What You'll Learn
This advanced endpoint management course equips IT professionals with practical skills in SCCM and Microsoft Intune. Build, deploy, secure, and troubleshoot enterprise endpoints in hybrid cloud environments with confidence.
Key Skills You'll Master
SCCM Deployment & Configuration
Install and configure Configuration Manager, manage boundaries, collections, and integrate with Active Directory for enterprise endpoint control.
Microsoft Intune Administration
Configure Intune tenants, enroll devices, deploy applications, and enforce compliance policies across Windows, iOS, and Android platforms.
Co-Management & Hybrid Environments
Implement co-management strategies, configure workload transitions, and manage endpoints across on-premises and cloud infrastructures seamlessly.
OS Deployment & Task Sequences
Build custom OS images, create automated task sequences, deploy Windows 10/11 at scale, and configure Software Center for user self-service.
Patch Management & Compliance
Automate software updates, enforce security baselines, monitor compliance reports, and remediate vulnerabilities across enterprise endpoints.
Windows Autopilot & Modern Provisioning
Deploy zero-touch device provisioning, configure Autopilot profiles, integrate with Azure AD, and streamline endpoint onboarding workflows.
Course Modules
Module 1: SCCM Fundamentals
10 Hours- Introduction to Configuration Manager architecture
- Site hierarchy design and planning
- Installing and configuring SCCM infrastructure
- Boundaries, boundary groups, and discovery methods
- Client installation and health monitoring
- Collections, queries, and targeting strategies
- Lab: Build SCCM primary site from scratch
Module 2: Microsoft Intune Fundamentals
8 Hours- Intune architecture and licensing
- Tenant setup and Azure AD integration
- Device enrollment methods (Windows, iOS, Android)
- Mobile Device Management (MDM) vs Mobile Application Management (MAM)
- Intune portals and administration interfaces
- Lab: Configure Intune tenant and enroll test devices
Module 3: Co-Management & Hybrid Setup
7 Hours- Understanding co-management scenarios
- Prerequisites and hybrid Azure AD join
- Enabling co-management in SCCM
- Workload migration strategies (Compliance, Device Config, Endpoint Protection)
- Monitoring co-managed devices
- Lab: Enable co-management and shift workloads
Module 4: Application Deployment
8 Hours- Creating and packaging applications in SCCM
- Deployment types and detection methods
- Software Center configuration and user experience
- App deployment in Intune (MSI, Win32, Microsoft Store)
- App protection policies and conditional access
- Lab: Deploy enterprise apps via SCCM and Intune
Module 5: Compliance & Configuration
7 Hours- Compliance policies in SCCM and Intune
- Configuration profiles (device restrictions, Wi-Fi, VPN)
- Security baselines and hardening templates
- Conditional access policies and device compliance
- Compliance reporting and remediation
- Lab: Create compliance policies and enforce device restrictions
Module 6: OS Deployment & Task Sequences
9 Hours- OS deployment methods (PXE, USB, Software Center)
- Creating and customizing boot images
- Building OS images and WIM files
- Task sequence creation and editing
- Driver management and injection
- Zero-touch installation (ZTI) workflows
- Lab: Build and deploy Windows 11 image via SCCM
Module 7: Patch Management
6 Hours- Software update management in SCCM
- Update rings and deployment schedules
- Windows Update for Business in Intune
- Feature updates vs quality updates
- Patch compliance monitoring and reporting
- Lab: Deploy monthly security patches across endpoints
Module 8: Windows Autopilot
5 Hours- Understanding Autopilot scenarios (User-driven, Self-deploying, White glove)
- Device registration and hardware ID import
- Creating and assigning Autopilot profiles
- Azure AD join and Intune enrollment
- Customizing OOBE experience
- Lab: Deploy laptops with zero-touch Autopilot provisioning
Module 9: Endpoint Security
6 Hours- Microsoft Defender for Endpoint integration
- BitLocker encryption policies
- Firewall rules and threat protection
- Attack surface reduction policies
- Security incident response workflows
- Lab: Implement endpoint security baseline
Module 10: Reporting & Troubleshooting
4 Hours- Built-in reports in SCCM and Intune
- Creating custom Power BI dashboards
- Log file analysis and common errors
- Client troubleshooting tools (CMTrace, Support Center)
- Policy sync and enrollment troubleshooting
- Lab: Diagnose and resolve endpoint management issues
Hands-On Labs & Projects
Lab 1: Enterprise SCCM Infrastructure Build
Install and configure a production-ready SCCM environment with SQL Server backend, management points, and distribution points.
Lab 2: Intune Tenant Setup & Device Enrollment
Configure Azure AD-integrated Intune tenant and enroll Windows, iOS, and Android devices using multiple enrollment methods.
Lab 3: Co-Management Configuration
Enable co-management between SCCM and Intune, migrate workloads, and manage hybrid device policies.
Lab 4: Application Packaging & Deployment
Package and deploy 10+ enterprise applications (Office 365, Chrome, Zoom) via both SCCM and Intune portals.
Lab 5: Windows 11 Image Deployment
Build custom Windows 11 image, create automated task sequences, and deploy via PXE boot across multiple endpoints.
Lab 6: Compliance & Security Baselines
Implement security baselines, enforce BitLocker encryption, configure firewall rules, and monitor compliance reporting.
Lab 7: Windows Autopilot Provisioning
Register devices, create Autopilot profiles, and deploy zero-touch OOBE provisioning for new enterprise laptops.
Project: Ticket-Based Real-World Scenarios
Resolve 20+ simulated helpdesk tickets covering app deployment failures, compliance issues, policy conflicts, and enrollment errors.
Tools & Platforms Required
Note: Full lab environment setup guide provided. Azure trial accounts and eval licenses included.
Who Should Enroll
Career Outcomes
Graduates of this course are prepared for high-demand enterprise endpoint management roles including:
SCCM Administrator
$75K - $105K avg. salary
Intune / Endpoint Manager Admin
$80K - $110K avg. salary
Endpoint Security Engineer
$85K - $120K avg. salary
Modern Desktop Administrator
$72K - $98K avg. salary
Enterprise IT Consultant
$90K - $130K avg. salary