Windows Intune Management (MD-102)

Cyberattacks rarely start with a hacker breaking down the door — they start with a lost laptop, a phishing email, or a device that missed its security update. This hands-on MD-102 course puts you in the endpoint administrator's seat and shows how Microsoft Intune stops those attacks before they spread. You'll work in a provisioned Contoso Healthcare Microsoft 365 tenant with Microsoft 365 E5 (no Teams) licensing for approximately 33 users and a free 90-day Microsoft Intune Suite trial covering 250 licenses. Four ready-to-use lab VMs are included: three Windows 11 devices (SEA-DEV1, SEA-DEV2, SEA-DEV3) with the read-only AllFiles (F:) drive, and an Ubuntu 22.04 server (LIN-SRV1). You'll Entra-join and enroll the Windows devices, run Graph PowerShell from SEA-DEV1, register SEA-DEV3 with Autopilot, and deploy Microsoft Tunnel Gateway on LIN-SRV1. Along the way you'll secure devices with compliance policies, BitLocker encryption, attack surface reduction and Defender for Endpoint; block risky apps and data leaks on BYOD phones; deploy new laptops zero-touch with Autopilot and patch thousands of endpoints remotely; and wipe a stolen laptop in minutes — all from the cloud. Through realistic scenarios such as a lost sales laptop, a ransomware outbreak, and an employee accessing company data on a personal phone, you'll build job-ready skills across Windows, macOS, iOS and Android. By the end, you'll be able to plan, deploy, manage and defend a modern workplace — and walk into the MD-102 exam with confidence.