Device management: Intune, compliance, updates, BitLocker and LAPS
How cloud management, compliance and Conditional Access affect what users can do, plus update rings, BitLocker key escrow and Windows LAPS.
- Level
- Intermediate
- Length
- About 50 minutes
- Contents
- 3 lessons · 1 video · final exam
- Status
- Published · updated 1 Oct 2026
Skills you'll practise
- Read compliance status and explain Conditional Access blocks to users
- Explain Windows Update for Business rings vs WSUS approvals
- Confirm BitLocker key escrow and use Windows LAPS instead of shared admin passwords
Course outline
- 1.Device management: Intune, compliance, updates, BitLocker and LAPSVideo · 5 min
- 2.Why a device is blocked, and how to fix it properlyLesson · 16 min
- 3.BitLocker recovery at the desk: key IDs, triggers and preventionLesson · 14 min
- 4.Windows LAPS and update rings from the device sideLesson · 12 min
- 5.Device management: Intune, compliance, updates, BitLocker and LAPS: knowledge checkKnowledge check · 21 questions
- 6.Device management: Intune, compliance, updates, BitLocker and LAPS: practical exerciseKnowledge check · 1 question
- 7.Email blocked: device not compliantScenario
- 8.Final exam6 questions · passing it completes the course, so people who already know the material can test out
Sources it draws on
The lessons and questions are written from these references, so learners can go back to the original.
- Microsoft Learn: Device compliance policies in Microsoft Intune
- Microsoft Learn: Conditional Access: require compliant device
- Microsoft Learn: Windows Update for Business overview
- Microsoft Learn: Windows Server Update Services overview
- Microsoft Learn: BitLocker recovery overview
- Microsoft Learn: Windows LAPS overview
See it with your own jobs and topics
Tell us about your team and we'll walk you through setup, from choosing jobs to your first skills check.