About the course



NOTE: This course has been moved to GumRoad.


The writing is on the wall: Microsoft now refers to Active Directory as "legacy" and Group Policy (GPO) is officially a thing of the past. Moving forward, computers should be joined to Azure AD, and managed using Microsoft Endpoint Manager.

The benefits to making this move are many: stronger security, easier deployment, and modern management for all major device platforms (iOS, Android, MacOS, and Windows) via a single pane of glass.

Learn the core concepts that will allow you to navigate this tool and deploy with ease. Understand the migration path from that clunky old on-premises Active Directory of yore, and learn how to avoid the dreaded "pit of bad end user experience." Walk away with a clear picture of the process, with some scripts and other resources to make your life easier.


This is a bundle containing two courses:

  • Endpoint Manager for Mobile devices
  • Endpoint Manager for Windows 10


Device management

Microsoft Endpoint Manager (Intune) includes the ability to manage all major device platforms that are available today, including Android, iOS, MacOS, and Windows 10. You can require minimum device compliance, configure settings, push applications, control security policies, and more, all from a single UI.

Application management

Application-based management allows you to protect data at the application layer, and makes it possible for you to wipe only the corporate information, while leaving all personal data intact. This is ideal for enabling BYOD scenarios. You may use MAM alongside or in place of MDM for personal devices.

Conditional access

Using Azure AD and Microsoft Endpoint Manager, you can enforce Conditional access security policies which will limit access to corporate apps and data based on device compliance with Intune policy.

This course is closed for enrollment.