MICROSOFT 365 CERTIFIED - MODERN DESKTOP ADMINISTRATOR ASSOCIATE

Modern Desktop Administrators deploy, configure, secure, manage, and monitor devices and client applications in an enterprise environment.
Certification details
Deploy Windows (15-20%)
Install Windows 10
◼ perform a clean installation
◼ perform an in-place upgrade using tools such as WDS
◼ customize a Windows 10 installation using Windows ADK
◼ select the appropriate Windows edition
Perform post-installation configuration
◼ configure Microsoft Edge
◼ configure mobility settings
◼ customize the Windows desktop
◼ troubleshoot activation issues
◼ configure printers and external devices
◼ configure Windows 10 by using provisioning packages
◼ configure Microsoft Store settings
◼ configure Windows 10 built-in application settings
◼ configure and manage services
Manage devices and data (25-30%)
Manage users, groups, and devices
◼ manage local groups
◼ manage local users
◼ manage users, groups, and devices in Active Directory Domain Services
◼ manage users, groups, and devices in Azure Active Directory
◼ configure sign-in options
Configure devices by using local policies
◼ implement local policy
◼ troubleshoot group policies on devices
◼ configure Windows 10 settings by using group policy
Manage Windows security
◼ configure user account control (UAC)
◼ configure Microsoft Defender Firewall
◼ implement device encryption
◼ configure Microsoft Defender Antivirus
◼ manage device security using core isolation, secure boot, and TPM
Configure storage and connectivity (15-20%)
Configure networking
◼ configure client IP settings
◼ configure mobile networking
◼ troubleshoot networking
Configure data access and protection
◼ configure NTFS permissions
◼ configure shared permissions
◼ configure local storage
◼ manage and optimize storage
◼ configure file and folder permissions
◼ configure OneDrive/OneDrive for Business
Maintain Windows (30-35%)
Configure system and data recovery
◼ perform file recovery
◼ recover Windows 10
◼ troubleshoot startup/boot process
◼ create and manage system restore points
Manage updates
◼ troubleshoot updates
◼ select and configure the appropriate servicing channel for feature updates
◼ configure Windows update options
◼ plan for types of Windows updates including feature updates, quality updates, servicing
stack updates, driver updates, and Microsoft product updates
◼ configure updates by using Windows Update for Business
Monitor and manage Windows
◼ configure and analyze event logs
◼ manage performance
◼ manage Windows 10 environment
◼ configure local registry
◼ schedule tasks
Configure remote connectivity
◼ manage Windows 10 remotely by using Windows Admin Center
◼ configure remote assistance tools including Remote Assist and Quick Assist
◼ manage Windows remotely by using Windows Remote Management and PS remoting
◼ configure remote desktop access
Exam MD-101: Managing Modern Desktops
Deploy and Upgrade Operating Systems (25-30%)
Plan a Windows 10 deployment
◼ assess infrastructure readiness
◼ evaluate and select appropriate deployment options (Endpoint Manager, MDT,
Configuration Manager)
◼ plan upgrade and downgrade paths
◼ plan app compatibility
◼ plan for user state
Plan and implement Windows 10 by using Windows Autopilot
◼ choose method based on requirements
◼ create, validate, and assign deployment profile
◼ extract device HW information to CSV file
◼ import device HW information to cloud service
◼ deploy Windows 10
◼ troubleshoot deployment
Plan and implement Windows 10 using MDT
◼ choose configuration options based on requirements
◼ create and manage images
◼ deploy images (may include WDS)
◼ create and use task sequences
◼ manage application and driver deployment
◼ monitor and troubleshoot deployment
Manage accounts, VPN connections, and certificates on Windows 10
◼ secure privileged accounts on Windows 10
◼ configure VPN client
◼ configure and manage certificates on client devices
Manage Policies and Profiles (20-25%)
Implement compliance policies for devices
◼ implement device compliance policies
◼ manage device compliance policies
◼ plan device compliance policies
Configure device profiles
◼ implement device profiles
◼ manage device profiles
◼ plan device profiles
◼ control policy conflicts
◼ configure and implement assigned access or public devices
◼ configure filters for configuration profiles
Manage user profiles
◼ configure user profiles
◼ configure Enterprise State Roaming in Azure AD
◼ configure sync settings
Manage and Protect Devices (30-35%)
Implement and manage device, application, and threat protection
◼ implement and manage Microsoft Defender Application Guard
◼ implement and manage Windows Defender Credential Guard
◼ implement and manage Exploit protection
◼ plan and Implement Microsoft Defender Advanced for Endpoint for Windows 10
◼ integrate Windows Defender Application Control
◼ protect devices using Endpoint Security
◼ manage enterprise-level disk encryption
◼ implement and manage security baselines in Microsoft Intune
Manage devices enrolled in Microsoft Intune
◼ configure enrollment settings in Microsoft Intune
◼ configure Microsoft Intune automatic and bulk enrollment
◼ enroll non-Windows devices
◼ enroll Windows devices
◼ review device inventory
Monitor devices
◼ monitor devices using Azure Monitor and Desktop Analytics
◼ monitor device inventory reports using Endpoint Manger Admin Center
Manage updates
◼ configure Windows 10 delivery optimization
◼ deploy Windows updates using Microsoft Intune
◼ monitor Windows 10 updates
Manage Apps and Data (10-15%)
Deploy and update applications
◼ assign apps to users or groups
◼ deploy apps by using Microsoft Intune
◼ deploy apps by using Microsoft Store for Business/iTunes/Google Play
◼ deploy Microsoft 365 Apps for enterprise (by using Office Deployment Tool, Intune, or
Microsoft 365)
◼ create and Modify Office deployment configurations (using ODT or Microsoft 365 Apps
Admin Center/Office Customization Tool)
◼ gather Microsoft 365 Apps readiness data
Implement Mobile Application Management (MAM)
◼ implement App Protection policies
◼ manage App Protection policies
◼ plan App Protection Policies