Live Chat
Monday - Friday 8am - 6pm EST Chat Now
Contact Us
Monday - Friday 8am - 8pm EST 1-866-716-6688 Other Contact Options

Cart () Loading...

    • Quantity:
    • Delivery:
    • Dates:
    • Location:


MOD+DMOC: Planning for and Managing Devices in the Enterprise - Enterprise Mobility Suite and On-Premises Tools (M20398)

Learn how to manage devices, users, and data with EMS.

GK# 5465

Course Overview


In this course, you will learn how to use the Enterprise Mobility Suite (EMS) to manage devices, users, and data. You will use other technologies, such as Group Policy and other Windows Server-based technologies to manage devices and secure data. You will also learn how to design and implement cloud-based and on-premises solutions for managing Windows-based, iOS, and Android devices. In addition, you will discover how to provide secure and efficient access to data and applications.


  • Delivery Format:
  • Date:
  • Location:
  • Access Period:


What You'll Learn

  • Use devices in the enterprise environment
  • Describe AD DS features for device management
  • Implement and administer Microsoft Azure Active Directory (Azure AD)
  • Connect AD DS with Azure AD
  • Plan and implement app support
  • Manage devices in Microsoft Office 365
  • Plan and implement Intune
  • Use Intune to manage devices
  • Use Intune to manage applications and Resource Access


Viewing outline for:

On-Demand Outline

1. Using Devices in the Enterprise 

  • Overview of devices in an enterprise
  • Devices management features
  • Overview of the Enterprise Mobility Suite

2. Active Directory Domain Services (AD DS) Features for Device Management

  • Overview of AD DS and Group Policy
  • Planning and implementing Dynamic Access Control
  • Planning and deploying advanced audit policies

3. Implementing and Administering Azure Active Directory (Azure AD)

  • Overview of Azure AD.
  • Creating and managing Azure AD.
  • Managing authentication in Azure AD

4. Connecting AD DS with Azure AD

  • Preparing AD DS for directory synchronization
  • Implementing Azure AD Connect
  • Planning and implementing federation

5. Planning and Implementing App Support

  • Planning and implementing application compatibility options
  • Publishing and using RemoteApp programs
  • Publishing and using Azure RemoteApp

6. Managing Devices in Office 365

  • Overview of Office 365
  • Mobile Device Management (MDM) for Office 365

7. Planning and Implementing Microsoft Intune

  • Planning for Intune
  • Deploying Intune clients
  • Basic Intune administration

8. Managing Devices by Using Intune

  • Working with Intune policies
  • MDM
  • Managing updates and Windows Defender

9. Using Microsoft Intune to Manage Applications and Resource Access

  • Application life-cycle management
  • Application deployment process
  • Managing access to company resources

10. Planning and Implementing Azure RMS

  • Overview of Azure Rights Management (ARM)
  • Implementing ARM

11. Planning and Implementing Remote Access

  • Overview of remote access solutions
  • Implementing remote infrastructure access
  • Planning and implementing Work Folders
  • Implementing cloud data access
  • Planning and implementing mobility options

12. Planning and Protecting Data

  • Planning and implementing encryption
  • Planning and implementing BitLocker
  • Protecting data on the device

13. Recovering Data and Operating System

  • Planning and implementing file recovery
  • Planning and implementing device recovery
  • Planning and implementing updates


Viewing labs for:

On-Demand Labs

Lab 1: Planning for Device Management

  • Selecting the appropriate products and technologies for device management
  • Working with devices

Lab 2: Using Group Policy to Manage Users and Devices

  • Creating and configuring Group Policy Objects (GPOs)
  • Modifying Group Policy processing
  • Creating and applying Group Policy preferences

Lab 3: Implementing Secure Data Access

  • Preparing for a Dynamic Access Control (DAC) deployment
  • Implementing Dynamic Access Control
  • Validating and remediating Dynamic Access Control
  • Using advanced audit policies

Lab 4: Working with Azure AD and Providing Access to Claims-aware Applications

  • Managing Azure AD users and groups
  • Joining a Windows 10 device to Azure AD
  • Accessing a cloud application with SSO

Lab 5: Synchronizing On-premises AD DS with Azure AD

  • Implementing Azure AD Connect
  • Verifying synchronization of new objects
  • Implement and use Azure AD Premium features

Lab 6: Publishing and Using RemoteApp and Azure RemoteApp

  • Publishing and accessing RemoteApp programs
  • Publishing and using Azure RemoteApp

Lab 7: Managing Devices in Office 365

  • Obtaining and Office 365 subscription
  • Configuring and testing mobile device management in Office 365

Lab 8: Planning and Implementing Intune

  • Deploying Intune clients and linking computers to users
  • Create Intune users
  • Delegating Intune permissions
  • Creating Intune groups

Lab 9: Using Intune Policies to Manage Devices

  • Configuring Azure AD with automatic mobile device management enrollment
  • Working with Intune policies

Lab 10: Managing Updates and Windows Defender

Lab 11: Using Microsoft Intune to Deploy and Monitor Applications

Lab 12: Using Intune to Manage Resource Access

  • Configuring certificate deployment in Intune
  • Configuring conditional access policies

Lab 13: Using Azure RMS to Protect Documents and Data

  • Protecting documents by using Azure RMS
  • Using FCI with Azure RMS

Lab 14: Configuring and Using VPN and Work Folders

  • Configuring a VPN server and a VPN client
  • Configuring and using Work Folders

Lab 15: Using Offline Files and OneDrive

  • Configuring and using Offline files
  • Synchronize settings between Windows 10 devices
  • Configuring and using OneDrive

Lab 16: Protecting Data by Using encryption, BitLocker Drive Encryption, and Remote Wipe

  • Encrypting and recovering access to encrypted files
  • Using BitLocker to protect data
  • Performing a remote wipe

Lab 17: Implementing File Recovery and Device Recovery

  • Using File History to recover files
  • Using Previous Versions to recover files
  • Recovering a device with a restore point
  • Using the advanced start-up options to recover a device


  • Experience working in a Windows Server 2012 R2 Enterprise environment including Remote Desktop Services
  • Experience with Windows 10 and familiarity with Windows PowerShell and mobile platforms

Who Should Attend

  • IT professionals and consultants who plan, deploy, and manage devices and applications in medium to large organizations
  • IT professionals who in on-premises Active Directory Domain Services (AD DS) environments with both domain-joined and non-domain joined devices, for which they need to provide mobile device management and secure data access
  • IT professionals who plan to extend on-premises AD DS to the cloud and to plan and implement Enterprise Mobility Suite

Vendor Credits


Redeem five SATVs for an individual On-Demand course plus digital Microsoft Official Courseware (dMOC). For more information on Microsoft SATVs click here.

Course Delivery

This course is available in the following formats:


Train at your own pace with 24/7 access to courses that help you acquire must-have technology skills.

Duration: 39 hours

Request this course in a different delivery format.