Microsoft Enterprise Certification Library

Certification Tracks & Playbooks

Select a course track to view structured playbooks and exam objectives.

MD-10226 Playbooks

Endpoint Administrator

Deploy, configure, protect, and manage Windows, iOS, and Android endpoints using Microsoft Intune, Entra ID, and Defender.

6 DomainsExplore track
AZ-1046 Playbooks

Azure Administrator

Implement, manage, and monitor identity, governance, storage, compute, and virtual networks in Microsoft Azure.

5 DomainsExplore track
MS-10210 Playbooks

Microsoft 365 Administrator

Deploy and manage tenant-level implementation, identity synchronization, threat protection, and Purview compliance.

4 DomainsExplore track
MD-102Skills Measured (2026)

Endpoint Administrator Library

Deploy, configure, protect, and manage Windows, iOS, and Android endpoints using Microsoft Intune, Entra ID, and Defender.

Open first playbook
6 domains26 published playbooksVerified 2026-08

Browse by domain

Course index

1

Device Enrollment & Autopilot

20–25%

Windows Autopilot profiles, hardware hash harvesting, Enrollment Status Page (ESP), and Intune automatic enrollment.

1.1Windows Autopilot: User-Driven Entra JoinAutopilot · Entra ID · Intune1.2Windows Autopilot: Self-Deploying Mode & KiosksAutopilot · Self-Deploying · Kiosk1.3Enrollment Device Platform Restrictions & MDM ScopeEnrollment Restrictions · MDM User Scope · BYOD1.4Windows Autopilot: Pre-Provisioned DeploymentAutopilot · Pre-Provisioning · White Glove1.5Mobile Enrollment: Apple ADE & Android EnterpriseiOS · Android · Apple Business Manager
2

Device Compliance & Health

15–20%

Device compliance policies, BitLocker verification, Secure Boot, minimum OS baselines, and Conditional Access integration.

2.1Intune Device Compliance Policies: Windows 10 & 11Compliance · BitLocker · Conditional Access2.2Conditional Access: Require Compliant DeviceConditional Access · Compliance · Zero Trust2.3Device Health Attestation & Defender Sensor OnboardingHealth Attestation · Defender for Endpoint · DHA2.4Device Identity: Entra Joined vs Hybrid vs RegisteredEntra ID · Hybrid Join · PRT
3

Endpoint Security & Access

20–25%

Windows LAPS, BitLocker silent disk encryption, Attack Surface Reduction (ASR), and Microsoft Defender for Endpoint.

3.1Windows LAPS: Cloud-Native Local Admin SolutionWindows LAPS · Entra ID · Security3.2BitLocker Silent Disk Encryption & Key EscrowBitLocker · Disk Encryption · TPM 2.03.3Attack Surface Reduction (ASR) Rules & Exploit ProtectionASR · Attack Surface Reduction · LSASS3.4Defender for Endpoint: Intune EDR OnboardingDefender for Endpoint · MDE · EDR3.5Windows Firewall & Network Protection via IntuneFirewall · Network Protection · SmartScreen
4

Configuration Profiles & Policies

20–25%

Settings Catalog, Administrative Templates (ADMX), Endpoint Privilege Management (EPM), and Cloud PKI.

4.1Settings Catalog & Administrative Templates (ADMX)Settings Catalog · ADMX · Group Policy4.2Endpoint Privilege Management (EPM) PoliciesEPM · Least Privilege · Elevation Rules4.3Windows Update for Business: Update Rings & PoliciesWUfB · Windows Updates · Update Rings4.4Assigned Access: Single-App & Multi-App KioskKiosk · Assigned Access · Shell Launcher
5

Application Management & Security

15–20%

Win32 app packaging (.intunewin), detection scripts, Microsoft 365 Apps, and App Protection Policies (MAM).

5.1Win32 App Packaging, Detection Rules & ESP BlockingWin32 Apps · intunewin · Detection Rules5.2Microsoft 365 Apps: Deployment & Update ChannelsM365 Apps · Office · Update Channels5.3Mobile Application Management (MAM): App ProtectionMAM · App Protection · BYOD5.4Microsoft Store & Windows Package Manager (WinGet)Microsoft Store · WinGet · Package Manager
6

Automation, Monitoring & Diagnostics

10–15%

Microsoft Graph PowerShell SDK, Intune Management Extension (IME) logs, Endpoint Analytics, and Remediations.

6.1Microsoft Graph PowerShell SDK Admin AutomationMicrosoft Graph · PowerShell · Automation6.2Intune Management Extension (IME) Log DiagnosticsIME Logs · Troubleshooting · CMTrace6.3Endpoint Analytics & Proactive RemediationsEndpoint Analytics · Remediations · PowerShell6.4Device Lifecycle: Remote Actions & RecoveryLifecycle · Wipe · Retire