Let's review some of the major topics from our manage device compliance course. In the first lecture group, we reviewed how to use Microsoft Endpoint Manager to administer programs like Intune, where we can set up and deploy compliance policies to enroll devices. These devices can either be owned by the organization or by the employee, and once enrolled in Intune, can be tracked for compliance in company policies around accessing email or securing the device with a passcode. We reviewed how to build groups and conditional access policies and what actions we can take when the device is found to be out of compliance. We also step through the process of creating a compliance policy from the Endpoint Manager admin portal.

In the second lecture group, we acknowledged all of the vulnerable attack surfaces that exist on our organization devices and networks. We understood that by reducing these attack surfaces, we can reduce the risk of bad actors and malicious code from impacting our business processes. These rules are implemented in Microsoft Endpoint Manager and Microsoft Defender. We also reviewed how to properly implement these rules through a four-step process where rules are first tested in audit mode, prior to releasing fully to the business. This helps us prevent unwanted interruptions to productivity and to also understand where exclusions may be necessary.

In the last lecture group, we reviewed the security baselines that Microsoft provides to organizations that wish to have more granular control on their Microsoft 365 environment and Windows devices. These baselines are obtained from the Microsoft download center and implemented in Microsoft Endpoint Manager and Microsoft Defender. Here, we can review our secure score which communicates which actions we have taken to improve our security posture and what further actions can be taken. The score is an easy way to evaluate our actions against known best practices. We also reviewed how programs like Azure Identity Protection used machine learning algorithms to study sign in habits and flag activities that might be suspicious and worth deeper investigation.