MOC 20398 - Planning for and Managing Devices in the Enterprise: Enterprise Mobility Suite (EMS) and On-Premises Tools

See Course Outline

Training for your Team

  • Private Class for your Team
  • Online or On-location
  • Customizable
  • Expert Instructors

Training for Yourself

or 5 vouchers
  • Live Online Training
  • For Individuals
  • Expert Instructors
  • Guaranteed to Run
  • 100% Free Re-take Option
  • 1-minute Video

This Planning for and Managing Devices in the Enterprise: Enterprise Mobility Suite (EMS) and On-Premises Tools training class teaches IT professionals how to use the Enterprise Mobility Suite to manage devices, users, and data. In addition, this course teaches students how to use other technologies, such as Group Policy and other Windows Server–based technologies, to manage devices and secure data. Students will learn how to design and implement cloud-based and on-premises solutions for managing Windows-based, iOS, and Android devices, and they will learn how to provide secure and efficient access to data and applications.

This course is intended for IT professionals and consultants who plan, deploy, and manage devices and applications in medium to large organizations. A significant portion of this audience works in on-premises Active Directory Domain Services (AD DS) environments with both domain-joined and non-domain joined devices, for which they need to provide mobile device management and secure data access. Devices in such environments typically run Windows 10, Windows 10 Mobile, iOS, and Android. They plan to extend on-premises AD DS to the cloud and they need to learn how to plan and implement Enterprise Mobility Suite.

  1. Learn to use devices in the enterprise environment.
  2. Learn to implement and administer Microsoft Azure Active Directory (Azure AD).
  3. Learn to connect AD DS with Azure AD.
  4. Learn to manage devices in Microsoft Office 365.
  5. Learn to plan and implement Intune.
  6. Learn to use Intune to manage devices.
  7. Learn to plan and implement app support.
  8. Learn to use Intune to manage applications and Resource Access.
  9. Learn to plan and implement Microsoft Azure Rights Management (Azure RMS).
  10. Learn to plan and implement Remote Access.
  11. Learn to plan and implement Dynamic Access Control and auditing.
  12. Learn to plan and protect data.
  13. Learn to recover data and operating systems.
  1. Using devices in the enterprise environment
    1. Overview of devices in an enterprise
    2. Device management features
    3. Overview of the EMS
    4. Lab: Planning for device management
      1. Selecting the appropriate products and technologies for device management
      2. Working with mobile devices
  2. Implementing and administering Azure AD
    1. Overview of AD DS
    2. Overview of Azure AD
    3. Creating and managing Azure AD
    4. Managing authentication in Azure AD
    5. Lab: Working with Azure AD and providing access to claims-aware applications
      1. Managing Azure AD users and groups
      2. Joining a Windows 10 device to Azure AD
      3. Accessing cloud applications with SSO
  3. Connecting AD DS with Azure AD
    1. Preparing AD DS for directory synchronization
    2. Implementing Azure AD Connect
    3. Planning and implementing federation
    4. Lab: Synchronizing on-premises AD DS with Azure AD
      1. Implementing Azure AD Connect
      2. Verifying synchronization of new objects
      3. Implementing and using Azure AD Premium features
  4. Managing devices in Office 365
    1. Overview of Office 365
    2. MDM for Office 365
    3. Lab: Managing devices in Office 365 (Part 1)
      1. Obtaining an Office 365 subscription
      2. Enabling MDM
    4. Lab: Managing devices in Office 365 (Part 2)
      1. Configuring and testing mobile device management in Office 365
  5. Planning and implementing Microsoft Intune
    1. Planning for Intune
    2. Deploying Intune clients
    3. Basic Intune administration
    4. Lab: Planning and implementing Intune
      1. Deploying Intune clients and linking computers to users
      2. Create Intune users
      3. Delegating Intune permissions
      4. Creating Intune groups
  6. Managing devices by using Intune
    1. Working with Microsoft Intune policies
    2. Mobile device management
    3. Managing updates and Windows Defender
    4. Lab: Using Microsoft Intune policies to manage devices
      1. Configuring Azure AD with automatic mobile device management enrollment
      2. Working with Microsoft Intune policies
    5. Lab: Managing updates and Windows Defender
      1. Managing updates by using Intune
      2. Managing Windows Defender by using Intune
  7. Using Microsoft Intune to manage applications and resource access
    1. Application lifecycle management
    2. Application deployment process
    3. Managing access to company resources
    4. Lab: Using Intune to deploy and monitor applications
      1. Using Intune to deploy and monitor applications
    5. Lab: Using Intune to manage resource access
      1. Configuring certificate deployment in Intune
      2. Configuring conditional access policies
  8. Planning and implementing Azure RMS
    1. Overview of Azure RMS.
    2. Implementing Azure RMS.
    3. Lab: Using Azure RMS to protect documents and data
      1. Protecting documents with Azure RMS
      2. Using FCI with Azure RMS
  9. Planning and implementing app support
    1. Planning and implementing application compatibility options
    2. Publishing and using RemoteApp programs
    3. Publishing and using Azure RemoteApp
    4. Lab: Publishing and using RemoteApp and Azure RemoteApp
      1. Publishing and accessing RemoteApp programs
      2. Publishing and accessing Azure RemoteApp programs
  10. Planning and implementing remote access
    1. Overview of remote access solutions
    2. Implementing remote infrastructure access
    3. Planning and implementing Work Folders
    4. Implementing cloud data access
    5. Planning and implementing mobility options
    6. Lab: Configuring and using VPN and Work Folders
      1. Configuring a VPN server and a VPN client
      2. Configuring and using Work Folders
    7. Lab: Using Offline Files and OneDrive
      1. Configuring and using Offline Files
      2. Synchronize settings between Windows 10 devices
      3. Configuring and using OneDrive
    8. Plan and implement mobility options.
    9. Planning and implementing Dynamic Access Control
    10. Planning and deploying advanced audit policies
  11. Lab: Implementing secure data access
    1. Preparing for Dynamic Access Control deployment
    2. Implementing Dynamic Access Control
    3. Validating and remediating Dynamic Access Control
    4. Using advanced audit policies
  12. Planning and protecting data
    1. Planning and implementing encryption
    2. Planning and implementing BitLocker
    3. Protecting data on devices
    4. Lab: Protecting data by using encryption and BitLocker
      1. Encrypting and recovering access to encrypted files
      2. Using BitLocker to protect data
  13. Recovering data and operating systems
    1. Planning and implementing file recovery
    2. Planning and implementing device recovery
    3. Planning and implementing updates
    4. Lab: Implementing file recovery and device recovery
      1. Using File History to recover files
      2. Using Previous Versions to recover files
      3. Recovering a device with a restore point
      4. Using the advanced startup options to recover a device
Class Materials

Each student in our Live Online and our Onsite classes receives a comprehensive set of materials, including course notes and all the class examples.

Class Prerequisites

Experience in the following is required for this Windows class:

  • Knowledge of TCP/IP networking fundamentals.
  • Understanding of Domain Name System (DNS).
  • Working knowledge of Active Directory principles.
  • Understanding of the public key infrastructure (PKI) fundamentals.
  • Understanding of cloud-based service concepts.
  • Windows Server 2012 R2 fundamentals, including Remote Desktop Services.
  • Experience with Windows 10.
  • Familiarity with Windows PowerShell.
  • Basic knowledge of mobile platforms.
Preparing for Class

No cancelation for low enrollment

Certified Microsoft Partner

Registered Education Provider (R.E.P.)

GSA schedule pricing


Students who have taken Live Online Training


Organizations who trust Webucator for their training needs


Satisfaction guarantee and retake option


Students rated our trainers 9.44 out of 10 based on 4999 reviews

This class was a great review and introduced new techniques to bring life to professional emails, as well as hints to increase the efficiency of our communication. I would recommend this class to anyone.

Stephen Brown, Travisoft

I learned so much more in this short course than I expected. I will definitely be returning to Webucator for my future computer learning!

Abbie Ellis, Gypsy Valley
Boley OK

Loved the online environment and teacher!

Lindsey Siehda, First State Bank
Saint Clair Shores MI

Great. Better than previous training I have had!

Carrie Goertz (Deal), MIPT
Oklahoma City OK

Contact Us or call 1-877-932-8228