Microsoft 365 Certified: Endpoint Administrator Associate course
Deploy, secure, manage, and monitor Windows endpoints with Microsoft Intune and Microsoft Entra ID.
Current scope and updates: The July 24, 2026 skills remain the active English blueprint through October 26. Microsoft has announced an English-language update effective October 27, 2026; this route must be remapped at cutover.
Open the course pathThese lessons and checks are currently available as preview study material. Each block names its required provider or ITForMe lesson; optional provider products may have their own costs.
How you will study
- Study one learning block. Use its assigned provider lesson when one has been verified. Where no suitable assignment has been verified, study the required ITForMe teaching. Other explanations and guided practice remain available for support.
- Confirm study and take its short check. Opening a page or provider link does not complete a block. A passing current check is required for course progress.
- Review and continue. Today suggests the next activity using your study and review history. Review helps you revisit earlier concepts while you learn new material.
Trace device identity, enrollment, assignment, policy evaluation, deployment, and reporting as separate stages.
Add devices to Microsoft Entra ID
This is a short excerpt of ITForMe concept notes. It shows the kind of explanation available here; it is not the complete lesson or a scored check.
- Microsoft Entra join
- Makes a work-owned device use a cloud identity as its primary organizational trust.
- Microsoft Entra hybrid join
- Keeps an on-premises domain join while registering the device with Microsoft Entra.
- Microsoft Entra registration
- Adds a workplace identity to a personally owned device without changing its primary sign-in trust.
- dsregcmd /status
- Displays Windows device-registration state, tenant details, and single sign-on status.
Applied practice: Build a small fictional pilot. Map each user, device, group, policy, and report before deciding where a failed deployment should be repaired.
Course topics
These are the current objective lessons in this course. Their presence describes the shipped study scope; it does not establish exam equivalence or independent approval.
Browse 13 objective lessons
- Add devices to Microsoft Entra ID
- Enroll devices in Microsoft Intune
- Implement identity and compliance for devices
- Deploy and upgrade Windows clients using cloud-based tools
- Plan and implement device configuration profiles
- Implement Microsoft Intune Suite add-on capabilities
- Perform remote actions on devices
- Configure endpoint security
- Manage device updates
- Deploy and update applications
- Plan and implement app protection and app configuration policies
- Automate endpoint-management tasks
- Monitor and optimize endpoint health and performance
Review status and preparation limits
0 of 13 objective lessons currently have named independent subject-matter review. Internal and automated checks are separate from that review. Question and practice-scenario review status is shown on those activities.
ITForMe is not affiliated with or endorsed by Microsoft. These original lessons and checks are not official exam questions, a vendor exam replica, or a pass predictor. Use the vendor's published requirements and additional practice to judge your preparation.
You can explore before signing in. Anonymous progress depends on this browser's session; clearing its site data can make saved work inaccessible. Sign in to keep progress with your account.