MD-102 study guide
MD-102 · Work through your exam, one topic at a time.
The Microsoft 365 Certified: Endpoint Administrator Associate credential is an intermediate-level, administrator-role certification for professionals who manage devices and client applications in a Microsoft 365 tenant using Microsoft Intune plus agentic tools and workflows. Candidates are expected to deploy and manage endpoints across platforms and device types, work at scale with Intune, Intune Suite, Windows Autopilot, Defender for Endpoint, Microsoft Entra ID, PowerShell, Microsoft Graph, and Windows 365, and handle identity, security, access, policies, updates, and apps. The role also involves optimizing endpoint operations through automation, monitoring, and reporting, and collaborating with architects, Microsoft 365 administrators, security administrators, and other workload administrators on modern workplace strategy. The exam is assessed across five areas: prepare infrastructure for devices; manage and maintain devices; protect devices; manage and secure applications; and optimize endpoint operations by using automation, monitoring, and reporting. The MD-102 study guide has 5 sections and about 1,323 words.
01Prepare infrastructure for devices
Every enrollment decision begins with how the device will be identified in Microsoft Entra ID. Microsoft Entra joined devices are cloud-first corporate devices.
276 words, about 1 min02Manage and maintain devices
Two policy families do different jobs. Configuration profiles (settings catalog, templates such as administrative templates, Wi-Fi/VPN, custom OMA-URI) change device state.
277 words, about 1 min03Protect devices
Protection combines identity, device, and threat controls. Conditional Access uses compliance and app protection signals to gate access.
274 words, about 1 min04Manage and secure applications
Intune supports Win32 (.intunewin), MSI line-of-business, Microsoft Store, Microsoft 365 Apps, Edge, web links, and mobile store or VPP apps. Win32 apps need an install command, detection rules (file, registry, or MSI product code), requirement rules, and optionally dependencies and supersedence.
248 words, about 1 min05Optimize endpoint operations by using automation, monitoring, and reporting
Intune collects inventory, compliance, configuration, and app data and exposes it through console reports, exportable report data, Microsoft Graph, and Log Analytics. Endpoint analytics adds startup performance, app reliability, and work-from-anywhere scores; it needs data collection enabled and a baseline period before scores stabilize.
248 words, about 1 min