Exam Domain
A functional group of skills measured on the exam.
Getting Started: Exam MD-102 Overview
Free knowledge base
Microsoft 365 Endpoint Administrator — key terms, tricks & tips
Everything from the course in one searchable place: 262 entries. Use it to review before a practice test or look up a word you forgot.
262 results
Weighting
The percentage indicating a domain's proportion of exam questions.
Getting Started: Exam MD-102 Overview
Scaled Score
A standardized score where 700 is passing, not a raw percentage.
Getting Started: Exam MD-102 Overview
Multiple-Response
A question type requiring selection of all correct answers.
Getting Started: Exam MD-102 Overview
Case Study
A scenario-based question set testing practical application.
Getting Started: Exam MD-102 Overview
Microsoft Learn
Microsoft's official platform for documentation, training, and certifications.
Getting Started: Exam MD-102 Overview
Retake Policy
Rules governing how and when an exam can be reattempted.
Getting Started: Exam MD-102 Overview
Understanding the MD-102 Exam Structure
DOMAINS weigh the QUESTIONS, so STUDY the SCENARIOS to PASS.
Getting Started: Exam MD-102 Overview
Understanding the MD-102 Exam Structure
The MD-102 exam focuses heavily on practical application. Memorize the key features and use cases for different deployment and management tools (e.g., Intune, Group Policy) as the exam often asks 'Which tool should you use to...' or 'How would you achieve...'.
Getting Started: Exam MD-102 Overview
Understanding the MD-102 Exam Structure
Ignoring the official exam page for the most current skills measured and weightings.
Getting Started: Exam MD-102 Overview
Understanding the MD-102 Exam Structure
Only studying multiple-choice questions and not preparing for case studies or drag-and-drop formats.
Getting Started: Exam MD-102 Overview
Understanding the MD-102 Exam Structure
Underestimating the importance of hands-on practice, as the exam tests practical application.
Getting Started: Exam MD-102 Overview
Learning Path
Curated series of modules on Microsoft Learn for a specific role or technology.
Getting Started: Exam MD-102 Overview
Module
Individual unit of learning within a Microsoft Learn learning path.
Getting Started: Exam MD-102 Overview
Certification Dashboard
Personal portal to manage Microsoft exams, certifications, and badges.
Getting Started: Exam MD-102 Overview
Exam Objectives
Official list of skills measured on a Microsoft certification exam.
Getting Started: Exam MD-102 Overview
Practice Test
Simulated exam to assess knowledge and prepare for the actual certification test.
Getting Started: Exam MD-102 Overview
Digital Badge
Verifiable digital representation of a passed Microsoft certification.
Getting Started: Exam MD-102 Overview
Navigating Microsoft Learn & Certification Resources
Learn, Dash, Objectives, Practice (LDOP): Learn on Microsoft Learn, check your Dashboard, review Objectives, and take Practice tests.
Getting Started: Exam MD-102 Overview
Navigating Microsoft Learn & Certification Resources
Memorize that the 'Skills Measured' section on the official MD-102 exam page is the definitive source for exam content. Any study material should align directly with these objectives.
Getting Started: Exam MD-102 Overview
Navigating Microsoft Learn & Certification Resources
Relying solely on third-party study guides without cross-referencing official Microsoft Learn content or exam objectives.
Getting Started: Exam MD-102 Overview
Navigating Microsoft Learn & Certification Resources
Not using the Microsoft Certification Dashboard to track exam progress or renew certifications, potentially leading to expired credentials.
Getting Started: Exam MD-102 Overview
Navigating Microsoft Learn & Certification Resources
Ignoring practice tests or using them only to memorize answers instead of identifying knowledge gaps for further study.
Getting Started: Exam MD-102 Overview
Windows Autopilot
Cloud-based deployment to configure new devices with minimal IT interaction.
Deploying Windows Client Operating Systems
Microsoft Intune
Cloud-based service for mobile device and application management.
Deploying Windows Client Operating Systems
MDT (Microsoft Deployment Toolkit)
Collection of tools for automating desktop and server deployment.
Deploying Windows Client Operating Systems
SCCM (System Center Configuration Manager)
On-premises management solution for deploying OS, apps, updates.
Deploying Windows Client Operating Systems
In-place upgrade
Upgrading an OS version without reinstalling applications or data.
Deploying Windows Client Operating Systems
Zero-touch deployment
Automated device setup requiring no IT intervention.
Deploying Windows Client Operating Systems
Golden image
A standardized, pre-configured OS image for deployment.
Deploying Windows Client Operating Systems
Planning Windows Client Deployment Strategies
To remember deployment types: 'M' for Modern (Intune, Autopilot, Managed in the cloud) and 'T' for Traditional (MDT, SCCM, Templates on-premises).
Deploying Windows Client Operating Systems
Planning Windows Client Deployment Strategies
The exam often tests your ability to distinguish between when to use Autopilot/Intune (modern, cloud, zero-touch) versus MDT/SCCM (traditional, on-premises, image-based). Look for keywords like 'remote users,' 'new devices,' or 'cloud-managed' for modern, and 'existing infrastructure,' 'custom image,' or 'on-premises' for traditional.
Deploying Windows Client Operating Systems
Planning Windows Client Deployment Strategies
Underestimating network bandwidth requirements for image-based deployments, leading to slow and failed installations.
Deploying Windows Client Operating Systems
Planning Windows Client Deployment Strategies
Failing to test deployment strategies on a small group of users before a full rollout, resulting in widespread issues.
Deploying Windows Client Operating Systems
Planning Windows Client Deployment Strategies
Not considering application compatibility or user data migration needs early in the planning phase.
Deploying Windows Client Operating Systems
Windows Deployment Services (WDS)
Server role for network-based OS installation.
Deploying Windows Client Operating Systems
Microsoft Deployment Toolkit (MDT)
Free tool for automating Windows and application deployment.
Deploying Windows Client Operating Systems
PXE Boot
Network boot protocol to start a computer from a network.
Deploying Windows Client Operating Systems
Unattend.xml
Answer file for automating Windows installation.
Deploying Windows Client Operating Systems
Lite Touch Installation (LTI)
MDT method requiring minimal user interaction.
Deploying Windows Client Operating Systems
Zero Touch Installation (ZTI)
MDT method requiring no user interaction, often with ConfigMgr.
Deploying Windows Client Operating Systems
Implementing Windows Client Deployment Methods
WDS is for 'Wired' Deployments. MDT 'Makes Deployments Trivial'. Autopilot 'Auto-pilots' the setup.
Deploying Windows Client Operating Systems
Implementing Windows Client Deployment Methods
Memorize the core purpose of WDS (network boot) and MDT (automation toolkit), and how Windows Autopilot (cloud-based, user-driven) fits into modern deployment. The exam often contrasts these.
Deploying Windows Client Operating Systems
Implementing Windows Client Deployment Methods
Confusing WDS as a standalone full deployment solution; it's often paired with MDT for robust automation.
Deploying Windows Client Operating Systems
Implementing Windows Client Deployment Methods
Underestimating network bandwidth requirements for image-based deployments, leading to slow installations.
Deploying Windows Client Operating Systems
Implementing Windows Client Deployment Methods
Not properly updating drivers in deployment images/shares, causing hardware compatibility issues post-deployment.
Deploying Windows Client Operating Systems
User State Migration Tool (USMT)
Microsoft utility for migrating user data and settings.
Deploying Windows Client Operating Systems
Refresh (Wipe-and-load)
Reinstalling OS, wiping drive, then restoring data.
Deploying Windows Client Operating Systems
Replace
Migrating to a new device with a new OS installation.
Deploying Windows Client Operating Systems
Microsoft Assessment and Planning (MAP) Toolkit
Tool for inventorying, assessing, and reporting IT infrastructure.
Deploying Windows Client Operating Systems
OneDrive Known Folder Move
Redirects Windows known folders to OneDrive for cloud sync.
Deploying Windows Client Operating Systems
Application Compatibility
Ensuring applications function correctly on the new OS.
Deploying Windows Client Operating Systems
Pilot Group
Small group of users for initial testing of a migration.
Deploying Windows Client Operating Systems
Planning & Implementing Windows Client Migration
To remember the migration phases: 'PANDA' - Plan, Assess, New OS, Data, Approve. (Plan, Assess, install New OS, migrate Data, Approve/validate).
Deploying Windows Client Operating Systems
Planning & Implementing Windows Client Migration
The MD-102 exam frequently tests your understanding of USMT capabilities and scenarios, as well as the differences between in-place upgrades, refresh, and replace methods. Pay close attention to when each method is most appropriate.
Deploying Windows Client Operating Systems
Planning & Implementing Windows Client Migration
Underestimating application compatibility issues, leading to post-migration user frustration and support calls.
Deploying Windows Client Operating Systems
Planning & Implementing Windows Client Migration
Failing to adequately back up user data and settings, resulting in data loss during the migration process.
Deploying Windows Client Operating Systems
Planning & Implementing Windows Client Migration
Not performing a pilot migration, which can lead to widespread, unforeseen issues during a full deployment.
Deploying Windows Client Operating Systems
WinRE
Windows Recovery Environment, a minimal OS for troubleshooting.
Deploying Windows Client Operating Systems
System Restore
Reverts system files and settings to an earlier point in time.
Deploying Windows Client Operating Systems
Restore Point
A snapshot of system files and settings at a specific time.
Deploying Windows Client Operating Systems
Reset this PC
Reinstalls Windows, with options to keep or remove personal files.
Deploying Windows Client Operating Systems
Safe Mode
Starts Windows with minimal drivers and services for diagnosis.
Deploying Windows Client Operating Systems
Startup Repair
Automated tool in WinRE to fix common boot problems.
Deploying Windows Client Operating Systems
Advanced Startup
Menu providing access to WinRE and boot options.
Deploying Windows Client Operating Systems
Managing Windows Client Recovery Options
To remember WinRE's tools, think: 'SISTERS Can't Undo Images'. S-Startup Repair, I-Image Recovery, S-System Restore, C-Command Prompt, U-Uninstall Updates.
Deploying Windows Client Operating Systems
Managing Windows Client Recovery Options
Memorize the key tools available within WinRE (Startup Repair, System Restore, Command Prompt, Uninstall Updates, System Image Recovery) and understand when to use each. The exam often presents scenarios where you must choose the most appropriate recovery tool.
Deploying Windows Client Operating Systems
Managing Windows Client Recovery Options
Confusing 'System Restore' with 'Reset this PC' – System Restore doesn't affect personal files, while Reset can wipe them.
Deploying Windows Client Operating Systems
Managing Windows Client Recovery Options
Forgetting to create a manual restore point before making significant system changes, leading to no easy rollback option.
Deploying Windows Client Operating Systems
Managing Windows Client Recovery Options
Not understanding that Safe Mode is for diagnosis, not necessarily for permanent repair; you still need to find and fix the root cause.
Deploying Windows Client Operating Systems
Provisioning Package
A .ppkg file to quickly configure a device without reimaging, created with Windows Configuration Designer.
Deploying Windows Client Operating Systems
Microsoft Configuration Manager
Enterprise-level solution for OS deployment, software distribution, and client management.
Deploying Windows Client Operating Systems
Dynamic Provisioning
Configuring devices with minimal IT intervention, often cloud-driven.
Deploying Windows Client Operating Systems
Windows Configuration Designer
Tool used to create provisioning packages (.ppkg files).
Deploying Windows Client Operating Systems
Task Sequence
A series of steps in MDT or SCCM to automate OS deployment and configuration.
Deploying Windows Client Operating Systems
Advanced Deployment Scenarios & Best Practices
AUTO-Pilot makes devices AUTO-magically ready. PPKG is like a Quick PKG for settings.
Deploying Windows Client Operating Systems
Advanced Deployment Scenarios & Best Practices
For the MD-102 exam, understand the core purpose and key benefits of Windows Autopilot and provisioning packages. Know that Autopilot integrates with Intune and Azure AD for cloud-based device setup, and provisioning packages are for lighter, post-OS configuration. Keywords: 'Autopilot profile,' 'self-deploying mode,' 'user-driven mode,' 'Windows Configuration Designer,' '.ppkg'.
Deploying Windows Client Operating Systems
Advanced Deployment Scenarios & Best Practices
Confusing Autopilot with traditional imaging; Autopilot doesn't reimage, it configures.
Deploying Windows Client Operating Systems
Advanced Deployment Scenarios & Best Practices
Trying to use provisioning packages for large-scale, bare-metal deployments; they are better for post-OS configuration or small batches.
Deploying Windows Client Operating Systems
Advanced Deployment Scenarios & Best Practices
Forgetting to test deployment sequences in a non-production environment before wide rollout.
Deploying Windows Client Operating Systems
Azure Active Directory (Azure AD)
Microsoft's cloud-based identity and access management service.
Identity and Compliance Management
User Principal Name (UPN)
A user's login name in Azure AD, typically email format.
Identity and Compliance Management
Single Sign-On (SSO)
Allows users to log in once to access multiple applications.
Identity and Compliance Management
Azure AD Registered
Personal devices connected to Azure AD for SSO and conditional access.
Identity and Compliance Management
Azure AD Joined
Organization-owned devices joined directly to Azure AD, fully managed.
Identity and Compliance Management
Hybrid Azure AD Joined
Devices joined to on-premises AD and registered with Azure AD.
Identity and Compliance Management
Azure AD Connect
Tool to synchronize on-premises AD DS identities to Azure AD.
Identity and Compliance Management
Managing User & Device Identities in Azure AD
Remember 'R-J-H' for Registered, Joined, Hybrid. Registered is 'R' for 'Renter' (personal device), Joined is 'J' for 'Just ours' (company device, cloud-only), Hybrid is 'H' for 'Half-and-half' (on-prem AD + Azure AD).
Identity and Compliance Management
Managing User & Device Identities in Azure AD
The MD-102 exam frequently distinguishes between Azure AD Registered, Azure AD Joined, and Hybrid Azure AD Joined. Memorize the primary use case and management implications for each.
Identity and Compliance Management
Managing User & Device Identities in Azure AD
Confusing Azure AD with traditional Active Directory Domain Services (AD DS); they serve different primary purposes.
Identity and Compliance Management
Managing User & Device Identities in Azure AD
Not understanding that Azure AD Registered devices are not fully managed by the organization.
Identity and Compliance Management
Managing User & Device Identities in Azure AD
Assuming all devices need to be Azure AD Joined; Hybrid Azure AD Join is crucial for many existing environments.
Identity and Compliance Management
Conditional Access
Azure AD feature enforcing access policies based on conditions.
Identity and Compliance Management
MFA
Multi-Factor Authentication; requires two or more verification methods.
Identity and Compliance Management
Report-only mode
Policy mode that logs effects without enforcing them.
Identity and Compliance Management
What If tool
Simulates Conditional Access policy outcomes for specific users.
Identity and Compliance Management
Trusted locations
IP ranges or countries designated as secure by an organization.
Identity and Compliance Management
Compliant device
Device meeting Intune or Azure AD security standards.
Identity and Compliance Management
Emergency access accounts
Highly privileged accounts excluded from most policies to prevent lockout.
Identity and Compliance Management
Implementing Conditional Access Policies
CAP: Conditions, Assignments, Permissions. Think of a CAPtain making decisions based on who, what, and where, then granting or denying passage!
Identity and Compliance Management
Implementing Conditional Access Policies
The exam often tests your ability to choose the correct Conditional Access policy components for a given scenario. Pay close attention to 'Assignments' (users/groups/apps), 'Conditions' (location, device state, sign-in risk), and 'Access controls' (grant/block, require MFA/compliant device). Remember the 'Report-only' mode for testing.
Identity and Compliance Management
Implementing Conditional Access Policies
Forgetting to exclude emergency access accounts, leading to potential lockout.
Identity and Compliance Management
Implementing Conditional Access Policies
Enabling a policy directly without first testing it in 'Report-only' mode.
Identity and Compliance Management
Implementing Conditional Access Policies
Creating overly complex or overlapping policies that are difficult to troubleshoot.
Identity and Compliance Management
Implementing Conditional Access Policies
Not understanding the difference between 'All cloud apps' and specific app assignments.
Identity and Compliance Management
DLP Policy
Rules defining how sensitive data is identified and protected.
Identity and Compliance Management
Sensitive Info Type
Pattern used to identify specific categories of sensitive data.
Identity and Compliance Management
Policy Tip
Notification shown to users when they trigger a DLP policy.
Identity and Compliance Management
User Override
Allows users to bypass a DLP block with justification.
Identity and Compliance Management
Endpoint DLP
DLP protection extended to devices like workstations and laptops.
Identity and Compliance Management
Compliance
Adherence to laws, regulations, and internal policies.
Identity and Compliance Management
Understanding Data Loss Prevention (DLP)
DLP: 'Don't Let PII' (Personally Identifiable Information) 'Pass' (out of your control).
Identity and Compliance Management
Understanding Data Loss Prevention (DLP)
The exam often tests your knowledge of specific sensitive info types and how to configure policies to meet common regulatory requirements (e.g., detecting GDPR-related PII). Pay attention to the 'locations' where policies can be applied and the 'actions' available.
Identity and Compliance Management
Understanding Data Loss Prevention (DLP)
Not testing policies thoroughly before full deployment, leading to false positives or missed detections.
Identity and Compliance Management
Understanding Data Loss Prevention (DLP)
Overlooking specific data locations (e.g., Teams chats) when configuring policies, creating blind spots.
Identity and Compliance Management
Understanding Data Loss Prevention (DLP)
Failing to educate users about DLP policies, leading to frustration and workarounds.
Identity and Compliance Management
Understanding Data Loss Prevention (DLP)
Not regularly reviewing and updating DLP policies as business needs or regulations change.
Identity and Compliance Management
Compliance Policy
Rules devices must meet to be 'compliant'.
Identity and Compliance Management
Non-compliant
Device fails to meet defined compliance rules.
Identity and Compliance Management
Grace Period
Time allowed for remediation before actions.
Identity and Compliance Management
Retire Device
Removes company data and apps from device.
Identity and Compliance Management
Endpoint Security
Intune section for managing device security.
Identity and Compliance Management
BitLocker
Windows full disk encryption technology.
Identity and Compliance Management
Configuring Compliance Policies for Devices
COMPLY: C-Check OS, O-Only secure, M-Managed by Intune, P-Password required, L-Lock/Wipe, Y-Your data protected.
Identity and Compliance Management
Configuring Compliance Policies for Devices
The exam often tests your understanding of the relationship between device compliance policies and Conditional Access policies. Remember that compliance policies define WHAT a device must be to be healthy, and Conditional Access policies define WHEN and HOW that health status impacts access to resources. Keywords: 'non-compliant action', 'assign to groups', 'device health settings'.
Identity and Compliance Management
Configuring Compliance Policies for Devices
Forgetting to assign the compliance policy to user or device groups after creating it, rendering it ineffective.
Identity and Compliance Management
Configuring Compliance Policies for Devices
Not configuring 'Actions for non-compliance', which means non-compliant devices might still access resources if Conditional Access isn't fully integrated.
Identity and Compliance Management
Configuring Compliance Policies for Devices
Setting compliance rules too strictly without considering the user experience, leading to many non-compliant devices and support calls.
Identity and Compliance Management
Enrollment
Process of registering a device with Intune for management.
Device Management with Microsoft Intune
Apple ADE
Automated enrollment for corporate Apple devices.
Device Management with Microsoft Intune
Company Portal
App used by users to enroll devices and access apps.
Device Management with Microsoft Intune
Work Profile
Container on Android for isolating corporate data.
Device Management with Microsoft Intune
MDM Authority
Setting that specifies where devices are managed.
Device Management with Microsoft Intune
BYOD
Bring Your Own Device; personal devices used for work.
Device Management with Microsoft Intune
Enrolling & Managing Devices in Microsoft Intune
Enrollment: A-B-C. Autopilot for Windows, BYOD for personal, Corporate for everything else.
Device Management with Microsoft Intune
Enrolling & Managing Devices in Microsoft Intune
Memorize the distinct enrollment methods for Windows (Autopilot), Apple (ADE/Company Portal), and Android (Work Profile/Fully Managed). Understand when each is appropriate for corporate vs. personal devices. The exam often tests your ability to choose the correct method for a given scenario.
Device Management with Microsoft Intune
Enrolling & Managing Devices in Microsoft Intune
Forgetting to set the MDM Authority before attempting to enroll devices.
Device Management with Microsoft Intune
Enrolling & Managing Devices in Microsoft Intune
Trying to use corporate enrollment methods (like Autopilot) for personal BYOD devices, leading to privacy concerns.
Device Management with Microsoft Intune
Enrolling & Managing Devices in Microsoft Intune
Not ensuring users have the correct Intune license assigned before they attempt enrollment.
Device Management with Microsoft Intune
Device Configuration Profile
A set of settings deployed to devices to enforce policies.
Device Management with Microsoft Intune
Settings Catalog
A comprehensive list of individual settings available for configuration.
Device Management with Microsoft Intune
OMA-URI
Open Mobile Alliance Uniform Resource Identifier; used for custom settings.
Device Management with Microsoft Intune
Administrative Templates
ADMX-backed policies for Windows device configuration.
Device Management with Microsoft Intune
Device Restrictions
Profiles to control device features like camera or app store.
Device Management with Microsoft Intune
Assignment
Linking a profile to Azure AD user or device groups.
Device Management with Microsoft Intune
Configuring Device Profiles & Settings
To remember the profile creation steps: Define, Configure, Assign, Deploy, Monitor. Think of a 'D-C-A-D-M' workflow, like 'Doctors Can Always Diagnose Maladies'.
Device Management with Microsoft Intune
Configuring Device Profiles & Settings
The exam often tests your ability to choose the correct profile type for a given scenario. Pay close attention to the differences between 'Templates', 'Settings catalog', and 'Custom' profiles, and when to use each for Windows devices.
Device Management with Microsoft Intune
Configuring Device Profiles & Settings
Assigning a profile to 'All Users' when it should only apply to 'All Devices', or vice-versa, leading to unintended configurations.
Device Management with Microsoft Intune
Configuring Device Profiles & Settings
Forgetting to monitor the deployment status, missing errors, and assuming all devices successfully received the profile.
Device Management with Microsoft Intune
Configuring Device Profiles & Settings
Overlapping profiles with conflicting settings for the same device or user group, causing unpredictable behavior.
Device Management with Microsoft Intune
Remediation
Automatic actions taken to fix compliance issues.
Device Management with Microsoft Intune
Device Health Attestation
Checks the integrity and trustworthiness of a device.
Device Management with Microsoft Intune
Implementing Device Compliance Policies
C-O-M-P-L-Y: **C**heck OS, **O**ptions (encryption, password), **M**inimum versions, **P**olicy assignment, **L**og monitoring, **Y**es/No (compliant/non-compliant).
Device Management with Microsoft Intune
Implementing Device Compliance Policies
The exam often tests your knowledge of specific compliance settings for different platforms (Windows, iOS, Android) and the sequence of actions when a device becomes non-compliant. Pay close attention to the interaction between compliance policies and Conditional Access.
Device Management with Microsoft Intune
Implementing Device Compliance Policies
Forgetting to assign a compliance policy after creating it, meaning it has no effect.
Device Management with Microsoft Intune
Implementing Device Compliance Policies
Not configuring appropriate actions for non-compliance, leading to insecure devices still accessing resources.
Device Management with Microsoft Intune
Implementing Device Compliance Policies
Setting overly strict policies without a grace period, causing immediate user lockout and frustration.
Device Management with Microsoft Intune
Troubleshoot + support blade
Intune admin center area for user/device diagnostics.
Device Management with Microsoft Intune
Device sync
Process where device communicates with Intune for updates.
Device Management with Microsoft Intune
MDM Diagnostic Information
Windows report detailing applied MDM policies and settings.
Device Management with Microsoft Intune
Policy conflict
When two or more policies apply contradictory settings.
Device Management with Microsoft Intune
Event Viewer
Windows tool for viewing logs, including Intune diagnostics.
Device Management with Microsoft Intune
Troubleshooting Device Management Issues
To remember Intune troubleshooting steps, think 'DIAGNOSE': Device status, Intune tools, Assignments, Gather logs, New sync, Options (remediation), Support escalation, Evaluate.
Device Management with Microsoft Intune
Troubleshooting Device Management Issues
The exam often tests your knowledge of specific logs and reports for troubleshooting. Memorize that for Windows, the 'DeviceManagement-Enterprise-Diagnostics-Provider' Event Viewer log and the MDM Diagnostic Information report are key.
Device Management with Microsoft Intune
Troubleshooting Device Management Issues
Not checking the 'Troubleshoot + support' blade first for user-specific issues.
Device Management with Microsoft Intune
Troubleshooting Device Management Issues
Forgetting to check policy assignments and group memberships when a policy isn't applying.
Device Management with Microsoft Intune
Troubleshooting Device Management Issues
Ignoring device-side logs (like Event Viewer) and immediately assuming an Intune service issue.
Device Management with Microsoft Intune
Endpoint Analytics
A service in Intune for monitoring device health and performance.
Device Management with Microsoft Intune
Startup performance
A score measuring device boot and sign-in times.
Device Management with Microsoft Intune
Application reliability
A score indicating how often applications crash or become unresponsive.
Device Management with Microsoft Intune
Work from anywhere
A score assessing device readiness for remote work scenarios.
Device Management with Microsoft Intune
Baseline
A standard set of performance metrics for comparison.
Device Management with Microsoft Intune
Proactive monitoring
Identifying issues before they impact users.
Device Management with Microsoft Intune
Monitoring Device Health & Performance with Intune
Imagine a 'PERFORM'ance car: P-roactive, E-ndpoint R-eports, F-or O-ptimal R-eliability, M-onitoring.
Device Management with Microsoft Intune
Monitoring Device Health & Performance with Intune
On the MD-102 exam, be prepared to distinguish between the different scores provided by Endpoint Analytics (Startup performance, Application reliability, Work from anywhere) and understand their purpose. Keywords like 'proactive' and 'user experience' often point to Endpoint Analytics as the solution.
Device Management with Microsoft Intune
Monitoring Device Health & Performance with Intune
Ignoring recommendations provided by Endpoint Analytics, leading to missed opportunities for improvement.
Device Management with Microsoft Intune
Monitoring Device Health & Performance with Intune
Not setting up baselines, making it difficult to objectively assess performance changes over time.
Device Management with Microsoft Intune
Monitoring Device Health & Performance with Intune
Focusing only on overall scores without drilling down into specific devices or applications to find root causes.
Device Management with Microsoft Intune
Line-of-Business (LOB) App
Custom applications developed for a specific organization.
Application Deployment and Management
Win32 App
Traditional Windows desktop applications, requiring packaging for Intune.
Application Deployment and Management
Required Assignment
Intune automatically installs the app on targeted devices/users.
Application Deployment and Management
Available Assignment
App appears in Company Portal for user-initiated installation.
Application Deployment and Management
Detection Rules
Criteria used by Intune to verify successful app installation.
Application Deployment and Management
Dependencies
Prerequisite apps that must be installed before the main application.
Application Deployment and Management
Supersedence
Allows an app to replace or upgrade an older version of itself.
Application Deployment and Management
Deploying Applications with Microsoft Intune
To remember app assignment types: 'R'equired = 'R'eally needed (automatic); 'A'vailable = 'A'll for you (self-service).
Application Deployment and Management
Deploying Applications with Microsoft Intune
For the MD-102 exam, pay close attention to the different app types (LOB, Win32, Store) and their specific deployment steps. Understand the distinction between 'Required' and 'Available' assignments and when to use each. Keywords like 'Company Portal' and 'detection rules' are important.
Application Deployment and Management
Deploying Applications with Microsoft Intune
Forgetting to package Win32 apps with the IntuneWinAppUtil tool before uploading, leading to deployment failures.
Application Deployment and Management
Deploying Applications with Microsoft Intune
Incorrectly configuring detection rules for Win32 apps, causing Intune to report the app as not installed even if it is.
Application Deployment and Management
Deploying Applications with Microsoft Intune
Assigning an app as 'Required' when it should be 'Available', leading to unwanted installations on user devices.
Application Deployment and Management
App Protection Policies (APP)
Intune policies protecting organizational data within applications.
Application Deployment and Management
Mobile Application Management (MAM)
Another name for App Protection Policies, focusing on app data.
Application Deployment and Management
MAM without enrollment (MAM-WE)
APP applied to apps on devices not enrolled in Intune MDM.
Application Deployment and Management
Managed App
An application targeted by and configured with App Protection Policies.
Application Deployment and Management
Unmanaged App
An application not targeted by App Protection Policies.
Application Deployment and Management
Conditional Launch
Settings that define conditions for an app to be allowed to run.
Application Deployment and Management
Data Transfer Policy
Controls how data can move between managed and unmanaged apps.
Application Deployment and Management
Managing App Protection Policies (MAM)
MAM: 'My Apps Matter' – it's all about protecting the data inside your work apps, not the whole device.
Application Deployment and Management
Managing App Protection Policies (MAM)
The exam frequently tests the distinction between MDM and MAM. Remember that MDM manages the device, while MAM manages the data within applications, especially on unmanaged devices (MAM-WE). Keywords to spot: 'protect data on personal devices', 'restrict copy/paste within apps', 'app-level PIN'.
Application Deployment and Management
Managing App Protection Policies (MAM)
Confusing MDM (device management) with MAM (app/data management). They can work together but are distinct.
Application Deployment and Management
Managing App Protection Policies (MAM)
Assuming MAM only works on enrolled devices. MAM-WE is a critical use case for personal devices.
Application Deployment and Management
Managing App Protection Policies (MAM)
Forgetting to assign the App Protection Policy to user groups, rendering it ineffective.
Application Deployment and Management
Microsoft Edge
Microsoft's Chromium-based web browser.
Application Deployment and Management
Intune Configuration Profile
A set of settings deployed to devices/users via Intune.
Application Deployment and Management
Microsoft Defender SmartScreen
Security feature protecting against phishing and malware.
Application Deployment and Management
Browser Profile
Separate collections of browsing data (history, cookies, etc.).
Application Deployment and Management
Configuring Microsoft Edge & Browser Settings
EDGE: E-nforce D-efaults, G-uard E-verything. Helps remember the core goals of Edge management.
Application Deployment and Management
Configuring Microsoft Edge & Browser Settings
The exam often tests your ability to identify the correct Intune profile type (e.g., Administrative Templates, Settings Catalog) for specific Edge configurations. Pay close attention to policies related to security, privacy, and user experience, and how they map to Intune settings.
Application Deployment and Management
Configuring Microsoft Edge & Browser Settings
Forgetting to assign the configuration profile to the correct user or device groups, leading to policies not being applied.
Application Deployment and Management
Configuring Microsoft Edge & Browser Settings
Using conflicting policies from different sources (e.g., Group Policy and Intune) without understanding policy precedence.
Application Deployment and Management
Configuring Microsoft Edge & Browser Settings
Overlooking the impact of user profiles versus device profiles when configuring settings, especially for shared devices.
Application Deployment and Management
Intune Management Extension (IME)
Client-side agent on Windows devices for Win32 app management.
Application Deployment and Management
Error Code 0x80070643
Common Windows installer error, often indicating a fatal installation problem.
Application Deployment and Management
Detection Rule
Logic used by Intune to determine if an app is already installed.
Application Deployment and Management
Assignment Type
How an app is offered or required (e.g., Required, Available for enrolled devices).
Application Deployment and Management
MSI Log
Detailed log file generated by Windows Installer during setup.
Application Deployment and Management
Troubleshooting Application Deployment
For 'Troubleshooting Apps': L-O-G-S. Look at Intune, Observe client logs, Get error codes, Solve the problem.
Application Deployment and Management
Troubleshooting Application Deployment
The exam often tests your ability to interpret Intune error messages and know where to look for logs on a client device. Memorize the location of the Intune Management Extension logs for Win32 app troubleshooting.
Application Deployment and Management
Troubleshooting Application Deployment
Overlooking Intune's built-in reporting and immediately jumping to client-side troubleshooting without a clear error code.
Application Deployment and Management
Troubleshooting Application Deployment
Forgetting to check network connectivity and firewall rules, especially for devices in remote locations or behind proxies.
Application Deployment and Management
Troubleshooting Application Deployment
Not testing application packages thoroughly in a pilot group before deploying to a large number of users.
Application Deployment and Management
Windows Update for Business (WUfB)
Cloud-based service for managing Windows updates.
Windows Client Update Management
Feature Update
Annual update introducing new Windows functionality.
Windows Client Update Management
Quality Update
Monthly update with security and bug fixes.
Windows Client Update Management
General Availability Channel (GAC)
Recommended channel for stable, production-ready updates.
Windows Client Update Management
Update Ring
Group of devices receiving updates with same policies.
Windows Client Update Management
Deferral Policy
Configured delay before an update is applied.
Windows Client Update Management
Delivery Optimization
Peer-to-peer technology for update distribution.
Windows Client Update Management
Patch Tuesday
Second Tuesday of each month, for quality updates.
Windows Client Update Management
Planning Windows Update for Business Strategies
F-Q-G-D: Feature updates are Quarterly, Quality updates are Good, General Availability is for Deployment.
Windows Client Update Management
Planning Windows Update for Business Strategies
On the exam, understand that deferral periods for feature updates are typically measured in days or weeks, while quality updates are usually deferred for a shorter period, often just days. Keywords to watch for include 'phased deployment,' 'update rings,' and 'deferral policies.'
Windows Client Update Management
Planning Windows Update for Business Strategies
Not using multiple update rings, leading to 'big bang' deployments that can cause widespread issues.
Windows Client Update Management
Planning Windows Update for Business Strategies
Setting deferral periods too short for feature updates, not allowing enough time for application compatibility testing.
Windows Client Update Management
Planning Windows Update for Business Strategies
Forgetting to communicate update schedules and potential reboots to end-users, causing frustration and support calls.
Windows Client Update Management
Deferral Period
A configurable delay before a device installs a feature or quality update.
Windows Client Update Management
Feature Update Deployment Policy
An Intune policy to target specific Windows feature update versions to devices.
Windows Client Update Management
Quality Update Policy
An Intune policy to pause or resume monthly quality updates for a duration.
Windows Client Update Management
Configuring Update Rings & Deployment Policies
Remember 'Rings for Rules, Features for Versions, Quality for Quelling (problems)'.
Windows Client Update Management
Configuring Update Rings & Deployment Policies
Memorize the purpose of each policy type: Update Rings for general behavior and deferrals, Feature Update Deployment Policies for specific version targeting, and Quality Update Policies for emergency pausing. The exam often presents scenarios where you must choose the correct policy for a given update management need.
Windows Client Update Management
Configuring Update Rings & Deployment Policies
Confusing update rings with feature update deployment policies. Rings defer; feature policies target specific versions.
Windows Client Update Management
Configuring Update Rings & Deployment Policies
Forgetting to assign the created update rings or policies to security groups, leading to no effect on devices.
Windows Client Update Management
Configuring Update Rings & Deployment Policies
Not testing update ring settings on a small group before deploying broadly, risking widespread issues.
Windows Client Update Management
Update Compliance
The state where devices have installed all required updates.
Windows Client Update Management
Windows Update for Business Reports
Cloud-based service providing update status for WUfB-managed devices.
Windows Client Update Management
Configuration Manager (SCCM)
On-premises management solution for large Windows environments.
Windows Client Update Management
Diagnostic Data
Information sent to Microsoft to enable update health reporting.
Windows Client Update Management
Monitoring Update Compliance & Reporting
To remember the reporting tools: 'I See Azure Reports' - Intune, SCCM, Azure Portal (for WUfB Reports).
Windows Client Update Management
Monitoring Update Compliance & Reporting
The exam often tests your knowledge of WHERE to find specific reports. Remember that Windows Update for Business reports are primarily accessed via the Azure portal, and Intune offers its own integrated update compliance reports. Be ready to distinguish between these tools.
Windows Client Update Management
Monitoring Update Compliance & Reporting
Ignoring 'Pending' or 'Failed' statuses in reports, assuming they will resolve themselves.
Windows Client Update Management
Monitoring Update Compliance & Reporting
Not configuring devices to send diagnostic data, which prevents comprehensive reporting.
Windows Client Update Management
Monitoring Update Compliance & Reporting
Relying solely on manual checks instead of automated reporting tools for large environments.
Windows Client Update Management
SoftwareDistribution
Folder storing downloaded updates and update history.
Windows Client Update Management
BITS
Background Intelligent Transfer Service, manages file transfers for updates.
Windows Client Update Management
DISM
Deployment Image Servicing and Management, repairs Windows images.
Windows Client Update Management
SFC
System File Checker, verifies and repairs protected system files.
Windows Client Update Management
WindowsUpdate.log
Primary log file detailing Windows Update operations on a client.
Windows Client Update Management
Error Code
Numeric value indicating the specific reason for an update failure.
Windows Client Update Management
Troubleshooting Update Management Issues
For 'Troubleshooting Windows Update Issues,' remember 'L.O.G.S.': **L**ogs, **O**perational services, **G**et-WindowsUpdateLog, **S**oftwareDistribution reset.
Windows Client Update Management
Troubleshooting Update Management Issues
On the MD-102 exam, be prepared to identify common Windows Update error codes (e.g., 0x80070005, 0x800F081F) and associate them with their likely causes. Keywords like 'failed to install,' 'not receiving updates,' or 'update rollback' should trigger thoughts of troubleshooting tools like DISM, SFC, and Event Viewer.
Windows Client Update Management
Troubleshooting Update Management Issues
Ignoring error codes and immediately jumping to generic solutions without understanding the root cause.
Windows Client Update Management
Troubleshooting Update Management Issues
Forgetting to check basic prerequisites like disk space, network connectivity, and time synchronization.
Windows Client Update Management
Troubleshooting Update Management Issues
Not documenting troubleshooting steps and their outcomes, making it harder to track progress or escalate.
Windows Client Update Management