01
Prepare a tenant: MDM authority, automatic enrolment and enrolment restrictions
02
Enrol a Windows 11 device and read the enrolment through to a healthy state
03
Register a device for Autopilot with a hardware hash and a group tag
04
Deploy a device user-driven with Autopilot and the Enrollment Status Page
05
Configure hybrid Autopilot with the domain join connector
06
Build configuration profiles from the settings catalogue, then verify on the client
07
Migrate a small GPO set using Group Policy analytics
08
Deploy BitLocker with silent enablement and recover a key
09
Write a compliance policy and prove a non-compliant device loses access through conditional access
10
Package a Win32 app to .intunewin with detection rules and deploy it
11
Configure app supersedence to replace an older version cleanly
12
Build update rings for pilot and broad groups, then expedite an emergency update
13
Onboard the device to Defender for Endpoint and apply a security baseline
14
Troubleshoot a failed policy from the client logs and fix it