Course Description

Managing security for mobile devices has never been more important. You should not allow any device to access your environment or data without some sort of controls. Unprotected or unknown devices are a risk for your organization. 

In this LIVE Online Training you will learn how to secure access to your data using a combination of Azure AD Conditional Access and Microsoft Intune. You will also learn how to manage and secure Android and iOS/iPadOS devices. You will learn some basics on how to set up the requirements for managing each platform, and then we'll dive into the details. This LIVE Online Training  is delivered in cooperation with our partner CloudWay. The instructors on the course are Microsoft MVPs Maurice Daly, Sandy Zeng, Simon Skotheimsvik, and Jan Ketil Skanke. As with all our academy courses, the information presented is up to date and gathered from real-world implementations.   

Note: If you already have an All Access Pass subscription, this course has been added to your account.

This program runs for six weeks and includes:

  • Weekly live webinars (with recordings and Q&A)
  • Weekly assignments to guide your progress
  • A community of individuals with the same goals
  • A private facebook group with other participants for sharing reflections, progress, etc. 
  • The chance to ask the CloudWay team questions directly in a live training environment


This LIVE Online Training is for YOU if you want to:

  • Keep your organization and environment secure while supporting multiple mobile devices
  • Learn best practices for app deployment with both Android and Apple devices
  • Determine whether MDM enrollment (Mobile Device Management) or MAM enrollment (Mobile Application Management) is right for your organization
  • Control access to your environment
  • Effectively wipe and retire devices when Necessary 

Course Schedule

Dates and start time for the live two-hour webinars:

  • Module 1: Wednesday, February 7, 2:00-4:00 PM Central European Time (CET)
  • Module 2: Wednesday, February 14, 2:00-4:00 PM Central European Time (CET)
  • Module 3: Wednesday, February 21, 2:00-4:00 PM Central European Time (CET)
  • Module 4: Wednesday, February 28, 2:00-4:00 PM Central European Time (CET)
  • Module 5: Wednesday, March 6, 2:00-4:00 PM Central European Time (CET)
  • Module 6: Wednesday, March 20, 2:00-4:00 PM Central European Time (CET)

Course Outline

Module 1: Securing your Mobile Devices with Microsoft Intune – Introduction and overview

  • Securing Access to Your Environment Using Azure AD Conditional Access and Intune
  • What Are Microsoft Intune Mobile Device Management (MDM) and Mobile Application Management (MAM)?
  • Planning for Mobile Device Management and Determining Management Type (Enrollment Type)
  • Using Personal Devices vs Organization-owned Devices
  • Tenant Configuration (e.g., Branding, Licenses, and Device Enrollment Restrictions)
  • Prerequisites for Each Platform (including Apple Enrollment and Google Play for Work)


Module 2: Platform Overview

  • Enrollment and Management Options
  • Android Enterprise Overview
  • Apple Business Manager 
  • Enrollment Options 
  • Device Compliance Policies
  • Company Data and Personal Data: How iOS and Android Differ


Module 3: Application Management, App Protection, and Data Protection

  • MAM with or without Enrollment
  • MAM or MDM Enrollment - the Differences and Which Is Right for Your Organization?
  • Application Configuration Policies and the Differences between iOS and Android Permissions
  • Application Protection Policy and Securing Access to Devices Based on MAM or MDM Enrollment States
  • How to Configure the Basic Apps: Microsoft Edge, Outlook, and Teams 


Module 4: Managing Android Devices

  • Configuring the Different Deployment Type Profiles
  • Android Work Profile, Fully Managed, Kiosk, and Dedicated Devices
  • App Deployment Prerequisites
  • App Deployment Best Practices 
  • Filters and User or Device Group-based Targeting: When and Where to Use What
  • Static or Dynamic Groups: The Differences, Highlights, and Pitfalls
  • Deploying Android Apps through Google Managed Play
  • Configuration Profiles: Android Work Profile, Fully Managed, and Kiosk/Dedicated
  • Android and the Power of OEMConfig


Module 5: Managing Apple Devices

  • Configuring the Different Deployment Type Profiles
  • User Enrollment, Device Enrollment, and Apple Automated Enrollment
  • iOS Supervised Mode - What Is It, and Do I Need It?
  • App Deployment Prerequisites
  • App Deployment Best Practices 
  • Apple Store or VPP - Which Is Right for You?
  • Filters and User or Device Group-based Targeting: When and Where to Use What
  • Static or Dynamic Groups: The Differences, Highlights, and Pitfalls


Module 6: Securing and Supporting Your Environment

  • Controlling Access to Your Environment
  • Azure AD Conditional Access, Intune-compliant Devices
  • User and Device Lifecycles
  • Wiping and Retiring Devices
  • A User Leaves - What Now? 
  • Supporting Your Users 
  • Locating, Restarting, "Unlocking/Locking," and Troubleshooting Devices
  • Troubleshooting: Understanding Where to View Logs, Enrollment Failures, and More
  • Reporting: Built-in and User-created, Customized Reporting

Instructors

Jan Ketil Skanke

Jan Ketil Skanke is Partner and Principal Cloud Architect at CloudWay and a Microsoft MVP in Enterprise Mobility. Jan Ketil is also an international speaker and has presented on many large and smaller industry conferences like Microsoft Ignite, Microsoft Ignite The Tour, Microsoft Inspire, MMS MOA, Techmentor, Experts Live Europe and Experts Live Norway. He currently blogs at https://msendpointmgr.com, is a board member for Modern Management User Group in Norway and is also the conference lead and organizer for Experts Live Norway. He is very passionate about Mobility and Security and has a long experience in this area. The last years, Jan Ketil has been focusing on helping partners and customers succeed with Secure Productivity and Mobility solutions in the cloud through technical implementations, workshops, trainings and business development. His motto is: Don’t let security get in way of your productivity

Jan Ketil Skanke

Partner and Principal Cloud Architect

Maurice Daly

Maurice Daly is a Principal Cloud Architect at CloudWay. He is a Microsoft MVP in the area of Enterprise Mobility. He is an international speaker, speaking at numerous Microsoft-focused user group events and sessions at Microsoft Ignite. He runs the https://msendpointmgr.com blog along with fellow MVP Nickolaj Andersen, an enterprise mobility focused blog with close to 1.5M visits annually. He is also the author of the Driver Automation Tool, a PowerShell developed GUI for Configuration Manager with over 40k downloads, used in thousands of companies globally. With a background of over 20 years in the IT industry in both in-house and consultancy roles, he prides himself on being able to analyze the entire solution from both sides of the fence.

Maurice Daly

Principal Cloud Architect

Sandy Zeng

Sandy Zeng is Cloud Architect at CloudWay, and a Microsoft MVP in the area of Enterprise Mobility. She likes to share her knowledge with the community as a contributor to https://MSEndpointMgr.com, and as a public speaker at user groups and international conferences such as MMS. Sandy is an experienced information technology expert with over ten years of experience in various organizations. She uses her expertise to help customers achieve and exceed their goals and finding solutions. Sandy has lived in Finland for 20 years. She speaks fluent English, Finnish.

Sandy Zeng

Cloud Architect

Simon Skotheimsvik

Simon Skotheimsvik is a Senior Cloud Consultant at CloudWay. He has broad experience and passion for Microsoft technology including Active Directory, cloud-based solutions, security, endpoint management, automation, Office Communication Server, cloud-based Teams, and more. With over 30 years of experience, Simon brings deep technical knowledge, good documentation, versatile background, technical flair and the ability to improvise to all of his projects. He shares his expertise with colleagues and customers at his https://skotheimsvik.no/ blog. You can also find him on Twitter and YouTube.

Simon Skotheimsvik