MS-20398 - Planning for and Managing Devices in the Enterprise: Enterprise Mobility Suite (EMS) & On-Premises Tools

This course teaches information technology (IT) professionals how to use the Enterprise Mobility Suite to manage devices, users, and data. In addition, this course teaches students how to use other technologies such as Group Policy and other Windows Server-based technologies to manage devices and secure data. Students will learn how to design and implement cloud-based and on-premises solutions for managing Windows-based, Apple iOS, and Android devices, and they will learn how to provide secure and efficient access to data and applications.

*This course utilizes higher hosting resources for online labs and therefore, post-class access is limited to 30 days.

Click here to print this page »


In addition to their professional experience, students who attend this training should already have the following technical knowledge:
TCP/IP networking fundamentals
  • Understanding of Domain Name System (DNS)
  • Working knowledge of Active Directory principles
  • Understanding of the public key infrastructure (PKI) fundamentals
  • Understanding of cloud-based service concepts
  • Windows Server 2012 R2 fundamentals, including Remote Desktop Services
  • Experience with Windows 10
  • Familiarity with Windows PowerShell

* Basic knowledge of mobile platforms

Detailed Class Syllabus

Module 1: Using devices in the enterprise

Overview of devices in an enterprise
Devices management features
Overview of the Enterprise Mobility Suite

Module 2: Active Directory Domain Services features for device management

Overview of AD DS
Overview of Group Policy
Planning and implementing Dynamic Access Control
Planning and deploying advanced audit policies

Module 3: Implementing and administering Azure AD

Overview of Azure AD.
Creating and managing Azure AD.
Managing authentication in Azure AD

Module 4: Connecting AD DS with Azure AD

Preparing AD DS for directory synchronization
Implementing Azure AD Connect
Planning and implementing federation

Module 5: Planning and implementing app support

Planning and implementing application compatibility options
Publishing and using RemoteApp programs
Publishing and using Azure RemoteApp

Module 6: Managing devices in Office 365

Overview of Office 365
MDM for Office 365

Module 7: Planning and implementing Microsoft Intune

Planning for Intune
Deploying Intune clients
Basic Intune administration

Module 8: Managing devices by using Intune

Working with Intune policies
Mobile device management
Managing updates and Windows Defender

Module 9: Using Microsoft Intune to manage applications and resource access

Application life-cycle management
Application deployment process
Managing access to company resources

Module 10: Planning and implementing Azure RMS

Overview of ARM
Implementing ARM

Module 11: Planning and implementing remote access

Overview of remote access solutions
Implementing remote infrastructure access
Planning and implementing Work Folders
Implementing cloud data access
Planning and implementing mobility options

Module 12: Planning and protecting data

Planning and implementing encryption
Planning and implementing BitLocker
Protecting data on the device

Module 13: Recovering data and operating system

Planning and implementing file recovery
Planning and implementing device recovery
Planning and implementing updates