Microsoft 365 Endpoint Administrator Training (MD-102)

Course 8676

  • Duration: 5 days
  • Exam Voucher: Yes
  • Language: English
  • Level: Intermediate

In this Microsoft 365 Endpoint Administrator Training (MD-102) course, students will learn to plan and execute an endpoint deployment strategy using contemporary deployment techniques and implementing update strategies.

The course introduces essential elements of modern management, co-management approaches, and Microsoft Intune integration. It covers app deployment, management of browser-based applications, and key security concepts such as authentication, identities, access, and compliance policies. Technologies like Microsoft Entra, Azure Information Protection, and Microsoft Defender for Endpoint are explored to protect devices and data.

Endpoint Administrator Training (MD-102) Delivery Methods

  • In-Person

  • Online

Endpoint Administrator Training (MD-102) Information

In this course, you will learn how to:

  • Plan and execute an endpoint deployment strategy.
  • Deploy and manage applications.
  • Implement and manage security policies.
  • Configure and manage Microsoft Entra.
  • Manage device authentication.
  • Implement and manage mobile application management (MAM) policies.
  • Implement device compliance policies.
  • Manage Microsoft Defender for Endpoint.
  • Deploy using the Microsoft Deployment Toolkit (MDT) and Configuration Manager.
  • Manage Windows 365 and Azure Virtual Desktop.

Training Prerequisites

The Modern Desktop Administrator must be familiar with M365 workloads and must have strong skills and experience of deploying, configuring, and maintaining Windows 11 and later, and non-Windows devices.

Certification Information

This course can help you prepare for the following Microsoft role-based certification exam — Exam MD-102: Endpoint Administrator (beta).

Endpoint Administrator Training (MD-102) Outline

This module covers modern endpoint management and enterprise desktop lifecycle concepts. It teaches the lifecycle stages (planning, deployment, maintenance) and provides a foundation for future learning.

After completing this module, you'll be able to:

  • Describe the benefits of Modern Management.
  • Explain the enterprise desktop lifecycle model.
  • Describe considerations for planning hardware strategies.
  • Describe considerations for post-deployment and retirement.

This module covers Windows OS editions, features, and installation methods. Learners gain a deeper understanding of the available editions and corresponding installation processes.

After completing this module, you'll be able to:

  • Explain the differences between the different editions of Windows.
  • Select the most suitable Windows device for your needs.
  • Describe the minimum recommended hardware requirements for installing Windows 11.

This module teaches how to use Microsoft Entra effectively. You'll learn about RBAC, user roles, creating and managing users and groups, using PowerShell cmdlets, and synchronising objects from AD DS to Microsoft Entra.

After this module, you should be able to:

  • Describe RBAC and user roles in Microsoft Entra.
  • Create and manage users in Microsoft Entra.
  • Create and manage groups in Microsoft Entra.
  • Use Windows PowerShell cmdlets to manage Microsoft Entra.
  • Describe how you can synchronise objects from AD DS to Microsoft Entra.

In this module, you learn about device authentication and management in Microsoft Entra

After completing this module, you will be able to:

  • Describe Microsoft Entra join.
  • Describe Microsoft Entra join prerequisites, limitations and benefits.
  • Join device to Microsoft Entra.
  • Manage devices joined to Microsoft Entra.

This module introduces students to client deployment options and some high-level management and monitoring options available using Configuration Manager.

After completing this module, you will be able to:

  • Describe Microsoft Endpoint Manager.
  • Understand the advantages of managing a client with Configuration Manager.
  • Deploy the Configuration Manager client.
  • Monitor the Configuration Manager client.
  • Manage Configuration Manager devices.

Students will learn how to configure and set up Intune to manage Windows, Android, and iOS devices more efficiently.

After completing this module, you will be able to:

  • Prepare Microsoft Intune for device enrollment.
  • Configure Microsoft Intune for automatic enrollment.
  • Explain how to enroll Windows, Android and iOS devices in Intune.
  • Explain when and how to use Intune Enrollment Manager.
  • Understand how to monitor and perform remote actions on enrolled devices.

Students learn about the various types of device profiles and how to create and manage them.

After completing this module, you will be able to:

  • Describe the various types of device profiles in Intune.
  • Explain the difference between built-in and custom profiles.
  • Create and manage profiles.

This module introduces students to monitoring profiles to ensure correct assignments and resolving conflicts when multiple profiles are applied.

After completing this module, you will be able to:

  • Monitor the assignments of profiles.
  • Understand how profiles are synchronised and how to force synchronisation manually.
  • Use PowerShell to execute and monitor scripts on devices.

Students learn about the benefits of various Windows user profiles, how to manage them, and how to facilitate profile data synchronisation across multiple devices.

After completing this module, you will be able to:

  • Explain the various user profile types that exist in Windows.
  • Describe how a user profile works.
  • Configure user profiles to conserve space.
  • Explain how to deploy and configure Folder Redirection.
  • Explain Enterprise State Roaming.
  • Configure Enterprise State Roaming for Microsoft Entra devices.

This module introduces Mobile Application Management (MAM). Students will learn about considerations for implementing MAM and will be introduced to the management of MAM using Intune and Configuration Manager.

After this module, you should be able to:

  • Explain Mobile Application Management
  • Understand application considerations in MAM
  • Explain how to use Configuration Manager for MAM
  • Use Intune for MAM
  • Implement and manage MAM policies

In this module, you'll master deploying applications using Intune, Configuration Manager, Group Policy, and Microsoft Store Apps. These powerful tools and techniques will equip you to effectively manage and maintain diverse applications across your organisation.

After this module, you should be able to:

  • Explain how to deploy applications using Intune and Configuration Manager
  • Learn how to deploy applications using Group Policy
  • Understand Microsoft Store Apps
  • Learn how to deploy apps using Microsoft Store Apps
  • Learn how to configure Microsoft Store Apps

This module introduces you to managing apps on Intune-managed devices. The module will then conclude with an overview of how to use IE Mode with Microsoft Edge.

After this module, you should be able to:

  • Explain how to manage apps in Intune
  • Understand how to manage apps on non-enrolled devices
  • Understand how to deploy Microsoft 365 Apps using Intune
  • Learn how to configure and manage IE mode in Microsoft Edge
  • Learn about app inventory options in Intune

This module introduces students to the various authentication methods used to protect identities.

After this module, you should be able to:

  • Describe Windows Hello for Business
  • Describe Windows Hello deployment and management
  • Describe Microsoft Entra Identity Protection
  • Describe and manage self-service password reset in Microsoft Entra
  • Describe and manage multi-factor authentication

This module describes how clients can be configured to access organisational resources using a virtual private network (VPN).

After this module, you should be able to:

  • Describe how you can access corporate resources
  • Describe VPN types and configuration
  • Describe Always On VPN
  • Describe how to configure Always On VPN

This module describes how to use compliance and conditional access policies to help protect access to organisational resources.

After this module, you should be able to:

  • Describe the device compliance policy
  • Deploy a device compliance policy
  • Describe conditional access
  • Create conditional access policies

This module describes using Microsoft Endpoint Manager and Power BI to create compliance and custom reports.

After this module, you should be able to:

  • Generate inventory reports and Compliance reports using Microsoft Intune
  • Report and monitor device compliance
  • Create custom reports using the Intune Data Warehouse
  • Use the Microsoft Graph API for building custom reports

This module describes how you can use Intune to create and manage WIP policies that manage this protection. The module also covers implementing BitLocker and Encrypting File System.

After this module, you should be able to:

  • Describe Windows Information Protection
  • Plan for Windows Information Protection usage
  • Implement and use Windows Information Protection
  • Describe the Encrypting File System (EFS)
  • Describe BitLocker

This module explores using Microsoft Defender for Endpoint to provide additional protection and monitor devices against threats.

After this module, you should be able to:

  • Describe Microsoft Defender for Endpoint
  • Describe key capabilities of Microsoft Defender for Endpoint
  • Describe Microsoft Defender Application Guard
  • Describe Microsoft Defender Exploit Guard
  • Describe Windows Defender System Guard

This module explains the built-in security features of Windows clients and how to implement them using policies.

After this module, you should be able to:

  • Describe Windows Security capabilities
  • Describe Windows Defender Credential Guard
  • Manage Microsoft Defender Antivirus
  • Manage Windows Defender Firewall
  • Manage Windows Defender Firewall with Advanced Security

This module covers Microsoft Defender for Cloud Apps, focusing on securing sensitive data, its relevance in dynamic work settings, and effective utilisation for improved security posture.

After this module, you should be able to:

  • Describe Microsoft Defender for Cloud Apps
  • Plan for Microsoft Defender for Cloud Apps usage
  • Implement and use Microsoft Defender for Cloud Apps

Discuss some of the tools you can use to perform detailed assessments of existing deployments and describe some challenges you may face.

After completing this module, you will be able to:

  • Describe the guidelines for an effective enterprise desktop deployment.
  • Explain how to assess the current environment.
  • Describe the tools that you can use to assess your current environment.
  • Describe the methods of identifying and mitigating application compatibility issues.
  • Explain considerations for planning a phased rollout

Discusses the shifts from traditional to modern management and where on-premises solutions best fit in today's enterprise.

After completing this module, you will be able to:

  • Describe the fundamentals of using images in traditional deployment methods.
  • Describe the key benefits, limitations, and decisions when planning a deployment of - Windows using the Microsoft Deployment Toolkit (MDT).
  • Describe how Configuration Manager builds upon MDT and how both can work harmoniously.
  • Explain the different options and considerations when choosing the user interaction experience during deployment and which methods and tools support these experiences.

This module explains the ordinary day-to-day tasks that Administrators would use Configuration Manager to perform.

After completing this module, you'll be able to:

  • Describe the capabilities of Configuration Manager.
  • Describe the key components of Configuration Manager.
  • Describe how to troubleshoot Configuration Manager deployments

Use Autopilot to deploy new hardware or refresh existing hardware with the organisation's desired configuration without using the traditional imaging process.

After completing this module, you will be able to:

  • Explain the benefits of modern deployment for new devices.
  • Describe the process of preparing for an Autopilot deployment.
  • Describe the process of registering devices in Autopilot.
  • Describe the different methods and scenarios of Autopilot deployments.
  • Describe how to troubleshoot common Autopilot issues.
  • Describe the process of deployment using traditional methods

Use dynamic provisioning methods such as Subscription Activation, Provisioning packages, and Microsoft Entra join to reconfigure an existing operating system.

After completing this module, you will be able to:

  • Describe how Subscription Activation works.
  • Describe the benefits of Provisioning Packages.
  • Explain how Windows Configuration Designer creates Provisioning Packages.
  • Describe the benefits of using MDM enrollment with Microsoft Entra join.

Plan a transition to modern endpoint management

This module teaches managing Microsoft's cloud-based PC management solution, Windows 365, offering a personalised, secure Windows 11 experience from any device. Learn features, setup, management, security, deployment options, and licensing to optimise your environment.

After completing this module, you should be able to:

  • Describe the key features of Windows 365
  • Describe the Windows 365 management experience
  • Describe the Windows 365 security model
  • Describe the Windows 365 deployment options
  • Describe the Windows 365 licensing model

Learn to manage Azure Virtual Desktop, a cloud-based VDI solution providing personalised, secure Windows 11 experiences. Understand critical features, management, security, and deployment options for optimising your environment.

After completing this module, you should be able to:

  • Describe the key features of Azure Virtual Desktop
  • Describe the Azure Virtual Desktop management experience
  • Describe the Azure Virtual Desktop security model
  • Describe the Azure Virtual Desktop deployment options

Need Help Finding The Right Training Solution?

Our training advisors are here for you.

Endpoint Administrator Training (MD-102) FAQs

Candidates for this exam have subject matter expertise in deploying, configuring, protecting, managing, and monitoring devices and client applications in a Microsoft 365 environment. They manage identity, security, access, policies, updates, and apps for endpoints.

They implement solutions for efficient deployment and management of endpoints on various operating systems, platforms, and device types.

They implement and manage endpoints at scale by using Microsoft Intune, Windows 365, Windows Autopilot, Microsoft Defender for Endpoint, and Microsoft Entra.

Both the certification exam and the courseware are based on the Microsoft 365 Endpoint Administrator role.

A Microsoft 365 Endpoint Administrator is responsible for deploying, configuring, protecting, managing, and monitoring devices and client applications in a Microsoft 365 environment and On-premises.

They manage identity, security, access, policies, updates, and apps for endpoints and implement solutions for efficient deployment and management of endpoints on various operating systems, platforms, and device types. They work with other administrators to plan and implement a modern workplace strategy that meets the business needs of an organisation.

Candidates for this role must have experience with Microsoft Entra and Microsoft 365 technologies, including Intune, and must have strong skills in deploying, configuring, and maintaining Windows client and non-Windows devices.

Candidates for this exam have experience with Microsoft Entra and Microsoft 365 technologies, including Intune. They must have strong skills and experience in deploying, configuring, and maintaining Windows client and non-Windows devices.

Endpoint administrators collaborate with architects, Microsoft 365 administrators, security administrators, and other workload administrators to plan and implement a modern workplace strategy that meets the business needs of an organisation.

Candidates for this exam have experience with Microsoft Entra and Microsoft 365 technologies, including Intune. They must have in-depth skills and experience deploying, configuring, and maintaining Windows client and non-Windows devices.

Microsoft has renamed the Microsoft 365 Certified: Modern Desktop Administrator Associate certification to Microsoft 365 Certified: Endpoint Administrator Associate.

This updated certification name better reflects the professionals' focus in this role, as "endpoint" more accurately represents the range of devices they manage in their solutions. However, the associate level remains the same.

Yes, Microsoft has consolidated the previously required two exams into one, offering a more streamlined path to certification. The new exam, MD-102, will replace the previous exams, MD-100: Windows Client and MD-101: Managing Modern Desktops.

The previous exams, MD-100: Windows Client and MD-101: Managing Modern Desktops, are both retiring in July 2023. For further information, Microsoft recommends reading their update, titled "Evolving Microsoft 365 certifications help keep you in sync with the new era of work."

Please reach out to info@learningtree.com after your course to obtain your exam voucher.