- Worth 20 to 25% of MD-102, with 18 skills in the study guide. We teach and practice each one
- Choose an appropriate device join type, including considerations such as device registration and Microsoft Entra join
- Join devices to Microsoft Entra ID
- Register devices to Microsoft Entra ID
- Plan and implement groups for devices in Microsoft Entra ID, including dynamic group membership rules
- Configure enrollment settings in Microsoft Intune
- Configure automatic enrollment for Windows
- Configure personal enrollment for macOS, iOS, iPadOS
- Configure enrollment profiles for Android devices, including fully managed, dedicated, corporate-owned devices with a work profile, enrollment restrictions and troubleshooting enrollment failures
- Configure corporate enrollment for macOS and iOS devices by integrating Intune with Apple Business Manager
- Configure enrollment for Android devices by integrating Intune with Samsung Knox Mobile Enrollment or Google zero-touch enrollment
- Manage built-in and custom roles for Intune and Windows 365, including role assignments
- Configure scope tags and scoped administration for multi-admin environments
- Implement and manage multi-admin approval
- Implement compliance policies for all supported device platforms by using Intune
- Implement Microsoft Entra Conditional Access policies that require a compliance status
- Configure Windows Hello for Business by using Intune
- Implement and manage Windows Local Administrator Password Solution (Windows LAPS) by using Microsoft Intune and Microsoft Entra ID
- Manage the membership of local groups on Windows devices by using Intune
Microsoft Certification Training Course
Endpoint Administrator Associate (MD-102) Certification Training Course
We'll get you ready for Exam MD-102, the Microsoft 365 credential for endpoint administrators who run devices with Intune.
Course focus: Preparing infrastructure for devices, managing and protecting devices, managing apps, and automating endpoint operations, mapped to the MD-102 study guide.
Course Overview
What the MD-102 course covers and who it's for.
Per Microsoft, MD-102 is for people who manage devices and client apps in a Microsoft 365 tenant with Microsoft Intune and agentic tools and workflows.
Managing and maintaining devices is the biggest domain at 25 to 30%. We enroll and configure devices, push apps, set up compliance and security, and use reporting and automation.
Microsoft lists Intune, the Intune Suite, Windows Autopilot, Defender for Endpoint, Entra ID, PowerShell, Microsoft Graph and Windows 365 as the tools you'll use at scale. You should also understand Security Copilot, Intune agents and Defender XDR.
Every device a company owns has to be enrolled, patched, secured and supported. MD-102 is the Microsoft credential for doing that with Intune across Windows and non-Windows devices.
Accumentum is an independent training provider. We aren't a Microsoft partner and this isn't official Microsoft training. Microsoft sets exam content, prices and policies, so check learn.microsoft.com before you book.
Course Objectives
Get ready for MD-102 the way the exam is built.
01
Cover the Whole Study Guide
Work through all 5 skill areas in Microsoft's MD-102 study guide, weighted the way the exam weights them.
02
Go Deep on the Biggest Domain
Manage and maintain devices is 25 to 30% of the exam per Microsoft, so it gets the most class time.
03
Practice Hands-On
Work through the tasks the MD-102 study guide lists, hands on.
04
Master Prepare infrastructure for devices
Microsoft lists 18 skills here, worth 20 to 25%. We practice all of them, from the first, choose an appropriate device join type, including considerations such as device registration and Microsoft Entra join, through the last, manage the membership of local groups on Windows devices by using Intune.
05
Master Manage and maintain devices
Microsoft lists 27 skills here, worth 25 to 30%. We practice all of them, from the first, choose between Windows Autopilot deployment profiles and device preparation policies, through the last, collect device diagnostics and logs by using Microsoft Intune, including using the Troubleshooting blade for user-based diagnostics.
06
Master Protect devices
Microsoft lists 15 skills here, worth 15 to 20%. We practice all of them, from the first, create antivirus policies by using Microsoft Intune, through the last, monitor device updates by using Intune.
07
Master Manage and secure applications
Microsoft lists 12 skills here, worth 15 to 20%. We practice all of them, from the first, prepare applications for deployment by using Intune, through the last, plan and implement app configuration policies for managed apps and managed devices.
08
Master Optimize endpoint operations by using automation, monitoring, and reporting
Microsoft lists 11 skills here, worth 10 to 15%. We practice all of them, from the first, automate Intune management tasks by using PowerShell and Microsoft Graph, through the last, configure alerts and notifications for policy and compliance changes, including setting up alert rules for compliance drift, enrollment failures, and configuration conflicts.
09
Be Ready for Test Day
We practice the question styles Microsoft uses and walk through how scheduling, scoring and renewal work.
Who Should Attend
- Desktop support and endpoint admins.
- Help desk staff moving into device management.
- Intune and Windows admins.
- Microsoft 365 admins who own devices.
Prerequisites
- Microsoft doesn't require another certification first, and we don't have enrollment prerequisites either.
- Experience with Windows and Microsoft 365 helps.
Pathway Map
The MD-102 course in 5 modules.
Each module is one skill area from the official study guide, with its exam weight.
Course Content
- Worth 25 to 30% of MD-102, with 27 skills in the study guide. We teach and practice each one
- Choose between Windows Autopilot deployment profiles and device preparation policies
- Choose between Windows Autopilot deployment modes, including user-driven, pre-provisioning, and self-deploying
- Apply a device name template by using Windows Autopilot
- Implement Windows client deployment by using Windows Autopilot
- Create an Enrollment Status Page (ESP)
- Plan and implement device upgrades for Windows 11 by using Intune
- Provision and configure Windows 365 Cloud PCs by using Intune, including provisioning policies, network connections, and image management
- Implement Windows Backup by using Intune
- Create device configuration profiles for Windows devices, including importing ADMX files and using Group Policy analytics
- Create device configuration profiles for Android devices
- Create device configuration profiles for iOS/iPadOS devices
- Create device configuration profiles for macOS devices
- Create device configuration profiles for specialty devices, including Microsoft Teams Rooms, HoloLens 2, and Zebra
- Target a profile by using assignment filters and enrollment time grouping
- Configure Endpoint Privilege Management including configuring elevation policies, monitoring elevated actions, and adjusting EPM settings
- Manage applications by using the Enterprise App Catalog
- Configure Microsoft Intune Remote Help
- Plan and implement Microsoft Cloud PKI, including setting up cloud-based PKI, automating certificate issuance, and monitoring certificate health
- Implement Microsoft Tunnel for Mobile Application Management, including configuring the Microsoft Tunnel VPN Gateway, extending support to MAM devices, and monitoring tunnel connections
- Implement Microsoft Intune Advanced Analytics, including anomaly detection, proactive insights, and risk-based policy recommendations
- Sync, restart, retire, or wipe devices
- Perform bulk remote actions
- Update Microsoft Defender Antivirus security intelligence
- Rotate BitLocker recovery keys
- Rotate local administrator passwords
- Run a device query by using KQL
- Collect device diagnostics and logs by using Microsoft Intune, including using the Troubleshooting blade for user-based diagnostics
- Worth 15 to 20% of MD-102, with 15 skills in the study guide. We teach and practice each one
- Create antivirus policies by using Microsoft Intune
- Create and manage disk encryption policies by using Microsoft Intune, including managing BitLocker recovery keys, configuring user self-service recovery, and monitoring encryption compliance status
- Create firewall policies by using Microsoft Intune
- Configure Attack surface reduction policies by using Microsoft Intune, including applying Zero Trust principles for endpoint protection
- Plan and implement security baselines by using Microsoft Intune
- Integrate Intune with Microsoft Defender for Endpoint, including configuring Endpoint Detection and Response (EDR) policies, investigating endpoint threats, and triaging incidents
- Onboard devices into Microsoft Defender for Endpoint
- Configure App Control for Business policies by using Microsoft Intune
- Plan for device updates by using Intune
- Create and manage update rings, feature updates, and quality updates for Windows devices by using Intune
- Implement Windows Autopatch and configure Hotpatch policies
- Create and manage update policies for iOS/iPadOS and macOS devices by using the Settings Catalog in Microsoft Intune
- Manage Android updates by using configuration profiles or firmware-over-the-air (FOTA) deployments
- Configure Windows client Delivery Optimization by using Intune
- Monitor device updates by using Intune
- Worth 15 to 20% of MD-102, with 12 skills in the study guide. We teach and practice each one
- Prepare applications for deployment by using Intune
- Deploy apps by using Intune, including Win32 apps, line-of-business (LOB) apps, and Microsoft Store apps
- Configure Quiet Time policies for Android and iOS apps
- Deploy Microsoft 365 Apps by using Intune
- Configure policies for Microsoft 365 apps by using Microsoft Intune or the Microsoft 365 Apps admin center
- Deploy Microsoft 365 Apps as part of a Windows Autopilot deployment, including using the Office Deployment Tool (ODT) or Microsoft Intune
- Manage Microsoft 365 Apps by using the Microsoft 365 Apps admin center
- Deploy apps from platform-specific app stores by using Intune, including Apple Business Manager and Managed Google Play
- Monitor app deployment status and troubleshoot installation failures by using Microsoft Intune
- Plan and implement app protection policies for managed and unmanaged (BYOD) devices by using Microsoft Intune
- Implement Microsoft Entra Conditional Access policies for app protection policies
- Plan and implement app configuration policies for managed apps and managed devices
- Worth 10 to 15% of MD-102, with 11 skills in the study guide. We teach and practice each one
- Automate Intune management tasks by using PowerShell and Microsoft Graph
- Investigate threats identified by Security Copilot agents in Intune
- Analyze device performance by using Security Copilot agents in Intune
- Review and respond to Security Copilot agent recommendations to make management decisions
- Extend device compliance by using PowerShell
- Implement reporting and data visibility in Microsoft Intune, including customizing reports and filters, using workbooks and dashboards, and exporting reporting data
- Monitor endpoint performance by using Endpoint Analytics, including Remediations, device health scores, and app startup performance
- Configure and manage remediation scripts, including detecting and fixing common device issues, and scheduling remediation runs
- Analyze endpoint reliability and user experience scores, including startup performance, restart frequency, and application reliability metrics
- Monitor tenant health and Intune service communications, including reviewing service health dashboards, message center notifications, and establishing operational baselines
- Configure alerts and notifications for policy and compliance changes, including setting up alert rules for compliance drift, enrollment failures, and configuration conflicts
Course Features
How we teach MD-102.
Instructor-Led Classes
Live instruction with time for questions, so you aren't figuring out the hard parts alone.
Hands-On Practice
Practice on the tasks in the MD-102 study guide.
Study Guide Mapping
Every module maps to a skill area in Microsoft's MD-102 study guide.
Exam Strategy
Practice questions plus tips on scheduling, timing and what to expect on test day.
Certification Exam
About the MD-102 exam.
MD-102 Exam Readiness
Our students pass at a 98.8% rate across Accumentum courses. We'll get you ready for MD-102 the same way.
Per Microsoft, MD-102 is the exam for Microsoft 365 Certified: Endpoint Administrator Associate. Microsoft lists 100 minutes of exam time for associate exams like this one. You need a score of 700 or greater to pass. Microsoft sets the price by country and shows it on the exam page.
Full details are on the official certification page and the MD-102 study guide.
Accumentum is an independent training provider. We aren't a Microsoft partner and this isn't official Microsoft training. Microsoft sets exam content, prices and policies, so check learn.microsoft.com before you book.
Inside the Course
A closer look at each MD-102 domain.
The course starts with preparing infrastructure for devices. Choosing a device join type, Entra join, device enrollment, compliance policies, and Conditional Access tied to device health. Getting this right first makes everything after it easier.
Managing and maintaining devices is the biggest domain. You'll deploy Windows with Autopilot, manage configuration profiles, create update rings, feature updates and quality updates in Intune, and support macOS, iOS and Android. You'll also cover Windows 365 Cloud PCs and remote help.
The protect devices domain covers Defender for Endpoint, endpoint security policies, BitLocker and Windows security baselines. The app domain covers deploying and protecting apps, app protection policies and Microsoft 365 Apps updates.
The final domain is newer. Microsoft added automation, monitoring and reporting, including PowerShell, Microsoft Graph, Intune agents and Security Copilot. We show how these tools save time when you manage thousands of devices instead of a handful.
MD-102 is the most hands-on exam in this group, and we teach it that way.
Study Plan
A study plan for MD-102 built from the study guide.
Time follows Microsoft's domain weights, so you study what the exam asks most.
Step 1: Prepare infrastructure for devices
Spend about 25% of your study time here. First, choose an appropriate device join type, including considerations such as device registration and Microsoft Entra join. Then configure enrollment for Android devices by integrating Intune with Samsung Knox Mobile Enrollment or Google zero-touch enrollment. Last, manage the membership of local groups on Windows devices by using Intune.
Step 2: Manage and maintain devices
Spend about 30% of your study time here. First, choose between Windows Autopilot deployment profiles and device preparation policies. Then target a profile by using assignment filters and enrollment time grouping. Last, collect device diagnostics and logs by using Microsoft Intune, including using the Troubleshooting blade for user-based diagnostics.
Step 3: Protect devices
Spend about 20% of your study time here. First, create antivirus policies by using Microsoft Intune. Then configure App Control for Business policies by using Microsoft Intune. Last, monitor device updates by using Intune.
Step 4: Manage and secure applications
Spend about 20% of your study time here. First, prepare applications for deployment by using Intune. Then manage Microsoft 365 Apps by using the Microsoft 365 Apps admin center. Last, plan and implement app configuration policies for managed apps and managed devices.
Step 5: Optimize endpoint operations by using automation, monitoring, and reporting
Spend about 15% of your study time here. First, automate Intune management tasks by using PowerShell and Microsoft Graph. Then implement reporting and data visibility in Microsoft Intune, including customizing reports and filters, using workbooks and dashboards, and exporting reporting data. Last, configure alerts and notifications for policy and compliance changes, including setting up alert rules for compliance drift, enrollment failures, and configuration conflicts.
Step 6: Review and book
Take Microsoft's free practice assessment, review the domains you scored lowest in, and book the exam once you're scoring well.
Official Resources
Where to check MD-102 facts on Microsoft Learn.
Microsoft changes exams often. These are the pages we teach from.
Exam Domains
How Microsoft weights the MD-102 exam.
From the official MD-102 study guide. Bigger domains get more questions.
Prepare infrastructure for devices
20 to 25% of the exam. 18 skills listed by Microsoft.
Manage and maintain devices
25 to 30% of the exam. 27 skills listed by Microsoft.
Protect devices
15 to 20% of the exam. 15 skills listed by Microsoft.
Manage and secure applications
15 to 20% of the exam. 12 skills listed by Microsoft.
Optimize endpoint operations by using automation, monitoring, and reporting
10 to 15% of the exam. 11 skills listed by Microsoft.
Exam and Course Format
What test day and class look like for MD-102.
MD-102 is a associate level exam. Microsoft lists 100 minutes of exam time for associate exams like this one. Microsoft scores exams from 1 to 1000 and you need 700 or greater to pass.
You can book MD-102 through the exam page on Microsoft Learn, where Microsoft shows the price for your country and the delivery options it offers. Microsoft also has a free exam sandbox there so you can see the question layout before test day.
Our course runs instructor-led. We teach each domain in study guide order, practice the tasks, and finish with review on the areas you miss most.
Career Paths
Where MD-102 fits in your career.
Endpoint administrator
Enroll, configure and secure devices with Intune.
Desktop support engineer
Move from fixing PCs one at a time to managing them at scale.
Microsoft 365 administrator
Own device compliance and app deployment.
Modern workplace engineer
Roll out Autopilot and Windows 365.
Funding and PathPay
Ways to pay for MD-102 training.
Accumentum is an Army CA and Air Force COOL Approved Vendor. If you're a soldier or airman, ask us whether Army Credentialing Assistance or Air Force COOL can fund this course for you.
PathPay lets you spread tuition into monthly payments instead of paying it all up front. You can see the plans on the PathPay page or ask us which plan fits this course.
Employers often pay for Microsoft training too. Ask us for a quote or invoice your company can use.
See PathPay plans, Army Credentialing Assistance training and Air Force COOL training.
Related Courses
Courses that pair well with MD-102.
Frequently Asked Questions
Common questions about our MD-102 course.
MD-102 is the exam for Microsoft 365 Certified: Endpoint Administrator Associate, a associate level credential. Details are on the official page at https://learn.microsoft.com/en-us/credentials/certifications/modern-desktop/
No. We're an independent training provider and we aren't a Microsoft partner. Our course follows Microsoft's public study guide. Microsoft offers free self-paced training on Microsoft Learn too.
Microsoft sets the price by country and shows it on the exam page when you pick your location. Check it there before you book.
Microsoft lists 100 minutes of exam time for associate exams like this one. A score of 700 or greater is needed to pass.
Fundamentals certifications don't expire. Associate, expert and specialty certifications are valid for one year and you renew for free online on Microsoft Learn.
Microsoft doesn't require another certification first, and we don't have enrollment prerequisites either. Experience with Windows and Microsoft 365 helps.
Instructor-led, with hands-on practice and exam prep. Ask us about upcoming class dates.
Windows and non-Windows devices managed with Microsoft Intune, per Microsoft's study guide.
Yes. Windows Autopilot is one of the deployment tools Microsoft lists for this role.
Five. Managing and maintaining devices is the biggest at 25 to 30%.
Yes. Microsoft lists a 12 month renewal, done free with an online assessment on Microsoft Learn.
Accumentum is an Army CA and Air Force COOL Approved Vendor. If you're a soldier or airman, ask us whether Army Credentialing Assistance or Air Force COOL can fund this course for you.
PathPay lets you spread tuition into monthly payments instead of paying it all up front. You can see the plans on the PathPay page or ask us which plan fits this course.
Use the registration page linked below, or email info@accumentum.net and we'll follow up with dates and next steps.
Enrollment
Enroll in MD-102 training with Accumentum.
Enroll in our MD-102 course to get ready for the Endpoint Administrator Associate exam with instructor-led classes and hands-on practice.
For dates and next steps, use the registration page linked below or email info@accumentum.net.
Ready to start on MD-102?
Tell us your target date and we'll help you plan the path.