MD-102 Endpoint Administrator Associate course with SIMS!

Download the Windows Server 2022 ISO from Microsoft or the exam lab practice site, right-click the link and save link as, and save the file to your desktop.

Discover how to install and configure Hyper-V on Windows, including requirements for professional or enterprise editions, enabling Hyper-V features, and opening Hyper-V manager to create virtual machines.

Download the Windows 11 ISO for a virtual machine from exam lab practice, choose English United States 64-bit edition, and follow the form steps to initiate the download.

Set up a personal lab with Microsoft 365 and Azure, obtain a free Office 365 E5 trial, activate Microsoft 365 E5, and explore optional Teams trials across regions.

Create a free Microsoft 365 and Azure trial account, verify with a phone number, navigate licensing and activation, and learn how to cancel the trial for hands-on admin practice.

Choose the right join type, including registered, joined, and hybrid joined, for devices in Microsoft Entra ID, balancing BYOD realities with enterprise control and Intune.

Register a personal device to Microsoft Entra ID to apply policy with limited control, and distinguish it from a joined device shown in portal.azure.com.

Plan and implement device groups in Microsoft Entra ID by creating a dynamic security group based on device OS type and version, enabling automatic Windows, Android, and iOS device inclusion.

Learn how to redo simulations after completing an assignment by following simple steps: go to summary, return to the assignment, open instructions, and access the simulation link anytime.

Explore Microsoft Intune, an MDM and MAM for enrolling and managing devices across Windows, iOS, macOS, Android, and Linux. See how it deploys apps and policies and replaces group policies.

Configure automatic and bulk enrollment across Windows, Apple, and Android using Intune, group policy, provisioning packages, Apple Configurator, and zero-touch enrollment.

Configure policy sets by grouping apps policies and other management objects in Intune. Deploy these objects to devices or users from a single place, aligning with a security baseline.

Explore how to view, search, and assign roles in the Microsoft 365 admin center, including IntraID roles, role groups, and permissions across Exchange Online, Intune, Defender XDR, and Purview.

Configure scope tags and scoped administration in Intune, create US and UK device and admin groups, and define custom roles to govern tagged devices and policies.

Learn how Intune compliance policies define rules to verify device settings, enforce criteria, generate reports, and block access for noncompliant devices, including pin, encryption, jailbroken or rooted, and health attestation.

Explore how conditional access uses signals from identities, devices, applications, and data to enforce zero-trust policies across Azure and Microsoft 365, including risk-based decisions, MFA, device compliance, and app protection.

Monitor device compliance in the Microsoft Intune portal, identify non-compliant devices, and generate or export reports on firewall, spyware, and antivirus status.

Discover Windows Hello for business, a passwordless sign-in using hardware backed by a TPM, managed with Intune to securely sign in on Windows devices.

Learn how to manage local group membership on Windows devices with Intune, granting admin rights across all devices via the Local User Group Membership policy, including sync and verification steps.

Create, validate, and assign autopilot deployment profiles by linking devices with device IDs to a dynamic security group, then enroll devices via Azure AD joined autopilot.

Discover how to deploy Windows devices with Autopilot by creating deployment profiles, running Sysprep for the out-of-box experience, and confirming device enrollment in Intune and Azure Active Directory.

Understand the Windows autopilot process flow, ensure profile download linked to device ID or group, and verify Azure AD join and Intune MDM enrollment with status page diagnostics.

Learn to create and deploy cross-platform configuration profiles with Microsoft Intune to manage certificates, VPN, Wi-Fi, and device restrictions across Windows, macOS, iOS, iPadOS, and Android.

Deploy Android Enterprise and iOS profiles with Intune, choose device types, apply restrictions (camera, screen capture, block in-app purchases, App Store), and assign via groups and scope tags.

Enable Microsoft Intune Advanced Analytics by provisioning licenses and creating a Windows health monitoring profile. Endpoint analytics collects health data, which can take over 24 hours to appear.

Configure remote help in Intune to enable operators to remotely assist Windows 10 and 11 devices through the remote help add-on license, with role-based access and port 443 connectivity.

Understand the Microsoft tunnel for Intune, a Linux container VPN gateway enabling on-premise access for iOS and Android with Azure AD authentication, conditional access, and split tunneling.

Explore how Intune manages enrolled devices with actions like retire, delete, wipe, restart, and sync, plus mobile remote lock and reset passcode on Windows, Android, and iOS.

Learn how to perform bulk actions on multiple devices in Intune by selecting all devices, choosing Windows, and applying actions such as delete, retire, wipe, or sync.

Configure and deploy Windows Defender security intelligence updates via Microsoft Intune, adjust antivirus settings, enable real-time and cloud protection, and apply policy assignments to protect devices.

demonstrates rotating BitLocker keys on a Windows device using Intune, with keys escrowed to Microsoft Entra ID or Active Directory, and old keys deleted after restart.

Explore KQL queries in Intune analytics to extract device details (BIOS, CPU, disk, system info) via device query; licensing is required, and multi-machine queries aren’t supported in Intune.

Explore how to create and deploy endpoint security policies in Microsoft Intune, including antivirus, firewall, EDR, and attack surface reduction, with Defender for Endpoint integration.

Microsoft Defender for Endpoint provides enterprise-grade security with threat and vulnerability management, attack surface reduction, and endpoint detection and response. Cloud analytics and threat intelligence enhance automated investigation and remediation.

Learn to onboard devices to Microsoft Defender for Endpoint and implement automated response by linking to Intune, assigning licenses, and creating an EDR policy for Windows devices.