Microsoft Cybersecurity Stack: Identity and Endpoint Protection Basics

Introduction

• Welcome
• What you should know
• Resources
• Lab requirements

1. Azure Active Directory (AAD) Premium Setup

• AAD overview
• Create a new AAD tenant
• Activate a trial and assign licenses
• Set up AAD for an organization
• Validate readiness for Directory Sync
• Set up directory integration

2. Enabling Multi-Factor Authentication (MFA)

• Enable user-level MFA
• Enable application-level MFA
• Enable MFA for federated environments
• Configure MFA registration requirements
• Configure trusted IPs and app passwords
• Configure general MFA settings
• Microsoft MFA Server overview
• Enable self-service password reset

3. Setting Conditions for Secure Access

• Configure location-based access rules
• Configure device-based access rules
• Configure risk-based access rules
• Configure per-application access rules

4. Managing Mobile Devices with Intune

• Plan a mobile device management (MDM) strategy
• How Intune (standalone) MDM works
• How Intune mobile application management (MAM) works
• Configure automatic device registration

5. Publishing Applications with Azure AD App Proxy

• Azure AD App Proxy overview
• Publish an app with Azure AD App Proxy
• Assign users and groups

Conclusion

• Next steps