Microsoft System Center Configuration Manager and Cloud Services Integration (70-703)

Unmanaged endpoints, inconsistent OS builds, and manual patching create risk and eat admin time. This course prepares systems administrators to run Microsoft SCCM (Configuration Manager) as the central point of control for devices, applications, updates, and compliance across medium to enterprise environments.

Role fit: Best suited to Systems Administrators and IT Practitioners who already work with Windows Server roles. The course expects a basic understanding of PKI, and PowerShell skills help. It works well for one dedicated SCCM owner or a small endpoint team that needs a shared baseline.

Time investment: About 14.6 hours across eight skills. The instructor recommends working through them in order because each lesson and lab builds on the last. Plan for roughly two to three weeks at a few hours per week.

Risk and compliance: Your team practices several controls they can apply directly:

• Configuration baselines that check settings such as whether the firewall is on
• Software update deployment based on compliance scans
• Role-based administration with security roles and scopes
• PKI-secured HTTPS communication

Change management: The course covers Configuration Manager communication with Intune and on-premises MDM. That makes it a practical starting point for teams evaluating how device management connects with Microsoft cloud services.

Nearly every lesson includes a hands-on virtual lab, a five-machine network with three servers and two clients. Your team can practice discovery and deployment workflows without touching production.

IT teams take this training to replace one-off, hands-on device work with centralized, repeatable SCCM processes across on-premises and internet-based endpoints. Nearly every Nugget pairs with a hands-on virtual lab, a five-machine network with three servers and two clients. Your team practices in that lab instead of on production systems.

• Faster, more consistent device builds: Your team captures a custom image from a reference computer and deploys Windows with editable task sequences. Those task sequences help standardize OS deployment steps, which cuts the post-install setup that vanilla images leave behind.
• Controlled software and update rollouts: Administrators run compliance scans to find which machines need which updates. They push updates and applications to targeted collections and set distribution priority so critical apps reach remote distribution points first. After SQL Server Reporting Services is configured, Configuration Manager provides built-in reports and supports custom reporting for rollout visibility.
• Continuous configuration compliance: Your team deploys configuration baselines to device collections, for example checking that the firewall stays on. This keeps endpoints aligned with your settings requirements and supports audit readiness.
• Least-privilege administration and secure remote support: Team leads assign administrative users to security roles and use scopes to limit which objects each admin can manage. The help desk troubleshoots desktops through Remote Tools, with user approval prompts when that option is enabled. HTTPS through PKI secures client communications and enables MDM and Intune co-management.

Knowledge

• How SCCM discovery methods load Active Directory forests, domains, sites, users, groups, and computers into the site database
• How security roles, administrative users, and scopes limit what each admin can manage across the Configuration Manager hierarchy
• The components that support operating system deployment, including reference images, task sequences, management points, and distribution points
• How software updates flow from WSUS through the software update point, and how compliance scans show which machines need which updates
• Why PKI and HTTPS are required to secure client and site system communication and support MDM and Intune integration
• How the service connection point communicates with Intune, and how manual enrollment differs from Group Policy-based automatic enrollment

Ability

• Configure discovery methods and install the Configuration Manager client manually on workgroup and domain machines
• Distribute and deploy optional and required applications, set distribution priority, and confirm success with deployment reports
• Build and customize task sequences to capture reference images and deploy operating systems
• Deploy software updates and configuration baselines, such as firewall settings, so device collections stay compliant
• Trigger client policy updates, verify deployments in Software Center, and use reports to confirm deployment status
• Implement PKI for clients through Active Directory Certificate Services, then troubleshoot it with log files and reports