CMIT 380: Microsoft 365 Endpoint Administration

CMIT 380 teaches UMGC students how organizations manage laptops, desktops and mobile devices at scale with Microsoft's cloud tools.

UMGC describes it as a lab-based exploration preparing students to become proficient in Microsoft endpoint administration. The focus is on deploying, configuring, securing and maintaining modern endpoint devices using Microsoft solutions, including Intune, Entra ID and Windows client management.

Topics include endpoint deployment, application management, identity and access management, security policies and troubleshooting.

The course is designed to help prepare for the Microsoft 365 Certified: Endpoint Administrator Associate certification. Students often find the many overlapping policy types confusing at first, so a clear map of which tool does what is valuable.

What CMIT 380 Covers

Key Concepts Explained

Compliance Policies and Conditional Access

An Intune compliance policy defines what a healthy device looks like, such as encryption on, a minimum OS version and a passcode. Conditional Access in Entra ID can then require a compliant device before granting access to company apps.

Configuration Profiles

Configuration profiles push settings such as Wi-Fi, VPN, restrictions and security baselines to devices. They differ from compliance policies: one sets the configuration, the other checks it.

Modern Deployment

Windows Autopilot lets a new device ship straight to a user, who signs in with their work account; Intune then applies apps and settings automatically. This replaces much traditional imaging.

Managing Applications with Intune

Application management is one of UMGC's listed topics. Intune can deploy several app types, including Microsoft 365 Apps, store apps and line-of-business installers, and can mark them required (installed automatically) or available (offered in the Company Portal).

App protection policies add another layer. They protect company data inside apps, such as blocking copy and paste from Outlook into personal apps, even on devices the company does not manage. In scenario answers, explain whether the organization needs to manage the device, the app, or both.

Planning Groups and Assignments

Most Intune problems in labs trace back to assignment: the policy or app went to the wrong group, or to users when it should have gone to devices. Plan before you configure:

• Decide whether each policy targets users or devices.
• Use clear group names that describe purpose, such as "Finance laptops".
• Consider dynamic groups that add members automatically by attribute.
• Check for conflicting policies assigned to the same group.

Typical Assignments and How to Approach Them

Where Students Get Stuck

• Compliance versus configuration. One checks, the other sets.
• Group targeting. User and device groups behave differently.
• Policy delays. Devices sync on a schedule, so changes are not always instant.
• Renamed products. Azure AD is now Microsoft Entra ID, and older materials use the old names.

Study Tips for CMIT 380

• Keep a table of policy types: what each does and where it lives.
• Use Microsoft Learn modules for the Endpoint Administrator path alongside the course.
• After every lab, check the result on the device, not only in the console.
• Note product renames as you meet them to avoid confusion.

How We Help with CMIT 380

Send the lab instructions, rubric and your screenshots or results. A Microsoft 365 tutor can explain Intune and Entra ID concepts, walk through a policy design, or review your write-up. For presenting lab work, see our lab report guide.

GradeEssays is independent of the University of Maryland Global Campus and Microsoft. We tutor and explain; we never take quizzes or exams, sit certifications, or log in to your classroom, tenant or lab environment.