MD-102 Microsoft 365 Endpoint Administrator Training

Certification: Microsoft 365 Certified: Endpoint Administrator Associate

Dynamics Edge courses and labs are enhanced Instructor-Led Training (ILT) materials designed specifically for live, guided instruction and follow a structured curriculum.

Our materials are intentionally different from Microsoft Learn paths in both structure and flow to better prepare for actual work, answer questions, real-time engagement, and deeper learning.  Microsoft Learn paths are self-paced study resources

You will Learn:

• Deploy and Configure Windows Devices
• Manage Identity and Compliance
• Provision and Manage Devices with Microsoft Intune –
• Provision and Manage Devices with Microsoft Intune –
• Protect Devices and Data –
• Monitor and Troubleshoot Endpoint Issues
• Support the Transition to Modern Endpoint Management

Course Outline

Module 1: Explore the Enterprise Desktop

1. Examine the benefits of modern endpoint management
2. Understand the enterprise desktop lifecycle
3. Plan and purchase desktop hardware and software
4. Evaluate deployment strategies and models
5. Plan for application deployment, upgrades, and retirement

Module 2: Explore Windows Editions

1. Identify Windows client editions and capabilities
2. Select the appropriate Windows edition
3. Examine hardware requirements for deployment
4. Evaluate upgrade and license options
5. Compare enterprise licensing and servicing models

Module 3: Understand Microsoft Entra ID

1. Explore Microsoft Entra ID and its core functionality
2. Compare Microsoft Entra ID and Active Directory DS
3. Understand Entra ID as a cloud directory service
4. Distinguish between Entra ID P1 and P2 plans
5. Explore Microsoft Entra Domain Services

Module 4: Manage Microsoft Entra Identities

1. Understand role-based access control (RBAC)
2. Create and manage users and groups
3. Use Microsoft Graph PowerShell to manage identities
4. Synchronize objects from on-prem AD DS to Entra ID
5. Delegate permissions and configure dynamic groups

Module 5: Manage Device Authentication

1. Describe Microsoft Entra Join options
2. Review prerequisites and limitations of Entra Join
3. Join Windows devices to Microsoft Entra ID
4. Manage Entra-joined devices in the portal
5. Compare hybrid join vs. Microsoft Entra Join

Module 6: Enroll Devices Using Microsoft Configuration Manager

1. Deploy the Configuration Manager client
2. Monitor and verify client health
3. Manage client settings and compliance
4. Integrate with Intune for co-management
5. Troubleshoot client deployment issues

Module 7: Enroll Devices Using Microsoft Intune

1. Configure Intune for mobile device management
2. Define enrollment methods for Windows, iOS, and Android
3. Manage enrollment policies and the Device Enrollment Manager
4. Monitor and troubleshoot enrollment
5. Remotely manage enrolled devices

Module 8: Execute Device Profiles

1. Explore available Intune device profile templates
2. Create and assign device profiles
3. Configure security and compliance settings
4. Deploy custom device configurations
5. Evaluate device policy conflicts and resolution

Module 9: Oversee Device Profiles

1. Monitor assigned device profiles
2. Trigger and manage device sync operations
3. Use scripts to manage Intune devices
4. Troubleshoot policy deployment issues
5. Analyze device configuration status

Module 10: Maintain User Profiles

1. Examine local and roaming user profiles
2. Deploy folder redirection and user data management
3. Sync profiles using Enterprise State Roaming
4. Minimize user profile size and load times
5. Configure user state persistence across devices

Module 11: Execute Mobile Application Management

1. Understand mobile application management (MAM) scenarios
2. Prepare apps for protection policies
3. Implement app protection in Intune
4. Apply MAM without device enrollment
5. Manage app access and data control

Module 12: Deploy and Update Applications

1. Add and assign apps in Microsoft Intune
2. Deploy and manage Win32 apps
3. Configure app deployment using Configuration Manager
4. Use Microsoft Store for Business and Microsoft Store Apps
5. Publish and update corporate applications

Module 13: Administer Endpoint Applications

1. Manage Microsoft 365 Apps deployment with Intune
2. Support apps on non-enrolled devices
3. Use Intune to manage browser compatibility and app inventory
4. Configure Internet Explorer mode in Microsoft Edge
5. Track and report app deployment status

Module 14: Protect Identities in Microsoft Entra ID

1. Deploy and manage Windows Hello for Business
2. Use Microsoft Entra ID Protection features
3. Enable and configure multi-factor authentication
4. Implement self-service password reset
5. Monitor identity protection events

Module 15: Enable Organizational Access

1. Enable secure access to organizational resources
2. Configure VPN types and remote access settings
3. Deploy and manage Always On VPN
4. Integrate VPN with conditional access policies
5. Ensure seamless user access to enterprise applications

Module 16: Implement Device Compliance

1. Create and assign device compliance policies in Intune
2. Protect access to resources based on compliance status
3. Configure conditional access integration
4. Monitor compliance across platforms
5. Remediate non-compliant devices

Module 17: Generate Inventory and Compliance Reports

1. Generate enrolled device inventory in Intune
2. Monitor and report device compliance status
3. Build custom reports using Microsoft Graph API
4. Export and analyze compliance data
5. Automate reporting workflows

Module 18: Deploy Device Data Protection

1. Explore Windows Information Protection (WIP)
2. Plan and implement WIP policies
3. Use Encrypting File System (EFS) for file-level protection
4. Configure BitLocker for full disk encryption
5. Manage key recovery and BitLocker compliance

Module 19: Manage Microsoft Defender for Endpoint

1. Understand Microsoft Defender for Endpoint capabilities
2. Configure threat protection policies
3. Implement Application Control and Device Guard
4. Use Defender Application Guard for browser isolation
5. Explore Exploit Guard and System Guard features

Module 20: Manage Microsoft Defender in Windows Client

1. Use Windows Security Center for endpoint protection
2. Configure Microsoft Defender Antivirus settings
3. Manage Windows Defender Credential Guard
4. Configure the Defender Firewall
5. Use Advanced Security to define firewall rules

Module 21: Manage Microsoft Defender for Cloud Apps

1. Explore Microsoft Defender for Cloud Apps features
2. Plan and configure Cloud Apps integration
3. Implement security policies for cloud usage
4. Monitor shadow IT and risky behaviors
5. Automate alerts and remediation

Module 22: Assess Deployment Readiness

1. Follow Microsoft deployment planning guidelines
2. Use tools to assess application compatibility
3. Prepare the network and directory for deployment
4. Evaluate application remediation techniques
5. Plan and execute a deployment pilot

Module 23: Deploy Using the Microsoft Deployment Toolkit (MDT)

1. Compare traditional and modern deployment methods
2. Set up MDT for image-based deployments
3. Create and manage deployment shares and task sequences
4. Deploy images to client devices
5. Automate application and driver injection

Module 24: Deploy Using Microsoft Configuration Manager

1. Explore client deployment with Configuration Manager
2. Configure deployment components and site roles
3. Plan in-place upgrade paths and servicing
4. Manage task sequences and deployment collections
5. Monitor deployments and troubleshoot errors

Module 25: Deploy Devices Using Windows Autopilot

1. Understand Windows Autopilot deployment workflow
2. Prepare devices for Autopilot registration
3. Configure out-of-box experience (OOBE) customization
4. Implement profile assignment and deployment
5. Troubleshoot Autopilot scenarios

Module 26: Implement Dynamic Deployment Methods

1. Use subscription activation for licensing
2. Deploy Windows using provisioning packages
3. Configure Windows Configuration Designer
4. Automate Microsoft Entra join with MDM enrollment
5. Apply dynamic deployment in hybrid environments

Module 27: Plan Transition to Modern Endpoint Management

1. Understand co-management scenarios and benefits
2. Review prerequisites for co-management
3. Evaluate migration options and tools
4. Migrate user data and workloads
5. Plan modern endpoint management strategy

Module 28: Manage Windows 365

1. Explore Windows 365 cloud PC capabilities
2. Configure provisioning policies and licenses
3. Manage Windows 365 cloud PCs and users
4. Secure cloud PCs using policies
5. Monitor Windows 365 usage and performance

Module 29: Manage Azure Virtual Desktop (AVD)

1. Understand AVD components and architecture
2. Configure host pools, session hosts, and workspaces
3. Publish remote desktops and applications
4. Manage user access and security in AVD
5. Monitor performance and scale virtual desktop resources

Module 30: Explore Microsoft Intune Suite

1. Understand the scope of Microsoft Intune Suite features
2. Apply Zero Trust security with Intune tools
3. Implement Endpoint Privilege Management
4. Use Advanced Analytics and Remote Help
5. Deploy Microsoft Tunnel for secure mobile connectivity