Microsoft Modern Desktop Administrator

Course Duration 40 hours
Assessment: Online

Overview

Modern desktop administrators deploy, configure, secure, manage, and monitor devices and client applications in an enterprise environment.

Pre-requisites:

Basic understanding of computer networks and hardware concepts.
Basic understanding of OS and Application concepts.
Experience with using the Windows OS.

Topics

Course MD-100T00: Windows 10

Module 1: Installing Windows

This module covers installing the Windows 10 OS. Students will learn the different editions of Windows 10, requirements, and new features introduced. This module covers how to install the OS, as well as methods for migrations and upgrading. Students will also learn about common tools used in the deployment process.

Lessons

Introducing Windows 10
Windows 10 Editions and Requirements
Installation Methods
Upgrading and Migrating to Windows 10
Deployment Methods

Lab : Deploying Windows using Windows ADK tools

Lab : Migrating User Settings using USMT

After completing this module, students will be able to:

Understanding the different editions and features of Windows 10.
Understand the Windows 10 client installation options.
Practice installing Windows 10.
Migrate content using the User State Migration Tool.

Module 2: Configuring Authorization & Authentication

This module introduces the tools and features of Windows 10 for authorizing access to Windows 10 clients. Students will learn about methods for how users sign-in to Windows 10. This module also covers restricting what users can or cannot do on a device through methods like UAC and account types.

Lessons

Authentication
Managing Users and Groups
Configuring User Account Control
Implementing Device Registration

Lab : Managing Domain Authentication

Lab : Managing Local User and Microsoft Account Authentication

Lab : Managing password and account options

Lab : Managing Azure AD Authentication

After completing this module, students will be able to:

Describe the different methods for securing data and the Windows 10 OS.
Describe the different types of user and service accounts.
Configure Windows Hello.
Configure user account control.
Register a device with a domain.

Module 3: Post-installation Configuration and Personalization

This module covers common post-installation tasks in Windows 10. Students will learn how to customize the user interface, as well as using the control panel and settings app to configure common OS settings. This course will also introduce students to Windows PowerShell. This module will cover how device drivers work and how they work. Students will also be introduced to managing and configuring hardware peripherals such as printers.

Lessons

Configure and Customize the Windows Start Menu
Common Configuration Options
Advanced Configuration Methods
Managing Drivers and Devices

Lab : Managing local and network printers

Lab : Managing Windows 10 Settings

Lab : Synchronizing settings between devices

After completing this module, students will be able to:

Customize the Windows 10 UI
Configure device specific settings such as power plans and mobile device options.
Use the Windows control panel and setting app to configure settings.
Perform tasks using Windows PowerShell.
Describe concepts related to drivers.
Describe printer management concepts.
Configure client-side printing and managing print server properties.

Module 4: Updating Windows

In this module, Students will learn about keeping Windows 10 up-to-date. Students will be introduced to the new Windows servicing model and how it applies to various scenarios. Students will learn the various different methods for updating Windows and applications, as well as managing updates using tools like group policy and Windows Update for Business.

Lessons

Windows Servicing Model
Updating Windows

Lab : Managing Windows Update Settings

After completing this module, students will be able to:

Describe the Windows servicing model.
Configure Windows update settings.
Describe updating Windows using WSUS.
Describe updating Windows using Windows Update for Business.
Configure Windows update using group policy.

Module 5: Configuring Networking

In this module, Students will learn about networking concepts. This module will introduce to IPv4 and IPv6, and concepts like DNS. Students will learn how to configure network settings in Windows, as well as learn about wireless network technologies. The module will conclude with methods of managing Windows remotely.

Lessons

Configure IP Network Connectivity
Implement Name Resolution
Implement Wireless Network Connectivity
Remote Access Overview
Remote Management

Lab : Configuring Network Connectivity

Lab : Configuring and Testing Name Resolution

Lab : Administering Windows 10 Using Remote Management

After completing this module, students will be able to:

Configure IP network connectivity.
Describe how name resolution works.
Describe remote access technologies like VPNs.
Configure Windows for remote management and access.

Module 6: Configuring Storage

This module covers storage configuration and management in Windows 10. Students will be introduced to local, cloud and virtual storage options. This course will also cover configuring storage on client devices and introduce storage spaces.

Lessons

Managing Storage
Managing Disks and Volumes
Managing Storage Spaces

Lab : Creating a Storage Space

Lab : Managing Storage

After completing this module, students will be able to:

Describe the options and benefits of local, cloud, and virtual storage.
Configure local disk partitions and volumes.
Describe the capabilities and benefits of Storage spaces.

Module 7: Configuring Data Access and Usage

In this module, Students will learn about permissions. This module will cover considerations for different files systems. Students will learn how to configure file and folder permissions as well as shared folders. Students will also learn configuring settings through methods such as local and group policy. The module will conclude with configuring OneDrive and Work Folders.

Lessons

Overview of File Systems
Configuring and Managing File Access
Configuring and Managing Shared Folders
Managing User Files

Lab : Configuring and Managing Permissions and Shares

Lab : Using Conditions to Control Access and Effective Permissions

Lab : Work Folders

Lab : Synchronizing files with OneDrive

After completing this module, students will be able to:

Describe the differences and benefits of supported file systems.
Configure file and folder permissions.
Configure shared folders.
Secure Windows through local policy settings.

Module 8: Managing Apps in Windows 10

In this module, Students will be introduced to App management in Windows 10. This module will cover the different types of apps and supported installation methods. Students will learn how to install apps using manual and automated methods, as well as manage app delivery using the Windows Store. Finally, this module will cover the differences between Internet Explorer and Microsoft Edge.

Lessons

Providing Apps to Users
Managing Universal Windows Apps
Web Browsers in Windows 10

Lab : Configuring Microsoft Edge to support Internet Explorer Enterprise Mode

Lab : Installing Apps in Windows 10

After completing this module, students will be able to:

Describe the different types of applications.
Install applications manually and using automated methods.
Manage application deployment using the Windows Store.
Learn about web browser features in Windows 10.

Module 9: Configuring Threat Protection and Advanced Security

This module introduces students to protecting devices from external threats. Students will learn about the different types of common threats. This module will teach students about using encryption, firewalls, and IPSec to help protect against threats. The module will conclude with how to configure and use Windows Defender and AppLocker.

Lessons

Malware and Threat Protection
Windows Defender
Connection Security Rules
Advanced Protection Methods

Lab : Configuring Microsoft Defender Antivirus and Windows Security

Lab : Configuring Firewall and Connection Security

Lab : Configuring BitLocker

After completing this module, students will be able to:

Identify common security threats .
Describe the methods by which you can mitigate these common security threats.
Describe the different methods of encryption.
Describe how Windows firewall can secure the device.
Describe the benefits of using IPSec.
Describe the different features of Windows Defender.
Describe the benefits of using AppLocker.

Module 10: Supporting the Windows 10 Environment

This module will cover the Windows 10 architecture and common environments. Students will be introduced to the various tools used in maintaining Windows. This module will also discuss methodologies for effectively troubleshooting issues and how to proactively manage and optimize Windows 10.

Lessons

Windows Architecture
Support and Diagnostic Tools
Monitoring and Troubleshooting Computer Performance

Lab : Monitoring Reliability and Performance

Lab : Monitoring Events

After completing this module, students will be able to:

Describe the Windows architecture.
Describe key stages in troubleshooting.
Describe the purpose and benefits of the various tools in Windows.
Use monitoring tools to establish a performance baseline
Optimize performance on Windows 10 clients.

Module 11: Troubleshooting Files & Applications

This module helps students plan for file backup and recovery. Students will learn how to plan and configure data protection strategies and how to perform various file and system recovery methods. This module also includes common methods for troubleshooting application installation issues, compatibility issues, and resolving browser issues.

Lessons

File Recovery in Windows 10
Application Troubleshooting

Lab : Using File History to Recover Files

After completing this module, students will be able to:

Describe the different methods of file recovery.
Configure Windows 10 to support individual file and system recovery.
Recover a device using the Reset This PC function.
Solve application compatibility issues with the Application Compatibility Toolkit.
Troubleshoot common browser issues.

Module 12: Troubleshooting the OS

In this module, Students will learn how to troubleshoot startup and service issues related to the operating system. This module will teach the different startup and recovery options, and how to troubleshoot different Windows services.

Lessons

Troubleshooting Windows Startup
Troubleshooting Operating System Service Issues

Lab : Using Advanced Startup and Windows RE to recover from Boot Failures

Lab : Recovering Windows using Reset This PC

After completing this module, students will be able to:

Describe the various methods identifying and recovering from startup issues.
Describe when to use the various advanced startup options.
Identify and disable a failed service.
Identify and mitigate common locked account scenarios.

Module 13: Troubleshooting Hardware and Drivers

This module introduces hardware troubleshooting. Students will learn about driver management and how to troubleshoot devices. Students will also learn steps for troubleshooting system hardware and external peripherals such as USB drives and printers, including diagnostic methods and remediation.

Lessons

Troubleshooting Device Driver Failures
Overview of Hardware Troubleshooting
Troubleshooting Physical Failures

Lab : Troubleshooting Hardware by Using Windows Memory Diagnostics

Lab : Recovering Windows by using a Restore Point

After completing this module, students will be able to:

Troubleshoot and remediate driver issues.
Troubleshoot Peripherals

Course MD-101T00: Managing Modern Desktops

Module 1: Modern Management

This module explains the concepts of supporting the desktop through it’s entire lifecycle. Finally, students will be introduced to the tools and strategies used for desktop deployment. Students well be introduced to the concept of directory in the cloud with Azure AD. Students will learn the similarities and differences between Azure AD and Active Directory DS and how to synchronize between the two. Students will explore identity management in Azure AD and learn about identity protection using Windows Hello for Business, as well as Azure AD Identity Protection and multi-factor authentication.

Lessons

The Enterprise Desktop
Azure AD Overview
Managing Identities in Azure AD

Lab : Managing identities in Azure AD

Lab : Using Azure AD Connect to connect Active Directories

After completing this module, students will be able to:

Describe the enterprise desktop lifecycle.
Describe the capabilities of Azure AD.
Manage users using Azure AD with Active Directory DS.
Implement Windows Hello for Business.
Join devices to Azure AD.

Module 2: Device Enrollment

This module will also cover Azure AD join and will be introduced to Microsoft Endpoint Manager, as well as learn how to configure policies for enrolling devices to Endpoint Manager and Intune.

Lessons

Manage Device Authentication
Device Enrollment using Microsoft Endpoint Configuration Manager
Device Enrollment using Microsoft Intune

Lab : Manage Device Enrollment into Intune

Lab : Configuring and managing Azure AD Join

Lab : Enrolling devices into Microsoft Intune

After completing this module, students will be able to:

Configure and join devices to Azure AD
Configure device enrollment in Microsoft Endpoint Manager
Enroll devices in Endpoint Configuration Manager and Intune

Module 3: Configuring Profiles

This module dives deeper into Intune device profiles including the types of device profiles and the difference between built-in and custom profiles. The student will learn about assigning profiles to Azure AD groups and monitoring devices and profiles in Intune. You will be introduced to the various user profile types that exist in Windows for on-premises devices. You will learn about the benefits of various profiles and how to switch between types of profiles. You will examine how Folder Redirection works and how to set it up. The lesson will then conclude with an overview of Enterprise State roaming and how to configure it for Azure AD devices.

Lessons

Configuring Device Profiles
Managing User Profiles

Lab : Configuring Enterprise State Roaming

Lab : Creating and Deploying Configuration Profiles

Lab : Monitor device and user activity in Intune

After completing this module, you should be able to:

Describe the various types of device profiles in Intune
Create, manage and monitor profiles
Manage PowerShell scripts in Intune
Explain the various user profile types that exist in Windows.
Explain how to deploy and configure Folder Redirection.
Configure Enterprise State Roaming for Azure AD devices.

Module 4: Application Management

In this module, students learn about application management on-premise and cloud-based solutions. This module will cover how to manage Office 365 ProPlus deployments in Endpoint Manager as well as how to manage apps on non-enrolled devices. The module will also include managing Win32 apps and deployment using the Microsoft Store for Business. This module will conclude with an overview of Microsoft Edge and Enterprise Mode.

Lessons

Implement Mobile Application Management (MAM)
Deploying and updating applications
Administering applications

Lab : Configure App Protection Policies for Mobile Device

Lab : Deploying cloud apps using Intune

Lab : Deploy Apps using Endpoint Configuration Manager

Lab : Deploy Apps using Microsoft Store for Business

After completing this module, students will be able to:

Describe the methods for application management.
Deploy applications using Endpoint Manager and Group Policy.
Configure Microsoft Store for Business.
Deploy Office365 ProPlus using Intune.
Manage and report application inventory and licenses.

Module 5: Managing Authentication in Azure AD

This module covers the various solutions for managing authentication. The student will also learn about the different types of VPNs. This module also covers compliance policies and how to create conditional access policies.

Lessons

Protecting Identities in Azure AD
Enabling Organization Access
Implement Device Compliance Policies
Using Reporting

Lab : Creating device inventory reports

Lab : Configuring and validating device compliance

Lab : Configuring Multi-factor Authentication

Lab : Configuring Self-service password reset for user accounts in Azure AD

After completing this module, students will be able to:

Describe Windows Hello for Business
Describe Azure AD Identity Protection
Describe and manage multi-factor authentication
Describe VPN types and configuration
Deploy device compliance and conditional access policies
Generate inventory reports and Compliance reports using Endpoint Manager

Module 6: Managing Security

In this module, students will learn about data protection. Topics will include Windows & Azure Information Protection, and various encryption technologies supported in Windows 10. This module also covers key capabilities of Windows Defender Advanced Threat Protection and how to implement these capabilities on devices in your organization. The module concludes using Windows Defender and using functionalities such as antivirus, firewall and Credential Guard.

Lessons

Implement device data protection
Managing Windows Defender ATP
Managing Windows Defender in Windows 10

Lab : Configuring Endpoint security using Intune

Lab : Configure and Deploy Windows Information Protection Policies by using Intune

Lab : Configuring Disk Encryption Using Intune

After completing this module, students will be able to:

Describe the methods protecting device data.
Describe the capabilities and benefits of Windows ATP.
Deploy and manage settings for Windows Defender clients.

Module 7: Deployment using Microsoft Endpoint Manager – Part 1

In this two-part module, students well be introduced to deployment using Microsoft Endpoint Manager. Part 1 will cover the tools for assessing the infrastructure and planning a deployment, followed by deployment using the Microsoft Deployment Toolkit and Endpoint Configuration Manager.

Lessons

Assessing Deployment Readiness
On-Premise Deployment Tools and Strategies

Lab : Deploying Windows 10 using Microsoft Deployment Toolkit

Lab : Deploying Windows 10 using Endpoint Configuration Manager

After completing this module, students will be able to:

Describe the tools for planning a deployment.
Deploy Windows 10 using the Microsoft Deployment Toolkit
Deploy Windows 10 using Endpoint Configuration Manager

Module 8: Deployment using Microsoft Endpoint Manager – Part 2

This module continues with deployment using Microsoft Endpoint Manager. In part two, the student will learn about using Windows Autopilot and deployment using Microsoft Intune. This module will also include dynamic OS deployment methods, such as Subscription Activation. The module will conclude learning how Co-Management can be used to transitioning to modern management.

Lessons

Deploying New Devices
Dynamic Deployment Methods
Planning a Transition to Modern Management

Lab : Configuring Co-Management Using Configuration Manager

Lab : Deploying Windows 10 with Autopilot

After completing this module, students will be able to:

Deploy Windows 10 using Autopilot
Configure OS deployment using subscription activation and provisioning packages
Upgrade, migrate and manage devices using modern management methods

Module 9: Managing Updates for Windows 10

This module covers managing updates to Windows. This module introduces the servicing options for Windows 10. Students will learn the different methods for deploying updates and how to configure windows update policies. Finally, students will learn how to ensure and monitor updates using Desktop Analytics.

Lessons

Updating Windows 10
Windows Update for Business
Desktop Analytics

Lab : Managing Windows 10 security and feature updates

After completing this module, students will be able to:

Describe the Windows 10 servicing channels.
Configure a Windows update policy using Group Policy settings.
Configure Windows Update for Business to deploy OS updates.
Use Desktop Analytics to assess upgrade readiness.

Exam Code / Name

MD-100

MD-101

Course Objectives

Deploy Windows
Manage devices and data
Configure storage and connectivity
Maintain Windows
Deploy and upgrade operating systems
Manage policies and profiles
Manage and protect devices
Manage apps and data