MD-102 Preparation Details
Preparing for the MD-102 Endpoint Administrator certification exam? Start here with a complete, objective-wise MD-102 study guide designed to help you pass faster.
This guide brings together official Microsoft documentation, key concepts, and curated resources for every MD-102 exam objective, making it ideal for both beginners and last-minute revision.
Looking for the best MD-102 preparation resources in one place? This page covers everything you need to get exam-ready with confidence.
If this helped you, share it with others preparing for the MD-102 certification exam.
Exam Voucher for MD-102 with 1 Retake
Get 40% OFF with the combo
MD-102 Managing Modern Desktops Course
| Coursera | Endpoint Administrator Specialization |
| Whizlabs | Microsoft Modern Desktop Administrator test |
| Udemy | Endpoint Administrator Associate course |
Prepare infrastructure for devices (25–30%)
Add devices to Microsoft Entra ID
Choose an appropriate device join type
Plan your Microsoft Entra device deployment
What is a Microsoft Entra joined device?
What are Microsoft Entra registered devices?
Join devices to Microsoft Entra ID
Plan your Microsoft Entra join deployment
Plan your Microsoft Entra hybrid join deployment
Register devices to Microsoft Entra ID
What are Microsoft Entra registered devices?
Manage devices in Microsoft Entra ID using the Microsoft Entra admin center
Plan and implement groups for devices in Microsoft Entra ID
Plan your Microsoft Entra device deployment
Dynamic membership rules for groups in Microsoft Entra ID
Enroll devices to Microsoft Intune
Configure enrollment settings
Device enrollment guide for Microsoft Intune
Overview of enrollment restrictions
Configure automatic enrollment for Windows and bulk enrollment for iOS/iPadOS and Android
Windows device enrollment guide for Microsoft Intune
Step 5 – Enroll devices in Microsoft Intune
Configure enrollment profiles for Android devices, including fully managed, dedicated, corporate owned, and work profile
Android device enrollment guide for Microsoft Intune
Set up enrollment for Android Enterprise fully managed devices
Set up Intune enrollment for Android Enterprise dedicated devices
Enroll personal devices in Intune with Android Enterprise work profile management
Implement identity and compliance
Manage roles in Intune
Microsoft Intune built-in roles reference
Role-based access control (RBAC) with Microsoft Intune
Implement compliance policies for all supported device platforms by using Intune
Protect data and devices with Microsoft Intune
Create a compliance policy in Microsoft Intune
Implement Microsoft Entra Conditional Access policies that require a compliance status
Use Compliance Policies to Set Rules for Devices You Manage with Intune
Configure Windows Hello for Business
Manage endpoint security policies in Microsoft Intune
Windows Hello for Business overview
Implement and manage Windows Local Administrator Password Solution (Windows LAPS)
Overview of Windows LAPS with Microsoft Intune
Deploy Intune policies to manage Windows LAPS
Manage the membership of local groups on Windows devices by using Intune
Manage account protection settings with endpoint security policies in Microsoft Intune
Manage local groups on Windows devices – Intune
Manage and maintain devices (30–35%)
Deploy and upgrade Windows clients by using cloud-based tools
Choose between Windows Autopilot and provisioning packages
Provisioning packages – Windows client deployment
Choose a Windows Autopilot deployment mode
Windows Autopilot self-deploying mode
Windows Autopilot for pre-provisioned deployment
Windows Autopilot user-driven mode
Apply a device name template
Configure Windows Autopilot profiles
Implement Windows client deployment by using Windows Autopilot
Windows Autopilot scenarios and capabilities
Create an Enrollment Status Page (ESP)
Set up the Enrollment Status Page
What is the Enrollment Status Page?
Plan and implement provisioning packages
Provisioning packages – Windows client deployment
Plan and implement device upgrades for Windows 11
Windows 11 upgrade readiness in Microsoft Intune
Implement a Windows 365 Cloud PC deployment
Create provisioning policies for Windows 365
Plan and implement device configuration profiles
Create device configuration profiles for Windows devices, including importing ADMX files
Create device profiles in Microsoft Intune
Use ADMX templates on Windows devices in Microsoft Intune
Create a policy using settings catalog in Microsoft Intune
Create device configuration profiles for Android devices
Device features and settings in Microsoft Intune
Configure device configuration profiles in Microsoft Intune
Create device configuration profiles for iOS/iPadOS devices
Device features and settings in Microsoft Intune
iOS/iPadOS device feature settings in Microsoft Intune
Create device configuration profiles for macOS devices
Device features and settings in Microsoft Intune
macOS device feature settings in Microsoft Intune
Create device configuration profiles for Windows 11 Enterprise multi-session devices
Use Azure Virtual Desktop multi-session with Microsoft Intune
Assign device profiles in Microsoft Intune
Target a profile by using filters
Use filters when assigning your apps, policies, and profiles in Intune
Platforms and policy types supported by assignment filters
Implement Intune Suite add-on capabilities
Configure Endpoint Privilege Management
Learn about using Endpoint Privilege Management with Microsoft Intune
Plan and Prepare for Endpoint Privilege Management Deployment
Deploy Endpoint Privilege Management with Microsoft Intune
Manage applications by using the Enterprise App Catalog
Use Intune Suite add-on capabilities
Microsoft Intune Enterprise Application Management
Implement Microsoft Intune Advanced Analytics
Configure Microsoft Intune Remote Help
Use Intune Suite add-on capabilities
Remote Help overview – Microsoft Intune
Identify use cases for Microsoft Cloud PKI
Overview of Microsoft Cloud PKI
Use Intune Suite add-on capabilities
Implement Microsoft Tunnel for Mobile Application Management
Microsoft Tunnel for Mobile Application Management overview
Explore Microsoft Intune Suite – Training
Perform remote actions on devices
Sync, restart, retire, or wipe devices
Device Actions – Wipe, Lock, Locate, and More
Run remote actions on devices with Microsoft Intune
Perform bulk remote actions
Device Actions – Wipe, Lock, Locate, and More
Use bulk device actions in Microsoft Intune
Update Microsoft Defender Antivirus security intelligence
Manage endpoint security in Microsoft Intune
Run remote actions on devices with Microsoft Intune
Rotate BitLocker recovery keys
Device Action: BitLocker Key Rotation
Encrypt Windows devices with BitLocker using Intune
Run a device query by using KQL
Device Query in Microsoft Intune
Device Query – Microsoft Intune
Device Query for Multiple Devices
Manage applications (15–20%)
Deploy and update apps
Prepare applications for deployment by using Intune
App management in Microsoft Intune
Deploy apps by using Intune
Assign apps to groups with Microsoft Intune
Deploy Microsoft 365 Apps by using Intune
Add Microsoft 365 Apps to Windows Devices Using Microsoft Intune
Plan your enterprise deployment of Microsoft 365 Apps
Configure policies for Office apps
Manage Microsoft 365 (Office) for iOS and Android with Intune
Overview of security policy advisor for Microsoft 365 Apps for enterprise
Deploy Microsoft 365 Apps as part of a Windows Autopilot deployment by using the Office Deployment Tool (ODT) or Office Customization Tool (OCT)
Add Microsoft 365 Apps to Windows Devices Using Microsoft Intune
Configuration options for the Office Deployment Tool
Overview of the Office Customization Tool
Manage Microsoft 365 Apps by using the Microsoft 365 Apps admin center
Overview of the Microsoft 365 Apps admin center
Plan your enterprise deployment of Microsoft 365 Apps
Deploy apps from platform-specific app stores by using Intune
Add and Assign Managed Google Play Apps to Android Enterprise Devices
Add iOS store apps to Microsoft Intune
Add Microsoft Store apps to Microsoft Intune
Plan and implement app protection and app configuration policies
Plan and implement app protection policies
App Protection Policies Overview – Microsoft Intune
Create and Deploy App Protection Policies – Microsoft Intune
Data Protection Framework Using App Protection Policies
Implement Microsoft Entra Conditional Access policies for app protection policies
Use app-based Conditional Access policies with Intune
Set up app-based Conditional Access policies with Intune
Conditional Access – Require approved app or app protection policy
Plan and implement app configuration policies for managed apps and managed devices
App Configuration Policies for Microsoft Intune
Add App Configuration Policies for Managed iOS/iPadOS Devices
Add App Configuration Policies for Managed Android Enterprise Devices
Configuration Policies for Intune App SDK Managed Apps
Protect devices (15–20%)
Configure endpoint security
Create antivirus policies
Endpoint security in Microsoft Intune
Manage endpoint security policies in Microsoft Intune
Create disk encryption policies
Manage endpoint security policies in Microsoft Intune
Encrypt Windows devices with BitLocker using Intune
Create firewall policies
Endpoint security in Microsoft Intune
Use Intune endpoint security firewall policy to manage Windows Firewall
Configure Attack surface reduction policies
Manage attack surface reduction settings with Microsoft Intune
Attack surface reduction rules reference – Microsoft Defender for Endpoint
Plan and implement security baselines
Use security baselines to configure Windows devices in Intune
Manage security baseline profiles in Microsoft Intune
Integrate Intune with Microsoft Defender for Endpoint
Configure Microsoft Defender for Endpoint in Intune
Enforce compliance for Microsoft Defender for Endpoint with Conditional Access in Intune
Onboard devices into Microsoft Defender for Endpoint
Onboarding using Microsoft Intune – Microsoft Defender for Endpoint
Manage endpoint security policies in Microsoft Defender for Endpoint
Manage device updates by using Intune
Plan for device updates
Device updates – Microsoft Intune
Plan your Windows update deployment
Create and manage update rings by using Intune
Manage Windows Update Ring Policies – Microsoft Intune
Windows update rings in Microsoft Intune
Create and manage update policies by using Intune, including iOS/iPadOS and macOS
Configure Update Policies for Apple Devices – Microsoft Intune
Admin checklist for iOS/iPadOS software updates in Microsoft Intune
Admin guide and checklist for macOS software updates – Microsoft Intune
Manage Android updates by using configuration profiles or firmware-over-the-air (FOTA) deployments
Android FOTA Updates – Microsoft Intune
Manage Android Enterprise system updates with Microsoft Intune
Configure Windows client Delivery Optimization by using Intune
Delivery Optimization settings for Windows in Microsoft Intune
Use Intune to configure Windows Update Delivery Optimization
Monitor updates
Monitor Windows update policies in Intune
Device updates – Microsoft Intune
This brings us to the end of the MD-102 Endpoint Administrator Study Guide
What do you think? Let me know in the comments section if I have missed out on anything. Also, I love to hear from you about how your MD-102 certification preparation is going on!
In case you are preparing for other Microsoft 365 certification exams, check out the Microsoft 365 study guide for those exams.
Follow Me to Receive Updates on MD-102 Exam
Want to be notified as soon as I post? Subscribe to the RSS feed / leave your email address in the subscribe section. Share the article to your social networks with the below links so it can benefit others.
