MD-102: Microsoft 365 Endpoint Administrator

The Microsoft 365 Endpoint Administrator is responsible for deploying, configuring, securing, managing, and monitoring client devices and applications in an enterprise setting. Responsibilities include identity, access, policy, update, and application management. They work alongside the Microsoft 365 Enterprise Administrator to develop and execute a device strategy that aligns with a current organization's requirements. Microsoft 365 Endpoint Administrators should be familiar with Microsoft 365 workloads and possess extensive experience and skills deploying, configuring, and maintaining Windows 11 and later, as well as non- Windows devices. Their role emphasizes cloud services over on-premises management technologies.

• Exploring Endpoint Management (4 units)

• Performing Device Enrollment (3 units)

• Configuring profiles for users and devices (3 units)

• Examine application management (3 units)

• Authentication and Compliance Management (4 units)

• Manage endpoint security (4 units)

• Implementation using local environment-based tools (3 units)

• Implementation using cloud-based tools (6 units)

Modules 1: Explore Endpoint Management

• Explore the enterprise desktop
• Explore Windows editions
• Understand Azure Active Directory (Enter ID)
• Manage Azure Active Directory (Entra ID) identities

Practice Labs:

• Managing Identities in Azure AD
• Synchronizing Identities by using Azure AD Connect

Module 2: Execute device enrollment

• Manage device authentication
• Enroll devices using Microsoft Configuration Manager
• Enroll devices using Microsoft Intune

Practice Labs:

• Configuring and managing Azure AD Join
• Manage Azure AD device registration
• Manage Device Enrollment into Intune
• Enrolling devices into Microsoft Intune

Module 3: Configure profiles for users and devices

• Execute device profiles
• Oversee device profiles
• Maintain user profiles

Practice Labs:

• Creating and Deploying Configuration Profiles
• Using a Configuration Profile to configure Kiosk mode
• Using a Configuration Profile to configure iOS and iPadOS Wi-Fi settings
• Using Group Policy Analytics to validate GPO support in Intune
• Monitor device and user activity in Intune

Module 4: Examine application management

• Execute mobile application management
• Deploy and update applications
• Administer endpoint applications

Practice Labs:

• Deploying cloud apps using Intune
• Configure App Protection Policies for Mobile Devices
• Deploy Apps using Microsoft Configuration Manager
• Deploy Apps using Microsoft Store for Business

Module 5: Manage authentication and compliance

• Protect identities in Azure Active Directory (Entra ID)
• Enable organizational access
• Implement device compliance
• Generate inventory and compliance reports

Practice Labs:

• Configuring Multi-factor Authentication
• Configuring Self-service password reset for user accounts in Azure AD
• Configuring and validating device compliance
• Creating device inventory reports

Module 6: Manage endpoint security

• Deploy device data protection
• Manage Microsoft Defender for Endpoint
• Manage Microsoft Defender in Windows client
• Manage Microsoft Defender for Cloud Apps

Practice Labs:

• Configure and Deploy Windows Information Protection Policies by using Intune
• Configuring Endpoint security using Intune
• Configuring Disk Encryption Using Intune

Module 7: Deploy using on-premises based tools

• Assess deployment readiness
• Deploy using the Microsoft Deployment Toolkit
• Deploy using Microsoft Configuration Manager

Practice Lab:

• Deploying Windows 11 using Microsoft Deployment Toolkit
• Deploying Windows 11 using Microsoft Configuration Manager

Module 8: Deploy using cloud-based tools

• Deploy Devices using Windows Autopilot
• Implement dynamic deployment methodsPlan a transition to modern endpoint management
• Manage Windows 365
• Manage Azure virtual desktop

Practice Labs:

• Deploying Windows 11 with Autopilot
• Refreshing Windows with Autopilot Reset and Self-Deploying mode

The Modern Desktop Administrator should be familiar with Microsoft 365 workloads and have strong skills and experience deploying, configuring, and maintaining Windows 11 and later devices, as well as non-Windows devices.

• Course: English / Spanish

• Labs: English / Spanish

Microsoft 365 Certified: Endpoint Administrator Associate

Plan and execute an endpoint deployment strategy using essential elements of modern management, co-management approaches, and Microsoft Intune integration.

Level: Intermediate
Role: Administrator
Product: Microsoft 365
Subject: Modern Work