Skip to main content

Microsoft MD-102: Microsoft 365 Endpoint Administrator Associate

Intermediate13 Hours 6 Minutes94 Lesson Videos100 Test Questions

$249.00

Prepare for the Microsoft MD-102 exam and learn to enrol, configure and secure devices with Microsoft Intune. 13 hours 6 minutes of video across 94 lessons for IT staff who manage Microsoft 365 endpoints.

  • Login details sent straight after payment
  • Self-paced. Study on any device
  • StemBoss Certificate of Completion
  • 14-day refund promise

Secure checkout. Pay by card, Apple Pay or Google Pay.

Download the course outline (PDF)

Microsoft MD-102: Microsoft 365 Endpoint Administrator Associate is an online course that prepares you for the MD-102 exam from Microsoft. It is for IT staff who set up, manage and protect laptops, desktops, phones and apps in a Microsoft 365 organisation, mainly with Microsoft Intune. The course runs for 13 hours 6 minutes across 94 video lessons and includes 100 test questions.

What you will learn

  • The different device join types and how to add devices to Microsoft Entra ID
  • How to set enrolment rules and turn on automatic enrolment for Windows
  • How to deploy devices with Windows Autopilot and provisioning packages
  • How to build configuration profiles for different operating systems
  • How to deploy apps and set app protection policies in Microsoft Intune
  • How to apply security baselines and manage antivirus, firewall and disk encryption policies
  • How to connect Intune with Microsoft Defender for Endpoint
  • How to plan device updates and set compliance policies

Topics covered

The course follows the skill areas Microsoft lists for the MD-102 exam:

  1. Prepare infrastructure for devices: adding devices to Microsoft Entra ID, enrolling them in Intune, and setting up identity and compliance
  2. Manage and maintain devices: deploying and upgrading Windows with cloud tools, configuration profiles and remote actions
  3. Protect devices: endpoint security settings and managing device updates
  4. Manage and secure applications: deploying and updating apps, plus app protection and app configuration policies
  5. Monitor and report: keeping endpoints healthy through monitoring, reporting and automation

Who this course is for

  • IT professionals who want to specialise in endpoint management
  • System administrators who look after company devices and apps
  • IT support specialists moving into Microsoft 365 administration
  • Anyone preparing for the Microsoft MD-102 exam

It is a good fit if your company is moving from managing PCs on site to managing them from the cloud, and you need to learn how Intune, Autopilot and Entra ID work together.

Before you start

Microsoft writes this exam for people who already manage devices and apps in a Microsoft 365 tenant. You will get more from the course if you have used Windows in a work setting and have some idea of what Microsoft 365, Entra ID and Intune do. If you are new to Microsoft 365, a fundamentals course first will help.

About the MD-102 exam

The MD-102 exam is set by Microsoft. Passing it earns the Microsoft 365 Certified: Endpoint Administrator Associate certification. It checks that you can deploy, configure, protect and monitor devices and client apps at scale, using tools such as Microsoft Intune, Windows Autopilot, Microsoft Defender for Endpoint and Microsoft Entra ID. Microsoft updates the skills list from time to time, so check the official study guide on Microsoft Learn before you book.

Jobs this course supports

  • Microsoft 365 endpoint administrator
  • Device management administrator
  • System administrator
  • IT support specialist

Skill level

Intermediate
Duration

13 Hours 6 Minutes
Videos

94 Lesson Videos
Questions

100 Test Questions
Certification

Microsoft 365 Certified: Endpoint Administrator Associate
Exam code

MD-102
Certification body

Microsoft
Prerequisites

Some hands-on time with Windows devices, Microsoft 365 and Intune will help.
Best for

Endpoint administrators, IT support specialists, system administrators, device management administrators
Topics covered

Microsoft Entra ID join and enrolment, Windows Autopilot, configuration profiles, Intune app deployment, app protection, endpoint security, device updates, compliance policies
Format

Online video lessons, self-paced
Language

English
Certificate

StemBoss Certificate of Completion

What is inside this course

4 modules and 94 lessons. Here is the full outline.

Module 1 : Preparing Infrastructure for Devices16 lessons
  1. 0.0 Course Introduction
  2. 1.0 Module Overview
  3. 1.1 Choosing a Device Join Type
  4. 1.2 Joining Devices to Microsoft Entra ID
  5. 1.3 Registering Devices to Microsoft Entra ID
  6. 1.4 Groups for Devices in Microsoft Entra ID
  7. 1.5 Configuring Enrollment Settings
  8. 1.6 Configuring Automatic Enrollment for Windows
  9. 1.7 Configuring Bulk Enrollment for iOS and Android
  10. 1.8 Configuring Enrollment Profiles for Android Devices
  11. 1.9 Managing Roles in Intune
  12. 1.10 Implementing Compliance Policies using Intune
  13. 1.11 Implementing Conditional Access Policies
  14. 1.12 Configuring Windows Hello for Business
  15. 1.13 Implementing and Managing LAPS for Microsoft Entra ID
  16. 1.14 Managing Windows Local Groups using Intune
Module 2 : Managing and Maintaining Devices35 lessons
  1. 2.0 Module Overview
  2. 2.1 Choosing Between Windows Autopilot and Provisioning Packages
  3. 2.2 Choosing a Windows Autopilot Deployment Mode
  4. 2.3 Applying a Device Name Templates
  5. 2.3.1 Demo - Device Name Templates
  6. 2.4 Implementing Deployments by using Windows Autopilot
  7. 2.5 Creating an Enrollment Status Page (ESP)
  8. 2.5.1 Demo - Enrollment Status Page
  9. 2.6 Planning and Implementing Provisioning Packages
  10. 2.7 Planning and Implementing Device Upgrades for Windows 11
  11. 2.8 Implementing a Windows 365 Cloud PC Deployment
  12. 2.9 Creating Device Configuration Profiles for Windows Devices
  13. 2.9.1 Demo - Device Configuration Profile for Windows
  14. 2.10 Creating Device Configuration Profiles for Android Devices
  15. 2.10.1 Demo - Device Configuration Profile for Android
  16. 2.11 Creating Device Configuration Profiles for iOS devices
  17. 2.11.1 Demo - Device Configuration Profile for iOS and iPadOS
  18. 2.12 Creating Device Configuration Profiles for Mac OS devices
  19. 2.12.1 Demo - Device Configuration Profiles for macOS
  20. 2.13 Creating Device Configuration Profiles for Enterprise Multi-session Devices
  21. 2.13.1 Demo - Device Configuration for Multisesson Devices
  22. 2.14 Targeting a Profile using Filters
  23. 2.14.1 Demo - Targeting Profiles using Filters
  24. 2.15 Configuring Endpoint Privilege Management
  25. 2.15.1 Demo - Endpoint Privilege Management
  26. 2.16 Managing Applications by using the Enterprise App Catalog
  27. 2.16.1 Demo - Enterprise App Catalog
  28. 2.17 Implementing Microsoft Intune Advanced Analytics
  29. 2.18 Configuring Microsoft Intune Remote Help
  30. 2.19 Identifying Use Cases for Cloud PKI
  31. 2.20 Examining Microsoft Tunnel for MAM
  32. 2.21 Performing Remote Actions in Microsoft Intune
  33. 2.22 Updating Windows Defender Security Intelligence
  34. 2.23 Rotating BitLocker Recovery Keys
  35. 2.24 Running a Device Query by Using KQL
Module 3 : Managing applications20 lessons
  1. 3.0 Module Overview
  2. 3.1 Preparing Applications for Deployment by using Intune
  3. 3.2 Deploying Apps by using Intune
  4. 3.2.1 Demo - Deploying Apps in Intune
  5. 3.3 Deploying Microsoft 365 Apps by using Intune
  6. 3.3.1 Demo - Deploying Microsoft 365 Apps with Intune
  7. 3.4 Configuring Policies for Office Apps
  8. 3.4.1 Demo - Configuring Policies for Microsoft 365 Apps
  9. 3.5 Deploying MS365 Apps using ODT and OCT
  10. 3.5.1 - Demo - Using the ODT and OCT
  11. 3.6 Managing MS365 Apps using the Microsoft 365 Apps Admin Center
  12. 3.6.1 Demo - Examining the Microsoft 365 Apps Admin Center
  13. 3.7 Deploying Apps from Platform-specific App Stores using Intune
  14. 3.7.1 Demo - Deploying to Platform-specific App Stores
  15. 3.8 Planning and Implementing App Protection Policies
  16. 3.8.1 Demo - Implementing App Protection Policies
  17. 3.9 Implementing Conditional Access Policies for App Protection Policies
  18. 3.9.1 Demo - Conditional Access Policies for App Protection Policies
  19. 3.10 Planning and Implementing App Configuration Policies
  20. 3.10.1 Demo - Deploying App Configuration Policies
Module 4 : Protecting devices23 lessons
  1. 4.0 Module Overview
  2. 4.1 Creating Antivirus Policies
  3. 4.1.1 Demo – Creating Endpoint AV Policies
  4. 4.2 Creating Disk Encryption Policies
  5. 4.2.1 Demo – Creating Disk Encryption Policies
  6. 4.3 Creating Firewall Policies
  7. 4.3.1 Demo – Creating Endpoint Firewall Policies
  8. 4.4 Configuring Attack Surface Reduction Policies
  9. 4.4.1 Demo – Creating Attack Surface Reduction Policies
  10. 4.5 Planning and Implementing Security Baselines
  11. 4.5.1 Demo – Creating Security Baselines
  12. 4.6 Integrating Intune with Microsoft Defender for Endpoint
  13. 4.6.1 Demo - Integrating Intune with MDE
  14. 4.7 Onboarding Devices into Microsoft Defender for Endpoint
  15. 4.7.1 Demo - Onboarding Devices into MDE
  16. 4.8 Planning for Device Updates
  17. 4.9 Creating and Manage Update Rings Using Intune
  18. 4.9.1 Demo - Creating Update Ring Policies
  19. 4.10 Creating and Manage Update Policies by using Intune
  20. 4.10.1 Demo - Creating Update Policies in Intune
  21. 4.11 Managing Android Updates using Configuration Profiles
  22. 4.12 Configuring Windows Client Delivery Optimization using Intune
  23. 4.13 Course Outro

Your learning path

Where Microsoft MD-102: Microsoft 365 Endpoint Administrator Associate fits. Build your skills one step at a time.

Take firstMicrosoft 365 Fundamentals - MS-900Take firstMicrosoft SC-900: Security, Compliance & Identity Fundamentals
You are hereMicrosoft MD-102: Microsoft 365 Endpoint Administrator Associate
Next stepMicrosoft MD-101 - Managing Modern DesktopsNext stepMicrosoft MD-100 Certification: Windows 10Next stepMicrosoft Azure Administrator (AZ-104)

Frequently asked questions

What certification does the MD-102 exam lead to?

Passing MD-102 earns the Microsoft 365 Certified: Endpoint Administrator Associate certification from Microsoft.

Is Microsoft Intune covered in this course?

Yes. Intune runs through most of the course, from device enrolment and configuration profiles to app deployment, app protection and security policies.

Does the course cover Windows Autopilot?

Yes. You learn how to deploy and set up Windows devices with Windows Autopilot and with provisioning packages.

How does this course handle device security?

It covers security baselines, antivirus, firewall and encryption policies, compliance policies, and linking Intune with Microsoft Defender for Endpoint.

Is MD-102 a good next step after MS-900?

Yes. MS-900 gives you a broad view of Microsoft 365, and MD-102 builds on it with hands-on device and app management skills.

Do I get a certificate?

Yes. You get a StemBoss Certificate of Completion when you finish the course.

Can I get a refund?

Yes, within 14 days if you have completed less than 20% of the course. See our refund policy for details. Read the refund policy.

Related courses

$249.00
Buy course