Module 1: Prepare infrastructure for devices using Microsoft Intune and Microsoft Entra ID
In this learning path, you'll learn how to build the identity and enrollment infrastructure that supports cloud-based endpoint management with Microsoft Intune and Microsoft Entra ID. You'll start by exploring Intune's role in modern endpoint management and the available management models, then configure Microsoft Entra ID to support policy targeting through users, groups, roles, and device registration settings. You'll go deeper into device identity and authentication, learning how join types and trust models affect device management and Conditional Access. From there, you'll plan and implement enrollment for Windows, iOS/iPadOS, macOS, and Android devices, configure enrollment restrictions, and troubleshoot common failures. The learning path concludes with Windows Autopilot, where you'll register devices, configure deployment profiles, pre-provision hardware, and monitor and troubleshoot deployments.
Module 2: Manage and maintain devices using Microsoft Intune
In this learning path, you'll learn how to configure and manage devices after enrollment using Microsoft Intune. You'll start by creating and assigning device configuration profiles and compliance policies, using groups and filters for precise targeting, and migrating on-premises Group Policy settings to the cloud. You'll then explore Windows update management - configuring update rings, feature update policies, Hotpatch, and Windows Autopatch to keep devices current and secure. Next, you'll learn how to monitor device and policy health using Endpoint Analytics, Proactive Remediations, and Intune reporting to maintain visibility and drive corrective action at scale. The learning path concludes with a structured approach to troubleshooting, covering enrollment and compliance failures, policy conflicts, diagnostic tools, the Intune Troubleshooting blade, and automated issue resolution using remediation scripts.
Module 3: Manage applications using Microsoft Intune
In this learning path, you'll learn how to deliver and govern applications across managed endpoints using Microsoft Intune. You'll start by deploying line-of-business, store, web, and Microsoft 365 apps to users and devices, then implement app protection policies (APP) and app configuration policies to safeguard corporate data on mobile and BYOD devices. You'll explore the full application lifecycle - assignment, updates, supersedence, retirement, and uninstall - and learn how to monitor install success, troubleshoot delivery failures, and tune performance at scale. The learning path concludes with the Enterprise App Catalog, where you'll learn how to publish, configure, and update prepackaged Win32 applications with minimal repackaging effort.
Module 4: Protect devices using Microsoft Intune
In this learning path, you'll learn how to apply layered protection to managed endpoints using Microsoft Intune and the broader Microsoft Defender stack. You'll start by integrating Microsoft Defender for Endpoint with Intune, then implement device encryption (BitLocker, FileVault, and personal data encryption) to safeguard data at rest. You'll explore advanced threat protection scenarios, including attack surface reduction rules, endpoint detection and response, and risk-based Conditional Access. From there, you'll author and enforce compliance policies, drive remediation through Conditional Access, and monitor compliance posture at scale. The learning path concludes with two specialized scenarios - delivering secure mobile access using Microsoft Tunnel, and issuing and managing device certificates using Microsoft Cloud PKI.
Module 6: Automate and optimize endpoint management using Microsoft Intune
In this learning path, you'll learn how to scale, automate, and optimize day-to-day endpoint management using Microsoft Intune, PowerShell, Microsoft Graph, and Copilot. You'll start by automating repetitive Intune tasks - device queries, bulk configuration changes, reporting, and policy provisioning - using the Microsoft Graph PowerShell SDK and Graph Explorer. You'll then explore how AI and Microsoft Copilot in Intune help administrators surface recommendations, draft policies, investigate device issues, and accelerate troubleshooting. The learning path concludes with end-to-end endpoint performance management using Endpoint Analytics, Proactive Remediations, and performance baselines to identify and resolve slow boot, slow sign-in, application reliability, and battery health issues at scale.
Module 7: Support operational excellence and readiness using Microsoft Intune
In this learning path, you'll learn how to run Microsoft Intune as an operationally healthy service that other teams can depend on. You'll start by implementing reporting and data visibility - choosing the right operational, organizational, historical, and specialist reports, exporting data through the Reports API, and surfacing insights in Power BI dashboards. You'll then design and apply role-based access control (RBAC), including built-in and custom roles, scope tags, and admin delegation patterns that align with least-privilege principles. The learning path concludes with tenant health practices - service health monitoring, audit logs, license and tenant lifecycle hygiene, and the routines that keep an Intune tenant production-ready.
Module 8: Extend endpoint capabilities using Microsoft Intune Suite
In this learning path, you'll learn how to extend Microsoft Intune with the premium capabilities delivered through Microsoft Intune Suite. You'll start with an overview of the Intune Suite portfolio - what's included, how it's licensed, and which scenarios each component is designed to address. You'll then implement Remote Help to deliver secure, audited remote assistance to managed devices, and use Advanced Endpoint Analytics to surface deeper device and application signals - anomaly detection, scoped analytics, and richer performance reporting. The learning path concludes with Endpoint Privilege Management (EPM), where you'll evaluate policies that let standard users run approved actions with elevated privileges - reducing local-admin sprawl without breaking productivity.
Module 9: Deliver cloud-hosted desktops using Azure Virtual Desktop and Windows 365
In this learning path, you'll learn how to deliver cloud-hosted Windows desktops to users using Windows 365 and Azure Virtual Desktop, and how to manage those desktops alongside physical endpoints with Microsoft Intune. You'll start by exploring Windows 365 Cloud PC editions, licensing, provisioning, and end-user experience, then configure and manage Cloud PCs directly from the Intune admin center - including image management, network configuration, user assignment, and ongoing health monitoring. You'll explore Azure Virtual Desktop architecture, host pools, application groups, FSLogix profiles, and session-host management, and compare Azure Virtual Desktop with Windows 365 to pick the right cloud-desktop platform per workload. The learning path concludes with integrating Azure Virtual Desktop session hosts with Microsoft Intune for unified policy, app, and security management across all your Windows endpoints - physical and virtual.