Course Summary

This Microsoft Endpoint Administrator (MD-102) course provide the foundation for the Microsoft 365 Certified: Modern Desktop Administrator Associate certification.
It prepares you for the Microsoft Exam MD-102 and help demonstrate your real-world mastery of the skills and knowledge required to deploy, manage, and protect modern endpoints at scale in Microsoft 365 environments. Designed for endpoint administrators, this Exam Ref focuses on the critical thinking and decision-making acumen needed for success at the Microsoft Certified Associate level.

The goal of this course is to provide you with all the tools you need to prepare for the MD-102 Microsoft Endpoint Administrator exam — including text explanations, video demos, lab activities, self-assessment questions, and a practice exam— to increase your chances of passing the exam on your first try.

Methodology:
180-day access to:

  • Lessons
  • Video learning
  • MeasureUp Practice Test for Microsoft MD-102. Practice Mode with remediation and Certification mode to simulate the test day experience.

Duration: 40 hours of primary content. Each learner will progress a their own pace.

Audience: Those who want to learn more about Windows client deployments; plan and implement them with Windows Autopilot and the Microsoft Deployment Toolkit (MDT); configure remote management; manage identity; implement compliance policies for all supported device platforms with Microsoft Intune; manage device lifecycles, configurations, and updates with Intune; monitor devices; protect endpoints; deploy and update apps; and establish app protection and configuration policies.

Prerequisites:

  • Beginners to 2 years of experience with Windows client deployments.
  • Experience with configuring remote management.

Course Outline:
Upon successful completion of this course, students should be able to:

  • Deploy Windows Client.
  • Manage identity and compliance.
  • Manage, maintain, and protect devices.
  • Manage applications.

Lesson 1: Describe the business value of Microsoft Power Platform (4 hours and 24 minutes)

  • Skill 1.1: Prepare for a Windows client deployment (1 hour and 24 minutes)
    • Select a deployment tool based on requirements.
    • Choose between migrate and rebuild.
    • Choose an imagining and/or provisioning strategy.
    • Select a Windows edition based on requirements.
    • Plan upgrade and downgrade paths.
    • Implement subscription-based activation.
    • Windows 11 Enterprise Subscription Activation.

  • Skill 1.2: Plan and implement a Windows client deployment by using Windows Autopilot (1 hour and 24 minutes)
  • Configure device registration for Autopilot.
  • Windows Autopilot deployment scenarios.
  • Windows Autopilot requirements.
  • Create, validate, and assign deployment profiles.
  • Set up the Enrollment Status Page.
  • Deploy Windows devices by using Autopilot.
  • Troubleshoot an Autopilot deployment.

  • Skill 1.3: Plan and implement a Windows client deployment by using MDT (48 minutes)
  • Plan and implement a Windows client deployment by using MDT.
  • Create and manage images.
  • Monitor and troubleshoot a deployment.
  • Plan and configure user state migration.
  • Skill 1.4: Configure remote management (48 minutes).
  • Configure Remote Help in Intune.
  • Configure Remote Desktop on a Windows client.
  • Configure the Windows Admin Center.
  • Configure PowerShell remoting and Windows Remote Management (WinRM).
  • Summary
  • Case Studies 1-4
  • Quiz
    Lesson 2: Manage identity and compliance (2 hours and 36 minutes).

  • Skill 2.1: Manage identity (1 hour and 24 minutes).
    • Overview of identity solutions.
    • Implement user authentication on Windows devices including Windows Hello for Business, passwordless, and tokens.
    • Manage RBAC for Intune.
    • Register devices in and join devices to Azure AD.
    • Implement the Intune Connector for Active Directory.
    • Manage the membership of local groups on Windows devices.
    • Implement and manage LAPS for Azure AD.

  • Skill 2.2: Implement compliance policies for all supported device platforms by using Intune (1 hour and 12 minutes).
    • Specify compliance policies to meet requirements.
    • Manage notifications for compliance policies.
    • Implement device compliance policies.
    • Monitor device compliance.
    • Troubleshoot compliance policies.
    • Implement Conditional Access policies that require a compliance status.
  • Summary
  • Case Studies 1-2
  • Quiz

Lesson 3: Manage, maintain, and protect devices (4 hours and 12 minutes).

  • Skill 3.1: Manage the device lifecycle in Intune (1 hour).
    • Configure enrollment settings in Microsoft Intune.
    • Configure automatic and bulk enrollment.
    • Enroll devices.
    • Configure policy sets.
    • Restart, retire, or wipe devices.

  • Skill 3.2: Manage device configuration for all supported device platforms by using Intune (1 hour 12 minutes).
    • Specify configuration profiles to meet requirements.
    • Implement configuration profiles.
    • Monitor and troubleshoot configuration profiles.
    • Configure and implement Windows kiosk mode.
    • Configure and implement profiles on Android devices.
    • Plan and implement Microsoft Tunnel for Intune.

  • Skill 3.3: Monitor devices (36 minutes)
    • Monitor devices by using Intune.
    • Monitor devices by using Azure Monitor.
    • Analyze and respond to issues identified in Endpoint analytics and Adoption Score.

  • Skill 3.4: Manage device updates for all supported device platforms by using Intune (1 hour and 24 minutes)
    • Plan for device updates.
    • Create and manage update rings by using Intune.
    • Configure Windows client delivery optimization by using Intune.
    • Create and a manage update policies by using Intune.
    • Manage Android updates by using configuration profiles.
    • Monitor updates.
    • Troubleshoot updates in Intune.

  • Skill 3.5: Implement endpoint protection for all supported device platforms (1 hour)
    • Create and manage configuration policies for Endpoint security.
    • Implement and manage security baselines in Microsoft Intune.
    • Onboard devices to Defender for Endpoint.
    • Implement automated response capabilities in defender for Endpoint.
    • Review and respond to device issues identified in the Microsoft Defender Vulnerability Management dashboard.
  • Summary
  • Case Studies 1-4
  • Quiz

Lesson 4: Demonstrate the capabilities of Power Apps (2 hours and 24 minutes).

  • Skill 4.1: Deploy and update apps for all supported device platforms (1 hour and 24 minutes).
    • Deploy apps by using Intune.
    • Configure Microsoft 365 Apps deployment by using the Microsoft Office Deployment Tool or Office Customization Tool (OCT).
    • Manage Microsoft 365 Apps by using the Microsoft 365 Apps admin center.
    • Deploy Microsoft 365 Apps by using Intune.
    • Configure policies for Office apps by using Group Policy or Intune.
    • Deploy apps to platform-specific app stores by using Intune.
    • Enable sideloading of apps.

  • Skill 4.2: Plan and implement app protection and app configuration policies (1 hour).
    • Plan and implement App Protection policies for iOS and Android.
    • Manage App Protection policies.
    • Implement Conditional Access policies for app protection policies.
    • To create a Conditional Access policy.
    • Plan and implement app configuration policies for managed apps and managed devices.
    • Manage App Configuration policies.

  • Summary
  • Case Studies 1-2
  • Quiz