Live Chat
Monday - Friday 8am - 6pm EST Chat Now
Contact Us
Monday - Friday 8am - 8pm EST 1-866-716-6688 Other Contact Options

Cart () Loading...

    • Quantity:
    • Delivery:
    • Dates:
    • Location:


MOD+DMOC: Planning for and Managing Devices in the Enterprise - Enterprise Mobility Suite and On-Premises Tools (M20398)

Learn how to manage devices, users, and data with EMS.

GK# 5465

Course Overview


In this course, you will learn how to use the Enterprise Mobility Suite (EMS) to manage devices, users, and data. You will use other technologies, such as Group Policy and other Windows Server-based technologies to manage devices and secure data. You will also learn how to design and implement cloud-based and on-premises solutions for managing Windows-based, iOS, and Android devices. In addition, you will discover how to provide secure and efficient access to data and applications


Redeem five SATVs for an individual GK Digital Learning course plus digital Microsoft Official Courseware (dMOC). For more information on Microsoft SATVs click here.


  • Delivery Format:
  • Date:
  • Location:
  • Access Period:


What You'll Learn

  • Use devices in the enterprise environment
  • Describe AD DS features for device management
  • Implement and administer Microsoft Azure Active Directory (Azure AD)
  • Connect AD DS with Azure AD
  • Plan and implement app support
  • Manage devices in Microsoft Office 365
  • Plan and implement Intune
  • Use Intune to manage devices
  • Use Intune to manage applications and Resource Access


Viewing outline for:

GK Digital Learning Outline

1. Using Devices in the Enterprise 

  • Overview of devices in an enterprise
  • Devices management features
  • Overview of the Enterprise Mobility Suite

2. Active Directory Domain Services (AD DS) Features for Device Management

  • Overview of AD DS and Group Policy
  • Planning and implementing Dynamic Access Control
  • Planning and deploying advanced audit policies

3. Implementing and Administering Azure Active Directory (Azure AD)

  • Overview of Azure AD.
  • Creating and managing Azure AD.
  • Managing authentication in Azure AD

4. Connecting AD DS with Azure AD

  • Preparing AD DS for directory synchronization
  • Implementing Azure AD Connect
  • Planning and implementing federation

5. Planning and Implementing App Support

  • Planning and implementing application compatibility options
  • Publishing and using RemoteApp programs
  • Publishing and using Azure RemoteApp

6. Managing Devices in Office 365

  • Overview of Office 365
  • Mobile Device Management (MDM) for Office 365

7. Planning and Implementing Microsoft Intune

  • Planning for Intune
    Deploying Intune clients
    Basic Intune administration

8. Managing Devices by Using Intune

  • Working with Intune policies
    Managing updates and Windows Defender

9. Using Microsoft Intune to Manage Applications and Resource Access

  • Application life-cycle management
  • Application deployment process
  • Managing access to company resources

10. Planning and Implementing Azure RMS

  • Overview of Azure Rights Management (ARM)
  • Implementing ARM

11. Planning and Implementing Remote Access

  • Overview of remote access solutions
  • Implementing remote infrastructure access
  • Planning and implementing Work Folders
  • Implementing cloud data access
  • Planning and implementing mobility options

12. Planning and Protecting Data

  • Planning and implementing encryption
  • Planning and implementing BitLocker
  • Protecting data on the device

13. Recovering Data and Operating System

  • Planning and implementing file recovery
  • Planning and implementing device recovery
  • Planning and implementing updates


Viewing labs for:

GK Digital Learning Labs

Lab 1: Planning for Device Management

Selecting the appropriate products and technologies for device management
Working with devices

Lab 2: Using Group Policy to Manage Users and Devices

Creating and configuring Group Policy Objects (GPOs)
Modifying Group Policy processing
Creating and applying Group Policy preferences

Lab 3: Implementing Secure Data Access

Preparing for a Dynamic Access Control (DAC) deployment
Implementing Dynamic Access Control
Validating and remediating Dynamic Access Control
Using advanced audit policies

Lab 4: Working with Azure AD and Providing Access to Claims-aware Applications

Managing Azure AD users and groups
Joining a Windows 10 device to Azure AD
Accessing a cloud application with SSO

Lab 5: Synchronizing On-premises AD DS with Azure AD

Implementing Azure AD Connect
Verifying synchronization of new objects
Implement and use Azure AD Premium features

Lab 6: Publishing and Using RemoteApp and Azure RemoteApp

Publishing and accessing RemoteApp programs
Publishing and using Azure RemoteApp

Lab 7: Managing Devices in Office 365

Obtaining and Office 365 subscription
Configuring and testing mobile device management in Office 365

Lab 8: Planning and Implementing Intune

Deploying Intune clients and linking computers to users
Create Intune users
Delegating Intune permissions
Creating Intune groups

Lab 9: Using Intune Policies to Manage Devices

Configuring Azure AD with automatic mobile device management enrollment
Working with Intune policies

Lab 10: Managing Updates and Windows Defender

Lab 11: Using Microsoft Intune to Deploy and Monitor Applications

Lab 12: Using Intune to Manage Resource Access

Configuring certificate deployment in Intune
Configuring conditional access policies

Lab 13: Using Azure RMS to Protect Documents and Data

Protecting documents by using Azure RMS
Using FCI with Azure RMS

Lab 14: Configuring and Using VPN and Work Folders

Configuring a VPN server and a VPN client
Configuring and using Work Folders

Lab 15: Using Offline Files and OneDrive

Configuring and using Offline files
Synchronize settings between Windows 10 devices
Configuring and using OneDrive

Lab 16: Protecting Data by Using encryption, BitLocker Drive Encryption, and Remote Wipe

Encrypting and recovering access to encrypted files
Using BitLocker to protect data
Performing a remote wipe

Lab 17: Implementing File Recovery and Device Recovery

Using File History to recover files
Using Previous Versions to recover files
Recovering a device with a restore point
Using the advanced start-up options to recover a device


  • Experience working in a Windows Server 2012 R2 Enterprise environment including Remote Desktop Services
  • Experience with Windows 10 and familiarity with Windows PowerShell and mobile platforms

Who Should Attend

  • IT professionals and consultants who plan, deploy, and manage devices and applications in medium to large organizations
  • IT professionals who in on-premises Active Directory Domain Services (AD DS) environments with both domain-joined and non-domain joined devices, for which they need to provide mobile device management and secure data access
  • IT professionals who plan to extend on-premises AD DS to the cloud and to plan and implement Enterprise Mobility Suite
Course Delivery

This course is available in the following formats:

GK Digital Learning

Experience high-quality online learning combined with reliable expert guidance and skills development activities.

Request this course in a different delivery format.