Graduate Track//Microsoft 365 Administration
Diagnosing a Microsoft 365 Group Membership Change
Learn to scope, validate, diagnose and safely reverse one Microsoft 365 group membership change using independent evidence and clear stop conditions.
Learn to scope, validate, diagnose and safely reverse one Microsoft 365 group membership change using independent evidence and clear stop conditions.
Learn to bound, validate and recover a Microsoft 365 administration change using least privilege, layered evidence and explicit stop conditions.
Learn to scope, validate and safely reverse a low-impact Microsoft 365 administration change using explicit evidence and stop conditions.
Learn to plan, validate and recover a bounded Microsoft 365 group membership change using explicit evidence, stop conditions and least privilege.
A graduate guide to evidence-led Microsoft 365 administration: directory vs service state, a licensing worked example, a safe lab exercise and recovery steps.
Learn group-based Microsoft 365 licence assignment safely: mental model, worked example, bounded exercise, validation and rollback for graduates.
Learn Microsoft Intune endpoint management by safely assigning, validating and recovering one reversible device configuration in an isolated lab.
A first-principles graduate guide to Identity and Access Management with Microsoft Entra ID: trust boundaries, a worked example and a safe lab exercise.
Design, implement and safely roll back one bounded Microsoft Entra ID identity and access management lab with clear validation and recovery steps.
A hands-on runbook for configuring Windows Autopilot device preparation in Intune, covering registration, profiles, piloting, verification and rollback.
A hands-on runbook for converting a standing Entra ID admin role into a time-bound, MFA-gated PIM eligible assignment with staged rollout and audit evidence.
A hands-on runbook for piloting Microsoft Intune Endpoint Privilege Management, removing local admin rights and proving elevation rules with evidence.
A hands-on runbook for building recurring Entra ID access reviews on privileged roles, with auto-apply, alerting, rollback and audit evidence retention.
A practical runbook for retiring leaver devices in Intune, de-registering Autopilot hashes and cleaning up Entra ID device objects with verifiable evidence.
A production runbook for junior identity engineers to configure, pilot and audit recurring Entra ID access reviews of guest accounts using Microsoft Graph PowerShell.
Step-by-step guidance for retiring or wiping Windows devices in Intune, removing Autopilot identities, and clearing Entra ID and AD records safely.
A production runbook for scoping, issuing, verifying, monitoring and rolling back Entra ID Temporary Access Pass during new hire onboarding.
A hands-on runbook for junior engineers locking down Entra ID cross-tenant access, inbound MFA trust and Conditional Access before B2B guest onboarding.
Learn how to configure Intune BitLocker key escrow to Entra ID correctly, avoid silent failures, and verify recovery keys before a device becomes unrecoverable.
A staged runbook for clearing legacy per-user MFA and hardening Entra ID authentication methods without locking out users or losing break-glass access.
A practical guide to managing endpoints and devices in production, covering Intune compliance, Conditional Access, rollback, and verification.
Learn to configure, verify, and safely roll back group-based licensing in Microsoft Entra ID for reliable Microsoft 365 license automation.