After completing this module, students will be able to:
- Describe the options and benefits of local, cloud, and virtual storage.
- Configure local disk partitions and volumes.
- Describe the capabilities and benefits of Storage spaces.
Module 7: Configuring Data Access and Usage
In this module, Students will learn about permissions. This module will cover considerations for different files systems. Students will learn how to configure file and folder permissions as well as shared folders. Students will also learn configuring settings through methods such as local and group policy. The module will conclude with configuring OneDrive and Work Folders.
Lessons
- Overview of File Systems
- Configuring and Managing File Access
- Configuring and Managing Shared Folders
- Managing User Files
Lab : Configuring and Managing Permissions and Shares
Lab : Using Conditions to Control Access and Effective Permissions
Lab : Work Folders
Lab : Synchronizing files with OneDrive
After completing this module, students will be able to:
- Describe the differences and benefits of supported file systems.
- Configure file and folder permissions.
- Configure shared folders.
- Secure Windows through local policy settings.
Module 8: Managing Apps in Windows 10
In this module, Students will be introduced to App management in Windows 10. This module will cover the different types of apps and supported installation methods. Students will learn how to install apps using manual and automated methods, as well as manage app delivery using the Windows Store. Finally, this module will cover the differences between Internet Explorer and Microsoft Edge.
Lessons
- Providing Apps to Users
- Managing Universal Windows Apps
- Web Browsers in Windows 10
Lab : Configuring Microsoft Edge to support Internet Explorer Enterprise Mode
Lab : Installing Apps in Windows 10
After completing this module, students will be able to:
- Describe the different types of applications.
- Install applications manually and using automated methods.
- Manage application deployment using the Windows Store.
- Learn about web browser features in Windows 10.
Module 9: Configuring Threat Protection and Advanced Security
This module introduces students to protecting devices from external threats. Students will learn about the different types of common threats. This module will teach students about using encryption, firewalls, and IPSec to help protect against threats. The module will conclude with how to configure and use Windows Defender and AppLocker.
Lessons
- Malware and Threat Protection
- Windows Defender
- Connection Security Rules
- Advanced Protection Methods
Lab : Configuring Microsoft Defender Antivirus and Windows Security
Lab : Configuring Firewall and Connection Security
Lab : Configuring BitLocker
After completing this module, students will be able to:
- Identify common security threats .
- Describe the methods by which you can mitigate these common security threats.
- Describe the different methods of encryption.
- Describe how Windows firewall can secure the device.
- Describe the benefits of using IPSec.
- Describe the different features of Windows Defender.
- Describe the benefits of using AppLocker.
Module 10: Supporting the Windows 10 Environment
This module will cover the Windows 10 architecture and common environments. Students will be introduced to the various tools used in maintaining Windows. This module will also discuss methodologies for effectively troubleshooting issues and how to proactively manage and optimize Windows 10.
Lessons
- Windows Architecture
- Support and Diagnostic Tools
- Monitoring and Troubleshooting Computer Performance
Lab : Monitoring Reliability and Performance
Lab : Monitoring Events
After completing this module, students will be able to:
- Describe the Windows architecture.
- Describe key stages in troubleshooting.
- Describe the purpose and benefits of the various tools in Windows.
- Use monitoring tools to establish a performance baseline
- Optimize performance on Windows 10 clients.
Module 11: Troubleshooting Files & Applications
This module helps students plan for file backup and recovery. Students will learn how to plan and configure data protection strategies and how to perform various file and system recovery methods. This module also includes common methods for troubleshooting application installation issues, compatibility issues, and resolving browser issues.
Lessons
- File Recovery in Windows 10
- Application Troubleshooting
Lab : Using File History to Recover Files
After completing this module, students will be able to:
- Describe the different methods of file recovery.
- Configure Windows 10 to support individual file and system recovery.
- Recover a device using the Reset This PC function.
- Solve application compatibility issues with the Application Compatibility Toolkit.
- Troubleshoot common browser issues.
Module 12: Troubleshooting the OS
In this module, Students will learn how to troubleshoot startup and service issues related to the operating system. This module will teach the different startup and recovery options, and how to troubleshoot different Windows services.
Lessons
- Troubleshooting Windows Startup
- Troubleshooting Operating System Service Issues
Lab : Using Advanced Startup and Windows RE to recover from Boot Failures
Lab : Recovering Windows using Reset This PC
After completing this module, students will be able to:
- Describe the various methods identifying and recovering from startup issues.
- Describe when to use the various advanced startup options.
- Identify and disable a failed service.
- Identify and mitigate common locked account scenarios.
Module 13: Troubleshooting Hardware and Drivers
This module introduces hardware troubleshooting. Students will learn about driver management and how to troubleshoot devices. Students will also learn steps for troubleshooting system hardware and external peripherals such as USB drives and printers, including diagnostic methods and remediation.
Lessons
- Troubleshooting Device Driver Failures
- Overview of Hardware Troubleshooting
- Troubleshooting Physical Failures
Lab : Troubleshooting Hardware by Using Windows Memory Diagnostics
Lab : Recovering Windows by using a Restore Point
After completing this module, students will be able to:
- Troubleshoot and remediate driver issues.
- Troubleshoot Peripherals
Course MD-101T00: Managing Modern Desktops
Module 1: Modern Management
This module explains the concepts of supporting the desktop through it’s entire lifecycle. Finally, students will be introduced to the tools and strategies used for desktop deployment. Students well be introduced to the concept of directory in the cloud with Azure AD. Students will learn the similarities and differences between Azure AD and Active Directory DS and how to synchronize between the two. Students will explore identity management in Azure AD and learn about identity protection using Windows Hello for Business, as well as Azure AD Identity Protection and multi-factor authentication.
Lessons
- The Enterprise Desktop
- Azure AD Overview
- Managing Identities in Azure AD
Lab : Managing identities in Azure AD
Lab : Using Azure AD Connect to connect Active Directories
After completing this module, students will be able to:
- Describe the enterprise desktop lifecycle.
- Describe the capabilities of Azure AD.
- Manage users using Azure AD with Active Directory DS.
- Implement Windows Hello for Business.
- Join devices to Azure AD.
Module 2: Device Enrollment
This module will also cover Azure AD join and will be introduced to Microsoft Endpoint Manager, as well as learn how to configure policies for enrolling devices to Endpoint Manager and Intune.
Lessons
- Manage Device Authentication
- Device Enrollment using Microsoft Endpoint Configuration Manager
- Device Enrollment using Microsoft Intune
Lab : Manage Device Enrollment into Intune
Lab : Configuring and managing Azure AD Join
Lab : Enrolling devices into Microsoft Intune
After completing this module, students will be able to:
- Configure and join devices to Azure AD
- Configure device enrollment in Microsoft Endpoint Manager
- Enroll devices in Endpoint Configuration Manager and Intune
Module 3: Configuring Profiles
This module dives deeper into Intune device profiles including the types of device profiles and the difference between built-in and custom profiles. The student will learn about assigning profiles to Azure AD groups and monitoring devices and profiles in Intune. You will be introduced to the various user profile types that exist in Windows for on-premises devices. You will learn about the benefits of various profiles and how to switch between types of profiles. You will examine how Folder Redirection works and how to set it up. The lesson will then conclude with an overview of Enterprise State roaming and how to configure it for Azure AD devices.
Lessons
- Configuring Device Profiles
- Managing User Profiles
Lab : Configuring Enterprise State Roaming
Lab : Creating and Deploying Configuration Profiles
Lab : Monitor device and user activity in Intune
After completing this module, you should be able to:
- Describe the various types of device profiles in Intune
- Create, manage and monitor profiles
- Manage PowerShell scripts in Intune
- Explain the various user profile types that exist in Windows.
- Explain how to deploy and configure Folder Redirection.
- Configure Enterprise State Roaming for Azure AD devices.
Module 4: Application Management
In this module, students learn about application management on-premise and cloud-based solutions. This module will cover how to manage Office 365 ProPlus deployments in Endpoint Manager as well as how to manage apps on non-enrolled devices. The module will also include managing Win32 apps and deployment using the Microsoft Store for Business. This module will conclude with an overview of Microsoft Edge and Enterprise Mode.
Lessons
- Implement Mobile Application Management (MAM)
- Deploying and updating applications
- Administering applications
Lab : Configure App Protection Policies for Mobile Device
Lab : Deploying cloud apps using Intune
Lab : Deploy Apps using Endpoint Configuration Manager
Lab : Deploy Apps using Microsoft Store for Business
After completing this module, students will be able to:
- Describe the methods for application management.
- Deploy applications using Endpoint Manager and Group Policy.
- Configure Microsoft Store for Business.
- Deploy Office365 ProPlus using Intune.
- Manage and report application inventory and licenses.
Module 5: Managing Authentication in Azure AD
This module covers the various solutions for managing authentication. The student will also learn about the different types of VPNs. This module also covers compliance policies and how to create conditional access policies.
Lessons
- Protecting Identities in Azure AD
- Enabling Organization Access
- Implement Device Compliance Policies
- Using Reporting
Lab : Creating device inventory reports
Lab : Configuring and validating device compliance
Lab : Configuring Multi-factor Authentication
Lab : Configuring Self-service password reset for user accounts in Azure AD
After completing this module, students will be able to:
- Describe Windows Hello for Business
- Describe Azure AD Identity Protection
- Describe and manage multi-factor authentication
- Describe VPN types and configuration
- Deploy device compliance and conditional access policies
- Generate inventory reports and Compliance reports using Endpoint Manager
Module 6: Managing Security
In this module, students will learn about data protection. Topics will include Windows & Azure Information Protection, and various encryption technologies supported in Windows 10. This module also covers key capabilities of Windows Defender Advanced Threat Protection and how to implement these capabilities on devices in your organization. The module concludes using Windows Defender and using functionalities such as antivirus, firewall and Credential Guard.
Lessons
- Implement device data protection
- Managing Windows Defender ATP
- Managing Windows Defender in Windows 10
Lab : Configuring Endpoint security using Intune
Lab : Configure and Deploy Windows Information Protection Policies by using Intune
Lab : Configuring Disk Encryption Using Intune
After completing this module, students will be able to:
- Describe the methods protecting device data.
- Describe the capabilities and benefits of Windows ATP.
- Deploy and manage settings for Windows Defender clients.
Module 7: Deployment using Microsoft Endpoint Manager – Part 1
In this two-part module, students well be introduced to deployment using Microsoft Endpoint Manager. Part 1 will cover the tools for assessing the infrastructure and planning a deployment, followed by deployment using the Microsoft Deployment Toolkit and Endpoint Configuration Manager.
Lessons
- Assessing Deployment Readiness
- On-Premise Deployment Tools and Strategies
Lab : Deploying Windows 10 using Microsoft Deployment Toolkit
Lab : Deploying Windows 10 using Endpoint Configuration Manager
After completing this module, students will be able to:
- Describe the tools for planning a deployment.
- Deploy Windows 10 using the Microsoft Deployment Toolkit
- Deploy Windows 10 using Endpoint Configuration Manager
Module 8: Deployment using Microsoft Endpoint Manager – Part 2
This module continues with deployment using Microsoft Endpoint Manager. In part two, the student will learn about using Windows Autopilot and deployment using Microsoft Intune. This module will also include dynamic OS deployment methods, such as Subscription Activation. The module will conclude learning how Co-Management can be used to transitioning to modern management.
Lessons
- Deploying New Devices
- Dynamic Deployment Methods
- Planning a Transition to Modern Management
Lab : Configuring Co-Management Using Configuration Manager
Lab : Deploying Windows 10 with Autopilot
After completing this module, students will be able to:
- Deploy Windows 10 using Autopilot
- Configure OS deployment using subscription activation and provisioning packages
- Upgrade, migrate and manage devices using modern management methods
Module 9: Managing Updates for Windows 10
This module covers managing updates to Windows. This module introduces the servicing options for Windows 10. Students will learn the different methods for deploying updates and how to configure windows update policies. Finally, students will learn how to ensure and monitor updates using Desktop Analytics.
Lessons
- Updating Windows 10
- Windows Update for Business
- Desktop Analytics
Lab : Managing Windows 10 security and feature updates
After completing this module, students will be able to:
- Describe the Windows 10 servicing channels.
- Configure a Windows update policy using Group Policy settings.
- Configure Windows Update for Business to deploy OS updates.
- Use Desktop Analytics to assess upgrade readiness.
Exam Code / Name
MD-100
MD-101
Course Objectives
- Deploy Windows
- Manage devices and data
- Configure storage and connectivity
- Maintain Windows
- Deploy and upgrade operating systems
- Manage policies and profiles
- Manage and protect devices
- Manage apps and data
Learning Path
Microsoft 365 Certified: Enterprise Administrator Expert
Website
Start Time
9:00amFinish Time
3:00pm