# Unified Endpoint Mangement Training Guide

![ManageEngine Certification](https://cdn.manageengine.com/sites/meweb/images/training/images/training-banner.jpg)

> Practice is the hardest  
> part of learning  
> and **Training** is the  
> essence of transformation

[Download PDF](https://www.manageengine.com/sites/meweb/images/training/uem-training-agenda.pdf)

## 1.0.0 Installation & Setup

**For DC Cloud refer**

- https://www.manageengine.com/products/desktop-central/help/cloud-architecture.html
- https://www.manageengine.com/products/desktop-central/help/cloud-agent-installation.html

### 1.0.1 Endpoint Central Architecture

- What is Client-server model approach?
- How to manage LAN and WAN clients with DesktopCentral?
- What is a forwarding server?
- How to configure DesktopCentral with/without forwarding server?
- What is a distribution server?
- How to manage a domain and a workgroup setup with DesktopCentral?
- What is agent refresh policy?

- https://www.manageengine.com/products/desktop-central/desktop-central-lan-architecture.html
- https://www.manageengine.com/products/desktop-central/desktop-central-wan-architecture.html

### 1.0.2 Installing Endpoint Central

- Understanding the system requirements
  - Agents
  - DesktopCentral Server
  - Forwarding Server
  - Distribution server

(Information on system requirements & supported operating systems for agent & server)

- https://www.manageengine.com/products/desktop-central/system-requirements.html

- How to Install the Endpoint Central Server

- https://www.manageengine.com/products/desktop-central/help/getting_started/installing_desktop_central.html

### 1.0.3 Configuring Pre-requisites for DesktopCentral Server

- How to Configure the MSSQL Database (optional)?
- How to Configure the Firewall/End point Protection/Anti-Virus?
  - Ports required for DesktopCentral
  - Adding Windows firewall rules to allow required ports
  - Adding exclusion to Antivirus program
- What are the ports required?
- How to configure Mail Server for email notifications?
  - Configure O365
  - Configure SMTP
- How to Change Server Ports, Communication mode, etc?
- How to create custom groups?
  - Static
  - Static unique
  - Dynamic

- https://www.manageengine.com/products/desktop-central/help/configuring_desktop_central/creating_custom_groups.html

### 1.0.4 Securing the DesktopCentral Server

- How to secure the server with a self-signed or third-party certificate?
- How to enable secure communication for Agent (LAN & WAN)?
- How to restrict users from uninstalling agent?
- How to restrict users from opening console from WAN?
- How to manage security for legacy operating systems?

- https://www.manageengine.com/products/desktop-central/help/configuring_desktop_central/importing_ssl_certificates.html

- How to Configure the Forwarding Server?
  - Forwarding server architecture
  - Installing Certificate

- https://www.manageengine.com/products/desktop-central/secure-communication-of-mobile-users-using-forwarding-server.html

- How to configure NAT settings?
  - Assigning FQDN
- How to configure user login and role-based administration for DesktopCentral server?
  - Two Factor authentication creation
  - Password policy

- https://www.manageengine.com/products/desktop-central/help/configuring_desktop_central/desktop_central_user_management.html

### 1.0.5 Managing Domains/Workgroups

- How to add multiple domains/workgroups?
- How to discover machines that are part of the domain/workgroup?
- How to manage credentials for domains/workgroups?

### 1.0.6 Adding Computers to Manage

- How to add existing machines from domain?
- How to configure Modern Management?

- https://www.manageengine.com/products/desktop-central/help/configuring_desktop_central/defining_scope_of_management.html

### 1.0.7 Installing the Agent in Client Computers

- How to install agent from the DesktopCentral Console?
- How to install using Windows GPO?
- How to install using Script?
- How to install agent manually?
- How to install using computer names in remote offices?
- How to install the agent automatically for future machines added to the domain?
- How to identify different error messages in agent installation?

- https://www.manageengine.com/products/desktop-central/help/configuring_desktop_central/managing_computers_lan.html

### 1.0.8 Configuring Agent Settings

- How to configure Mac and Linux settings
- How to customize Agent tray icon options
- How to enable Automatic Configuration
- How to configure firewall manually
- What are the ports to be opened in the firewall (Agent)?

### 1.0.9 Creating Remote Offices (RO)

- How to configure FQDN (Fully Qualified Domain Name) for RO?
- Understanding direct and through Distribution Server connections
- How to install Distribution Servers?
- How to customize connection bandwidth (Replication policy, Remote settings)?
- How to configure proxy for RO?
- How to configure Image Repository in RO for OS deployment?
- How to configure IP scopes?

- https://www.manageengine.com/products/desktop-central/help/configuring_desktop_central/managing_computers_wan.html

## 2.0.0 Patch Management

**Scope:** DesktopCentral Patch management does not leverage SCCM, WSUS, or Windows Update. DesktopCentral uses ManageEngine's detection logic to detect patches and deploy them.

### 2.0.1 Patch Management Workflow

- Understanding detection logic from ManageEngine
- Understanding patch testing from ManageEngine patch team
- How to identify missing patches

- https://www.manageengine.com/products/desktop-central/help/patch_management/patch_management_life_cycle.html#Patch-Management-Life-Cycle

### 2.0.2 Patch Management Architecture

- How to manage OS & third-party patches
- How to manage a patching process for a DMZ

- https://www.manageengine.com/products/desktop-central/help/patch_management/patch_management_architecture.html#The-Patch-Management-Architecture

### 2.0.3 Supported Platforms

- Understanding the types of supported patches
- Overview of Linux patch management

- https://www.manageengine.com/products/desktop-central/patch_management_supported_application.html

### 2.0.4 Connectivity Settings

- How to configure proxy settings
- Configure direct connection or via proxy

- https://www.manageengine.com/products/desktop-central/help/configuring_desktop_central/patch_management_setup.html

### 2.0.5 Patch Database Update

- How to configure patch database update manually
- How to synchronize patch database update automatically

- https://www.manageengine.com/products/desktop-central/patch_management_supported_application.html

### 2.0.6 Patch Scan

- How to initiate a patch scan manually
- Automatic patch scan

> NOTE: The patch scan is automatic daily when the patch database gets updated.

- https://www.manageengine.com/products/desktop-central/help/patch_management/scan_systems_missing_patches.html#Patch-Management-Software-Scan-Systems-for-Vulnerability

### 2.0.7 System Health Policy

- How to configure system health policy?

### 2.0.8 Different GUI Patch Views

- Understanding Computer view
- Understanding Patch view

### 2.0.9 Identify Missing Patches

- How to export views into reports?
- How to create filters with different views?

### 2.1.0 Deployment Policy

- How to schedule deployment?
- How to choose Wake On LAN option?
- How to customize user notification?
- How to customize reboot policy?

- https://www.manageengine.com/products/desktop-central/help/configuring_desktop_central/configuring_deployment_templates.html

### 2.1.1 Deployment Policy

- How to install a patch to all required systems?
- How to install all missing patches on a computer?
- How to link the deployment policy?
- How to get notification for installed/failed patches?
- Understanding the execution status GUI view

- https://www.manageengine.com/products/desktop-central/help/patch_management/installing_missing_patches.html

### 2.1.2 Test and Approve for Patches

- How to create test groups?
- How to customize auto approval settings?

### 2.1.3 Define Automatic Patch Deployment

- How to create an automatic patch task?
- How to schedule patch deployment?
- How to link deployment policy?
- How to get notification for installed/failed patches?
- Understanding the execution status GUI view

- https://www.manageengine.com/products/desktop-central/help/patch_management/patch_management_configurations.html#Patch-Management-Module-Setting-Up

### 2.1.4 Exclude Patch from Being Reported as Missing

- How to decline a patch for a group?
- How to customize declined patches based on criteria?

### 2.1.5 Verify the Status of Patch Deployment

### 2.1.6 Patch Management Reports

- Understanding Vulnerable Systems report
- Understanding Vulnerable Patches report
- Understanding Latest Patches report
- Understanding patch summary based on Remote Office
- Understanding supported patches view

### Understanding Vulnerable Systems Report

- Understanding Vulnerable Systems report

- https://www.manageengine.com/products/desktop-central/help/vulnerability-remediation.html

### 2.1.8 Patch Management Alerts

- How to configure notification when a task is complete?

## 3.0.0 Software Deployment

### 3.0.1 Setting Up Software Deployment

- How to configure network share?
- How to configure HTTP share?

- https://www.manageengine.com/products/desktop-central/help/configuring_desktop_central/software_deployment_setup.html

### 3.0.2 Creating Packages from Templates

- How to create a package from a template?
- Understanding "How-to-doc" for commercial applications
- How to request new application templates?

- https://www.manageengine.com/products/desktop-central/help/configuring_desktop_central/software_deployment_setup.html

### 3.0.3 Creating Software Packages Manually

- How to create MSI packages?
- How to create EXE packages – silent switches?
- How to configure pre- and post-installation tasks?

- https://www.manageengine.com/products/desktop-central/help/software_installation/windows_software_installation.html

### 3.0.4 Deploying the Software

- How to deploy package(s) to all computers/users?
- How to link deployment policy?
- How to deploy with run as user?

- https://www.manageengine.com/products/desktop-central/help/software_installation/windows_software_installation.html

### 3.0.5 Self-service Portal

- What is a self-service portal?
- How to configure Self-Service Portal?
- Publishing a package to a specific custom group
- Without approval
- With approval (SDP)
- Deployment via Self-service portal

- https://www.manageengine.com/products/desktop-central/help/software_installation/self_service_portal.html

### 3.0.6 Verifying the Status of Deployment

- Understanding different remarks

## 4.0.0 Asset Management

**Scope of asset management:** DesktopCentral asset management can retrieve asset details for machines with the client installed. Asset details for other devices like routers or phones cannot be added.

### 4.0.1 Asset Scan

- How to initiate manual asset scan?
- How to schedule file scan?
- How to schedule asset scan?
- Understanding protocols used by Agents to scan machines
- Understanding events when Agent can scan machines
- Deployment via Self-service portal

- https://download.manageengine.com/training/uem-training-agenda.pdf

### 4.0.2 Details Collected by Agent During Inventory Scan

- Understanding details from asset scan
  - Users and Groups
  - Hardware/Software
  - Security/BitLocker status
  - Antivirus/Firewall status
  - BitLocker recovery key view
  - User logon history
  - Hardware/Software changes history

### 4.0.3 System Security Data

- How to view BitLocker key?
- How to view USB usage?
- How to get reports of antivirus details?
- How to get details of firewall?

- https://www.manageengine.com/products/desktop-central/help/inventory/inventory_asset_management.html

### 4.0.4 Configure Email Alerts

- How to configure alerts for hardware/software changes?
- How to configure alerts for license usage?
- How to configure alerts for disk space?

### 4.0.5 Software Metering

- How to configure software metering?

- https://www.manageengine.com/products/desktop-central/help/inventory/software_metering.html

### 4.0.6 Manage Software Licenses

- How to add license details?
- How to configure license compliance status?
- How to group similar software?
- How to associate computers to license?

- https://www.manageengine.com/products/desktop-central/help/inventory/manage_software_licenses.html#Manage-Software-Licenses

### 4.0.7 Configure Prohibited Software

- How to configure end user notification?
- How to configure end user requests for prohibited application install?
- How to configure user requests for a prohibited application?

- https://www.manageengine.com/products/desktop-central/help/inventory/configure_prohibited_software.html#Configure-Prohibited-Software

### 4.0.8 Manage Software Category

- How to categorize software category?

- https://www.manageengine.com/products/desktop-central/help/inventory/manage_software_categories.html#Manage-Software-Category

### 4.0.9 Block Executable

- How to configure block executable based on path/hash value?

### 4.1.0 Modern Management

- How to add devices to Modern Management?

- https://www.manageengine.com/products/desktop-central/help/configuring_desktop_central/configuring-modern-management.html

## 5.0.0 Configurations

### 5.0.1 Understanding User and Computer Configurations

- When to create user configuration?
- When to create computer configuration?

- https://www.manageengine.com/products/desktop-central/help/configurations.html

### 5.0.2 Using Configuration Templates

- Understanding and using predefined templates
- Understanding and using user-defined templates

### 5.0.3 Using Collections

- How to create a baseline of configurations?

### 5.0.4 Some Important Configurations

- How to secure USB devices?
- How to apply security policies?
- How to deploy custom scripts
- How to perform file/folder operations?
- How to manage users & groups?
- How to distribute certificates?
- How to deploy printer installation?

**User:**

- https://www.manageengine.com/products/desktop-central/help/user_configuration/user_configurations.html#User-Configurations

**Computer:**

- https://www.manageengine.com/products/desktop-central/help/computer_configuration/computer_configurations.html#Computer-Configurations

### 5.0.5 Securing USB Devices

- How to enable disable USB devices?
- Understanding user level / computer level
  - Mouse
  - Disk Drive
  - CD ROM
  - Portable Devices
  - Bluetooth
  - Image
  - Printer

### 5.0.6 Understanding Configuration States

- How to check configuration status?

- https://www.manageengine.com/products/desktop-central/help/managing_configurations_collections.html#Managing-Configurations-and-Collections

## 7.0.0 Tools

### 7.0.1 Remote Control

- Understanding remote control settings
  - What are the ports used for Remote Control?
  - How to configure prompt for user confirmation?
  - How to log connection reasons?
  - Understanding mode of communication
  - How to enable video recording?
- Viewing the remote desktop
  - How to disable remote keyboard and mouse?
  - How to swap between multiple monitors?
  - How to initiate live chat, voice/video calling?
  - How to collaborate with other technicians?
  - How to configure blacken monitor while using remote control?
  - How to transfer files between two computers during a remote session?
  - How to shadow user?

### 7.0.2 System Health with System Tools

- How to schedule tasks?
  - Check Disk
  - Clean Disk
  - Disk Defragmentor

### 7.0.3 Using Chat/Voice/Video Call

- How to initiate chat/voice/video calls?

### 7.0.4 System Manager

- Understanding different system manager functions
  - Virtual CMD editor
  - Registry editor
  - File manager
  - User/Group management
  - Event viewer
  - Printers/Shares
  - Device manager

### 7.0.5 Define and Apply Power Schemes

### 7.0.6 Shutdown Remote Computers

- How to configure shutdown remotely?
- How to schedule shutdown?
  - Shutdown
  - Lock Computer
  - Standby
  - Hibernate

### 7.0.7 Shutdown Computers in Specific Custom Groups

### 7.0.8 Wake Up Remote Computers (Wake On LAN - WoL)

- How to WoL manually?
- How to schedule WoL?

- https://www.manageengine.com/products/desktop-central/help/wake_on_lan_tool.html#Wake-on-LAN-Tool

## 8.0.0 Reports

### 8.0.1 Active Directory Reports

- How to schedule AD report updates?
- How to configure email reports?

- https://www.manageengine.com/products/desktop-central/help/configuring_desktop_central/configuring_active_directory_update_interval.html

### 8.0.2 User Logon Reports

- How to enable user logon reporting?
- How to view logon history & reports?

- https://www.manageengine.com/products/desktop-central/help/user_logon_tracking/setting_up_user_logon_reports.html

### 8.0.3 Power Management Reports

- Understanding system uptime/downtime report

### 8.0.4 Configuration Reports

- Understanding configuration reports by user
- Understanding configuration reports by computer
- Understanding configuration reports by type

- https://www.manageengine.com/products/desktop-central/help/reports/viewing_configuration_reports.html

### 8.0.5 USB Usage Reports

- Understanding USB usage reports

### 8.0.6 Create Custom Reports

- How to create custom reports?
  - Based on computer
  - Based on hardware
  - Based on software

### 8.0.7 Create Custom Query Reports

- Understanding query reports

### 8.0.8 Inventory Reports

- How to view software reports?
- How to view hardware reports?
- How to view license compliance reports?

- https://www.manageengine.com/products/desktop-central/help/reports/custom_query_report.html

## 9.0.0 Mobile Device Management

**Note:** Mobile Device Management is available as a standalone product (both on-prem and cloud versions) and as an add-on to DesktopCentral.

### 9.0.1 Supported Operating Systems

- iPhones and iPads running iOS 4 or later
- Smartphones and tablets running Android 2.2 or later
- Windows phones running 8.0 or later
- Windows desktops, laptops, and Surface Pro tablets running 10.0 or later
- macOS
- Apple tvOS

### 9.0.2 Pre-Requisites MDM

- How to configure NAT settings?
  - Public FQDN setup

> NOTE: A public IP/FQDN that will not change is required as it will be the only point of contact for mobile devices.

- How to configure proxy?

> NOTE: Required to reach notification services (APNS/FCM/WNS) on the internet.

- How to configure mail server?
- How to create APNs certificate for iOS?
- How to configure authentication policy?
  - AD integration

- https://www.manageengine.com/mobile-device-management/help/getting_started/installation_and_setup.html

### 9.0.3 Privacy and Security

- How to configure server security?
- How to configure privacy security?
- How to configure data privacy?

- https://www.manageengine.com/mobile-device-management/help/configuring_mobile_device_manager/mdm_privacy_and_security.html

### 9.0.4 Device Enrollment

- How to configure manual enrollment?
  - By myself (administrator enrolls device directly)
  - Through user invites (email-based enrollment)
- How to configure bulk enrollment?
- How to configure self-enrollment?
- Understanding iOS enrollment
  - Apple Configurator
  - Apple DEP
- Understanding Android enrollment
  - QR code enrollment (6.0+)
  - NFC enrollment (5.0)
  - Zero-touch
- Understanding Windows enrollment
  - Windows ICD
  - Enrolling laptops, desktops, Surface Pro
  - Azure Autopilot method

### 9.0.5 Profile Management

- How to create profiles?
  - Android
    - Kiosk
    - Restrict factory reset
    - Restrict app installation/uninstallation
    - Network restrictions (WiFi/Bluetooth/NFC)
    - Prevent USB connection
    - Restrict web browser
  - iOS
    - Kiosk mode
    - Restrict app installation/uninstallation
    - Restrict factory reset
    - Prevent USB connection
    - Restrict web browser
  - Windows
    - Kiosk mode
    - Enforce passcode
    - Distribute certificate
    - Prevent unauthorized Microsoft account connection
  - Chrome OS
    - User-based profile
    - Certificate, WiFi, VPN distribution
    - Web browser restrictions
    - Kiosk, ethernet configuration, certificate distribution
- How to create groups?
- How to associate profiles to groups & devices?

- https://www.manageengine.com/mobile-device-management/help/profile_management/mdm_profile_management.html

### 9.0.6 Conditional Exchange Access (CEA)

- Understanding CEA
- How to configure CEA?
- How to configure access policy?

> NOTE: Requires Exchange global admin credentials. Does not affect email access via OWA on web browser.

- https://www.manageengine.com/mobile-device-management/help/profile_management/mdm_conditional_exchange_access.html

### 9.0.7 App Management

- How to create an application repository?
- How to add store and enterprise (in-house) apps?
- Understanding app distribution to devices & groups
- How to blacklist & whitelist apps? (Corporate-owned devices)
- How to initiate silent app install/uninstall/update?
- How to integrate VPP/AFW?

- https://www.manageengine.com/mobile-device-management/help/app_management/mdm_app_management.html

### 9.0.8 Geo Tracking of Devices

- How to enable location history?
- How to view device location from console?

- https://www.manageengine.com/mobile-device-management/help/security_management/location_tracking.html

> NOTE: More effective on company-owned devices to prevent disabling tracking.

### 9.0.9 Kiosk Mode

- How to configure single-app kiosk mode?
- How to configure multiple-app kiosk mode?

### 9.1.0 Content Management

- How to add documents to repository?
- How to distribute documents?

- https://www.manageengine.com/mobile-device-management/help/content_management/mdm_document_distribution.html

### 9.1.1 Automate OS Update

- Understanding prerequisites for OS update
- How to enforce OS update?
- How to configure OS update policy?

- https://www.manageengine.com/mobile-device-management/help/os_update_management/mdm_automate_os_updates.html

### 9.1.2 Remote Troubleshoot

- Understanding prerequisites for remote control
- How to enable remote control for mobile devices?
- How to initiate remote control?
- How to initiate remote chat with end user?

- https://www.manageengine.com/mobile-device-management/help/asset_management/mdm_remote_troubleshoot.html

> NOTE: Remote view applies to Android and iOS. Remote control is supported on Sony and Samsung Android devices. End user approval required.

### 9.1.3 Asset Management

- How to collect hardware and software assets from managed devices?
- How to schedule a scan?
- How to view scanning status?

- https://www.manageengine.com/mobile-device-management/help/asset_management/mdm_asset_management.html

### 9.1.4 Reports

- Understanding different MDM reports

- https://www.manageengine.com/mobile-device-management/help/reports/reports.html

### 9.1.5 Security Management

- How to configure complete wipe?
  - Factory reset
- How to configure corporate wipe?
  - Wipes only MDM-managed applications/configurations
- How to clear passcode?
- How to initiate remote lock?
  - Lock device screen
- How to restart/shutdown device?
- How to enable lost mode?

- https://www.manageengine.com/mobile-device-management/help/security_management/mdm_security_management.html

### 9.1.6 Integrations

- How to integrate MDM with ServiceDesk Plus?
- How to integrate MDM with Asset Explorer?

- https://www.manageengine.com/mobile-device-management/help/integrations/mdm_integrations.html

## 10.0.0 HelpDesk

### 10.0.1 Integration with Help Desk Application

- Ticketing
- Alerts

### 10.0.2 Integration with ManageEngine ServiceDesk Plus (SDP)

- Understanding workflow integration
  - Asset data
  - Software deployment
  - Announcement & chat
- How to integrate SDP with DesktopCentral
- Integrated features

- https://www.manageengine.com/products/desktop-central/help/configuring_desktop_central/dc_sdp_integration.html

### 10.0.3 Integration with Other Help Desk Applications

- How to integrate with Zendesk?
- How to integrate with Jira?
- How to integrate with SpiceWorks?
- How to integrate with ServiceNow?

- https://www.manageengine.com/products/desktop-central/help/configuring_desktop_central/servicenow_integration.html

### 10.0.4 Audit Actions Performed Using Endpoint Central

- How to view Remote Control operation alerts?
- How to view Inventory alerts?
- Understanding audit log viewer
- How to configure alert data?

## 11.0.0 OS Deployment

### 11.0.1 Understanding OS Deployment with DesktopCentral

- What is OS deployment?

- https://www.manageengine.com/products/os-deployer/help/imaging-overview.html

### 11.0.2 Pre-requisites for OS Deployment

- How to create image repository?
- How to create driver repository?
- How to download and install WinPE?

- https://www.manageengine.com/products/desktop-central/os-imaging-deployment/how-to-install-winpe-tool.html

### 11.0.3 Image Creation

- How to create image?
- How to create image online?
- How to use auto-shrink feature for disk partition?
- How to create image offline?

### 11.0.4 Deployment Template

- How to configure SID change post-deployment?
- How to configure domain change post-deployment?
- How to configure new users post-deployment?
- How to install applications post-deployment?
- How to configure partition extension?
- How to configure naming pattern?
  - With naming pattern
  - With MAC address

### 11.0.5 Bootable Media Creation

- How to create WinPE media?
  - USB
  - ISO
  - PXE

- https://www.manageengine.com/products/os-deployer/help/creating-winpe-media.html

### 11.0.6 Image Deployment

- How to deploy image using passcode?
- How to deploy image using MAC address?
- How to schedule deployment?
- How to deploy image to remote offices?
- How to deploy image offline?

- https://www.manageengine.com/products/os-deployer/help/creating-os-image.html
- https://www.manageengine.com/products/os-deployer/help/offline-imaging.html

## 12.0.0 Miscellaneous Configurations / Settings

### 12.0.1 How to Create Custom Users and Computer Groups?

### 12.0.2 How to Personalize Web Console?

- Rebranding

### 12.0.3 How to Schedule Database Backup?

### 12.0.4 How to Schedule Database Optimization?

- How to use DesktopCentral mobile application?
- How to configure remote DB access?

## 13.0.0 Privacy Settings

### 13.0.1 How to Mask Personal Data (PII)?

### 13.0.2 Understanding DPO Dashboard

### 13.0.3 Understanding System Hardening Dashboard

- https://www.manageengine.com/products/desktop-central/dpo-dashboard.html

## DesktopCentral Vs DesktopCentral MSP

**NOTE:** The Endpoint Central MSP version has the following differences from DesktopCentral Enterprise:

- Customer profiles must be created to manage them.
- OS deployment is not available in DesktopCentral MSP.
- AD integration is available only for agent installation in DesktopCentral MSP.
- Remote office is mandatory in DesktopCentral MSP.

For other differences:

- https://www.manageengine.com/desktop-management-msp/faq.html#1