Deploy Windows
Deploy Windows 10
- configure language packs
- perform a clean installation
- migrate user data
- perform an in-place upgrade (using tools such as MDT, WDS, ADK, etc.)
- select the appropriate Windows edition
- troubleshoot activation issues
Perform post-installation configuration
- configure Edge and Internet Explorer
- configure mobility settings
- configure sign-in options
- customize the Windows desktop
Manage devices and data
Manage local users, local groups, and devices
- manage devices in directories
- manage local groups
- manage local users
Configure data access and protection
- configure NTFS permissions
- configure shared permissions
Configure devices by using local policies
- configure local registry
- implement local policy
- troubleshoot group policies on devices
Manage Windows security
- configure user account control (UAC)
- configure Windows Defender Firewall
- implement encryption
Configure connectivity
Configure networking
- configure client IP settings
- configure mobile networking
- configure VPN client
- troubleshoot networking
- configure Wi-Fi profiles
Configure remote connectivity
- configure remote management
- enable PowerShell Remoting
- configure remote desktop access
Maintain Windows
Configure system and data recovery
- perform file recovery (including OneDrive)
- recover Windows 10
- troubleshoot startup/boot process
Manage updates
- check for updates
- troubleshoot updates
- validate and test updates
- select the appropriate servicing channel
- configure Windows update options
Monitor and manage Windows
- configure and analyze event logs
- manage performance
- manage Windows 10 environment
Deploy and update operating systems
Plan and implement Windows 10 by using dynamic deployment
- evaluate and select an appropriate deployment options
- pilot deployment
- manage and troubleshoot provisioning packages
Plan and implement Windows 10 by using Windows Autopilot
- evaluate and select an appropriate deployment options
- pilot deployment
- create, validate, and assign deployment profile
- extract device HW information to CSV file
- import device HW information to cloud service
- troubleshoot deployment
Upgrade devices to Windows 10
- identify upgrade and downgrade paths
- manage in-place upgrades
- configure a Windows analytics environment
- perform Upgrade Readiness assessment
- migrate user profiles
Manage updates
- configure Windows 10 delivery optimization
- configure Windows Update for Business
- deploy Windows updates
- implement feature updates
- monitor Windows 10 updates
Manage device authentication
- manage authentication policies
- manage sign-on options
- perform Azure AD join
Manage policies and profiles
Plan and implement co-management
- implement co-management precedence
- migrate group policy to MDM policies
- recommend a co-management strategy
Implement conditional access and compliance policies for devices
- implement conditional access policies
- manage conditional access policies
- plan conditional access policies
- implement device compliance policies
- manage device compliance policies
- plan device compliance policies
Configure device profiles
- implement device profiles
- manage device profiles
- plan device profiles
Manage user profiles
- configure user profiles
- configure Enterprise State Roaming in Azure AD
- configure sync settings
- implement Folder Redirection (including OneDrive)
Manage and protect devices
Manage Windows Defender
- implement and manage Windows Defender Application Guard
- implement and manage Windows Defender Credential Guard
- implement and manage Windows Defender Exploit Guard
- implement Windows Defender Advanced Threat Protection
- integrate Windows Defender Application Control
- manage Windows Defender Antivirus
Manage Intune device enrollment and inventory
- configure enrollment settings
- configure Intune automatic enrollment
- enable device enrollment
- enroll non-Windows devices
- enroll Windows devices
- generate custom device inventory reports
- review device inventory
Monitor devices
- monitor device health (e.g., log analytics, Windows Analytics, or other cloud-based tools)
- monitor device security
Manage apps and data
Deploy and update applications
- assign apps to groups
- deploy apps by using Intune
- deploy apps by using Microsoft Store for Business
- deploy O365 ProPlus; enable sideloading of apps into images
- gather Office readiness data
- configure IE Enterprise mode
- configure and implement assigned access or public devices
Implement Mobile Application Management (MAM)
- implement MAM policies
- manage MAM policies
- plan MAM
- configure Windows Information Protection
- implement Azure Information Protection templates
- securing data by using Intune