Modern Desktop Administrator
Associate (MD-102)
protection of enterprise client devices. You will learn to manage identity, security, access,
and applications across a Microsoft 365 environment using cutting-edge tools like Microsoft
Intune and Windows Autopilot.

Modern Desktop Administrator Associate (MD-102)
Candidates for this exam are IT professionals who have subject matter expertise in installing, configuring, and maintaining Microsoft Windows clients within a domain infrastructure. Responsibilities include protecting and maintaining the reliability of the Windows device and the data stored on the device. Candidates for this exam administer Windows clients in an Azure Active Directory environment. Candidates for this exam may collaborate with the Microsoft 365 enterprise administrator, the Microsoft 365 security administrator, and Windows Server administrators to implement a modern desktop and device strategy that meets the business needs of an organization.
Key Learning Specs
Level
Intermediate
Duration
90 Days
Experience
Azure AD/Intune Basics
Labs
Active & Passive Labs
Goal
MD-102 Exam Mastery
Training Details
Course Overview
This training program is tailored for IT professionals responsible for the deployment, configuration, protection, management, and monitoring of devices and client applications. You will gain deep subject matter expertise in administering Windows clients within a domain infrastructure and Azure Active Directory (Entra ID) environment. The course focuses on implementing modern endpoint strategies, managing identities, and ensuring security at scale using Microsoft Intune, Windows 365, and Windows Autopilot.
Skills gained:
- Install and configure Windows
- Configure and manage connectivity and storage
- Maintain Windows
- Protect devices and data
- Deploy Windows client
- Manage identity and access
- Manage compliance policies and configuration profiles
- Manage, maintain, and protect devices
- Manage apps
Course Outline
Module 1: Explore Endpoint Management
Lessons:
Lesson 1: Explore the enterprise desktop
Lesson 2: Explore Windows editions
Lesson 3: Understand Azure Active Directory (Entra ID)
Lesson 4: Manage Azure Active Directory (Entra ID) identities
Labs:
Lab 1: Managing Identities in Azure AD
Lab2: Using Azure AD Connect to connect AD DS to Azure AD.
Module 2: Execute device enrollment
Lessons:
Lesson 5: Manage device authentication
Lesson 6: Enroll devices using Microsoft Configuration Manager
Lesson 7: Enroll devices using Microsoft Intune
ring and managing Azure AD Join
Labs:
Lab 3: Configuring and managing Azure AD Join
Lab 4: Manage Azure AD device registration
Lab 5: Manage Device Enrollment into Intune
Lab 6: Enrolling Devices into Intune
Module 3: Configure profiles for users and devices
Lessons:
Lesson 8: Execute device profiles
Lesson 9: Oversee device profiles
Lesson 10: Maintain user profiles
Labs:
Lab 7: Creating and Deploying Configuration Profiles
Lab 8: Using a Configuring Profile to configure Kiosk mode
Lab 9: Using a Configuring Profile to configure iOS and iPadOS Wi-Fi settings
Lab 10: Using Group Policy Analytics to validate GPO support in Intune
Module 4: Examine application management
Lessons:
Lesson 11: Execute mobile application management
Lesson 12: Deploy and update applications
Lesson 13: Administer endpoint applications
Labs:
Lab 11: Deploying Cloud Apps using Intune
Lab 12: Configure App Protection Policies for Mobile Devices
Module 5: Manage authentication and compliance
Lessons:
Lesson 14: Protect identities in Azure Active Directory (Entra ID)
Lesson 15: Enable organizational access
Lesson 16: Implement device compliance
Lesson 17: Generate inventory and compliance reports
Labs:
Lab 13: Configuring Multi-Factor Authentication
Lab 14: Configuring Self-Service password reset
Lab 15: Configuring and validating Device Compliance
Module 6: Manage endpoint security
Lessons:
Lesson 18: Deploy device data protection
Lesson 19: Manage Microsoft Defender for Endpoint
Lesson 20: Manage Microsoft Defender in Windows client
Lesson 21: Manage Microsoft Defender for Cloud Apps
Labs:
Lab 16: Configuring Endpoint security using Intune
Lab 17: Configuring Disk Encryption using Intune
Module 7: Deploy using on-premises based tools
Lessons:
Lesson 22: Assess deployment readiness
Lesson 23: Deploy using the Microsoft Deployment Toolkit
Lesson 24: Deploy using Microsoft Configuration Manager
Labs:
Lab 18: Deploying Windows 10 using Microsoft Deployment Toolkit
Module 8: Deploy using cloud-based tools
Lessons:
Lesson 25: Deploy Devices using Windows Autopilot
Lesson 26: Implement dynamic deployment methods
Lesson 27: Plan a transition to modern endpoint management
Lesson 28: Manage Windows 365
Lesson 29: Manage Azure virtual desktop
Labs:
Lab 19: Deploying Windows with Autopilot
Lab 20:Refreshing Windows with Autopilot Reset and Self-Deploying mode
Audience profile
IT Professionals, System Administrators, Desktop Administrators, and Help Desk/Support staff.
Individuals tasked with implementing modern device strategies that meet organizational business needs
Pre-requisites
Experience with Azure AD (Entra ID) and Microsoft 365 technologies, including Intune.
Strong skills in deploying, configuring, and maintaining Windows client and non-Windows devices.