The MD-102 exam just received an major update, including section weighting changes, a new domain objective, and a big list of new and updated objectives. Let’s start by taking a look at the changes to domain objectives.
- Prepare infrastructure for devices (25–30%) down to (20-25%)
- Manage and maintain devices (30–35%) down to (25-30%)
- Protect devices (15–20%) unchanged
- Manage applications (15–20%) to Manage and secure applications (15–20%)
- New – Optimize endpoint operations by using automation, monitoring, and reporting (10–15%)
Apart from the new objective domain mentioned above, there were several objectives that clarified that it was the cloud functionality versus on-prem capabilities, and some of the other new additions include
- Configure personal enrollment for macOS, iOS, iPadOS
- Configure corporate enrollment for macOS and iOS devices by integrating Intune with Apple Business Manager
- Configure enrollment for Android devices by integrating Intune with Samsung Knox Mobile Enrollment or Google Zero Touch
- Implement Windows Autopatch and configure Hotpatch policies
- Configure scope tags and scoped administration for multi-admin environments
- Implement Windows Backup and Restore by using Intune
- Create device configuration profiles for specialty devices, including Teams Rooms, HoloLens 2, and Zebra
- Target a profile by using assignment filters and enrollment time grouping
- Implement Microsoft Intune Advanced Analytics, including anomaly detection, proactive insights, and risk-based policy recommendations
- Rotate locate administrator passwords
- Collect device diagnostics and logs by using Microsoft Intune, including using the Troubleshooting blade for user-based diagnostics
- Configure Quiet Time policies for Android and iOS apps
- Monitor app deployment status and troubleshoot installation failures by using Microsoft Intune
- Configure App Control for Business policies by using Microsoft Intune
- Implement Windows Autopatch and configure Hotpatch policies
- Implement and manage multi-admin approval
While the above list is big, and obviously reflects some major changes, some of these objectives may have been part of other objectives previously, but have now either been expanded or just called out specificall.
Prepare infrastructure for devices (20–25%)
Add devices to Microsoft Entra ID
- Choose an appropriate device join type, including considerations such as device registration and Microsoft Entra join
- Join devices to Microsoft Entra ID
- Register devices to Microsoft Entra ID
- Plan and implement groups for devices in Microsoft Entra ID, including dynamic group membership rules
Enroll devices to Microsoft Intune
- Configure enrollment settings
- Configure automatic enrollment for Windows
- Configure personal enrollment for macOS, iOS, iPadOS
- Configure enrollment profiles for Android devices, including fully managed, dedicated, corporate owned, work profile, enrollment restrictions and troubleshooting enrollment failures
- Configure corporate enrollment for macOS and iOS devices by integrating Intune with Apple Business Manager
- Configure enrollment for Android devices by integrating Intune with Samsung Knox Mobile Enrollment or Google Zero Touch
Implement identity and compliance
- Manage built-in and custom roles for Intune and Windows 365, including role assignments
- Configure scope tags and scoped administration for multi-admin environments
- Implement and manage multi-admin approval
- Implement compliance policies for all supported device platforms by using Intune
- Implement Microsoft Entra Conditional Access policies that require a compliance status
- Configure Windows Hello for Business by using Intune
- Implement and manage Windows Local Administrator Password Solution (Windows LAPS) by using Microsoft Intune and Microsoft Entra ID
- Manage the membership of local groups on Windows devices by using Intune
Manage and maintain devices (25–30%)
Deploy and upgrade Windows clients by using cloud-based tools
- Choose between Windows Autopilot deployment profiles and device preparation policies
- Choose between Windows Autopilot deployment modes, including user-driven, pre-provisioning, and self-deploying
- Apply a device name template by using Windows Autopilot
- Implement Windows client deployment by using Windows Autopilot
- Create an Enrollment Status Page (ESP)
- Plan and implement device upgrades for Windows 11 by using Intune
- Provision and configure Windows 365 Cloud PCs by using Intune, including provisioning policies, network connections, and image management
- Implement Windows Backup and Restore by using Intune
Plan and implement device configuration profiles
- Create device configuration profiles for Windows devices, including importing ADMX files and using Group Policy analytics
- Create device configuration profiles for Android devices
- Create device configuration profiles for iOS/iPadOS devices
- Create device configuration profiles for macOS devices
- Create device configuration profiles for Windows 11 Enterprise multi-session devices
- Create device configuration profiles for specialty devices, including Teams Rooms, HoloLens 2, and Zebra
- Target a profile by using assignment filters and enrollment time grouping
Implement Intune Suite add-on capabilities
- Configure Endpoint Privilege Management including configuring elevation policies, monitoring elevated actions, and adjusting EPM settings
- Manage applications by using the Enterprise App Catalog
- Configure Microsoft Intune Remote Help
- Identify use cases for Cloud PKI
- Implement Microsoft Tunnel for Mobile Application Management
- Implement Microsoft Intune Advanced Analytics, including anomaly detection, proactive insights, and risk-based policy recommendations
Perform remote actions on devices
- Sync, restart, retire, or wipe devices
- Perform bulk remote actions
- Update Microsoft Defender Antivirus security intelligence
- Rotate BitLocker recovery keys
- Rotate locate administrator passwords
- Run a device query by using KQL
- Collect device diagnostics and logs by using Microsoft Intune, including using the Troubleshooting blade for user-based diagnostics
Manage and secure applications (15–20%)
Deploy and update apps
- Prepare applications for deployment by using Intune
- Deploy apps by using Intune, including Win32 apps, line-of-business (LOB) apps, and Microsoft Store apps
- Configure Quiet Time policies for Android and iOS apps
- Deploy Microsoft 365 Apps by using Intune
- Configure policies for Office apps by using Microsoft Intune or the Microsoft 365 Apps admin center
- Deploy Microsoft 365 Apps as part of a Windows Autopilot deployment, including using the Office Deployment Tool (ODT) or Microsoft Intune
- Manage Microsoft 365 Apps by using the Microsoft 365 Apps admin center
- Deploy apps from platform-specific app stores by using Intune, including Apple Volume Purchase Program and Google Play
- Monitor app deployment status and troubleshoot installation failures by using Microsoft Intune
Plan and implement app protection and app configuration policies
- Plan and implement app protection policies for managed and unmanaged (BYOD) devices by using Microsoft Intune
- Implement Microsoft Entra Conditional Access policies for app protection policies
- Plan and implement app configuration policies for managed apps and managed devices
Protect devices (15–20%)
Configure endpoint security
- Create antivirus policies by using Microsoft Intune
- Create and manage disk encryption policies by using Microsoft Intune, including managing BitLocker recovery keys, configuring user self-service recovery, and monitoring encryption compliance status
- Create firewall policies by using Microsoft Intune
- Configure Attack surface reduction policies by using Microsoft Intune, including applying Zero Trust principles for endpoint protection
- Plan and implement security baselines by using Microsoft Intune
- Integrate Intune with Microsoft Defender for Endpoint, including configuring Endpoint Detection and Response (EDR) policies, investigating endpoint threats, and triaging incidents
- Onboard devices into Microsoft Defender for Endpoint
- Configure App Control for Business policies by using Microsoft Intune
Manage device updates
- Plan for device updates by using Intune
- Create and manage update rings, feature updates, and quality updates for Windows devices by using Intune
- Implement Windows Autopatch and configure Hotpatch policies
- Create and manage update policies for iOS/iPadOS and macOS devices by using the Settings Catalog in Microsoft Intune
- Manage Android updates by using configuration profiles or firmware-over-the-air (FOTA) deployments
- Configure Windows client delivery optimization by using Intune
- Monitor device updates by using Intune
Optimize endpoint operations by using automation, monitoring, and reporting (10–15%)
Automate management tasks
- Automate Intune management tasks by using PowerShell and Microsoft Graph
- Investigate threats identified by Security Copilot agents in Intune
- Analyze device performance by using Security Copilot agents in Intune
- Review and respond to Security Copilot agent recommendations to make management decisions
- Extend device compliance by using PowerShell
Monitor and optimize health
- Implement reporting and data visibility in Microsoft Intune, including customizing reports and filters, using workbooks and dashboards, and exporting reporting data
- Monitor endpoint performance by using Endpoint Analytics, including proactive remediations, device health scores, and app startup performance
- Configure and manage proactive remediation scripts, including detecting and fixing common device issues, and scheduling remediation runs
- Analyze endpoint reliability and user experience scores, including startup performance, restart frequency, and application reliability metrics
- Monitor tenant health and Intune service communications, including reviewing service health dashboards, message center notifications, and establishing operational baselines
- Configure alerts and notifications for policy and compliance changes, including setting up alert rules for compliance drift, enrollment failures, and configuration conflicts
