Overview

Exam MD-102 Microsoft 365 Certified Endpoint Administrator Associate 2025 (Hotspot , Drag drop with full explanations details included )As a candidate for this exam, you have subject matter expertise managing devices and client applications in a Microsoft 365 tenant by using Microsoft Intune. You're responsible for:Implementing solutions for efficient deployment and management of endpoints on various operating systems, platforms, and device types.Implementing and managing endpoints at scale by using Microsoft Intune, Microsoft Intune Suite, Windows Autopilot, Microsoft Copilot for Security, Microsoft Defender for Endpoint, Microsoft Entra ID, Azure Virtual Desktop, and Windows 365.Implementing identity, security, access, policies, updates, and apps for endpoints.As an endpoint administrator, you collaborate with architects, Microsoft 365 administrators, security administrators, and other workload administrators to plan and implement a modern workplace strategy that meets the business needs of an organization.You must have experience with Microsoft Entra ID and Microsoft 365 technologies, including Intune, as well as strong skills and experience in deploying, configuring, and maintaining Windows client and non-Windows devices.Skills measured 1. Prepare infrastructure for devices Add devices to Microsoft Entra IDChoose an appropriate device join typeJoin devices to Microsoft Entra IDRegister devices to Microsoft Entra IDPlan and implement groups for devices in Microsoft Entra IDEnroll devices to Microsoft IntuneConfigure enrollment settingsConfigure automatic enrollment for Windows and bulk enrollment for iOS and AndroidConfigure enrollment profiles for Android devices, including fully managed, dedicated, corporate owned, and work profileImplement identity and complianceManage roles in IntuneImplement compliance policies for all supported device platforms by using IntuneImplement Conditional Access policies that require a compliance statusConfigure Windows Hello for BusinessImplement and manage Local Administrative Passwords Solution (LAPS) for Microsoft Entra IDManage the membership of local groups on Windows devices by using Intune2. Manage and maintain devices Deploy and upgrade Windows clients by using cloud-based toolsChoose between Windows Autopilot and provisioning packagesChoose a Windows Autopilot deployment modeApply a device name templateImplement Windows client deployment by using Windows AutopilotCreate an Enrollment Status Page (ESP)Plan and implement provisioning packagesPlan and implement device upgrades for Windows 11Implement a Windows 365 cloud PC deploymentPlan and implement device configuration profilesCreate device configuration profiles for Windows devices, including importing ADMX filesCreate device configuration profiles for Android devicesCreate device configuration profiles for iOS devicesCreate device configuration profiles for Mac OS devicesCreate device configuration profiles for Enterprise multi-session devicesTarget a profile by using filtersImplement Intune Suite add-on capabilitiesConfigure Endpoint Privilege ManagementManage applications by using the Enterprise App CatalogImplement Microsoft Intune Advanced AnalyticsConfigure Microsoft Intune Remote HelpIdentify use cases for Cloud PKIImplement Microsoft Tunnel for MAMPerform remote actions on devicesSync, restart, retire, or wipe devicesPerform bulk remote actionsUpdate Windows Defender security intelligenceRotate BitLocker recovery keysRun a device query by using KQL3. Manage applications Deploy and update appsPrepare applications for deployment by using IntuneDeploy apps by using IntuneDeploy Microsoft 365 Apps by using IntuneConfigure policies for Office appsDeploy Microsoft 365 Apps as part of a Windows Autopilot deployment by using the Microsoft Office Deployment Tool (ODT) or Office Customization Tool (OCT)Manage Microsoft 365 Apps by using the Microsoft 365 Apps admin centerDeploy apps from platform-specific app stores by using IntunePlan and implement app protection and app configuration policiesPlan and implement app protection policiesImplement Conditional Access policies for app protection policiesPlan and implement app configuration policies for managed apps and managed devices4. Protect devices Configure endpoint securityCreate antivirus policiesCreate disk encryption policiesCreate firewall policiesConfigure Attack surface reduction policiesPlan and implement security baselinesIntegrate Intune with Microsoft Defender for EndpointOnboard devices into Microsoft Defender for EndpointManage device updates by using IntunePlan for device updatesCreate and manage update rings by using IntuneCreate and manage update policies by using Intune, including iOS and Mac OSManage Android updates by using configuration profiles or firmware-over-the-air (FOTA) deploymentsConfigure Windows client delivery optimization by using IntuneMonitor updates

Skills

Reviews