Microsoft MD-102 (Endpoint Administrator)

Microsoft MD-102 Endpoint Administrator Certification Overview

What the MD-102 certification validates

The Microsoft MD-102 exam tests whether you can actually manage modern endpoints in a real enterprise environment. This is not some theoretical cert where you memorize definitions and call it a day. Microsoft wants to see if you can deploy Windows 11 devices using Autopilot, create compliance policies in Intune that actually work, configure conditional access rules through Entra ID, and troubleshoot when someone's iPad will not connect to corporate email because that is what happens in the real world.

The exam puts heavy weight on Microsoft Intune as your primary management tool. You need to prove you can handle mobile device management (MDM) and mobile application management (MAM) across Windows, iOS, Android, and macOS platforms. Configuration Manager still shows up in some hybrid scenarios, but the focus has shifted toward cloud-native management. Really shifted. You also need to understand how Microsoft 365 services integrate with endpoint management: how Defender for Endpoint protects devices, how Microsoft 365 Apps get deployed and updated, and how Entra ID controls who accesses what from which device.

The exam covers a lot of ground. Application lifecycle management means you need to know how to package apps, deploy them through Intune, manage updates, and handle app protection policies. Device compliance is not just about clicking a checkbox. You need to understand compliance policies, conditional access integration, and what happens when a device falls out of compliance. Security scenarios run deep too, from BitLocker encryption to Windows Hello for Business to endpoint security baselines.

I remember when most of this stuff was managed through Group Policy and imaging servers. Now you are expected to do everything through a web browser, which honestly feels weird until you have done it a few hundred times.

Who should take MD-102 and what experience you need

This exam targets IT professionals who actually touch endpoints every day. Endpoint administrators, desktop support engineers, modern workplace administrators. If your job involves getting devices into users' hands and keeping them secure and functional, MD-102 validates those skills. Systems administrators transitioning from traditional Group Policy management to cloud-based management will find this cert valuable, even if the learning curve feels steep at first.

Microsoft recommends 6-12 months of hands-on experience before attempting MD-102. That is not arbitrary. You really should have worked with Intune in a production or lab environment, deployed at least a few Windows devices, configured some policies, and dealt with user complaints when things break. Experience with Entra ID (formerly Azure AD) is basically required since identity and device management are joined at the hip now. Same with Microsoft 365 administration. You need to understand how licensing works, where to find configuration options, and how different admin centers connect.

If you have only worked with on-premises Active Directory and Group Policy, MD-102 will feel like a different world. The cloud-first approach requires rethinking how you provision, manage, and secure devices. But that is exactly why this certification matters. Organizations need people who understand modern management, not just legacy infrastructure.

How MD-102 fits into Microsoft's certification path

Here is the good news: MD-102 is a single-exam certification. You pass MD-102, you earn the Microsoft 365 Certified: Endpoint Administrator Associate credential. Done.

This represents a big change from the previous path, which required passing both MD-100 (Windows Client) and MD-101 (Managing Modern Desktops). Microsoft consolidated those two exams into MD-102, which means you are getting all that content in one test. Some people prefer the single-exam approach, others miss being able to tackle the content in smaller chunks. Either way, that is what we are working with now.

The Endpoint Administrator Associate certification is a foundation for more advanced credentials. If security interests you, consider pursuing the Microsoft 365 Certified: Security Administrator Associate or Microsoft Certified: Security Operations Analyst Associate certifications. You could also branch into AZ-800 (Administering Windows Server Hybrid Core Infrastructure) or AZ-801 (Configuring Windows Server Hybrid Advanced Services) if you are managing hybrid environments. The skills overlap significantly, and having multiple certifications shows depth in Microsoft's ecosystem.

Key differences from the legacy MD-100 and MD-101 exams

MD-102 is not just MD-100 and MD-101 smooshed together. Microsoft used the consolidation as an opportunity to update the content significantly. The new exam includes much more coverage of Windows 11-specific features. Things like desktop analytics, Windows Update for Business deployment rings for Windows 11, and configuration requirements unique to the newer OS.

Intune Suite features appear throughout MD-102 in ways they did not in the older exams. Microsoft keeps adding capabilities to Intune, and the exam reflects that evolution. You will see more focus on endpoint privilege management, remote help scenarios, and advanced analytics. Cloud-native provisioning through Windows Autopilot gets deeper treatment, including white glove deployment and pre-provisioning scenarios that many organizations now use.

The biggest philosophical shift? MD-102 assumes cloud-first management as the default approach. Configuration Manager appears primarily in co-management scenarios where you are transitioning from on-premises to cloud or maintaining hybrid management. The old exams gave more weight to traditional deployment methods like MDT and imaging. MD-102 wants you thinking about Autopilot, dynamic device groups, and policy-driven configuration instead of thick images and manual deployment.

Career value and what employers actually want

The Endpoint Administrator Associate certification signals to employers that you can manage modern device fleets without relying on legacy infrastructure. That is increasingly important as organizations migrate away from on-premises domain controllers and Group Policy toward Entra ID and Intune. Job postings for endpoint administrator roles, modern workplace engineers, and desktop support positions frequently list Microsoft 365 and Intune experience as requirements. Having MD-102 on your resume proves you have got those skills.

Salary-wise, endpoint administrators with Microsoft 365 certifications typically earn between $65,000 and $95,000 annually in the United States, though that varies significantly by location, experience, and company size. Major metropolitan areas and organizations with large device fleets tend to pay on the higher end. The certification itself does not guarantee any particular salary, but it demonstrates competency that employers value when making hiring and promotion decisions.

The certification alone will not get you a job if you lack practical experience. Employers can tell the difference. But combined with hands-on work managing endpoints (even in a lab environment), MD-102 substantially strengthens your candidacy. Employers want people who can hit the ground running when they need to deploy 500 new laptops or troubleshoot why conditional access policies are blocking legitimate users.

How the exam reflects actual enterprise scenarios

One thing I appreciate about MD-102 is how scenario-based it feels. You will not just get asked "What does this policy setting do?" Instead, you will face questions like "A company has 2,000 devices across Windows, iOS, and Android platforms, with users working remotely and in offices. They need to ensure only compliant devices can access Exchange Online. What is the most efficient approach?"

These scenarios mirror real business requirements. BYOD policies where employees use personal devices for work. Remote workforce enablement where you are shipping laptops to people's homes and need zero-touch deployment. Compliance frameworks like GDPR or HIPAA that require specific security controls and audit trails. Zero-trust security models where you verify every access request regardless of network location.

The exam tests whether you understand the connection between different Microsoft 365 services. You might need to configure a solution that uses Entra ID for authentication, Intune for device compliance, conditional access to enforce policies, and Defender for Endpoint to detect threats. That is not four separate tasks, it is one integrated solution, and MD-102 expects you to understand how all the pieces fit together.

Staying current as the platform evolves

Microsoft typically updates MD-102 every 12-18 months to reflect product changes. Windows 11 continues evolving with feature updates, Intune Suite adds new capabilities regularly, and Entra ID introduces new identity and access features. The exam content adjusts to match these changes, which means the MD-102 you take today might focus on different features than the version from a year ago.

That is actually good news for your career longevity. The skills validated by MD-102 are not going stale anytime soon. Organizations will continue needing people who can manage diverse device fleets in cloud-first environments through 2026 and beyond. As long as companies use Microsoft 365, they will need endpoint administrators who understand Intune, Entra ID, and modern management approaches.

Plus, Microsoft requires annual renewal of the certification through a free online assessment on Microsoft Learn. You will answer questions about new features and updated capabilities, which helps make sure your certification reflects current knowledge rather than what you knew when you originally passed the exam. It is low-pressure. Just complete the renewal assessment within six months of your certification anniversary, and you are good for another year.

MD-102 Exam Objectives and Skills Measured

Microsoft MD-102 (Endpoint Administrator) Certification Overview

The Microsoft MD-102 Endpoint Administrator certification is Microsoft's current "you can run endpoints for real" exam for modern device management, and yeah, it's basically the Endpoint Administrator Associate certification in day-to-day job terms. Intune's everywhere in it. Windows client management is everywhere in it. Identity and security show up constantly, because look, endpoints are identity now.

What MD-102 validates? The stuff you actually touch at work, honestly. Enrolling devices into Intune, pushing profiles, fixing why a policy didn't apply, shipping a laptop to a user and having Autopilot do the heavy lifting. You're also expected to understand the Entra ID side enough to not break access to Microsoft 365 when conditional access is involved, because that's where a lot of endpoint "incidents" start, if we're being real.

Who should take it? Desktop admins moving into cloud management. Help desk folks who already troubleshoot enrollment and compliance. Junior sysadmins who got handed Intune because "it's just MDM, right." This exam rewards hands-on time and punishes pure memorization.

MD-102 also replaces the older split of MD-100/MD-101. So instead of two separate tests, Microsoft rolled that scope into a single role-based exam that lines up better with what Endpoint Admins actually do, including security controls, Autopilot enrollment and provisioning, and app deployment patterns that are common in Microsoft Intune MD-102 environments.

MD-102 Exam Objectives (Skills Measured)

Microsoft publishes the official skills measured document on the MD-102 certification page at Microsoft Learn, and they update it regularly as features change and get added. That matters. Seriously. If you study from a random PDF someone uploaded a year ago, you can end up learning the wrong UI path, the wrong feature name, or a retired workflow that doesn't even exist anymore in the current Intune admin center. Always verify the current MD-102 exam objectives right before you build your MD-102 study guide plan.

The exam's split into four functional groups with weightings. Deploy Windows client (25-30%), Manage identity and compliance (20-25%), Manage, maintain, and protect devices (35-40%), and Manage applications (15-20%). These percentages aren't decoration. They're a decent hint about question distribution, and they tell you where your study time pays off more, especially if you're trying to pass on a deadline.

Short version? Weightings drive priorities. Don't ignore them.

Deploy Windows client (25-30%)

This domain's about getting Windows onto devices and getting them ready for people. Prepare for Windows installation, understand deployment methods, upgrade paths, activation, and the post-install configuration pieces that turn "fresh OS" into "managed endpoint."

Windows Autopilot's a big deal here, and not just the buzzword. You need to know Autopilot deployment scenarios like user-driven mode versus self-deploying mode, what "white glove" (pre-provisioning) is for, and when Autopilot for existing devices makes sense if you're converting previously-managed or manually-built machines into cloud-managed endpoints. Autopilot enrollment and provisioning tends to show up as "given this scenario, which profile or mode fits" and "why did this deployment fail" style questions.

Subscription activation and licensing also shows up more than people expect, I mean, seriously. Implement Windows subscription activation, manage product keys, configure licensing for Windows Enterprise E3/E5, and troubleshoot activation issues. This is where folks get tripped up because the licensing story mixes Entra ID sign-in, edition upgrades, and whether the device's properly licensed and online. Weird errors. Common in real life too.

Migration and upgrade strategies matter, especially Windows 10 to Windows 11 migrations. Expect Windows 11 deployment and management thinking: hardware readiness, compatibility tools, feature updates planning, and how update servicing choices affect user downtime and risk. Another piece that sneaks in is provisioning packages. Windows Configuration Designer packages can bulk-configure devices without full MDM enrollment, which is niche, but it's still in scope and shows up as "what's the right tool for a kiosk batch" kind of scenario.

Manage identity and compliance (20-25%)

This is the "your device is an identity object" section. Configure device enrollment in Intune, implement device compliance policies Intune admins rely on, and connect that to conditional access so access to Microsoft 365 resources depends on device health and management state.

Entra ID device identity and access? Core concept. You need to understand Entra ID registered vs Entra ID joined vs Hybrid Entra ID joined devices, and the use cases. Registered's usually BYOD or lightly managed access. Joined is corporate-owned cloud-first. Hybrid joined is the "we still have AD DS and we're not done yet" reality that, honestly, describes most enterprises I've seen. These distinctions matter because they change enrollment behavior, sign-in, and what conditional access can evaluate.

Device enrollment methods are also fair game: enrollment restrictions, platform enrollment profiles for Windows, iOS/iPadOS, Android, and macOS, plus MFA expectations during enrollment depending on how your tenant's configured. You don't need to memorize every click path, but you do need to know what controls enrollment and what breaks it.

Compliance policy creation's where you define the rules: password requirements, encryption, OS versions, jailbreak/root detection, and device health attestation. Conditional access integration then uses that compliance signal to grant or block access. This is the "compliant device required" pattern, and it's the reason people can't open Outlook on their phone when the policy's misconfigured.

Noncompliance actions matter too. Configure notifications, remotely lock devices, and retire noncompliant devices after a grace period. Fragment. Timers. Escalation. That's the vibe.

Actually, I spent most of last Tuesday walking an IT manager through why their compliance policy wasn't blocking the right devices. Turned out they'd set the noncompliance grace period to 30 days instead of 3, and nobody noticed for two months. These timers pile up fast when you're juggling multiple policies.

Manage, maintain, and protect devices (35-40%)

This is the biggest domain, and not gonna lie, it's the one that feels the most like the job. Device configuration profiles. Update management. Endpoint security. Remote actions. Reporting. Troubleshooting. It's broad, and the weight (35-40%) basically screams "know Intune operations."

Configuration profiles are a deep area: Wi-Fi, VPN, email, certificates, device restrictions, custom OMA-URI settings, and administrative templates. You should know when to use settings catalog versus templates, and when custom OMA-URI's the only way out. Also know what happens when profiles conflict, because that's a real troubleshooting pattern.

Windows Update for Business is another chunk. Configure update rings for feature updates, quality updates, and driver updates, set deferrals, manage deadlines, and pause updates. It's easy to study this wrong by only learning what the settings do in theory. The exam tends to ask in scenario terms like "users are missing a quality update" or "how do we delay feature updates but not security patches."

Endpoint security policies include antivirus, attack surface reduction rules, firewall rules, EDR, and disk encryption via Intune. BitLocker encryption management matters: configure BitLocker policies, store recovery keys in Entra ID, and enforce encryption via compliance policies. If you've ever had to retrieve a recovery key for a locked-out exec laptop, you already know why Microsoft cares about this.

Microsoft Defender for Endpoint integration's part of modern endpoint ops: onboard devices, use security baselines, and respond to alerts via Microsoft 365 Defender. Then remote device actions: wipe, selective wipe, restart, lock, passcode reset, lost mode, and Autopilot reset. Don't treat these as trivia. The exam loves "which action preserves user data" versus "which action re-provisions for a new user."

Device monitoring and reporting is Intune reports for compliance, config status, update progress, and app deployment success. Troubleshooting includes diagnostic logs, the Intune troubleshooting workspace, interpreting error codes, and resolving enrollment or policy failures. Messy. Realistic. Very MD-102.

Manage applications (15-20%)

Apps are smaller by weighting, but still a big source of failed deployments in real environments. Understand required vs available vs uninstall assignments across Windows apps, mobile apps, web apps, and built-in apps. Also know the Windows app deployment methods: Win32 apps via the Intune Management Extension, Microsoft Store apps, web links, and LOB apps.

App protection policies (MAM) are key, especially MAM-WE where you protect corporate data without device enrollment. That means iOS/Android app protection rules like data transfer restrictions, encryption requirements, conditional launch settings, and app configuration policies. This is where BYOD strategies live, and it's very common for Microsoft 365 Endpoint Administrator roles.

Microsoft 365 Apps deployment comes up: Office Deployment Tool, update channels, app settings, and managing updates. App configuration policies also matter for preconfiguring settings like email server addresses, VPN configs, and app-specific preferences. Application monitoring includes install status, failure reasons, app protection compliance, and inventory reports.

Where to find the official objective domains (Microsoft Learn exam page)

The authoritative source is Microsoft Learn's MD-102 exam page with the skills measured outline. Microsoft updates exam objectives about every 6-12 months, sometimes faster if a feature shifts quickly, so verify before you start your plan and again before exam week. Old objectives? That's how people waste time.

MD-102 Cost and Registration

MD-102 exam cost varies by region, currency, and tax, so there isn't one universal number. Check the Microsoft Learn exam page for your locale and then schedule through Pearson VUE, either online proctored or at a test center.

Discounts exist. Student pricing sometimes applies. Employer vouchers happen. Training bundles occasionally include exam vouchers. Mentioned casually, but worth checking.

Scheduling's straightforward: pick a delivery method, confirm ID requirements, and don't forget to align your name exactly with your government ID because Pearson VUE's picky and they won't bend.

MD-102 Passing Score and Exam Format

MD-102 passing score's generally reported as 700 on Microsoft's scaled scoring model, but you don't get a simple "70%" translation because Microsoft weights question difficulty and sections differently. Expect multiple choice, case studies, and scenario-heavy items, and sometimes interactive formats depending on the current exam delivery style.

Time limits and policies vary a bit, and accommodations are available if you request them properly through Microsoft/Pearson VUE. Retake rules exist too, and they're strict enough that you don't want to "just see what it's like" without prep.

MD-102 Difficulty: How Hard Is It?

Is MD-102 harder than MD-101/MD-100? For a lot of people, yeah, because it compresses scope and expects you to think like an endpoint admin who touches identity, compliance, and security, not just imaging and GPOs. The hardest parts tend to be Autopilot, compliance plus conditional access, and Windows app deployment troubleshooting, plus RBAC confusion in Intune when you're trying to reason about who can do what.

If you already live in Intune daily, it's very passable. If you only manage on-prem AD and "some GPO," it's a jump.

MD-102 Prerequisites and Recommended Experience

MD-102 prerequisites officially aren't a hard gate the way some advanced exams are, but recommended experience's real. You want hands-on with Intune, Windows client management, Entra ID basics, and at least a small amount of Defender exposure.

A lab helps. Developer tenant. Test devices. Even one Windows VM and a spare phone can teach you more than reading docs for a week.

Prior knowledge that helps: Microsoft 365 fundamentals, Entra ID device concepts, basic networking for Wi-Fi/VPN profiles, and comfort reading logs when things fail.

Best MD-102 Study Materials (Free and Paid)

Start with Microsoft Learn learning paths. They map closest to the objectives and stay updated more often than third-party books. Instructor-led training can be good if it includes labs and isn't just slide reading.

Books and third-party MD-102 study guide content can be fine, but check publish dates and confirm they match the current skills measured list. Labs are the secret sauce: build Autopilot profiles, push compliance policies, deploy a Win32 app, and then break something on purpose so you learn troubleshooting.

MD-102 Practice Tests and Exam Prep Strategy

MD-102 practice tests are useful only if they include explanations and match current objectives. Brain-dump style question sets? A trap. They teach you nothing, and they can be outdated fast.

A study plan depends on experience: two weeks if you already administer Intune daily, closer to six weeks if you're new to device compliance and app deployment. Final week: timed sets, drill weak domains based on the weightings, and re-check the official objectives one more time.

MD-102 Renewal and Maintaining Your Certification

Renewal for the Endpoint Administrator Associate certification's done through Microsoft Learn, typically via an annual renewal assessment. It's not another paid proctored exam, but it does require you to show up and complete it within the renewal window.

Miss the window and you can lose active status, which is annoying, so put a reminder on your calendar. Quick task. Easy win.

FAQs (Quick Answers)

How much does the MD-102 exam cost?

It varies by region and currency. Check the MD-102 page on Microsoft Learn for the current price in your locale.

What is the passing score for MD-102?

Microsoft uses scaled scoring. The commonly referenced passing score's 700, but scoring isn't a simple percentage.

Is MD-102 harder than MD-101/MD-100?

Often yes, because it combines broader endpoint, identity, and security expectations into one exam and is more scenario-driven.

What are the best study materials for the MD-102 exam?

Microsoft Learn modules plus hands-on labs in Intune and Autopilot. Add practice tests that include rationales and match the current skills measured.

How do I renew the Microsoft Endpoint Administrator certification?

Complete the annual renewal assessment on Microsoft Learn during your renewal window.

MD-102 Exam Cost, Registration, and Scheduling

What you'll actually pay for MD-102

The MD-102 exam costs $165 USD in the United States as of 2026. That's the standard price you'll see when you register through Pearson VUE.

But here's the thing: pricing varies by country. Microsoft adjusts exam fees based on regional purchasing power and local market conditions, so if you're in India, Brazil, or Eastern Europe, you'll often pay less than the US rate. Not by a tiny amount either. Some regions see prices that are 30-40% lower. Worth checking your local pricing before you assume it's always $165.

Students shouldn't pay full price. Microsoft offers up to 40% off exam fees through the Microsoft Learn student portal. You'll need a valid academic email address (typically .edu or an equivalent recognized by Microsoft in your country). The discount isn't automatic. You have to verify your student status and then apply the discount code during registration. It's annoying that it's not one-click, but honestly, saving $60-70 is worth the five extra minutes.

Look there's also the Enterprise Skills Initiative. If you're unemployed or were affected by COVID-19 economic impacts (yes, they're still running this program), you might qualify for discounted or even free exam vouchers through Microsoft's workforce development programs. I've seen people get full vouchers this way. Check the Microsoft Learn site for eligibility requirements. It's not advertised everywhere, but it's real.

Training bundles and retake policies

Microsoft Learning Partners and authorized training centers often sell bundled packages. You get instructor-led training plus an exam voucher, and the total cost is usually less than buying both separately. Sometimes a lot less. If you were planning to take a paid course anyway, bundle pricing makes sense. Just verify the voucher expiration date before you buy.

Failed the exam? You're paying full price to retake it. Microsoft doesn't give you a second shot for free. But they do offer exam replay packages that bundle the exam with one retake for about 1.5x the single exam cost. So instead of paying $165 twice ($330 total), you'd pay around $250 upfront for the exam plus one retake. It's insurance, honestly. If you're not super confident, the replay package is worth considering, especially if you're close to the passing score on practice tests but not quite there.

Corporate volume licensing exists too. Organizations purchasing multiple exam vouchers for employee certification programs can negotiate volume discounts through Microsoft Enterprise Agreement channels. I've worked with companies that got 15-20% off bulk voucher purchases. If your employer is paying, ask if they have an EA with Microsoft. They might already have vouchers available.

Exam vouchers expire. Typically 12 months from purchase date. Verify the expiration before you buy, and schedule your exam with enough buffer time. I've seen people lose $165 because they bought a voucher, forgot about it, and let it expire. Don't be that person.

How to actually register for MD-102

Registration starts at microsoft.com/learning. Create or sign in to your Microsoft Certification Profile. Work through to the MD-102 exam page and click "Schedule exam." You'll be redirected to Pearson VUE, Microsoft's exam delivery partner. You'll create a Pearson VUE account (or sign in if you already have one) and link it to your Microsoft Certification Profile.

Pearson VUE handles everything. You'll choose between testing at a physical Pearson VUE test center or taking the exam from home or office using online proctoring through their OnVUE software. Both options have pros and cons.

Test center vs online proctoring

Test centers offer a controlled environment. You show up, they give you a locker for your stuff, you sit at a computer in a quiet room, and you take the exam. No technical issues on your end because they handle the hardware and internet connection. No stress about your home environment or whether your webcam will work. You just focus on the exam. I prefer test centers honestly.

Online proctoring is convenient but has requirements. You need a private, quiet room with zero interruptions. I mean, literally nobody can walk in, no pets, nothing. A working webcam. Stable internet (minimum 1 Mbps, but realistically you want more). A clean workspace with no reference materials visible. They make you pan your webcam around the room before the exam starts. You'll need administrative rights to install the OnVUE software, and you might have to temporarily disable firewalls or antivirus programs. Run the system test before exam day. Seriously, do the system test. I've heard horror stories about people failing the environmental check on exam day and forfeiting their fee.

Online proctoring gives flexibility. Evenings, weekends, whatever. Test centers are typically open seven days a week but with more restricted hours. If you work a standard schedule and can't easily get to a test center during business hours, online proctoring makes sense.

One other thing: the online proctors are human beings watching you through a webcam, and sometimes you get someone having a bad day. I had a friend who got flagged because she looked up too much while thinking through a question. The proctor thought she was reading something on the ceiling. She wasn't. But it added 10 minutes of stress to her exam while they sorted it out. Just something to keep in mind.

When to schedule and how to reschedule

Book your exam 2-4 weeks in advance. Preferred time slots fill up, especially at popular test centers and during peak certification seasons (end of fiscal quarters, before holidays). If you wait until the last minute, you might end up with a 6 AM slot on a Saturday or a test center that's an hour drive away.

Rescheduling and cancellation policies: You can reschedule or cancel at least 24 hours before your appointment without penalty. Change your mind within 24 hours? You forfeit the exam fee. No refund, no reschedule. Microsoft is strict about this.

Check-in procedures

Test centers: arrive 15 minutes early. Bring two forms of valid, government-issued identification. They're serious about the ID requirement. Primary ID must have your name and photo, secondary ID needs your name and signature. Late arrivals may be denied entry without refund. They'll make you empty your pockets, store everything in a locker, and possibly do a metal detector scan. It's like airport security but for an exam.

For online exams: begin check-in 30 minutes before your scheduled time. Complete the system check, photograph your workspace and ID, and wait for proctor connection. The proctor connects via chat and webcam. The thing is, they'll ask you to pan your camera around the room, show your desk from all angles, and verify your ID. This process can take 10-15 minutes, so don't start it five minutes before your exam time.

Accommodations for disabilities

If you need special accommodations, submit your request through the Pearson VUE accommodations process at least two weeks before scheduling. Extra time, screen readers, separate testing rooms. They'll work with you, but you need to request it in advance with documentation. Don't assume you can just show up and ask for accommodations on exam day.

Getting ready to take MD-102

Once you've handled registration and scheduling, focus on prep. The MD-102 Practice Exam Questions Pack at $36.99 gives you realistic questions that mirror the actual exam format. Practice tests are critical. They show you where your knowledge gaps are and help you get comfortable with the question types. Not gonna lie, I think practice exams are more valuable than most study guides.

If you're also managing Windows Server infrastructure, the AZ-800 (Administering Windows Server Hybrid Core Infrastructure) exam overlaps with some MD-102 concepts around identity and device management. And if you're coming from an older Windows certification background, the 70-698 (Installing and Configuring Windows 10) covered similar territory before Microsoft updated their certification tracks.

The MD-102 validates your skills with Intune, Windows client deployment, device compliance policies, and application management. You're expected to know Autopilot enrollment, Entra ID device identity and access, and how to manage modern desktops end-to-end. It's not a memorization exam. You need hands-on experience with Microsoft 365 Endpoint Administrator tools. If you haven't spent time in the Intune admin center or deployed compliance policies, you'll struggle.

Budget time for practice. Schedule your exam when you're actually ready, not just because you want the certification by a certain date. And use that 24-hour reschedule window if you need it. Better to move your exam back a week than fail and pay another $165.

MD-102 Passing Score, Exam Format, and Policies

Microsoft MD-102 (Endpoint Administrator) certification overview

The Microsoft MD-102 Endpoint Administrator certification is the current "one exam" route to the Endpoint Administrator Associate certification, and honestly it's basically the exam that replaced the old split-brain setup from MD-100/MD-101. One test. One score. One less scheduling headache.

What it validates is pretty clear if you've spent any time in Microsoft 365 Endpoint Administrator work. You're managing endpoints, not just reading about them. Microsoft Intune MD-102 is heavy on real admin decisions: Windows 11 deployment and management, policy design, app rollout, and the stuff that breaks at 9:07 a.m. on Monday. Enrollment failures. Compliance conflicts that nobody saw coming. Identity shows up too, especially Entra ID device identity and access, because devices don't exist in a vacuum anymore and everything's connected to everything.

Who should take it? Look, if you're already touching Intune, Autopilot enrollment and provisioning, configuration profiles, and device compliance policies Intune, you're the target audience. Help desk folks can pass it too, but honestly it's easier if you've been the person actually clicking through Intune admin center and not just reading tickets someone else wrote.

MD-102 exam objectives (skills measured)

Microsoft calls these the "skills measured," and they map to what you do on the job. Not what you wish the job was. Some days are architecture. Most days? Just settings.

Deploy Windows client is the part where Windows 11 deployment and management becomes more than buzzwords floating around team meetings. Autopilot, enrollment flows, provisioning profiles, update rings. The fun stuff, if you're into that.

Manage identity and compliance hits Entra ID device identity and access, device registration, conditional access relationships, plus compliance policies that don't accidentally block half the company because someone checked the wrong box. This is where people lose points because they memorize definitions but can't reason about what happens when a device is marked noncompliant. The actual consequence chain matters here.

Manage, maintain, and protect devices. Configuration profiles, security baselines, monitoring, remediation, operational hygiene. Fragments. Lots of them. The thing is, this section feels like "everything else," which makes it tricky to study because the scope's wide.

Manage applications covers app deployment, assignment logic, detection rules, Win32 packaging realities, and troubleshooting installs that "worked on my machine" but fail everywhere else.

Where to find the official MD-102 exam objectives: the Microsoft Learn exam page. Don't trust random PDFs from 2023. MD-102 changes, and the exam writers do not care that your study notes were "pretty good" two years ago.

MD-102 cost and registration

MD-102 exam cost depends on region and currency. Microsoft adjusts pricing more often than people notice, which is annoying. In the US it's commonly around $165 USD, but I've seen different pricing abroad, plus taxes, plus occasional program-specific fees that appear at checkout.

Discounts exist. Student pricing sometimes applies. Employers buy vouchers in bulk. Training bundles can include exam attempts. Mentioning it because people pay full price out of habit, and that's just leaving money on the table for no reason.

Scheduling happens through Pearson VUE. Either online proctored or a test center, both have tradeoffs. Online is convenient, but it's also strict in ways that surprise people. Your desk setup matters. Your webcam angle matters. Your neighbor deciding to vacuum at 10 a.m. matters. Test center is boring, and boring is good when you're trying to focus for two hours straight. I actually prefer test centers because my home office shares a wall with my kid's room, and trying to explain to a proctor why there's suddenly Pokemon theme music in the background isn't how I want to spend exam anxiety.

MD-102 passing score and exam format

The MD-102 passing score is 700. That's on Microsoft's scaled score range of 100 to 1000. It's consistent with other role-based Microsoft certifications, including the Endpoint Administrator Associate certification path that everyone's chasing.

Here's the part people misunderstand constantly: 100 to 1000 is not a percentage correct, and treating it like one messes with your head. A 700 does not mean "70%." It's a scaled scoring model that accounts for difficulty differences between exam forms, so if one version has slightly nastier questions than another, the scoring can still reflect the same minimum competency level across thousands of test-takers. Honestly, it's the only fair way to run a high-volume certification exam without punishing people who got the harder form by random chance.

Why 700 is the threshold: Microsoft uses psychometric analysis to decide what "minimally competent" looks like for a job role, then sets the cut score where candidates demonstrate enough job-ready skills. That cut score is 700 for MD-102. Not because it's cute. Because it's measured. I mean, you can disagree with their methodology, but that's how they're doing it.

Score reporting works like this. You get immediate pass/fail when you finish, which is both terrifying and, wait, no, mostly just terrifying. Then you get a detailed score report that breaks down your performance by objective domain, but it won't show neat little percentages like school exams. Instead, it flags each domain as "above" or "below" target, which is actually useful when you're planning a retake or adjusting your MD-102 study guide priorities.

Also, no, you can't "win" by crushing one section and bombing another like some kind of strategic gamble. There's no partial credit by exam section like some people assume. You need 700+ overall scaled score. That's it. One number decides everything.

Retakes work independently. Each attempt is independent. Your previous score doesn't "carry forward" or give you partial credit. You still need 700+ on any single attempt to pass, and a near-miss doesn't reduce the bar next time. Feels harsh but makes sense when you think about credential integrity.

Exam duration and time management

You get 120 minutes (2 hours) from the moment the first question appears on your screen. The testing window does not include the pre-exam tutorial (around 10 minutes) or the post-exam survey (about 5 minutes). So the clock that matters is two hours of pure question time.

MD-102 typically lands around 40 to 60 questions, so you're budgeting roughly 2 to 3 minutes per question if you do the math. Not gonna lie, that's tight if you get case studies and performance-based items, because those are reading-heavy and click-heavy. They punish people who "kind of know" the portal but don't know where settings actually live.

My opinion? Don't sprint early. Keep a steady pace, mark the time sinks, and come back if you've got minutes left. The exam is designed to tempt you into overthinking or second-guessing, and rushing just makes that worse.

Question types you'll see

MD-102 includes a mix: multiple-choice single answer, multiple-choice multiple answer, drag-and-drop, hot area, build list, and case study questions. You might also see performance-based testing where you interact with simulated Azure portal or Intune admin center screens and actually do configuration tasks like you would on the job.

Case studies are their own vibe. You get a scenario about an organization, their devices, their constraints, their weird legacy systems, and then multiple related questions. You can review the case study details while answering those questions, which matters because the "one detail" you ignored will be the detail they test.

Performance-based or lab-like items are where people either feel at home or totally panic. Not much middle ground. These can test tasks like creating compliance policies, configuring Autopilot profiles, or deploying applications in a simulated environment. The trick is that you need to know both the concept and the click-path. Knowing what a compliance policy is doesn't help if you can't find where it lives. Knowing where it lives doesn't help if you don't understand what setting does what.

Question review works mostly: you can mark questions for review and return before submitting, except you can't go back in certain structured sections. Big one that catches people: once you leave a case study, you cannot return to it. Answer everything in that case study before you move on. No heroic "I'll come back later when I'm fresh." You won't get the chance.

Unscored survey items can appear too, which is annoying. Microsoft uses them to test new questions for future exams. They do not impact your score, but they are not labeled, so treat every question like it counts because you won't know which ones are real.

Testing policies: IDs, materials, breaks, and prohibited items

Identity verification is strict. You need two forms of valid, government-issued ID, with the primary including photo and signature, like a driver's license, passport, or national ID that's not expired. And the name has to match your registration and your Microsoft Certification Profile exactly, including middle names and suffixes. Look, this sounds nitpicky until you're standing there arguing about "Mike" versus "Michael" with a proctor who doesn't care about your story. Fix it before exam day.

No reference materials allowed. No notes. No websites open. No books or cheat sheets you printed at 2 a.m. The exam provides what it wants to provide.

Prohibited items pile up fast: phones, smartwatches, bags, food, drinks, hats, jackets, and basically anything that could hide a device or paper. Test centers give you storage lockers. Online proctoring is even stricter, and they can end your exam if you keep looking off-screen or someone walks into your room.

Breaks aren't scheduled. There are no scheduled breaks during the 120 minutes. You can take a bathroom break, but the timer keeps running and you're losing time. Plan accordingly. Hydrate beforehand, but not like you're running a marathon.

Calculator and notepad options exist: online exams have a digital whiteboard for notes. Test centers usually give a physical whiteboard or laminated note sheet with a marker, which honestly works better for some people.

Retake policies and waiting periods are straightforward enough: after the first failed attempt, wait 24 hours. After the second failure, wait 14 days. After the third and subsequent failures, it's still 14 days between attempts. There's no maximum number of retakes, but you pay the full fee each time. Gets expensive fast and makes you really think about preparation.

Results timeline and what to do next

Pass/fail shows immediately when you finish. Like, the second you click "end exam." The official result and certification status typically appear in your Microsoft Certification Profile within 24 hours, sometimes faster. Digital badges usually show up within 48 to 72 hours, which you can share on LinkedIn if that's your thing.

If you're prepping and want extra reps, I'm fine with practice content as long as it's mapped to the MD-102 exam objectives and explains why answers are right. Not just what the right answer is. If you want something quick and structured, the MD-102 Practice Exam Questions Pack is $36.99 and can help you identify weak domains fast, especially if your first pass through Microsoft Learn felt a little too "reading-only" and not enough application. I mean, you still need hands-on time in a real or trial environment, but timed questions help simulate pressure.

FAQs (quick answers)

How much does the MD-102 exam cost?

MD-102 exam cost varies by region, but commonly around $165 USD in the US, plus local taxes where applicable. Check Pearson VUE at checkout for your exact price because it changes.

What is the passing score for MD-102?

The MD-102 passing score is 700 on a scaled range of 100 to 1000, same as most Microsoft role-based exams.

Is MD-102 harder than MD-101/MD-100?

Different hard. MD-102 rolls content into one exam, and it feels more Intune-and-real-world focused, so if you lacked hands-on before, it can feel harder even if the topics overlap significantly.

What are the best study materials for the MD-102 exam?

Start with Microsoft Learn and the official objectives page, then add labs in Intune plus targeted MD-102 practice tests. If you like drill-style prep, the MD-102 Practice Exam Questions Pack is one option, but don't make practice questions your only plan because that's not enough.

How do I renew the Microsoft Endpoint Administrator certification?

Renewal is typically an annual online assessment on Microsoft Learn. No exam fee for renewal, but you do need to complete it in the renewal window shown in your profile, or you lose the cert.

MD-102 Difficulty Assessment: How Hard Is the Exam?

How challenging is MD-102 really?

Look, MD-102 sits somewhere in the middle difficulty-wise. It's not going to destroy you like some expert-level Microsoft certs, but it's also not a casual stroll like MS-900 or the other fundamentals exams. Most people who've taken it say it's intermediate level, totally manageable if you've got real-world experience. But you can't just cram theory and expect to pass.

The exam tests actual implementation skills. We're talking Intune configuration, Windows deployment scenarios, device compliance policies. You need to know how this stuff works in practice, not just recognize terminology from a study guide. That's what trips up folks who try to memorize their way through.

Comparing MD-102 to the legacy exams

Here's where it gets interesting. MD-102 replaced both MD-100 and MD-101, which used to be separate exams you'd take to earn the same certification. Some candidates report that MD-102 feels like those two rolled into one, which makes sense. Others say it's actually slightly harder because you're covering the same breadth of topics but in a more condensed format. You don't get two separate chances to prove yourself.

If you passed MD-100 and MD-101 back in the day, you probably remember MD-100 focused on Windows client deployment and configuration while MD-101 dealt with managing modern desktops and apps. MD-102 expects you to know all of that, plus newer content around Windows 11 and updated Intune features that didn't exist when those legacy exams were written.

Technical depth: theory won't save you

This isn't a cert where you can just read documentation and hope for the best. The questions dig into practical implementation scenarios. You'll see stuff like "An organization needs to deploy Windows 11 to 500 devices with minimal user interaction, which Autopilot profile configuration should you use?" Or "Configure conditional access to require MFA only when users access corporate data from unmanaged devices."

You need hands-on experience.

Period.

I mean, you could probably pass with just theory if you've got an incredible memory, but why make it harder on yourself? Spin up an Intune trial tenant, get your hands dirty with app deployments, compliance policies, Autopilot configurations. That's the stuff that'll stick when you're staring at a performance-based question asking you to actually configure something. I spent a weekend just breaking and fixing Autopilot profiles until I understood what each setting actually did, which honestly taught me more than a week of reading documentation ever could.

Cloud-first concepts are a stumbling block

If you're coming from a traditional on-premises IT background, this exam's going to feel like a different world. Cloud-native management is fundamentally different from what you're used to with Group Policy and on-prem tools. Autopilot deployment, cloud-based compliance policies, conditional access through Entra ID..these aren't just "the cloud version" of old approaches. They're entirely different approaches.

I've seen plenty of seasoned IT pros with 10+ years of Windows admin experience struggle with MD-102 because they're thinking in Group Policy terms when they need to be thinking in Intune policy terms. The logic's different. The troubleshooting approach is different. You can't just RDP into a machine and poke around like you used to.

Intune's massive scope across platforms

MD-102 covers Intune management for Windows, iOS, Android, and macOS. That's a lot of ground. Each platform has its own quirks, management approaches, limitations. Windows gives you the most control obviously, but you still need to understand how app protection policies work on iOS, how Android Enterprise enrollment differs from device administrator mode, how macOS device enrollment programs function.

You don't need to be an expert on every platform, but you need working knowledge. The exam will throw platform-specific scenarios at you, and you need to know which management approach makes sense for which device type.

Windows 11 content you can't skip

Microsoft's pushing Windows 11 hard, and MD-102 reflects that. You'll get questions on Windows 11 hardware requirements (TPM 2.0, UEFI firmware, Secure Boot), compatibility assessment tools, deployment considerations, feature differences from Windows 10. You need to know when Windows 11 makes sense for an organization and when it doesn't, how to handle hardware that doesn't meet requirements, how to configure Windows 11-specific features.

This is newer content compared to the legacy exams, so older study materials won't cover it thoroughly. Make sure whatever resources you're using have been updated for current Windows 11 content.

Scenario-based questions are the real test

A huge chunk of the exam is scenario-based questions. These are tough. You'll read a paragraph describing an organization's requirements, constraints, and existing infrastructure, then you need to select the most appropriate solution from several technically viable options.

The key word there? "Most appropriate." Often multiple answers would work, but only one is the best fit given the specific scenario. Maybe one solution costs more, or requires more administrative overhead, or doesn't scale well. You need to think like a consultant, not just a technician who knows how to configure stuff.

Performance-based questions require precision

The lab-based questions are where people either shine or crash. You'll get dropped into a simulated environment and asked to actually configure something. Create an Autopilot profile, set up a compliance policy, configure app deployment. These questions test whether you actually know how to do the work, not just recognize the right answer.

Here's the thing: you need to be precise. You can't just get "close enough." If the question asks you to create a compliance policy that marks devices non-compliant after 5 days of password expiration and you set it to 7 days, that's wrong. Read the requirements carefully. Configure exactly what's asked. Double-check your work.

Where beginners struggle most

If you're new to Intune, certain topics are going to give you trouble. Application deployment is one. Understanding the difference between required versus available apps, user versus device context, Win32 app deployment versus Microsoft Store apps. App protection policies are another pain point because the logic isn't always intuitive.

Compliance policy logic trips people up too. Understanding how compliance policies interact with conditional access, what happens when a device is marked non-compliant, how grace periods work. And conditional access integration with Entra ID device identity requires understanding several Microsoft 365 services and how they work together, which is a lot if you're just starting out.

Identity and access management complexity

Device identity management is conceptually challenging. You need to understand Entra joined devices versus Entra hybrid joined versus Entra registered, when you'd use each approach, how device identity differs from user identity, how device-based conditional access works.

The exam will test whether you understand these concepts deeply enough to apply them to real scenarios. It's not enough to know the definitions. You need to know which join type makes sense for a given organizational scenario, how authentication flows differ between them, what management capabilities you get with each.

Autopilot scenarios everyone gets wrong

Autopilot is heavily tested, and it's where lots of people stumble. You need to know the different deployment modes (user-driven, self-deploying, pre-provisioning), when to use each one, how to configure profiles, how to handle hardware hash collection, what happens during each phase of deployment.

The tricky part? Understanding what Autopilot can and can't do, and how it integrates with other services. Knowing that Autopilot requires Entra ID Premium for certain features, or that hybrid Entra join during Autopilot requires specific network connectivity, or how to troubleshoot when an Autopilot deployment fails.

Bottom line on difficulty

Is MD-102 hard? It's moderate to moderately-difficult depending on your background. If you've been working with Intune and modern device management for a year or more, you'll probably find it reasonable. If you're coming from on-premises Windows management without cloud experience, expect a steeper learning curve. If you're completely new to endpoint management, you should get some practical experience before attempting this exam. It's not designed for absolute beginners.

The exam rewards hands-on experience more than memorization. That's actually a good thing in my opinion, even though it makes the exam harder to pass through cramming. You can check out resources for similar Microsoft certifications like AZ-800 or MS-102 to get a sense of how Microsoft structures their modern exams. They're all moving toward this practical, scenario-based approach.

Set realistic expectations, get hands-on practice, focus on understanding concepts rather than memorizing facts, and you'll be fine. Just don't underestimate it.

Conclusion

Wrapping up your MD-102 path

Okay, so here's the deal. The Microsoft MD-102 Endpoint Administrator certification? Not happening over a weekend. It's this full test of your ability to actually manage modern endpoints using Intune, handle Windows 11 deployment and management, and work through the whole Microsoft 365 Endpoint Administrator ecosystem. Honestly, I've seen people with years of traditional SCCM experience just completely struggle because Intune thinks differently. The device compliance policies Intune uses, the way Entra ID device identity and access works, the Autopilot enrollment and provisioning workflows.. these aren't just checkboxes on the MD-102 exam objectives. They're real skills separating people who can talk about endpoint management from those who actually do it.

Not gonna lie. The MD-102 exam cost stings if you fail. Around $165 isn't pocket change for most of us, but here's the thing: if you're approaching this exam like you're cramming for some college test, you're setting yourself up for disappointment. The MD-102 passing score sits at 700 out of 1000, which sounds reasonable until you hit those performance-based questions testing whether you can actually configure compliance policies or troubleshoot an Autopilot deployment gone sideways. I once watched a colleague spend three hours on a single Autopilot failure that turned out to be a typo in a JSON profile. Three hours. Makes you appreciate why they test this stuff.

What actually works?

Hands-on practice. Period.

You need an Intune tenant where you can break things. Read the MD-102 study guide materials, sure, but then go configure app protection policies until you understand why certain settings conflict. I mean, really get in there and mess around. Deploy Windows devices through Autopilot until the process feels boring. Set up conditional access and watch it fail a few times so you know what logs to check.

The Endpoint Administrator Associate certification proves you're not just guessing your way through Microsoft Intune MD-102 scenarios. Employers know this exam filters out people who only read documentation versus those who've actually managed devices at scale, and honestly, that's a huge difference. When you understand the MD-102 prerequisites and have worked through realistic scenarios, the exam becomes less intimidating. Not easy, but less intimidating.

Before you schedule your exam date, I'd recommend working through full MD-102 practice tests that mirror the actual exam format. You need questions with detailed explanations teaching you why an answer's correct, not just what the right button is. The MD-102 Practice Exam Questions Pack gives you that realistic preparation with updated content matching current exam objectives. It's the kind of prep building confidence and identifying your weak spots before exam day.

You've got this.

But only if you put in the work. Good luck.

Show less info