MD-102: Microsoft 365 Endpoint Administrator

MD-102 Course: Microsoft 365 Endpoint Administrator

In this course, students will learn how to plan and execute an endpoint deployment strategy using contemporary deployment techniques and implementation of upgrade strategies. The course introduces current management essentials, co-management approaches, and Microsoft Intune integration. It covers application deployment, browser-based application management, and key security concepts such as authentication, identity, access, and compliance policies. Technologies such as Azure Active Directory, Azure Information Protection, and Microsoft Defender for Endpoint are explored to protect devices and data.

The course includes a certification exam and a bonus gift opportunity in virtual mode! *Promotion valid until August 31st, for customers in Spain only. Does not apply to self-learning mode.

Course aimed at

The Microsoft 365 Endpoint Administrator is responsible for deploying, configuring, securing, managing, and monitoring client devices and applications in an enterprise setting. Responsibilities include identity, access, policy, update, and application management. They work alongside the Microsoft 365 Enterprise Administrator to develop and execute a device strategy that aligns with a current organization's requirements. Microsoft 365 Endpoint Administrators should be familiar with Microsoft 365 workloads and possess extensive experience and skills deploying, configuring, and maintaining Windows 11 and later, as well as non- Windows devices. Their role emphasizes cloud services over on-premises management technologies.

Elements of the MD-102 formation

• Exploring Endpoint Management (4 units)

• Performing Device Enrollment (3 units)

• Configuring profiles for users and devices (3 units)

• Examine application management (3 units)

• Authentication and Compliance Management (4 units)

• Manage endpoint security (4 units)

• Implementation using local environment-based tools (3 units)

• Implementation using cloud-based tools (6 units)

MD-102 Course Content

Modules 1: Explore Endpoint Management

• Explore the enterprise desktop
• Explore Windows editions
• Understand Azure Active Directory (Enter ID)
• Manage Azure Active Directory (Entra ID) identities

Practice Labs:

• Managing Identities in Azure AD
• Synchronizing Identities by using Azure AD Connect

Module 2: Execute device enrollment

• Manage device authentication
• Enroll devices using Microsoft Configuration Manager
• Enroll devices using Microsoft Intune

Practice Labs:

• Configuring and managing Azure AD Join
• Manage Azure AD device registration
• Manage Device Enrollment into Intune
• Enrolling devices into Microsoft Intune

Module 3: Configure profiles for users and devices

• Execute device profiles
• Oversee device profiles
• Maintain user profiles

Practice Labs:

• Creating and Deploying Configuration Profiles
• Using a Configuration Profile to configure Kiosk mode
• Using a Configuration Profile to configure iOS and iPadOS Wi-Fi settings
• Using Group Policy Analytics to validate GPO support in Intune
• Monitor device and user activity in Intune

Module 4: Examine application management

• Execute mobile application management
• Deploy and update applications
• Administer endpoint applications

Practice Labs:

• Deploying cloud apps using Intune
• Configure App Protection Policies for Mobile Devices
• Deploy Apps using Microsoft Configuration Manager
• Deploy Apps using Microsoft Store for Business

Module 5: Manage authentication and compliance

• Protect identities in Azure Active Directory (Entra ID)
• Enable organizational access
• Implement device compliance
• Generate inventory and compliance reports

Practice Labs:

• Configuring Multi-factor Authentication
• Configuring Self-service password reset for user accounts in Azure AD
• Configuring and validating device compliance
• Creating device inventory reports

Module 6: Manage endpoint security

• Deploy device data protection
• Manage Microsoft Defender for Endpoint
• Manage Microsoft Defender in Windows client
• Manage Microsoft Defender for Cloud Apps

Practice Labs:

• Configure and Deploy Windows Information Protection Policies by using Intune
• Configuring Endpoint security using Intune
• Configuring Disk Encryption Using Intune

Module 7: Deploy using on-premises based tools

• Assess deployment readiness
• Deploy using the Microsoft Deployment Toolkit
• Deploy using Microsoft Configuration Manager

Practice Lab:

• Deploying Windows 11 using Microsoft Deployment Toolkit
• Deploying Windows 11 using Microsoft Configuration Manager

Module 8: Deploy using cloud-based tools

• Deploy Devices using Windows Autopilot
• Implement dynamic deployment methodsPlan a transition to modern endpoint management
• Manage Windows 365
• Manage Azure virtual desktop

Practice Labs:

• Deploying Windows 11 with Autopilot
• Refreshing Windows with Autopilot Reset and Self-Deploying mode

Prerequisites

The Modern Desktop Administrator should be familiar with Microsoft 365 workloads and have strong skills and experience deploying, configuring, and maintaining Windows 11 and later devices, as well as non-Windows devices.

Language

• Course: English / Spanish

• Labs: English / Spanish

Microsoft Associate Certification: Endpoint Administrator Associate

Microsoft 365 Certified: Endpoint Administrator Associate

Plan and execute an endpoint deployment strategy using essential elements of modern management, co-management approaches, and Microsoft Intune integration.

Level: Intermediate
Role: Administrator
Product: Microsoft 365
Subject: Modern Work