Microsoft Certified: 365 Endpoint Administrator (MD-102)

About Course

Microsoft Certified: Endpoint Administrator Associate (MD-102) is a professional certification from Microsoft that validates skills in deploying, managing, and securing endpoints in enterprise environments using Microsoft Intune, Microsoft Entra ID, and Windows 11. It focuses on device deployment, policy management, application deployment, security implementation, compliance monitoring, and troubleshooting endpoint issues. Candidates learn to configure and maintain devices across organizational networks while ensuring secure access and data protection. This certification is ideal for IT administrators and support professionals seeking expertise in modern desktop management and cloud-based endpoint administration. It demonstrates readiness for enterprise endpoint management roles.

Course Content

One On One Training

Module 1: Setting Up a Windows Client

Preparing to deploy a Windows client
Selecting a deployment tool based on requirements
Choosing between migration and rebuild
Selecting an imaging and/or provisioning strategy
Selecting a Windows edition based on requirements
Implement subscription-based activation
Plan and implement a Windows client deployment using Windows Autopilot
Configure device registration for Autopilot
Create, validate, and assign deployment profiles
Set up the Enrolment Status Page (ESP)
Deploy Windows devices using Autopilot
Troubleshoot an Autopilot deployment
Plan and implement a Windows client deployment using the Microsoft Deployment Toolkit (MDT)
Plan and implement an MDT deployment infrastructure
Create, manage, and deploy images
Monitoring and troubleshooting a deployment
Planning and configuring user state migration
Configuring remote management
Configuring remote assistance in Intune
Configuring Remote Desktop on a Windows client
Configuring Windows Admin Centre
Configuring PowerShell remoting and Windows Remote Management (WinRM)

Module 2: Managing Identity and Compliance Managing identity

Implementing user authentication on Windows devices, including Windows Hello for Business, passwordless, and token-based
Managing role-based access control (RBAC) for Intune
Registering devices in and connecting devices to Azure AD
Implementing the Intune Connector for Active Directory
Managing membership in local groups on Windows devices
Implementing and managing Local Administrative Passwords Solution (LAPS) for Azure AD
Implementing compliance policies for all supported device platforms with Intune
Set compliance policies to meet requirements Implement compliance policies
Implement conditional access policies that require compliance status
Manage notifications for compliance policies
Monitor device compliance
Troubleshoot compliance policies

Module 3: Managing, maintaining, and protecting devices Managing the device lifecycle in Intune

Configuring registration settings
Configuring automatic and bulk registration, including Windows, Apple, and Android
Configuring policy sets
Restarting, decommissioning, or deleting devices
Managing device configuration for all supported device platforms using Intune
Define configuration profiles to meet requirements
Implement configuration profiles
Monitor and troubleshoot configuration profile errors
Configure and implement Windows Kiosk mode
Configure and implement profiles on Android devices, including fully managed, dedicated, company-owned, and work profiles
Plan and implement Microsoft Tunnel for Intune
Monitor devices Monitor devices using Intune
Monitor devices using Azure Monitor
Analyse and respond to issues identified in Endpoint Analytics and Adoption Score
Manage device updates for all supported device platforms using Intune
Plan device updates
Create and manage update policies using Intune
Manage Android updates using configuration profiles
Monitor updates
Troubleshoot updates in Intune
Configure Windows client delivery optimisation

Module 4: Managing applications

Deploying and updating applications for all supported device platforms
Deploying applications using Intune
Configuring the deployment of Microsoft 365 apps using the Microsoft Office Deployment Tool or the Office Customisation Tool (OCT)
Managing Microsoft 365 apps via the Microsoft 365 Apps Admin Centre
Deploy Microsoft 365 apps using Intune
Configure policies for Office apps using Group Policy or Intune
Deploy apps to platform-specific app stores using Intune
Plan and implement app protection and app configuration policies
Plan and implement app protection policies for iOS and Android
Manage app protection policies
Implement conditional access policies for app protection policies
Plan and implement app configuration policies for managed apps and managed devices
Manage app configuration policies

About Course

What Will You Learn?

Course Content

One On One Training

Module 1: Setting Up a Windows Client

Preparing to deploy a Windows client

Selecting a deployment tool based on requirements

Choosing between migration and rebuild

Selecting an imaging and/or provisioning strategy

Selecting a Windows edition based on requirements

Implement subscription-based activation

Plan and implement a Windows client deployment using Windows Autopilot

Configure device registration for Autopilot

Create, validate, and assign deployment profiles

Set up the Enrolment Status Page (ESP)

Deploy Windows devices using Autopilot

Troubleshoot an Autopilot deployment

Plan and implement a Windows client deployment using the Microsoft Deployment Toolkit (MDT)

Plan and implement an MDT deployment infrastructure

Create, manage, and deploy images

Monitoring and troubleshooting a deployment

Planning and configuring user state migration

Configuring remote management

Configuring remote assistance in Intune

Configuring Remote Desktop on a Windows client

Configuring Windows Admin Centre

Configuring PowerShell remoting and Windows Remote Management (WinRM)

Module 2: Managing Identity and Compliance Managing identity

Implementing user authentication on Windows devices, including Windows Hello for Business, passwordless, and token-based

Managing role-based access control (RBAC) for Intune

Registering devices in and connecting devices to Azure AD

Implementing the Intune Connector for Active Directory

Managing membership in local groups on Windows devices

Implementing and managing Local Administrative Passwords Solution (LAPS) for Azure AD

Implementing compliance policies for all supported device platforms with Intune

Set compliance policies to meet requirements Implement compliance policies

Implement conditional access policies that require compliance status

Manage notifications for compliance policies

Monitor device compliance

Troubleshoot compliance policies

Module 3: Managing, maintaining, and protecting devices Managing the device lifecycle in Intune

Configuring registration settings

Configuring automatic and bulk registration, including Windows, Apple, and Android

Configuring policy sets

Restarting, decommissioning, or deleting devices

Managing device configuration for all supported device platforms using Intune

Define configuration profiles to meet requirements

Implement configuration profiles

Monitor and troubleshoot configuration profile errors

Configure and implement Windows Kiosk mode

Configure and implement profiles on Android devices, including fully managed, dedicated, company-owned, and work profiles

Plan and implement Microsoft Tunnel for Intune

Monitor devices Monitor devices using Intune

Monitor devices using Azure Monitor

Analyse and respond to issues identified in Endpoint Analytics and Adoption Score

Manage device updates for all supported device platforms using Intune

Plan device updates

Create and manage update policies using Intune

Manage Android updates using configuration profiles

Monitor updates

Troubleshoot updates in Intune

Configure Windows client delivery optimisation

Module 4: Managing applications

Deploying and updating applications for all supported device platforms

Deploying applications using Intune

Configuring the deployment of Microsoft 365 apps using the Microsoft Office Deployment Tool or the Office Customisation Tool (OCT)

Managing Microsoft 365 apps via the Microsoft 365 Apps Admin Centre

Deploy Microsoft 365 apps using Intune

Configure policies for Office apps using Group Policy or Intune

Deploy apps to platform-specific app stores using Intune

Plan and implement app protection and app configuration policies

Plan and implement app protection policies for iOS and Android

Manage app protection policies

Implement conditional access policies for app protection policies

Plan and implement app configuration policies for managed apps and managed devices

Manage app configuration policies