All certifications
Certification prep · Microsoft

Microsoft MD-102 (Endpoint Administrator)

FHG University prepares you for this exam on the Device Management track. Here are the modules mapped to its published objectives, and the opening of one to read now.

Examination preparation — these exams are set and awarded by their issuers. FHG prepares you for them and cannot grant them.

The modules mapped to it

16 modules · about 21 h estimated in all

The 48-Hour Intune Setup Guide for Small BusinessesDevice Management · about 1 h 10 minObjective area: Prepare infrastructure for devicesPreview below
Windows Autopilot & Provisioning Deep DiveDevice Management · about 1 h 25 minObjective area: Prepare infrastructure for devices · Manage and maintain devicesMembers
Windows 365 Cloud PC: Provisioning, Networking & Image ManagementDevice Management · about 1 h 10 minObjective area: Prepare infrastructure for devicesMembers
Entra Device Identity: Join Types & Dynamic Device GroupsDevice Management · about 1 h 5 minObjective area: Prepare infrastructure for devicesMembers
Device Configuration Profiles Across Windows, iOS, Android & macOSDevice Management · about 1 h 15 minObjective area: Manage and maintain devicesMembers
App Deployment & Protection Policies in IntuneDevice Management · about 1 h 20 minObjective area: Manage and secure applicationsMembers
The Privacy-First BYOD BlueprintDevice Management · about 55 minObjective area: Manage and secure applicationsMembers
The Apple Business Manager Blueprint: Small Team MDMDevice Management · about 1 hObjective area: Prepare infrastructure for devicesMembers
Intune Suite Add-Ons: Endpoint Privilege Management, Cloud PKI & Remote HelpDevice Management · about 1 h 20 minObjective area: Manage and maintain devicesMembers
Windows Hello for Business & Windows LAPS: Passwordless Auth and Local Admin SecurityDevice Management · about 1 h 20 minObjective area: Prepare infrastructure for devicesMembers
Advanced Endpoint Security: BitLocker, Attack Surface Reduction & Security BaselinesDevice Management · about 1 h 25 minObjective area: Protect devicesMembers
Defender for Endpoint: Onboarding to First AlertDevice Management · about 1 h 25 minObjective area: Protect devicesMembers
The Hardened Intune Compliance Checklist (SOC 2 / HIPAA)Device Management · about 1 h 30 minObjective area: Protect devicesMembers
Windows Update Management: Rings, Autopatch & Delivery OptimizationDevice Management · about 1 h 35 minObjective area: Protect devices · Manage and maintain devicesFree to read in full
Endpoint Analytics, Remediations & ReportingDevice Management · about 1 h 25 minObjective area: Optimize endpoint operations by using automation, monitoring, and reportingMembers
Automating Intune: PowerShell, Microsoft Graph & Security Copilot in PracticeDevice Management · about 1 h 40 minObjective area: Optimize endpoint operations by using automation, monitoring, and reportingMembers
Free preview · the opening of one module

The 48-Hour Intune Setup Guide for Small Businesses

Device Management · about 1 h 10 min

A time-boxed, hour-by-hour weekend plan for bringing up to about 50 devices under Intune when an insurer, client or lost laptop has made device security urgent. It sequences licensing, admin roles, emergency access, enrollment settings, compliance, configuration, apps, update rings and Conditional Access so each layer is proven on a pilot before the business depends on it, and says plainly what the weekend does and doesn't prove.

Why Time-Boxing Works, and What This Plan Assumes

The trigger for a rushed Intune rollout is often outside IT's control: a cyber-insurance renewal questionnaire asks for proof of multifactor authentication and disk encryption, a client contract adds a device-security clause, or a laptop with customer data goes missing and nobody can wipe it. When that happens there is no time for a six-week phased pilot. This guide compresses the essential work (tenant preparation, enrollment, compliance, configuration, apps, updates and Conditional Access) into 48 clock hours of hour blocks you can actually hit, while keeping the one habit that makes a fast rollout safe: a small pilot proves each layer before the whole company depends on it.

What the plan assumes. Up to about 50 devices, one Microsoft 365 tenant, one admin doing the work, and Windows devices running Windows 11 Pro, Enterprise or Education. Windows 10 reached end of support on 14 October 2025, so any Windows 10 device you find this weekend is a device to upgrade or replace, not one to design around. Windows Home editions can't be Microsoft Entra joined, so a Home laptop in the device fleet is a purchasing problem you list on Friday, not a Saturday surprise. If your situation differs (several tenants, a heavy on-premises Active Directory estate, hundreds of devices), use this plan as a checklist and give it more than a weekend.

What "secured by Monday" means. By Sunday night the goal is: every enrolled Windows device encrypted and reporting compliant, MFA enforced, a Conditional Access policy blocking noncompliant Windows devices from company data (or staged in Report-only if the fleet isn't fully enrolled), core apps and an update ring in place, and a written runbook for Monday's support calls. It does not mean the business is "compliant" with anything. Intune settings and reports can support a SOC 2 or HIPAA program by producing evidence that controls exist and operate; they don't make an organization compliant, and an auditor or insurer decides what evidence they accept.

Where this sits in MD-102. The Microsoft MD-102 study guide (skills measured as of 27 October 2026) weights Prepare infrastructure for devices at 20–25% of the exam. This module works through several of its named skills in the order a real rollout needs them: configuring enrollment settings and automatic enrollment for Windows, managing Intune roles and scope tags, multi-admin approval, compliance policies, and Conditional Access policies that require a compliance status. Deeper treatments live in other modules of this track and are named where they apply.

BlockWhenOutcome you can check
Before FridayAny weekdayLicenses confirmed, inventory exported, security-defaults decision made
Hour 0–6Friday nightRoles, emergency access accounts, groups and naming decided
Hour 6–12Saturday morningAutomatic enrollment scoped to the pilot; restrictions set
Hour 12–20SaturdayCompliance policies assigned; 3–5 pilot devices compliant
Hour 20–36Saturday night into SundayConfiguration, apps and update rings deployed; fleet enrolling
Hour 36–48SundayConditional Access tested in Report-only, then enforced (or held); runbook written

Members · the rest of this module

You’ve read 1 of 9 sections.

Members read the rest of this module and every module listed above, in their track’s order, and each one they finish is logged in hours with a content outline. $25 a month, cancel any time.

Already a member? Sign in, then pick up from your dashboard.

Add FHG to how you study. Keep every hour on record.

Members keep a record of the modules they finish and the study time each one takes.

Preparation means the material maps to the published objectives. It is not a promise of a pass, and Microsoft sets, administers and awards the exam.