Microsoft · certification · Guided course

Microsoft 365 Certified: Endpoint Administrator Associate

Deploy, secure, manage, and monitor Windows endpoints with Microsoft Intune and Microsoft Entra ID.

Daily study planConsideringInclude new MD-102 sections and checks in your daily goal.

Catalog noteThe July 24, 2026 skills remain the active English blueprint through October 26. Microsoft has announced an English-language update effective October 27, 2026; this route must be remapped at cutover.Provider catalog checked 2026-08-12.

Your course path

Start with the suggested objective

Open a section when you are ready to begin.

Course pace and remaining work

ApproachBuild in orderLearning; no professional IT experience yet

Core work left1845mRemaining short lesson blocks and checks · outside courses vary in length

Target paceNo deadlineSet a target below to calculate required weekly time

Prepare infrastructure for devicesNot started

1.1 · Add devices to Microsoft Entra ID.

4 short lesson blocks · next block about 15m

Block 1 · Microsoft Entra join · Microsoft Entra hybrid join · Microsoft Entra registration · dsregcmd /status

○Study lessonRequired ITForMe lesson ○Block check

Block 2 · Entra device settings · Entra device object · Dynamic device group

○Study lessonRequired ITForMe lesson ○Block check

Block 3 · Understand Device cleanup rule

○Study lessonRequired provider lesson ○Block check

Block 4 · Choose device identity from ownership and trust

○Study lessonRequired ITForMe lesson ○Block check

○Checkpoint · 70%+ ○Spaced review 0/3

Suggested byNov 5Start section →

Full course map12 other objectivesOpen when you want to review progress or look ahead

Prepare infrastructure for devicesNot started

1.2 · Enroll devices in Microsoft Intune.

4 short lesson blocks · next block about 15m

Block 1 · Android Enterprise enrollment profile · Enrollment restriction · Enrollment failure report

○Study lessonRequired ITForMe lesson ○Block check

Block 2 · Automatic MDM enrollment · Apple User Enrollment · Apple Business Manager integration · Android zero-touch enrollment

○Study lessonRequired ITForMe lesson ○Block check

Block 3 · Understand Corporate device identifier

○Study lessonRequired provider lesson ○Block check

Block 4 · Design enrollment from platform, ownership, and reset state

○Study lessonRequired ITForMe lesson ○Block check

○Checkpoint · 70%+ ○Spaced review 0/3

Suggested byNov 9Start section →

Prepare infrastructure for devicesNot started

1.3 · Implement identity and compliance for devices.

5 short lesson blocks · next block about 12m

Block 1 · Device compliance policy · Action for noncompliance

○Study lessonRequired ITForMe lesson ○Block check

Block 2 · Device-based Conditional Access · Compliance grace period

○Study lessonRequired ITForMe lesson ○Block check

Block 3 · Intune scope tag · Intune role-based access control

○Study lessonRequired provider lesson ○Block check

Block 4 · Device category · Intune assignment filter

○Study lessonRequired ITForMe lesson ○Block check

Block 5 · Separate administration scope, approval, compliance, and access

○Study lessonRequired ITForMe lesson ○Block check

○Checkpoint · 70%+ ○Spaced review 0/3

Suggested byNov 14Start section →

Manage and maintain devicesNot started

2.1 · Deploy and upgrade Windows clients using cloud-based tools.

7 short lesson blocks · next block about 12m

Block 1 · Autopilot deployment profile · Autopilot pre-provisioning

○Study lessonRequired provider lesson ○Block check

Block 2 · Deployment profile assignment · Autopilot diagnostics

○Study lessonRequired ITForMe lesson ○Block check

Block 3 · Understand Autopilot device preparation policy

○Study lessonRequired provider lesson ○Block check

Block 4 · Understand Windows 365 provisioning policy

○Study lessonRequired provider lesson ○Block check

Block 5 · Understand Windows 11 upgrade readiness

○Study lessonRequired ITForMe lesson ○Block check

Block 6 · Understand Windows Backup and Restore policy

○Study lessonRequired provider lesson ○Block check

Block 7 · Choose a cloud deployment path and prove each phase

○Study lessonRequired ITForMe lesson ○Block check

○Checkpoint · 70%+ ○Spaced review 0/3

Suggested byNov 21Start section →

Manage and maintain devicesNot started

2.2 · Plan and implement device configuration profiles.

3 short lesson blocks · next block about 18m

Block 1 · Settings catalog · Device configuration template · Custom OMA-URI profile · Administrative Templates (ADMX) settings

○Study lessonRequired ITForMe lesson ○Block check

Block 2 · Applicability rule · Configuration policy conflict · Per-setting status · Configuration profile assignment

○Study lessonRequired ITForMe lesson ○Block check

Block 3 · Resolve profile applicability and setting conflicts

○Study lessonRequired ITForMe lesson ○Block check

○Checkpoint · 70%+ ○Spaced review 0/3

Suggested byNov 25Start section →

Manage and maintain devicesNot started

2.3 · Implement Microsoft Intune Suite add-on capabilities.

9 short lesson blocks · next block about 18m

Block 1 · Understand Endpoint Privilege Management

○Study lessonRequired provider lesson ○Block check

Block 2 · Understand Remote Help

○Study lessonRequired provider lesson ○Block check

Block 3 · Understand Microsoft Tunnel for MAM

○Study lessonRequired provider lesson ○Block check

Block 4 · Understand Microsoft Cloud PKI

○Study lessonRequired provider lesson ○Block check

Block 5 · Understand Intune Advanced Analytics

○Study lessonRequired provider lesson ○Block check

Block 6 · Understand Enterprise App Management

○Study lessonRequired provider lesson ○Block check

Block 7 · Understand Microsoft Intune Suite

○Study lessonRequired provider lesson ○Block check

Block 8 · Understand Specialty device management

○Study lessonRequired ITForMe lesson ○Block check

Block 9 · Implement Intune Suite capabilities through their real dependencies

○Study lessonRequired ITForMe lesson ○Block check

○Checkpoint · 70%+ ○Spaced review 0/3

Suggested byDec 5Start section →

Manage and maintain devicesNot started

2.4 · Perform remote actions on devices.

7 short lesson blocks · next block about 18m

Block 1 · Collect diagnostics · Intune troubleshooting pane

○Study lessonRequired ITForMe lesson ○Block check

Block 2 · Sync remote action · Restart remote action · Wipe remote action · Retire remote action

○Study lessonRequired provider lesson ○Block check

Block 3 · Bulk remote action · Remote lock · Defender security-intelligence update

○Study lessonRequired provider lesson ○Block check

Block 4 · Understand BitLocker key rotation

○Study lessonRequired provider lesson ○Block check

Block 5 · Understand Local administrator password rotation

○Study lessonRequired provider lesson ○Block check

Block 6 · Understand KQL device query

○Study lessonRequired provider lesson ○Block check

Block 7 · Choose a remote action from intent and destruction boundary

○Study lessonRequired provider lesson ○Block check

○Checkpoint · 70%+ ○Spaced review 0/3

Suggested byDec 12Start section →

Protect devicesNot started

3.1 · Configure endpoint security.

4 short lesson blocks · next block about 12m

Block 1 · Security baseline · Endpoint detection and response policy

○Study lessonRequired provider lesson ○Block check

Block 2 · Microsoft Defender Antivirus policy · Microsoft Defender Firewall policy · Attack surface reduction rules

○Study lessonRequired provider lesson ○Block check

Block 3 · Disk encryption policy · Account protection policy · Windows LAPS policy

○Study lessonRequired ITForMe lesson ○Block check

Block 4 · Build endpoint protection from prevention through investigation

○Study lessonRequired ITForMe lesson ○Block check

○Checkpoint · 70%+ ○Spaced review 0/3

Suggested byDec 16Start section →

Protect devicesNot started

3.2 · Manage device updates.

6 short lesson blocks · next block about 18m

Block 1 · Windows update ring · Feature update deployment · Quality update deployment · Pause updates

○Study lessonRequired ITForMe lesson ○Block check

Block 2 · Windows Hotpatch policy · Windows Autopatch · Uninstall quality update

○Study lessonRequired ITForMe lesson ○Block check

Block 3 · Driver update policy · Safeguard hold · Windows update report

○Study lessonRequired ITForMe lesson ○Block check

Block 4 · Understand Apple device update policy

○Study lessonRequired provider lesson ○Block check

Block 5 · Understand Android FOTA policy

○Study lessonRequired provider lesson ○Block check

Block 6 · Separate update rings, release targeting, and delivery evidence

○Study lessonRequired ITForMe lesson ○Block check

○Checkpoint · 70%+ ○Spaced review 0/3

Suggested byDec 22Start section →

Manage applicationsNot started

4.1 · Deploy and update applications.

5 short lesson blocks · next block about 15m

Block 1 · Required app assignment · Available app assignment · App installation status

○Study lessonRequired provider lesson ○Block check

Block 2 · Win32 app dependency · Win32 app supersedence · Win32 app detection rule · Win32 app requirement rule

○Study lessonRequired provider lesson ○Block check

Block 3 · Microsoft 365 Apps deployment · Office Deployment Tool · Managed platform app store

○Study lessonRequired ITForMe lesson ○Block check

Block 4 · Uninstall app assignment · Quiet Time policy

○Study lessonRequired ITForMe lesson ○Block check

Block 5 · Deploy applications through applicability, detection, relationships, and evidence

○Study lessonRequired ITForMe lesson ○Block check

○Checkpoint · 70%+ ○Spaced review 0/3

Suggested byDec 28Start section →

Manage applicationsNot started

4.2 · Plan and implement app protection and app configuration policies.

4 short lesson blocks · next block about 12m

Block 1 · App protection policy · App data-transfer restriction

○Study lessonRequired provider lesson ○Block check

Block 2 · Managed-device app configuration · Managed-app configuration · Selective app wipe

○Study lessonRequired ITForMe lesson ○Block check

Block 3 · Conditional launch setting · App PIN requirement · App protection Conditional Access

○Study lessonRequired ITForMe lesson ○Block check

Block 4 · Protect organizational data at the app boundary

○Study lessonRequired ITForMe lesson ○Block check

○Checkpoint · 70%+ ○Spaced review 0/3

Suggested byJan 1Start section →

Optimize endpoint operations by using automation, monitoring, and reportingNot started

5.1 · Automate endpoint-management tasks.

4 short lesson blocks · next block about 18m

Block 1 · Microsoft Graph API · Microsoft Graph app-only authentication · Microsoft Graph Explorer · Microsoft Graph PowerShell

○Study lessonRequired ITForMe lesson ○Block check

Block 2 · Security Copilot performance analysis · Security Copilot threat investigation · Security Copilot recommendation review

○Study lessonRequired ITForMe lesson ○Block check

Block 3 · Understand Custom compliance script

○Study lessonRequired provider lesson ○Block check

Block 4 · Automate Intune safely with Graph, PowerShell, and approvals

○Study lessonRequired ITForMe lesson ○Block check

○Checkpoint · 70%+ ○Spaced review 0/3

Suggested byJan 6Start section →

Optimize endpoint operations by using automation, monitoring, and reportingNot started

5.2 · Monitor and optimize endpoint health and performance.

5 short lesson blocks · next block about 12m

Block 1 · Endpoint analytics · Startup performance score · Intune operational reports

○Study lessonRequired ITForMe lesson ○Block check

Block 2 · Intune audit logs · Intune service health · Intune management alert · Intune report export

○Study lessonRequired ITForMe lesson ○Block check

Block 3 · Application reliability report · Endpoint health score · Intune Remediations · Endpoint operational baseline

○Study lessonRequired ITForMe lesson ○Block check

Block 4 · Understand Intune device query

○Study lessonRequired provider lesson ○Block check

Block 5 · Turn reports and endpoint analytics into measured remediation

○Study lessonRequired ITForMe lesson ○Block check

○Checkpoint · 70%+ ○Spaced review 0/3

Suggested byJan 11Start section →

★

Course progression checks

Complete these quizzes and labs to finish the guided course. The readiness checklist below has additional requirements. Course completion does not predict your exam result.

○Pass both current-profile 90-question final forms at 85%+ within 180 days○Pass 5 distinct current in-browser scenarios whose mapped content spans 5 exam domains at 70%+ within 180 days

Open practice →

Optional learning resources1 choiceOpen for another teacher, format, or question review

Optional

Another explanation or review

Hosted study uses small official Learn unit sets plus ITForMe checks; tenant-based external labs are not assigned. These resources do not change course progress or readiness.

Microsoft LearnOfficial Learning Paths · Free

Manage and secure Microsoft 365 endpoints by using Intune

The learning modules are free. Hands-on work may require access to an Intune-capable tenant or subscription.

Self-paced course · Free modules; optional paid instruction

Open resource ↗

Checked 2026-08-18 · review due 2027-02-14