Microsoft MD-102 Endpoint Administrator Associate Online Course

Course overview

The Microsoft MD-102: Microsoft 365 Endpoint Administrator Associate Online Course provides structured, professional training focused on managing, securing, and maintaining endpoint devices within a Microsoft 365 environment. This course delivers in-depth instruction on device enrollment, configuration, application deployment, compliance enforcement, and endpoint protection using Microsoft Intune, Microsoft Entra ID, and Microsoft Defender for Endpoint. Through a progressive module-based structure, participants gain practical administrative skills aligned with modern enterprise endpoint management requirements.

What you'll learn

Course Information

Course Name: Microsoft MD-102: Microsoft 365 Endpoint Administrator Associate Online Course
Training Format: Online, On-Demand Video Instruction
Total Video Hours: 13 Hours 6 Minutes
Total Videos: 94
Skill Level: Intermediate to Advanced
Focus Area: Microsoft 365 Endpoint Administration

This Microsoft MD-102 Online Course is designed to provide technical professionals with the operational knowledge required to manage enterprise devices and applications securely. The course follows the official MD-102 exam structure and reflects current Microsoft 365 endpoint management practices.

Included in This Course

13 hours and 6 minutes of in-depth video training
94 structured, on-demand video lessons
Coverage aligned with Microsoft MD-102 certification objectives
Step-by-step demonstrations using Microsoft Intune and Microsoft Entra ID
Practical configuration scenarios for Windows, macOS, iOS, Android, and multi-session devices
Instruction on security, compliance, and update management
Professional training suitable for enterprise environments

Full Course Outline

Module 1 : Preparing Infrastructure for Devices

0.0 Course Introduction
1.0 Module Overview
1.1 Choosing a Device Join Type
1.2 Joining Devices to Microsoft Entra ID
1.3 Registering Devices to Microsoft Entra ID
1.4 Groups for Devices in Microsoft Entra ID
1.5 Configuring Enrollment Settings
1.6 Configuring Automatic Enrollment for Windows
1.7 Configuring Bulk Enrollment for iOS and Android
1.8 Configuring Enrollment Profiles for Android Devices
1.9 Managing Roles in Intune
1.10 Implementing Compliance Policies using Intune
1.11 Implementing Conditional Access Policies
1.12 Configuring Windows Hello for Business
1.13 Implementing and Managing LAPS for Microsoft Entra ID
1.14 Managing Windows Local Groups using Intune

Module 2 : Managing and Maintaining Devices

2.0 Module Overview
2.1 Choosing Between Windows Autopilot and Provisioning Packages
2.2 Choosing a Windows Autopilot Deployment Mode
2.3 Applying a Device Name Templates
2.3.1 Demo - Device Name Templates
2.4 Implementing Deployments by using Windows Autopilot
2.5 Creating an Enrollment Status Page (ESP)
2.5.1 Demo - Enrollment Status Page
2.6 Planning and Implementing Provisioning Packages
2.7 Planning and Implementing Device Upgrades for Windows 11
2.8 Implementing a Windows 365 Cloud PC Deployment
2.9 Creating Device Configuration Profiles for Windows Devices
2.9.1 Demo - Device Configuration Profile for Windows
2.10 Creating Device Configuration Profiles for Android Devices
2.10.1 Demo - Device Configuration Profile for Android
2.11 Creating Device Configuration Profiles for iOS devices
2.11.1 Demo - Device Configuration Profile for iOS and iPadOS
2.12 Creating Device Configuration Profiles for Mac OS devices
2.12.1 Demo - Device Configuration Profiles for macOS
2.13 Creating Device Configuration Profiles for Enterprise Multi-session Devices
2.13.1 Demo - Device Configuration for Multisesson Devices
2.14 Targeting a Profile using Filters
2.14.1 Demo - Targeting Profiles using Filters
2.15 Configuring Endpoint Privilege Management
2.15.1 Demo - Endpoint Privilege Management
2.16 Managing Applications by using the Enterprise App Catalog
2.16.1 Demo - Enterprise App Catalog
2.17 Implementing Microsoft Intune Advanced Analytics
2.18 Configuring Microsoft Intune Remote Help
2.19 Identifying Use Cases for Cloud PKI
2.20 Examining Microsoft Tunnel for MAM
2.21 Performing Remote Actions in Microsoft Intune
2.22 Updating Windows Defender Security Intelligence
2.23 Rotating BitLocker Recovery Keys
2.24 Running a Device Query by Using KQL

Module 3 : Managing applications

3.0 Module Overview
3.1 Preparing Applications for Deployment by using Intune
3.2 Deploying Apps by using Intune
3.2.1 Demo - Deploying Apps in Intune
3.3 Deploying Microsoft 365 Apps by using Intune
3.3.1 Demo - Deploying Microsoft 365 Apps with Intune
3.4 Configuring Policies for Office Apps
3.4.1 Demo - Configuring Policies for Microsoft 365 Apps
3.5 Deploying MS365 Apps using ODT and OCT
3.5.1 Demo - Using the ODT and OCT
3.6 Managing MS365 Apps using the Microsoft 365 Apps Admin Center
3.6.1 Demo - Examining the Microsoft 365 Apps Admin Center
3.7 Deploying Apps from Platform-specific App Stores using Intune
3.7.1 Demo - Deploying to Platform-specific App Stores
3.8 Planning and Implementing App Protection Policies
3.8.1 Demo - Implementing App Protection Policies
3.9 Implementing Conditional Access Policies for App Protection Policies
3.9.1 Demo - Conditional Access Policies for App Protection Policies
3.10 Planning and Implementing App Configuration Policies
3.10.1 Demo - Deploying App Configuration Policies

Module 4 : Protecting devices

4.0 Module Overview
4.1 Creating Antivirus Policies
4.1.1 Demo – Creating Endpoint AV Policies
4.2 Creating Disk Encryption Policies
4.2.1 Demo – Creating Disk Encryption Policies
4.3 Creating Firewall Policies
4.3.1 Demo – Creating Endpoint Firewall Policies
4.4 Configuring Attack Surface Reduction Policies
4.4.1 Demo – Creating Attack Surface Reduction Policies
4.5 Planning and Implementing Security Baselines
4.5.1 Demo – Creating Security Baselines
4.6 Integrating Intune with Microsoft Defender for Endpoint
4.6.1 Demo - Integrating Intune with MDE
4.7 Onboarding Devices into Microsoft Defender for Endpoint
4.7.1 Demo - Onboarding Devices into MDE
4.8 Planning for Device Updates
4.9 Creating and Manage Update Rings Using Intune
4.9.1 Demo - Creating Update Ring Policies
4.10 Creating and Manage Update Policies by using Intune
4.10.1 Demo - Creating Update Policies in Intune
4.11 Managing Android Updates using Configuration Profiles
4.12 Configuring Windows Client Delivery Optimization using Intune
4.13 Course Outro

Microsoft MD-102: Microsoft 365 Endpoint Administrator Associate Online Course – Detailed Course Article

Endpoint management has become a critical responsibility for organizations operating in hybrid and cloud-based environments. The Microsoft MD-102: Microsoft 365 Endpoint Administrator Associate Online Course provides structured training focused on managing devices, applications, and security policies using Microsoft 365 technologies. This course addresses the operational demands of enterprise endpoint administration through technical instruction and real-world configuration scenarios.

Microsoft Intune and Microsoft Entra ID form the foundation of modern endpoint management. Effective administration requires a deep understanding of device enrollment, configuration profiles, compliance enforcement, and security integration. This Microsoft MD-102 Online Course presents these concepts through a structured, module-based approach aligned with enterprise requirements.

Preparing Infrastructure for Device Management

Endpoint administration begins with proper infrastructure preparation. Device join types, enrollment strategies, and identity integration directly affect security posture and manageability. The course explains how to evaluate and select appropriate device join methods, including Microsoft Entra ID join and device registration.

Enrollment configuration forms a critical part of infrastructure readiness. Automatic enrollment for Windows devices, bulk enrollment for mobile platforms, and enrollment profiles for Android devices are addressed in detail. These topics ensure consistent device onboarding across operating systems.

Managing device groups and role assignments within Intune supports scalable administration. Compliance policies and conditional access configurations reinforce security controls by ensuring that devices meet organizational standards before accessing resources.

Identity Protection and Secure Authentication

Modern endpoint security relies heavily on identity protection mechanisms. Windows Hello for Business configuration enables secure authentication using biometric and PIN-based credentials. The course explains how these features integrate with Microsoft Entra ID to strengthen identity security.

Local Administrator Password Solution (LAPS) management further enhances security by automating local administrator password rotation. Managing Windows local groups using Intune ensures consistent privilege control across enterprise devices.

Device Provisioning and Lifecycle Management

Device provisioning determines how quickly and securely users can access corporate resources. The Microsoft MD-102 Online Course explains the differences between Windows Autopilot and provisioning packages, helping administrators select appropriate deployment models.

Windows Autopilot deployment modes, device naming templates, and enrollment status pages are demonstrated to support consistent device setup. Planning device upgrades, including Windows 11 deployments and Windows 365 Cloud PC provisioning, ensures lifecycle continuity.

Configuration Profiles Across Platforms

Configuration profiles define device behavior and security settings. The course explains how to create and manage profiles for Windows, Android, iOS, macOS, and enterprise multi-session devices.

Targeting profiles using filters allows administrators to apply settings dynamically based on device attributes. Endpoint Privilege Management configuration further supports controlled elevation of privileges without compromising security.

Application Management and Deployment

Application availability directly affects productivity. The Microsoft MD-102: Microsoft 365 Endpoint Administrator Associate Online Course explains application preparation, deployment, and management using Microsoft Intune.

Enterprise App Catalog usage simplifies application distribution. Deployment of Microsoft 365 Apps using Intune, Office Deployment Tool (ODT), and Office Customization Tool (OCT) is covered in detail. Managing applications through the Microsoft 365 Apps Admin Center provides centralized visibility and control.

Application Protection and Conditional Access

Application protection policies safeguard corporate data on managed and unmanaged devices. The course explains how to plan and implement app protection and app configuration policies.

Conditional access integration ensures that applications adhere to organizational security requirements. These controls help prevent data leakage while maintaining user productivity.

Endpoint Security and Threat Protection

Protecting devices against threats is a core responsibility of endpoint administrators. The course explains antivirus, disk encryption, firewall, and attack surface reduction policies.

Security baselines provide standardized configurations aligned with Microsoft recommendations. Integrating Intune with Microsoft Defender for Endpoint enables advanced threat detection and response capabilities.

Onboarding devices into Microsoft Defender for Endpoint strengthens endpoint visibility and protection across the organization.

Update Management and Compliance

Device updates ensure security and performance. The course explains update planning, update rings, and update policies using Intune.

Managing Android updates and configuring Windows delivery optimization improves update efficiency. Compliance monitoring ensures that devices remain aligned with organizational standards.

Advanced Administration and Analytics

Advanced administrative tools enhance operational efficiency. Microsoft Intune Advanced Analytics provides insights into device health and performance. Remote Help functionality supports troubleshooting and user assistance.

Cloud PKI use cases, Microsoft Tunnel for mobile application management, remote actions, BitLocker recovery key rotation, and KQL-based device queries support advanced administrative scenarios.

Professional Value of MD-102 Certification Training

The Microsoft MD-102: Microsoft 365 Endpoint Administrator Associate Online Course supports individuals preparing for the MD-102 certification exam. Skills gained through this training apply directly to enterprise IT environments where secure endpoint management is essential.

Roles such as Microsoft 365 Endpoint Administrator, IT Support Specialist, System Administrator, and Device Management Administrator require proficiency in these technologies. Certification validation enhances professional credibility and operational effectiveness.