Microsoft AuthorisedAssociate2026 ObjectivesTop Modern Workplace Cert
MD-102 Endpoint Administrator Associate
Manage Windows endpoints at enterprise scale — Intune, Autopilot, Windows 11, application delivery and compliance — mapped to MD-102. The modern workplace credential.
Win32, MSI, MSIX, Microsoft Store apps, deployment rings
🔐
Endpoint security
Defender for Endpoint, attack surface reduction, Bitlocker, Conditional Access
What this course is
Where endpoints stop being clicked through GPO.
MD-102 is Microsoft's Modern Workplace endpoint-administrator credential. It validates that you can manage Windows 11 endpoints at enterprise scale via Intune, Autopilot, Configuration Manager co-management, and Defender for Endpoint.
At Nexperts, MD-102 is delivered on a real M365 + Intune tenant. By day 4 you've enrolled 30 simulated devices via Autopilot, deployed 8 Win32 apps to deployment rings, applied compliance + Conditional Access, and run a real Defender for Endpoint incident.
MD-102 is the cert most undervalued in MY enterprises. Every modern-workplace and zero-touch project lives or dies on this credential's depth.
The 2026 MD-102 update sharpened the focus on Windows 11 24H2, Microsoft Intune Suite (Endpoint Privilege Management, Remote Help, Advanced Analytics), Defender for Endpoint Plan 2 hunting, and Cloud PC integration with AVD. We cover all four with hands-on labs.
Who should take this course
📱
Endpoint administrators
Already running SCCM / Intune. MD-102 is the formal credential.
👨💻
Desktop engineers
Pivoting to cloud-managed endpoints. MD-102 is the bridge.
💼
Modern workplace consultants
Selling and delivering Microsoft 365 to MY customers.
🌟
MS-102 holders
Natural pair. MS-102 is tenant-level, MD-102 is endpoint-level.
Wanting to step up to enterprise endpoint engineering.
Prerequisites
✓ 1–2 years of professional Windows endpoint administration experience
✓ Familiarity with SCCM / MEMCM helpful but not required
✓ Comfortable with PowerShell at intermediate level
✓ Working knowledge of Active Directory and Entra ID
→ Need a primer? We can bundle MS-900 + MD-102 in a single track.
Course Curriculum
Four domains. One modern workplace toolkit.
MD-102 is structured into Deploy Windows Client, Manage Identity & Compliance, Manage, Maintain & Protect Devices, and Manage Applications. We deliver in workplace-deploy order.
Hands-On Intune Sandbox
9 builds. Real M365 + Intune.
Every learner gets an M365 + Intune tenant with 30 simulated devices. By day 4 you've operated a real fleet — enrol, configure, deploy, secure and investigate.
01
Autopilot Deployment
Run an Autopilot user-driven deployment for 30 simulated devices.
Run a Remote Help session with policy gating. Audit the session in Intune.
Support
+ 14 micro-tasks across PowerShell, Graph PowerShell SDK and Intune CSPs.
Exam Information
One scenario exam. Heavy on Intune.
MD-102 is 40–60 questions over 100 minutes. The exam is dense with Intune scenarios — 'Configure X to achieve Y for these users'. Most candidates fail on Conditional Access + compliance interactions.
Microsoft MD-102 Exam
Questions40 – 60 (scenario + case study)
Duration100 minutes
Passing score700 / 1000
FormatPearson VUE / Online proctored
Validity1 year + free annual renewal assessment
Industry avg pass rate~70% first attempt
Nexperts pass rate94% first attempt
Compliance + CA Drill
Drill length3-hour structured drill
FormatWhiteboard + portal — you decide, peers challenge
Items practised18 compliance and CA scenarios
Common gotchasCompliance state vs CA grant control
StrategyRead the persona before the policy
OutcomeIdentity-question uplift +18%
WalkthroughPast scenario archive provided
Our 3-Mock Programme
01
Diagnostic Mock
End of day 1. Sets the baseline. Average 64%.
02
Scenario-Heavy Mock
Mid-course. 60% scenarios. Average 76%.
03
Final Clearance
Full timed simulation. 85%+ before we book. Average 86%.
0%
Pass Rate
94% of our MD-102 candidates pass on first attempt.
The Microsoft global first-attempt rate for MD-102 sits around 70%. We hit 94% by operating a real fleet of 30 simulated devices and gating booking on a clearance mock.
Real Intune sandboxCA + compliance drill94% first attemptFree retake voucher30-device fleet
Why our pass rate is 94%
Industry average: ~70%
Most candidates know the Intune primitives but freeze on multi-policy scenarios. The exam is heavy on 'which policy wins' questions.
Nexperts: 94%
We operate a real fleet and apply layered policies. We drill compliance + CA interactions on the whiteboard. By exam day, policy precedence is reflex.
Your Modern Workplace Path
MD-102 pairs with MS-102 and AZ-140.
MD-102 stacks naturally with MS-102 (M365 Administrator) for tenant-level depth or AZ-140 (Virtual Desktop) for the workspace combo.
Before this
No required prereq
Helpful: 1–2 years admin experience, MS-900 conceptual base.
Expected salary range after MD-102: RM 7,500 – RM 12,000/month for endpoint engineer / modern workplace roles in MY.
Student Reviews
What our MD-102 engineers say.
4.8
★★★★★
124 reviews
5★
88%
4★
10%
3★
2%
★★★★★
"Came from SCCM. The cloud-managed Intune patterns finally clicked. We migrated 2,000 endpoints to Intune the quarter after I cleared MD-102."
HM
Hairul Mokhtar
Senior Endpoint Engineer · PETRONAS Digital
✓ Passed first attempt · 836/1000
★★★★★
"Autopilot deployment lab is the most valuable single drill I've ever done. Walked back to my company on Monday and rolled out exactly the same pattern."
SR
Sarawanan Ramani
Modern Workplace Consultant · NTT MY
✓ Passed first attempt
★★★★
"Defender for Endpoint investigation lab was the highlight. We're now using the same approach for our SOC tier-2 process."
NN
Nor Nazira
IT Security Engineer · IHH Healthcare
✓ Passed first attempt · 802/1000
★★★★★
"Best practical Microsoft cert I've taken. Mock-3 was harder than the real exam. Walked into the exam centre confident."
BS
Beverly Soh
IT Support Lead · KPMG MY
✓ Passed first attempt · 858/1000
Copy page link
Share this course page with your team or save the URL for later.
