Workspace ONE UEM Administration and Operations

Overview

This course provides IT professionals with the knowledge and practical skills required to manage, secure, and optimise enterprise devices using Workspace ONE UEM. Delivered by an Omnissa Certified Instructor, the course focuses on administering modern device environments across Windows, Apple, and Android platforms, while applying best practices for security, compliance, and automation.

Learners will explore Workspace ONE UEM architecture, directory and identity integrations, application and profile management, and conditional access policies. The course also covers advanced operational topics such as scripting and automation with Freestyle Orchestrator, modern Windows management, Omnissa Intelligence, Zero Trust security, and troubleshooting techniques. By the end of the course, participants will be able to confidently operate and maintain a Workspace ONE UEM environment at scale.

Prerequisites

This course is designed for learners who already have experience working with enterprise device management solutions. Participants should have a working knowledge of Workspace ONE UEM and a background in end-user computing concepts. Completion of the Workspace ONE UEM Deploy and Manage course is recommended to ensure learners can fully engage with the administrative and operational topics covered.

Target audience

This course is intended for intermediate to advanced practitioners responsible for managing and securing enterprise devices. It is particularly suitable for IT administrators, endpoint management engineers, and technical specialists who support modern device environments and are responsible for maintaining operational health, security, and compliance across multiple platforms.

Objectives

By the end of this course, learners will be able to:

• Explain the core capabilities and value of Workspace ONE UEM in enterprise device management.
• Design and implement secure device enrolment workflows across multiple platforms.
• Integrate directory and identity services to enable authentication and access control.
• Configure and manage access policies and conditional access to protect corporate resources.
• Deploy and manage applications across diverse device types and operating systems.
• Create and apply advanced device profiles and configuration policies.
• Automate administrative workflows using Freestyle Orchestrator.
• Apply modern management practices for Windows devices.
• Implement best practices for managing Apple and Android devices in enterprise environments.
• Analyse a Workspace ONE UEM deployment and maintain device fleet health.
• Troubleshoot and resolve common issues related to devices, applications, and policies.

Outline

Course introduction

• Course introductions and logistics
• Course objectives and structure

Workspace ONE foundations

• Navigating and customising the Workspace ONE UEM console
• Core console foundations and services
• Workspace ONE Hub Services
• Workspace ONE UEM accounts and administration

Workspace ONE architecture

• Workspace ONE and modern SaaS architecture
• Workspace ONE UEM architectural components
• Additional Workspace ONE components
• Example enterprise use cases

Directory services and identity management

• Identity management approaches and integration options
• Direct directory services integration with Workspace ONE UEM
• Identity management using Omnissa Access
• Identity services configuration and administration
• Enterprise federation for administrator access
• Integrating Omnissa Access with Workspace ONE UEM for secure authentication and Hub services

Access integration, policies, and conditional access

• Omnissa Access overview
• Authentication methods
• Federating resources for single sign-on
• Access policies and conditional access configuration

Application management

• Application management concepts and overview
• Managing public applications
• Managing internal applications
• Purchased applications and licensing
• Software distribution management
• Workspace ONE SDK concepts

Profiles and policies: basics and beyond

• Benefits of using device profiles
• Profile types and platform-specific payloads
• Creating and deploying profiles in the Workspace ONE UEM console

Scripting and automation with Freestyle Orchestrator

• Introduction to Freestyle Orchestrator
• Components of a Freestyle workflow
• Workflow creation process
• Troubleshooting workflows
• Freestyle workflow components within Omnissa Intelligence

Modern management for Windows: part 1

• Windows management fundamentals
• Provisioning, enrolment, and onboarding
• Policy configuration

Modern management for Windows: part 2

• Managing Windows updates
• Windows application management
• Analytics and troubleshooting

Apple device management: part 1

• Apple management concepts in Workspace ONE UEM
• Apple services overview
• Integrating Apple Business Manager
• Automated Device Enrolment
• App and content deployment with volume purchasing
• Profiles for Apple devices
• Declarative Device Management

Apple device management: part 2

• Scripts and sensors with Intelligent Hub
• Intelligent Hub hubcli
• macOS and iOS update management
• Device Updates dashboard
• Software Update Enforcement

Android Enterprise deep dive

• Android device management modes
• Android Enterprise options
• Profile and device compliance
• Productivity and application management
• Operating system updates, automation, and troubleshooting

Omnissa Intelligence

• Omnissa Intelligence overview and terminology
• Marketplace entry points
• Customising dashboards and data exploration
• Omnissa Horizon Operations overview
• Experience Management features
• Workspace security monitoring
• Integrations and reporting recap

Security, compliance, and Zero Trust

• Zero Trust concepts with Omnissa
• Compliance policies
• Mobile Threat Defense
• Secure access tunnels
• Zero Trust compliance integrations

Workspace ONE UEM API

• Workspace ONE UEM API overview
• Using the Workspace ONE UEM API
• Omnissa Access API
• Omnissa Intelligence API

Troubleshooting and diagnostics: part 1

• General troubleshooting guidance
• Core and integration component topology
• Workspace ONE UEM log files
• AirWatch Cloud Connector
• Directory services integration
• Certificate Authority integration
• Omnissa Access and Hub Services integration

Troubleshooting and diagnostics: part 2

• Endpoint topology overview
• Troubleshooting tools and resources
• Workspace ONE Assist
• Troubleshooting common issues

Hands-on learning

This course includes instructor-led demonstrations and hands-on labs that allow learners to configure Workspace ONE UEM features, apply policies, manage devices, and practise troubleshooting techniques in a controlled environment.