Study guide for Exam MD-102: Endpoint Administrator

Purpose of this document

This study guide should help you understand what to expect on the exam and includes a summary of the topics the exam might cover and links to additional resources. The information and materials in this document should help you focus your studies as you prepare for the exam.

Useful links	Description
How to earn the certification	Some certifications only require passing one exam, while others require passing multiple exams.
Certification renewal	Microsoft associate, expert, and specialty certifications expire annually. You can renew by passing a free online assessment on Microsoft Learn.
Your Microsoft Learn profile	Connecting your certification profile to Microsoft Learn allows you to schedule and renew exams and share and print certificates.
Exam scoring and score reports	A score of 700 or greater is required to pass.
Exam sandbox	You can explore the exam environment by visiting our exam sandbox.
Request accommodations	If you use assistive devices, require extra time, or need modification to any part of the exam experience, you can request an accommodation.
Take a free Practice Assessment	Test your skills with practice questions to help you prepare for the exam.

Updates to the exam

Our exams are updated periodically to reflect skills that are required to perform a role. We have included two versions of the Skills Measured objectives depending on when you are taking the exam.

We always update the English language version of the exam first. Some exams are localized into other languages, and those are updated approximately eight weeks after the English version is updated. While Microsoft makes every effort to update localized versions as noted, there may be times when the localized versions of an exam are not updated on this schedule. Other available languages are listed in the Schedule Exam section of the Exam Details webpage. If the exam isn't available in your preferred language, you can request an additional 30 minutes to complete the exam.

Note

The bullets that follow each of the skills measured are intended to illustrate how we are assessing that skill. Related topics may be covered in the exam.

Note

Most questions cover features that are general availability (GA). The exam may contain questions on Preview features if those features are commonly used.

Skills measured as of April 28, 2026

Audience profile

As a candidate for this exam, you have subject matter expertise managing devices and client applications in a Microsoft 365 tenant by using Microsoft Intune. You’re responsible for:

• Implementing solutions for efficient deployment and management of endpoints on various operating systems, platforms, and device types.

• Implementing and managing endpoints at scale by using Microsoft Intune, Microsoft Intune Suite, Windows Autopilot, Microsoft Security Copilot, Microsoft Defender for Endpoint, Microsoft Entra ID, Azure Virtual Desktop, and Windows 365.

• Implementing identity, security, access, policies, updates, and apps for endpoints.

As an endpoint administrator, you collaborate with architects, Microsoft 365 administrators, security administrators, and other workload administrators to plan and implement a modern workplace strategy that meets the business needs of an organization.

You must have experience with Microsoft Entra ID and Microsoft 365 technologies, including Intune, as well as strong skills and experience in deploying, configuring, and maintaining Windows client and non-Windows devices.

Skills at a glance

• Prepare infrastructure for devices (25–30%)

• Manage and maintain devices (30–35%)

• Manage applications (15–20%)

• Protect devices (15–20%)

Prepare infrastructure for devices (25–30%)

Add devices to Microsoft Entra ID

• Choose an appropriate device join type

• Join devices to Microsoft Entra ID

• Register devices to Microsoft Entra ID

• Plan and implement groups for devices in Microsoft Entra ID

Enroll devices to Microsoft Intune

• Configure enrollment settings

• Configure automatic enrollment for Windows and bulk enrollment for iOS/iPadOS and Android

• Configure enrollment profiles for Android devices, including fully managed, dedicated, corporate owned, and work profile

Implement identity and compliance

• Manage roles in Intune

• Implement compliance policies for all supported device platforms by using Intune

• Implement Microsoft Entra Conditional Access policies that require a compliance status

• Configure Windows Hello for Business

• Implement and manage Windows Local Administrator Password Solution (Windows LAPS)

• Manage the membership of local groups on Windows devices by using Intune

Manage and maintain devices (30–35%)

Deploy and upgrade Windows clients by using cloud-based tools

• Choose between Windows Autopilot and provisioning packages

• Choose a Windows Autopilot deployment mode

• Apply a device name template

• Implement Windows client deployment by using Windows Autopilot

• Create an Enrollment Status Page (ESP)

• Plan and implement provisioning packages

• Plan and implement device upgrades for Windows 11

• Implement a Windows 365 Cloud PC deployment

Plan and implement device configuration profiles

• Create device configuration profiles for Windows devices, including importing ADMX files

• Create device configuration profiles for Android devices

• Create device configuration profiles for iOS/iPadOS devices

• Create device configuration profiles for macOS devices

• Create device configuration profiles for Windows 11 Enterprise multi-session devices

• Target a profile by using filters

Implement Intune Suite add-on capabilities

• Configure Endpoint Privilege Management

• Manage applications by using the Enterprise App Catalog

• Implement Microsoft Intune Advanced Analytics

• Configure Microsoft Intune Remote Help

• Identify use cases for Microsoft Cloud PKI

• Implement Microsoft Tunnel for Mobile Application Management

Perform remote actions on devices

• Sync, restart, retire, or wipe devices

• Perform bulk remote actions

• Update Microsoft Defender Antivirus security intelligence

• Rotate BitLocker recovery keys

• Run a device query by using KQL

Manage applications (15–20%)

Deploy and update apps

• Prepare applications for deployment by using Intune

• Deploy apps by using Intune

• Deploy Microsoft 365 Apps by using Intune

• Configure policies for Office apps

• Deploy Microsoft 365 Apps as part of a Windows Autopilot deployment by using the Office Deployment Tool (ODT) or Office Customization Tool (OCT)

• Manage Microsoft 365 Apps by using the Microsoft 365 Apps admin center

• Deploy apps from platform-specific app stores by using Intune

Plan and implement app protection and app configuration policies

• Plan and implement app protection policies

• Implement Microsoft Entra Conditional Access policies for app protection policies

• Plan and implement app configuration policies for managed apps and managed devices

Protect devices (15–20%)

Configure endpoint security

• Create antivirus policies

• Create disk encryption policies

• Create firewall policies

• Configure Attack surface reduction policies

• Plan and implement security baselines

• Integrate Intune with Microsoft Defender for Endpoint

• Onboard devices into Microsoft Defender for Endpoint

Manage device updates by using Intune

• Plan for device updates

• Create and manage update rings by using Intune

• Create and manage update policies by using Intune, including iOS/iPadOS and macOS

• Manage Android updates by using configuration profiles or firmware-over-the-air (FOTA) deployments

• Configure Windows client Delivery Optimization by using Intune

• Monitor updates

Study resources

We recommend that you train and get hands-on experience before you take the exam. We offer self-study options and classroom training as well as links to documentation, community sites, and videos.

Study resources	Links to learning and documentation
Get trained	Choose from self-paced learning paths and modules or take an instructor-led course
Find documentation	Windows Documentation Windows client documentation for IT Pros Configure Windows client Windows client deployment resources and documentation Manage Windows client Windows security Windows Autopilot documentation Microsoft Intune documentation Microsoft Endpoint Manager documentation Windows application management
Ask a question	Microsoft Q&A | Microsoft Docs
Get community support	Windows - Microsoft Tech Community
Follow Microsoft Learn	Microsoft Learn - Microsoft Tech Community
Find a video	Exam Readiness Zone Browse other Microsoft Learn shows

Change log

The table below summarizes the changes between the current and previous version of the skills measured. The functional groups are in bold typeface followed by the objectives within each group. The table is a comparison between the previous and current version of the exam skills measured and the third column describes the extent of the changes.

Skill area prior to April 28, 2026	Skill area as of April 28, 2026	Change
Audience profile		Minor
Prepare infrastructure for devices	Prepare infrastructure for devices	No change
Add devices to Microsoft Entra	Add devices to Microsoft Entra ID	Minor
Enroll devices to Microsoft Intune	Enroll devices to Microsoft Intune	Minor
Implement identity and compliance	Implement identity and compliance	Minor
Manage and maintain devices	Manage and maintain devices	No change
Deploy and upgrade Windows clients by using cloud-based tools	Deploy and upgrade Windows clients by using cloud-based tools	Minor
Plan and implement device configuration profiles	Plan and implement device configuration profiles	Minor
Implement Intune Suite add-on capabilities	Implement Intune Suite add-on capabilities	Minor
Perform remote actions on devices	Perform remote actions on devices	Minor
Manage applications	Manage applications	No change
Deploy and update apps	Deploy and update apps	Minor
Plan and implement app protection and app configuration policies	Plan and implement app protection and app configuration policies	Minor
Protect devices	Protect devices	No change
Manage device updates by using Intune	Manage device updates by using Intune	Minor