Chapter 1 of 5 · Microsoft MD-102
Prepare infrastructure for devices
Entra join types, device groups, Intune enrollment, roles, compliance, Windows Hello and LAPS.
- 7topics
- 35 minfast track
- 3diagrams and exhibits
- 20–25%of the exam
Topics in this chapter
Take them in order, or jump to the one you need.
- 1Device Join Types and Registration in Microsoft Entra IDMD-102 device identity: choose between Microsoft Entra registered, joined and hybrid joined devices, and set the device settings…Diagram5 min
- 2Device Groups and Dynamic Membership RulesMD-102 device groups: plan assigned and dynamic Microsoft Entra device groups, write membership rules, and use device categories…4 min
- 3Enrollment Settings, Restrictions and Windows Automatic EnrollmentMD-102 Intune enrollment settings: enrollment restrictions, device limits, device enrollment managers, MDM user scope, and…5 min
- 4Apple and Android Enrollment MethodsMD-102 mobile enrollment: personal and corporate enrollment for macOS, iOS and iPadOS, Android Enterprise modes, Apple Business…5 min
- 5Intune Roles, Scope Tags and Multi Admin ApprovalMD-102 Intune administration: built-in and custom roles for Intune and Windows 365, scope tags for distributed IT, and Multi…Diagram6 min
- 6Compliance Policies and Conditional AccessMD-102 compliance: Intune compliance policies per platform, actions for noncompliance, tenant compliance settings and Conditional…Diagram5 min
- 7Windows Hello for Business, LAPS and Local GroupsMD-102 local identity: configure Windows Hello for Business with Intune, manage Windows LAPS passwords with Entra ID, and control…5 min
About this chapter
What this chapter covers
Before Intune can manage a device, the device needs an identity, a group to belong to and an enrollment path. This domain is worth 20 to 25 percent of the exam. It covers how devices join or register with Microsoft Entra ID, how you group them, how each platform enrolls in Microsoft Intune, who may administer what, and the identity and compliance controls that protect access.
You need to choose the right join type or enrollment method from a short scenario, and to know which setting stops a wrong device from getting in.
How the topics fit together
- Device join types and registration covers Entra registered, joined and hybrid joined devices.
- Device groups and dynamic membership rules covers the groups that policies target.
- Enrollment settings, restrictions and Windows automatic enrollment covers limits and Windows enrollment.
- Apple and Android enrollment methods covers personal and corporate enrollment for mobile platforms.
- Intune roles, scope tags and multi admin approval covers who can do what.
- Compliance policies and Conditional Access covers compliance rules and access decisions.
- Windows Hello for Business, LAPS and local groups covers sign in and local account controls.
Most questions here describe who owns the device and ask for the method that fits. Ownership, platform and user involvement decide the answer.
How to use these pages
Each topic page has the same shape, so you can skim for what you need.
- What it is: the idea in plain words.
- How it works: the mechanism, with examples and tables.
- What to remember for the exam: the facts to memorise and how questions are phrased.
- Common mistakes: the classic traps.
- Check yourself: three questions to test your understanding.
Ready for more practice?
The full Microsoft MD-102 question bank has 658 questions, with timed practice exams and an explanation for every answer.
This study guide is independent and is not affiliated with, endorsed by, or sponsored by Microsoft. Vendor names, certification names and exam codes are trademarks of their respective owners and are used for identification only.