Microsoft Endpoint Manager

Unified Endpoint Management With Intune & The Enterprise Mobility + Security Suite

About the book

The first-ever Microsoft Endpoint Manager (MEM) book, written by Microsoft Program Manager Scott Duffey!


Microsoft Endpoint Manager (MEM),  bringing together the strengths of Microsoft Intune and Configuration Manager has rapidly become one of the leading products for mobile device and PC management on the market. Organizations around the world are using it to manage settings, security, and apps on corporate-owned devices and empower users to be productive on their own personal devices by protecting corporate app data. MEM also provides a wealth of capabilities for driving improvements to end-user experiences on PC's through Endpoint Analytics and Windows Autopilot.


In this book you will learn:


  • Microsoft Endpoint Manager – What it is and how to use it

  • How to set up your own MEM learning environment

  • Mobile Device Management (MDM) concepts for iOS, macOS, Android, and Windows 10 devices

  • Enrollment concepts for each platform including Windows Autopilot, Apple Automated Device Enrollment (ADE), and Google ZeroTouch

  • Endpoint Security with Compliance and Azure AD Conditional Access across Microsoft Intune, Configuration Manager, Azure AD, Microsoft Defender for Endpoint, and Office 365.

  • Mobile Application Management (MAM)

  • Advanced MEM concepts including extensibility through Microsoft Graph API and PowerShell


This book includes learning material, examples and exercises and is suitable for IT administrators of any level who want to ramp up and become the Microsoft Endpoint Manager expert in their own workplace.

Table of contents

Chapter 1 – Introduction

Chapter 2 - Getting started with Microsoft Endpoint Manager

Chapter 3 – Enrolling Devices into Management

Chapter 4 – Remote Device Actions

Chapter 5 – Configuring Device Settings

Chapter 6 – Configuring Compliance Profiles and Settings

Chapter 7 – Configuring Endpoint Security

Chapter 8 – Deploying Apps

Chapter 9 – App Protection Policies

Chapter 10 – App Configuration Policies

Chapter 11 – Conditional Access

Chapter 12 – Configuration Manager, Co-management and Tenant Attach

Chapter 13 – Endpoint Analytics

Chapter 14 – Troubleshooting

Chapter 15 – Advanced Usage and Resources to Learn More

About the author

Scott is a Senior Program Manager at Microsoft where he builds features for Microsoft Endpoint Manager (MEM). Scott has spent the last 9 years at Microsoft helping IT administrators, MVP's and partner organizatons deploy Microsoft enterprise management solutions such as Intune, Configuration Manager and Active Directory Group Policy. Scott creates technical documentation for Microsoft Endpoint Manager and regularly contributes to the Intune support blog.

Contact on linkedin
Contact on twitter