MD-102 Endpoint Administrator Study Guide

Exam Overview

The MD-102: Endpoint Administrator certification validates your ability to manage and protect devices that join an organization, including Windows 10/11 clients, mobile devices, and virtual desktops. It is designed for IT professionals who deploy, configure, secure, manage, monitor, and update devices in enterprise environments using Microsoft Intune and related technologies.

Exam Domains

• Manage identities, access, and authentication for devices and users.
• Deploy and configure applications, settings, and profiles across endpoints.
• Monitor device compliance, health, and performance metrics.
• Protect devices against threats using security policies and endpoint protection.
• Troubleshoot and resolve issues related to device management and connectivity.

Key Concepts & Common Difficulties

• Intune Policy Conflict Resolution: Candidates often struggle when multiple configuration profiles apply to the same setting. The correct approach is to understand profile precedence rules, specifically that custom profiles override template-based ones, and higher-weighted profiles take priority.
• Conditional Access vs. Compliance Policies: Many confuse when to use Conditional Access (access control at sign-in) versus Compliance Policies (device state). Remember that Compliance Policies determine if a device is healthy, while Conditional Access enforces actions based on that status or other signals like location.
• Autopilot Deployment Scenarios: Understanding the difference between Azure AD Join and Hybrid Azure AD Join is critical. Misinterpreting the prerequisite of Active Directory integration for Hybrid Join is a common error; ensure you know which scenario requires on-premises infrastructure.
• Security Baselines and Templates: Selecting the right security baseline (e.g., Windows 10/11 Security Baseline) and knowing how to customize them without breaking functionality is difficult. Focus on understanding the default settings and how to safely modify specific keys for organizational needs.
• Troubleshooting Sync Issues: When devices fail to sync with Intune, candidates often overlook basic network prerequisites. Always verify proxy settings, firewall rules, and certificate trust before diving into complex Intune logs.

Study Strategy

1. Prerequisites: Ensure you have foundational knowledge from MD-101 or equivalent experience in endpoint management. Familiarity with Azure Active Directory and Microsoft 365 is essential. 2. Study Order: Start with Identity and Access Management, then move to Application Deployment, followed by Device Configuration and Security. Finish with Monitoring and Troubleshooting to tie everything together. 3. Hands-On Practice: Set up a free Microsoft 365 developer account or use a trial tenant. Create groups, assign policies, and simulate Autopilot deployments to reinforce theoretical knowledge. 4. Review Official Documentation: Prioritize Microsoft Learn modules and official exam skills measured documents over third-party summaries to ensure accuracy. 5. Exam-Day Tips: Read questions carefully, especially those involving "best" or "recommended" actions. Eliminate obviously incorrect options first, and watch out for time-sensitive scenarios where immediate action is required.