Hands-on labs

These hands-on labs give you practice managing and securing Microsoft 365 endpoints with Microsoft Intune, from identity and enrollment through apps, protection, automation, and Intune Suite capabilities. They complement course MD-102 on Microsoft Learn.

New to these labs?Read about the lab VMs, the AllFiles (F:) drive, and how the labs build on each other.
Get started

6 labs · 590 minutes of hands-on practice · Complete Lab 01 first. Later labs build on its configuration.

MD-102 labs6 labs · 590 minutes

Related training on Microsoft Learn: MD-102 labs

Lab 01: Foundation — Identity, enrollment, and Autopilot

90 minutesLevel 2006 exercises

In this lab, you configure Microsoft Entra ID identity governance, device registration and enrollment policies, and Windows Autopilot to prepare a Microsoft 365 tenant for Intune device management.

  1. Configure users and groups
  2. Configure administrative delegation
  3. Configure device registration and settings
  4. Configure Windows enrollment policies
  5. Enroll Windows devices
  6. Configure Windows Autopilot

Lab 02: Manage and maintain devices

100 minutesLevel 2006 exercises

In this lab, you create device configuration profiles, compliance policies, and Windows Update rings, analyze Group Policy Objects for migration, and enable Endpoint analytics and remediations.

  1. Create configuration profiles
  2. Configure compliance policies
  3. Analyze Group Policy Objects
  4. Configure Windows Update management
  5. Enable Endpoint analytics and remediations
  6. Use the Troubleshooting blade
Lab files: GPO_Desktop_Settings.xml, Detect-TempFiles.ps1, Remediate-TempFiles.ps1

Lab 03: Manage applications

100 minutesLevel 2007 exercises

In this lab, you deploy Microsoft Store apps, package and deploy Win32 applications, configure Microsoft 365 Apps, use the Enterprise App Catalog, configure app supersedence, and apply app protection policies.

  1. Deploy Microsoft Store apps
  2. Package and deploy a Win32 application
  3. Deploy Microsoft 365 Apps
  4. Use the Enterprise App Catalog
  5. Configure app supersedence
  6. Create an App Protection Policy
  7. Monitor app deployment and troubleshoot failures

Lab 04: Protect devices

110 minutesLevel 2006 exercises

In this lab, you integrate Microsoft Defender for Endpoint, deploy endpoint security policies, configure BitLocker encryption, deploy Microsoft Tunnel Gateway, and implement Microsoft Cloud PKI.

  1. Integrate Microsoft Defender for Endpoint
  2. Deploy endpoint security policies
  3. Configure BitLocker encryption
  4. Deploy Microsoft Tunnel Gateway
  5. Implement Microsoft Cloud PKI
  6. Monitor security posture and compliance

Lab 05: Automate and operate

100 minutesLevel 2005 exercises

In this lab, you use Microsoft Graph PowerShell for device management, deploy remediations, configure role-based access control with scope tags, review audit logs, and use built-in Intune reports.

  1. Automate with Microsoft Graph PowerShell
  2. Deploy remediations
  3. Assign and verify the Pharmacy Helpdesk delegated role end-to-end
  4. Monitor audit logs and operational health
  5. Use built-in reports

Lab 06: Extend capabilities

90 minutesLevel 2005 exercises

In this lab, you configure Endpoint Privilege Management, deploy Remote Help, review Advanced Analytics, and explore Windows 365 Cloud PC and Azure Virtual Desktop scenarios.

  1. Configure Endpoint Privilege Management (EPM)
  2. Deploy Remote Help
  3. Use Advanced Analytics and Device Query
  4. Explore Windows 365 Cloud PC provisioning
  5. Explore Azure Virtual Desktop session host enrollment