MC EMS: Mastering Enterprise Management Suite (EMS)

In a cloud-first mobile-first world, be prepared to provide a secure mobile experience to your mobile workforce with Microsoft's Enterprise Mobility + Security suite. EMS combines features for securing identity, managing mobile devices and applications, and protecting corporate data. This fast-paced three-day course will guide you through these and other services included in EMS. Through hands-on exercises you will gain the knowledge needed to plan and implement the services and integrate them into your environment. Covered scenarios will include cloud-only and hybrid management.

The content of this course will be updated on an ongoing basis, as Microsoft introduces new services and features. All demos and labs will be performed on the current online version.  


This course is intended for IT Professionals new to Enterprise Mobility + Security.


This course is intended for IT Professionals new to Enterprise Mobility + Security, who are already experienced in general Windows Server and Windows Client administration. Knowledge of on-premise identity management with Active Directory will be beneficial. Knowledge and experience of Office 365 would be of benefit but is not essential.

About the instructor: Paul “Dash”

Paul “Dash” is an expert in system design and planning, from environment specification to turn-key solutions with over 12 years of proven experience with the Microsoft technologies, specializing in virtualization, deployment and automation technologies including EMS, Hyper-V, the System Center suite, and PowerShell.

Paul is focused on delivering training and guidance on virtualization, network infrastructure, directory services, and systems management and orchestration. His clients include public sector, educational, and private enterprises across EMEA. He also builds and delivers custom online and classroom courseware on topics like cryptography, cloud computing, and lightweight-travel.

In his spare time, Paul enjoys the rush of adrenaline - on a mountain bike, a climbing wall, or a surfboard.

Course outline

Managing Microsoft Enterprise Mobility + Security

  • Challenges of a mobile workforce
  • Microsoft's mobility solutions
  • A word on licensing

Administering Azure Active Directory

  • What is Azure AD?
  • Azure Active Directory features in Office 365
  • Integration with on-premise Active Directory Directory Services
  • Password write-back, Self-service password reset
  • Multi-factor authentication
  • Groups
  • Manage access to SaaS apps (Azure SSO portal)

Implementing Microsoft Intune

  • What is Intune?
  • Comparing device management available in Office 365
  • Preparing for management
  • Client enrollment
  • Profiles and policies
  • Conditional Access
  • Application Deployment
  • Mobile Application Management
  • Legacy agent for PC management

Azure Information Protection

  • What is AIP?
  • Rights Management features in O365
  • Classification & labeling
  • End-user workflow 

Setting up Security

  • Advanced Threat Analytics
  • Advanced Threat Protection
  • Privileged Identity Management
  • Azure AD Identity Protection
  • Cloud App Security


Other relevant courses