Intune endpoint security policies, baselines and LAPS

Skills you'll practise

• Match each endpoint security policy type to the security area it configures
• Decide between endpoint security policies, security baselines and configuration profiles and avoid setting conflicts
• Plan a silent BitLocker deployment, including prerequisites, key escrow to Microsoft Entra ID and key access
• Configure Windows LAPS through Intune and assign the permissions to view and rotate passwords
• Recognize settings in baselines that block other policies, such as a TPM startup PIN

Course outline

1. 1.Endpoint security policies and baselinesLesson · 18 min
2. 2.BitLocker: silent encryption and recovery keysLesson · 20 min
3. 3.Windows LAPS through IntuneLesson · 14 min
4. 4.Intune endpoint security policies, baselines and LAPS: knowledge checkKnowledge check · 15 questions
5. 5.Intune endpoint security policies, baselines and LAPS: practical exerciseKnowledge check · 1 question
6. 6.Final exam7 questions · passing it completes the course, so people who already know the material can test out

Sources it draws on

The lessons and questions are written from these references, so learners can go back to the original.

• Microsoft Learn: Endpoint security in Microsoft Intune
• Microsoft Learn: Learn about Intune security baselines for Windows devices
• Microsoft Learn: Encrypt Windows devices with BitLocker using Intune
• Microsoft Learn: Overview of Windows LAPS with Microsoft Intune
• Microsoft Learn: Role-based access control (RBAC) with Microsoft Intune