Microsoft 365 fundamentals to Entra ID and Intune
Go from using and supporting Microsoft 365 to understanding the identity and device management that controls access to it.
- Who it's for
- Support staff and administrators who work with Microsoft 365 and want to understand Entra ID and Intune properly.
- Start with
- You know Microsoft 365 as a user or junior admin. Access to a test tenant helps for the real-world parts.
- Pace
- Self-paced. Allow time for practice in a test tenant, not just reading.
The route
0 of 6 marked done
Users, groups and licences
How identities are organised in Microsoft Entra ID and how group-based assignment scales.
Practice: In a test tenant, create a group-based assignment and check which users inherit it.
- Microsoft Learn trainingMicrosoft Learn
Authentication and MFA
What counts as a strong authentication method and why MFA is the baseline.
Practice: Explain to a colleague why legacy protocols undermine MFA, using the simulation to show it.
- Read a sign-in like an admin: Conditional Access decisionsByteStranger lab, interactive
Conditional Access decisions
Assignments, conditions, grant controls, report-only mode and the What If tool.
Practice: Predict, then verify, the outcome of every combination you can think of in the simulated tenant.
- Read a sign-in like an admin: Conditional Access decisionsByteStranger lab, interactive
- What is Conditional Access?Microsoft Learn
Reading sign-in logs
Using sign-in logs and the Conditional Access tab to explain any access decision.
Practice: In a test tenant, find one successful and one failed sign-in and explain each.
- Sign-in logs in Microsoft Entra IDMicrosoft Learn
Device compliance with Intune
Compliance policies, check-ins and how compliance status feeds Conditional Access.
Practice: Fix the simulated laptop, then find the same per-setting view for a test device in Intune.
- Why is this laptop blocked? Intune compliance and accessByteStranger lab, interactive
- Device compliance policies in Microsoft IntuneMicrosoft Learn
Automate with Microsoft Graph PowerShell
Querying users, devices and sign-ins with scripts instead of clicking.
Practice: Write a read-only script that lists devices that are not compliant.
- Microsoft Graph PowerShell overviewMicrosoft Learn
By the end
- Explain and predict Conditional Access outcomes
- Trace a device-compliance block to its cause
- Read sign-in logs confidently and start automating admin checks
Where to go next
This path is a guide for independent learning. It isn't accredited and doesn't award a qualification. The external resources belong to their publishers. Progress you mark is saved only in this browser.