
Master practical, cloud-first endpoint management for Windows devices in MD-102, using Intune, Autopilot, Defender, and Conditional Access, as you transition from Active Directory to modern cloud managed architectures.
Master modern endpoint management with MD-102, blending practical deployment, Autopilot, Intune, and Microsoft Defender protection to plan, provision, secure, and monitor devices across enterprise environments.
Configure a lab environment by creating a Microsoft 365 E5 trial and an Azure subscription tied to the tenant, enable MFA, and activate licenses and services in the admin centers.
Assess and plan Windows deployment by evaluating hardware and software readiness for Windows 10 and 11, using traditional image-based and modern cloud-based tools like Intune, Autopilot, and provisioning packages.
Explore deployment tools for Windows, contrasting traditional image-based methods such as Windows Deployment Services, MDT, and WIM with dynamic approaches like Windows Autopilot, Intune, and Entra ID Premium.
Deploy configuration changes on a running Windows system using provisioning packages created with Windows Configuration Designer. Learn to export PPKG files, apply at first boot, and verify via event logs.
Explore upgrade versus migration paths for Windows deployments, weighing in-place upgrades, clean installs, and data migration, with practical considerations for versions, leftovers, and enterprise tooling.
Explore how to migrate user profiles and preserve user state during Windows upgrades using USMT, ScanState and LoadState with MIG config files, and store migration data.
Compare Windows editions—Home, Pro, Pro for Workstations, Enterprise, and Education—and match them to business scenarios. Explore features like BitLocker, Remote Desktop, domain networking, MDM via Intune, virtualization, and LTSC considerations.
Explore cloud-based autopilot deployment concepts, from ideal OEM provisioning to repurposing existing devices. Learn to create deployment profiles, configure enrollment status pages, and troubleshoot with Intune and MDM workflows.
Create and assign Windows Autopilot deployment profiles in Intune, explaining user-driven and self-deploying modes, out-of-the-box experience options, and dynamic group assignment for autopilot devices.
Configure enrollment status pages in Intune to show setup progress during oobe and first sign-in. Manage ESP profiles and priorities, and control device access until apps and policies are installed.
Troubleshoot autopilot deployments by examining the out-of-the-box experience, Entra ID and Azure joins, Intune provisioning, and related events to identify and resolve issues.
Explore the Windows Assessment and Deployment Kit (WADK), boot and install images, and answer files, then learn to capture a reference computer image with MDT for Windows 10/11 deployments.
Customize a WinPE boot image with WADK and WinPE add-on for OS deployment, troubleshooting, and recovery; mount boot.wim with dism, add components, and build ISO or USB media with MakeWinPEMedia.
Create customized Windows install images with WADK, delivering thick, thin, or hybrid images via MDT or WDS, automating with answer files.
Explore configuration manager, now Microsoft Endpoint Configuration Manager, and Windows Deployment Services for zero-touch operating system deployment, remote management, and scalable deployments with collections and distribution points.
Explore remote management options for Windows 10/11, including MMC consoles, Windows Admin Center, PowerShell, Remote Desktop, remote assistance, Quick Assist, and Intune Remote Help, with setup tips and prerequisites.
Explore PowerShell remoting across Windows 11 and 10, using native remoting, Invoke-Command wrapping, and remote PowerShell sessions. Learn setup with WinRM, Enable-PSRemoting, and firewall considerations for domain-joined machines.
Master remote desktop to remotely control Windows machines for troubleshooting, access virtual machines, or manage servers, using NLA protected RDP, group policy, and gateway options.
Explore remote assistance for Windows networks, including Windows 10 and 11, enabling interactive troubleshooting by viewing and controlling a user's desktop with chat support and invitation-based or unsolicited sessions.
Explore Intune remote help, a quick assist-like remote support tool with RBAC permissions, compliance checks, and limited reporting, licensed via the Intune suite and deployed organization-wide.
Explore authentication fundamentals across Windows environments, including local and Active Directory accounts, Enter ID (Azure AD), passwordless options like Windows Hello, Authenticator, and FIDO2, plus cloud PKI certificates.
Learn to create and manage local Windows accounts on Windows 11, explore built in accounts, SAM, and tools like Settings, Group Policy Editor, and PowerShell.
Explore domain accounts in Windows, including domain controllers, Kerberos authentication, and how to join devices to a domain using settings, RSAT tools, and Active Directory.
Explore Entra ID as a cloud-based directory underpinning Office 365, and learn how Windows devices join, register, or hybrid join for single sign-on and conditional access.
Define a Microsoft Account and how it provides OneDrive, mail, calendar, and the Microsoft Store on Windows devices, and show creation, domain linking, and block Microsoft Accounts policy options.
Explore Windows Hello and Windows Hello for Business, enabling device-specific biometric and PIN-based authentication with FIDO standards, on-prem and cloud enrollment, and secure, local credential storage.
Explore passwordless sign-in with Microsoft Authenticator and FIDO2 security keys, including Azure setup, admin enablement, and the login flow using notification codes or key prompts.
Manage Windows user accounts and groups across local, domain, and cloud environments using Entra ID and Intune, with role-based access and local admin password solution (LAPS).
Manage local and cloud-based groups to control access through domain and security groups. Use Net.exe and PowerShell to manage group membership in EnterID and Intune.
Learn how user account control (UAC) uses limited and high security tokens to protect domain and local accounts, and configure UAC levels via control panel and group policy.
Explore rbac across Azure, EnterID, and Intune, defining roles as collections of permissions and groups as identities, with practical examples of role assignments.
Discover how Windows registry underpins policies, including Group Policy, Azure policy, and Intune policy, and learn registry structure, value types, regedit usage, backup, and distribution methods.
Explore how policies manage configuration, device and app settings, and corporate compliance across Windows, Android, iOS, and Mac OS, and how Intune, group policy, and CSPs shape enforcement.
Discover how group policy centralizes settings across local, site, domain, and organizational unit levels using the group policy management console; learn processing order, enforcement, and inheritance with filtering.
Troubleshoot local and network group policy settings using gpresult, group policy management console, and event logs; verify GPO processing, replication, and trust relationships.
Learn how to migrate group policy to mobile device management with Microsoft Intune by mapping GPOs to CSPs, using ADMX-backed policies, GPO analytics, and ADMX import.
Explore co-management of Windows devices using Configuration Manager and Intune, allocating workloads between the two, enabling hybrid Entra ID join and pilot testing before broader migration.
Learn how compliance policies and conditional access protect corporate data by enforcing device requirements, monitoring status, and enabling remediation via Intune and Azure AD.
Learn to create Microsoft Intune device compliance policies, configure key categories including system security and Defender for Endpoint, set non-compliance actions, and assign policies to Enter ID groups.
Explore how to monitor Intune compliance policies from the dashboard, monitor page, and reports. View device status, per policy and per setting, and understand enrollment requirements for devices in Intune.
Explore device-based and app-based conditional access that gate corporate resources after user authentication, using MFA, sign-in risk, location, and Intune-managed devices, with multiple policies requiring all conditions.
Create and test conditional access policies using Azure AD and Intune to protect Outlook on the web. Ensure devices are compliant and exclude specific users or groups as needed.
Learn how automatic Intune enrollment secures and manages Windows devices through Autopilot, hybrid join, co-management, and bulk enrollment, including device configuration, inventory, and remote lock and wipe.
Explore manual Intune enrollment for bring your own device and corporate devices via the settings applet, device enrollment manager, or company portal. Learn how EntroID auto-enrollment affects these options.
Explore how Intune exposes hardware and software inventory via overview and hardware pages, covering ownership, enrollment, compliance, device details, and data export to CSV or Power BI.
Master how to retire, wipe, delete, and reset devices in Intune, including Windows fresh start and lost or stolen device scenarios, while understanding enrollment and EnterID implications.
Prepare for the Microsoft MD-102 Endpoint Administrator certification and master modern Windows device management in real-world enterprise environments.
This comprehensive course teaches you how to deploy, secure, manage, and monitor Windows 10 and Windows 11 devices using Microsoft Intune, Entra ID, Windows Autopilot, Microsoft Defender, and Windows Update.
You will learn how to design and implement modern device deployment strategies, configure compliance and security policies, protect endpoints using advanced Defender features and how to:
• Plan and implement modern device deployment
• Configure compliance policies and Conditional Access
• Manage security baselines and Defender protections
• Deploy Win32 and Microsoft 365 applications
• Implement Mobile Application Management (MAM)
• Monitor devices using Endpoint Analytics and reporting tools
Beyond exam preparation, this course focuses heavily on real-world administration. You will build hands-on experience configuring update rings, security baselines, Attack Surface Reduction rules, device profiles, and app protection policies. You’ll also learn how to monitor devices using Endpoint Analytics, Azure Monitor, and Defender reporting tools.
Every section includes structured lessons, practical labs, and real administrative scenarios designed to build both exam readiness and job-ready skills.
Whether you are preparing for the MD-102 exam or working as an IT administrator managing Microsoft 365 environments, this course provides the technical depth and hands-on guidance needed to confidently manage endpoints at scale.