Welcome to ONLC Training Centers

Microsoft On-Demand: Managing Modern Desktops (MD-101)


Need a price quote?

Follow the link to our self-service price quote form to generate an email with a price quote.

Microsoft On-Demand: Managing Modern Desktops (MD-101) Course Outline

*** Note: This is an On-Demand (self-study) course, 180-day, 24/7 access via the internet ***
(Applicable State and Local taxes may be added for On-Demand purchases, depending on your location.)
This On-Demand (self-study) training course includes expert lectures, PowerPoint visuals, demonstrations, labs, and a printed reference guide. You will be able to follow along and successfully complete the course by completing the quizzes and exams. You may take this course at any time and from any device, provided you have internet access.
Note: Course access period begins at time of purchase.

Course Overview
This course gets into managing modern desktops. Topics covered include planning a Windows 10 deployment, Windows 10 installation options, Windows Update as a service, user and device profiles, device enrollment with Intune and Azure, managing applications, Azure AD identity management, implementing compliance and device authentication, and implementing Windows 10 security.

Familiar with M365 workloads and must have strong skills and experience of deploying, configuring, and maintaining Windows 10 and non-Windows devices.

Do You Still Prefer a Live, Instructor-led Class?
Already know Microsoft On-Demand is not right for you? We also offer this same course content in a live, instructor-led format. For more details, click on the link below:
MD-101: Managing Modern Desktops Instructor-led

This course takes 5 days to complete and includes 13h 25m of video presentation plus practice labs.

Course Outline

Chapter 1 - The Desktop Lifecycle
The Enterprise Desktop Life-cycle Model
Planning and Potential Cost
Building a Desktop Deployment Strategy
Operation and Support
Upgrading and Retirement
Windows Store and Windows Store for Business

Chapter 2 - Deployment and Assessment Tools
Deployment Planning and Readiness Tools
Application Compatibility Tools and Workarounds
Deployment Tools for Windows 10
Overview of the Microsoft Deployment Toolkit
Tools Used with Traditional Imaging
System Center Configuration Manager Overview
Co-Management with SCCM and Intune
Understanding Installation Types
WDS Role in Server Manager

Chapter 3 - Upgrading to Windows
Windows 10 Installation Methods
Deploying Windows 10
Intro to Windows Autopilot
Windows Autopilot Deployment
Windows Autopilot Deployment
In-place Upgrades
Supported Upgrade Paths
Performing a Windows 10 In-place Upgrade

Chapter 4 - Migrating to Windows
Migration Considerations
USMT Migration Rules
User State
User Experience Virtualization (UE-V)
Azure Enterprise State Roaming

Chapter 5 - Post Deployment and Activation
Windows 10 Activation
Windows Configuration Designer
MDM Auto Enrollment with Azure AD Join

Chapter 6 - Windows 10 Updates
Windows 10 Servicing Channels
Windows 10 Servicing Options Deployment Rings
Applying Updates to Windows 10
Windows Update Settings
Using a WSUS Server to Deploy Updates
Group Policy Settings for Configuring Windows Update
Overview of Windows Insider Program

Chapter 7 - Updates for Business
What is Windows 10 Update for Business?
Configuring Windows 10 Update for Business
Configuring Windows Update for Business with Group Policy
Using Intune to Configure Windows Update for Business
Overview of Desktop Analytics
Desktop Analytics Compatibility Assessment

Chapter 8 - Device Profiles
Profile Types for Devices
Intune Device Profile Types
Custom Device Profiles
Using Microsoft Intune to Monitor Device Profiles

Chapter 9 - User Profiles
What is a User Profile
What is a User Profile
Profile Types for Users
Profile Extension for each Windows Version
Configuring Folder Redirection

Chapter 10 - Azure AD
Overview of Azure AD
Characteristics of AD DS
Characteristics of Azure AD
Compare Azure AD and AD DS
Azure AD Premium P1&P2
What is Azure AD Domain Services?

Chapter 11 - Azure AD Identities
Creating and Managing Azure AD Users
Creating and Managing Azure AD Groups
User Accounts in Azure AD
User Roles and RBAC in Azure AD
Using Windows PowerShell Cmdlets for Azure AD Objects
Creating Users by Using Bulk Import
Using AD Connect to Synchronize from AD DS to Azure AD

Chapter 12 - Azure Identity Protection
Windows Hello for Business Deployment and Management
Biometric Sign-in
Azure AD Identity Protection Overview
Azure AD Self-Service Password Reset
Implementing MFA (Multi-Factor Authentication) in Azure AD

Chapter 13 - Device Management and Enrollment
Modern Management
Define an Integration Strategy
Co-Management Overview
Co-Management Requirements
Overview of Migrating Group Policy to (MDM) Mobile Device Management
Overview of MDM Migration Analysis Tool (MMAT)

Chapter 14 - Intune Device Enrollment and Inventory
Managing Mobile Devices with Intune
Device Management Lifecycle
Activating MDM Services
Intune Company Portal
Supported Devices
Deploying MDM Services
Overview of Enrolling Windows 10 Devices in Intune
Overview of Enrolling Android Devices to Intune
Overview of Enrolling iOS Devices to Intune
Overview of Intune Enrollment Rules
Managing Corporate Enrollment Policy with Intune
Device and Application Reporting

Chapter 15 - Device Authentication, Intune Compliance, and Conditional Access
What is Azure AD Join?
Prerequisites for Azure AD Join
How to Join Devices to Azure AD
Managing Azure AD Devices
Manage and Monitor Devices Enrolled in Intune
Intune Compliance Policy for Devices
Using Intune to Deploy a Compliance Policy
Creating and Managing Conditional Access Policies
Monitoring Compliance Policies and Conditional Access
How to Monitor Conditional Access

Chapter 16 - Accessing Resources and Access Services
Overview of VPNs
VPN Protocols
Built-in VPN Client
IPSec (IP Security)
Always on VPN

Chapter 17 - Application Management and Inventory
Types of Apps for Windows 10
What is Mobile Application Management (MAM)
Overview of Applications in MAM
Overview of Configuration Manager for (MAM)
Configuring and Managing MAM Policies in Intune
Implementing and Managing Apps with Intune
App Management for Non-Enrolled Devices
Office 365 ProPlus Deployment with Intune

Chapter 18 - Application Deployment
Microsoft Intune App Lifecycle
How to Deploy Applications with Intune
How to Deploy Applications with Group Policy
How to Deploy Apps with SCCM
Overview of the Microsoft Store for Business
Requirements for Using Microsoft Store for Business

Chapter 19 - Data Protection
What is Windows Information Protection?
Planning Windows Information Protection
Windows Information Protection Policies and Usage
What is EFS (Encrypted File System)?
What is Bitlocker?
Comparing BitLocker and EFS
What is BitLocker To Go?
Microsoft BitLocker Administration and Monitoring
Overview of Azure Information Protection
Configuring AIP Labels and AIP Policies

Chapter 20 - Windows Defender ATP
An Overview of Windows Defender
Overview Windows Defender Application Guard
Overview of Windows Defender Exploit Guard in Windows 10
Overview of Windows Defender System Guard in Windows 10
Overview of the Windows Security Center
Overview of Windows Defender Credential Guard and How to Implement
Using Windows Defender Antivirus
Implementing Windows Defender Firewall
Implementing Windows Defender Firewall with Advanced Security
Connection Security Rules

View outline in Word


Attend hands-on, instructor-led Microsoft On-Demand: Managing Modern Desktops (MD-101) training classes at ONLC's more than 300 locations. Not near one of our locations? Attend these same live classes from your home/office PC via our Remote Classroom Instruction (RCI) technology.

For additional training options, check out our list of Courses and select the one that's right for you.


Class Format
Class Policies
Student Reviews

First Name

Last Name