BEST Microsoft MD-102 Certification Training Institute | Emigo
ccna-banner-image

MD-102: Endpoint Administrator

Master the skills required to deploy, manage, and secure devices and applications in a Microsoft 365 environment as an Endpoint Administrator.

MD-102: Endpoint Administrator Certification Training

Emigo Networks offers comprehensive training for the MD-102: Endpoint Administrator course, designed to equip IT professionals with the skills to plan, deploy, and manage Windows client devices in an enterprise environment. This course focuses on configuring security, managing policies, and ensuring device compliance through Microsoft Endpoint Manager and related technologies. Learners will gain real-world expertise to effectively support modern desktop and device management strategies across hybrid workforces.

Course Overview

The MD-102 course focuses on preparing IT professionals to effectively deploy, manage, and secure Windows client endpoints in enterprise environments. You’ll learn to configure Windows security baselines, manage updates and applications, and implement advanced device provisioning. Training covers best practices for enrolling devices using Intune, managing compliance policies, and supporting remote users via Windows Autopatch. With hands-on labs and real-world scenarios, participants will gain practical expertise to excel in modern endpoint management and confidently pursue the MD-102 certification.

What You'll Learn

  • Plan, deploy, and configure Windows client devices using Autopilot and Intune
  • Implement and manage security baselines, BitLocker, and Windows Hello
  • Administer updates, software distribution, and endpoint analytics
  • Enforce device compliance policies and manage conditional access
  • Configure Microsoft Defender for Endpoint and threat protection
  • Support remote and hybrid users through Windows Autopatch
  • Troubleshoot deployment and device configuration issues
  • Prepare effectively for the MD-102 certification exam with practical exercises

Syllabus Summary

Prepare infrastructure for devices (25–30%)
a. Add devices to Microsoft Entra ID
  • Choose an appropriate device join type
  • Join devices to Microsoft Entra ID
  • Register devices to Microsoft Entra ID
  • Plan and implement groups for devices in Microsoft Entra ID
b. Enroll devices to Microsoft Intune
  • Configure enrollment settings
  • Configure automatic enrollment for Windows and bulk enrollment for iOS and Android
  • Configure enrollment profiles for Android devices, including fully managed, dedicated, corporate owned, and work profile
c. Implement identity and compliance
  • Manage roles in Intune
  • Implement compliance policies for all supported device platforms by using Intune
  • Implement Conditional Access policies that require a compliance status
  • Configure Windows Hello for Business
  • Implement and manage Local Administrative Passwords Solution (LAPS) for Microsoft Entra ID
  • Manage the membership of local groups on Windows devices by using Intune
Manage and maintain devices (30–35%)

a. Deploy and upgrade Windows clients by using cloud-based tools

  • Choose between Windows Autopilot and provisioning packages
  • Choose a Windows Autopilot deployment mode
  • Apply a device name template
  • Implement Windows client deployment by using Windows Autopilot
  • Create an Enrollment Status Page (ESP)
  • Plan and implement provisioning packages
  • Plan and implement device upgrades for Windows 11
  • Implement a Windows 365 cloud PC deployment

b. Plan and implement device configuration profiles

  • Create device configuration profiles for Windows devices, including importing ADMX files
  • Create device configuration profiles for Android devices
  • Create device configuration profiles for iOS devices
  • Create device configuration profiles for Mac OS devices
  • Create device configuration profiles for Enterprise multi-session devices
  • Target a profile by using filters

c. Implement Intune Suite add-on capabilities

  • Configure Endpoint Privilege Management
  • Manage applications by using the Enterprise App Catalog
  • Implement Microsoft Intune Advanced Analytics
  • Configure Microsoft Intune Remote Help
  • Identify use cases for Cloud PKI
  • Implement Microsoft Tunnel for MAM

d. Perform remote actions on devices

  • Sync, restart, retire, or wipe devices
  • Perform bulk remote actions
  • Update Windows Defender security intelligence
  • Rotate BitLocker recovery keys
  • Run a device query by using KQL
Manage applications (15–20%)

a. Deploy and update apps

  • Prepare applications for deployment by using Intune
  • Deploy apps by using Intune
  • Deploy Microsoft 365 Apps by using Intune
  • Configure policies for Office apps
  • Deploy Microsoft 365 Apps as part of a Windows Autopilot deployment by using the Microsoft Office Deployment Tool (ODT) or Office Customization Tool (OCT)
  • Manage Microsoft 365 Apps by using the Microsoft 365 Apps admin center
  • Deploy apps from platform-specific app stores by using Intune

b. Plan and implement app protection and app configuration policies

  • Plan and implement app protection policies
  • Implement Conditional Access policies for app protection policies
  • Plan and implement app configuration policies for managed apps and managed devices
Protect devices (15–20%)

a. Configure endpoint security

  • Create antivirus policies
  • Create disk encryption policies
  • Create firewall policies
  • Configure Attack surface reduction policies
  • Plan and implement security baselines
  • Integrate Intune with Microsoft Defender for Endpoint
  • Onboard devices into Microsoft Defender for Endpoint

b. Manage device updates by using Intune

  • Plan for device updates
  • Create and manage update rings by using Intune
  • Create and manage update policies by using Intune, including iOS and Mac OS
  • Manage Android updates by using configuration profiles or firmware-over-the-air (FOTA) deployments
  • Configure Windows client delivery optimization by using Intune
  • Monitor updates

Pre-requisites

  • Fundamental understanding of Microsoft 365 services
  • Familiarity with Windows client operating systems, such as Windows 10 or 11
  • Basic knowledge of networking, security, and device compliance concepts
  • Experience with Microsoft Endpoint Manager, Active Directory, and Azure Active Directory is beneficial
  • Prior experience in managing and configuring Windows-based environments within an enterprise setting is recommended
  • These foundational skills will help learners effectively grasp the concepts and perform the tasks covered in the course.

Required Exams

  • Exam Codes: MD-102: Endpoint Administrator
  • Length: 120 minutes
  • Registration fee: $165 USD (+taxes applicable)

Related Courses

experts-banner-background

EMIGO Expert Training Team

new-batch-mage

New Batches Commence On

Testimonials

enquiry-section1-bg
enquiry-form-model1

Learn like a Leader
Not a follower

Scan or Click on the QR Code to submit your enquiry

Enquiry
enquiry-section1-qrcode
footer-enquiry footer-enquiry