MD-4011 Enhance Endpoint Security with Microsoft Intune and Microsoft Security Copilot (New – name change and content updated)
This course is designed to provide participants with comprehensive knowledge and hands-on experience managing and securing endpoints using Microsoft Intune and Microsoft Defender for Endpoint. Participants will start with foundational identity and enrollment concepts, followed by practical labs that guide them through device enrollment, policy configuration, compliance enforcement, and threat protection.
Throughout the course, participants will learn about advanced topics such as conditional access policies, app protection, security baselines, attack surface reduction, and AI-powered remediation using Microsoft Security Copilot. By the end of the course, participants will have a solid understanding of how to implement Zero Trust principles through modern endpoint management, enabling them to secure organizational data across managed and unmanaged devices while maintaining user productivity.
Learning Path 1: Enhance endpoint security with Microsoft Intune and Microsoft Copilot for Security
In this learning path, you will learn how to prepare your environment for device management, enroll and validate devices, configure and secure endpoints, protect data with conditional access, harden security with Defender for Endpoint, and accelerate remediation using Microsoft Security Copilot. Gain hands-on experience with real-world labs and practical scenarios to implement Zero Trust principles and modern endpoint security.
Module 1: Prepare Microsoft Entra ID and Intune for device management
Learn how to configure identity, licensing, and tenant settings to enable device enrollment in Microsoft Intune. Explore manual enrollment, Windows Autopilot, and BYOD scenarios to prepare your organization for modern endpoint management.
Lessons
- Set up Microsoft Entra ID roles and licensing
- Configure your tenant for device onboarding
- Choose and explain enrollment methods
Exercise
- None
Module 2: Enroll and validate devices with Microsoft Intune
Perform hands-on device enrollment in Microsoft Intune, validate device join and management status, configure enrollment restrictions, and troubleshoot common enrollment issues to ensure devices are successfully managed.
Lessons
- Discover Microsoft Copilot for Security
- Validate device join and management
- Apply platform and ownership restrictions
- Troubleshoot device enrollment
Exercise
- Enroll a device
Module 3: Configure and secure devices with Microsoft Intune policies
Learn to create and deploy configuration profiles, implement compliance policies, use dynamic groups for targeting, and automate remediation for noncompliant devices in Microsoft Intune
Lessons
- Create and assign configuration profiles
- Create and assign compliance policies
- Target policies with dynamic groups
- Automate remediation for noncompliance
Exercise
- Assign and validate device policies
Module 4: Protect data and control access with Microsoft Intune and Conditional Access
Protect corporate data on managed and unmanaged devices using Microsoft Intune app protection policies. Control access to organizational resources with Microsoft Entra Conditional Access policies that enforce compliance and security requirements.
Lessons
- Protect organizational data with app protection policies
- Control resource access with Conditional Access policies
Exercise
- Protect data and control access with policies
Module 5: Harden endpoints and monitor security with Microsoft Intune and Defender for Endpoint
Strengthen endpoint security by deploying Microsoft security baselines, onboarding devices to Microsoft Defender for Endpoint, and configuring attack surface reduction rules. Monitor security posture and respond to threats using integrated security operations tools.
Lessons
- Harden device security with security baselines
- Enable advanced threat protection with Microsoft Defender for Endpoint
- Prevent exploitation with attack surface reduction
Exercise
Harden and monitor endpoints with security policies
Module 6: Accelerate endpoint remediation and response with Microsoft Security Copilot
Leverage AI-powered investigation capabilities with Microsoft Security Copilot to analyze security incidents, troubleshoot device issues, and generate remediation recommendations across Microsoft Intune and Defender for Endpoint.
Lessons
- Microsoft Security Copilot overview
- Investigate security incidents with Copilot
- Device troubleshooting with Copilot in Intune
Exercise
- Investigate and respond with Security Copilot
