Course Description
This is a two-day Instructor-Led Training (ILT) course that describes mobile device management (MDM) technologies and the integration of various online cloud services with Microsoft System Center Configuration Manager. This course focuses on both hybrid MDM using Microsoft Intune, and the on-premises MDM scenario. This course also covers integration with online services such as Microsoft Store for Business, Microsoft Office 365, and Microsoft Azure.
Target Student
This course is intended for experienced information technology (IT) professionals, typically described as Enterprise Desktop Administrators (EDAs). These EDAs deploy, manage, and maintain PCs, devices, and applications across medium, large, and enterprise organizations. A significant portion of this audience uses or intends to use the latest branch of Configuration Manager and Intune together to manage and deploy PCs, devices, and applications.
The secondary audience for this course is individuals who are interested in taking Exam 70-703: Administering System Center Configuration Manager and Cloud Services Integration.
Pre-requisites
Before attending this course, students must have knowledge of the following:
- Networking fundamentals, including common networking protocols, topologies, hardware, media, routing, switching, and addressing.
- Active Directory Domain Services (AD DS) principles and fundamentals of AD DS management.
- Installation, configuration, and troubleshooting for Windows-based personal computers.
- Basic concepts of PKI security.
- Basic understanding of scripting and Windows PowerShell syntax.
- Basic understanding of Windows Server roles and services.
- Basic understanding of the configuration options for iOS, Android, and Windows Mobile device platforms.
- Basic understanding of management tasks using Configuration Manager.
Course Objectives
After completing this course, students will be able to:
- Describe the challenges in managing a mobile and Internet-based workforce and how Configuration Manager integrated with MDM and cloud services solutions can address these challenges.
- Describe and configure methods used to manage client devices that are located outside of the corporate network and connected to the Internet.
- Deploy and manage Microsoft Store for Business apps by using Configuration Manager.
- Deploy and manage Office 365 apps by using Configuration Manager.
- Manage mobile devices by using Configuration Manager.
- Describe and configure a hybrid MDM scenario by using Configuration Manager and Intune.
- Enroll iOS, Android, and Windows-based devices in a hybrid Configuration Manager and Intune MDM solution.
- Describe and configure on-premises mobile device management using Configuration Manager.
Course Content
Module 1: Extending the Configuration Manager infrastructure to support Internet-based and mobile devices
This module describes the challenges in managing a mobile and Internet-based workforce and how Configuration Manager integrated with MDM and cloud services solutions can address these challenges.
Lessons
- Managing a mobile and distributed workforce
- Integrating Configuration Manager with cloud services and Internet-based management solutions
- PKI requirements to support Internet-based and mobile device management scenarios
- Expanding content availability by using cloud-based distribution points
Lab: Preparing for cloud integration
- Signing up for an Azure subscription
- Configuring and enabling directory synchronization
Lab: Implementing PKI for Configuration Manager site systems and clients
- Creating certificate templates for Configuration Manager services
- Deploying certificates to Configuration Manager site systems
- Configuring the infrastructure to support certificate profiles
Lab: Configuring cloud-based distribution points
- Adding certificates to support Azure and cloud-based distribution points
- Installing a cloud-based distribution point
- Distributing content to a cloud-based distribution point
After completing module 1, students will be able to:
- Identify the challenges and solutions for managing a mobile workforce.
- Describe considerations and prerequisites for integrating Configuration Manager with cloud services and Internet-based management solutions.
- Identify the public key infrastructure (PKI) requirements to support Internet-based and mobile device management scenarios.
- Plan and configure cloud-based distribution points.
Module 2: Managing clients on the Internet
This module explains how to manage client devices that are located outside of the corporate network and connected to the Internet.
Lessons
- Methods for managing Internet-based clients
- Planning and implementing Internet-based client management
- Planning and implementing Cloud Management Gateway
Lab: Configuring Internet-based client management
- Configuring the Configuration Manager infrastructure to support Internet-based client management
- Deploying certificates to client devices
- Configuring the client policy to support Internet-based clients
Lab: Configuring Cloud Management Gateway for managing clients on the Internet
- Configuring certificate requirements to support Cloud Management Gateway
- Setting up the Cloud Management Gateway
- Configuring the Configuration Manager site to support Cloud Management Gateway
- Configuring clients for Cloud Management Gateway support
After completing module 2, students will be able to:
- Identify methods used to manage client devices located outside the corporate network and connected to the Internet.
- Describe the considerations and tasks for enabling Configuration Manager to support Internet-based client management.
- Describe the considerations and procedures for implementing Cloud Management Gateway to support Internet-based clients.
Module 3: Managing Microsoft Store for Business apps by using Configuration Manager
This module explains how to deploy and manage Microsoft Store for Business apps by using Configuration Manager.
Lessons
- Overview of Microsoft Store for Business and Education
- Managing Microsoft Store for Business apps by using Configuration Manager
Lab: Preparing to use Microsoft Store for Business to support app deployment
- Signing up for Microsoft Store for Business
- Adding roles to user accounts to manage Microsoft Store for Business
- Acquiring and distributing an app from Microsoft Store for Business
Lab: Deploying Microsoft Store for Business apps by using Configuration Manager
- Setting up Microsoft Store for Business synchronization
- Creating and deploying a Microsoft Store for Business app in Configuration Manager
- Monitoring Microsoft Store for Business app usage
After completing module 3, students will be able to:
- Describe Microsoft Store for Business and Microsoft Store for Education features.
- Use Configuration Manager to integrate with and manage Microsoft Store for Business apps.
Module 4: Managing Office 365 apps by using Configuration Manager
This module explains how to deploy and manage Office 365 apps by using Configuration Manager.
Lessons
- Overview of Office 365 ProPlus
- Deploying Office 365 clients by using Configuration Manager
- Managing Office 365 ProPlus updates
Lab: Preparing Office 365 to support app deployment by using Configuration Manager
- Signing up for Office 365
- Assigning Office 365 ProPlus licenses
Lab: Deploying Office 365 client apps by using Configuration Manager
- Configuring Office 365 app deployment from the Office 365 client management dashboard
- Deploying Office 365 ProPlus to client devices
- Configuring software updates to support Office 365
After completing module 4, students will be able to:
- Describe Office 365 ProPlus features.
- Use Configuration Manager to deploy Office 365 clients.
- Manage Office 365 ProPlus updates by using Configuration Manager.
Module 5: Mobile device management by using Configuration Manager
This module describes the methods used to manage mobile devices by using Configuration Manager.
Lessons
- Overview of mobile device management
- Configuring the Exchange Server connector for mobile device management
Lab: Managing mobile devices by using the Exchange Server connector
- Configuring security permissions for Exchange integration
- Configuring conditional access for Exchange on-premises
- Installing and configuring the Exchange Server connector
- Managing mobile devices by using Configuration Manager
After completing module 5, students will be able to:
- Describe what mobile device management is and methods used to manage devices.
- Configure the Exchange Server connector for mobile device management.
Module 6: Hybrid MDM with Configuration Manager and Microsoft Intune
This module describes how to configure a hybrid MDM scenario by using Configuration Manager and Intune.
Lessons
- Planning and preparing for hybrid MDM
- Configuring hybrid MDM with Configuration Manager and Intune
Lab: Configuring hybrid MDM
- Validating and configuring Intune and Configuration Manager integration
- Configuring the Intune subscription
- Configuring the device enrollment manager
After completing module 6, students will be able to:
- Identify the considerations and requirements for implementing a hybrid MDM solution by using Configuration Manager and Intune.
- Configure hybrid MDM by using Configuration Manager and Intune.
Module 7: Device platform enrollment by using Configuration Manager MDM
This module explains how to enroll iOS, Android, and Windows-based devices in a hybrid Configuration Manager and Intune MDM solution.
Lessons
- Enrolling Windows devices into MDM
- Enrolling Android devices
- Enrolling iOS devices into MDM
- Managing mobile devices in Configuration Manager
Lab: Enrolling Windows devices into MDM
- Enabling Windows device management in Configuration Manager
- Configuring automatic MDM enrollment for Windows 10
- Enrolling Windows 10 and Windows 10 Mobile devices into MDM
Lab: Enrolling Android devices into MDM
- Enabling Android enrollment for MDM by using Configuration Manager
- Enrolling an Android device into MDM
Lab: Performing management tasks for enrolled mobile devices
- Configuring compliance settings for MDM device platforms
- Deploying and managing applications for Windows-based mobile devices
- Deploying and managing applications for Android devices
- Protecting data with wipe, remote lock, and passcode reset
After completing module 7, students will be able to:
- Enable Windows device management and determine the appropriate enrollment method to manage Windows devices.
- Enable Android device management and determine the appropriate enrollment method to manage Android devices.
- Enable iOS device management and determine the appropriate enrollment method to manage iOS devices.
- Perform management tasks for devices enrolled in the hybrid MDM solution.
Module 8: On-premises mobile device management using Configuration Manager
This module explains how to configure on-premises mobile device management by using Configuration Manager.
Lessons
- Overview of on-premises mobile device management
- Configuring on-premises MDM by using Configuration Manager
Lab: Managing mobile devices with an on-premises infrastructure
- Preparing Configuration Manager prerequisites for on-premises mobile device management
- Enrolling a standalone Windows 10 device as a mobile client
After completing module 8, students will be able to:
- Describe the advantages of and considerations for implementing on-premises mobile device management.
- Plan for and configure on-premises MDM by using Configuration Manager.