Modern Desktop Administrator Associate (MD-100 & MD-101)

• configure Edge and Internet Explorer
• configure mobility settings
• configure sign-in options
• customize the Windows desktop

Manage local users, local groups, and devices

• manage devices in directories
• manage local groups
• manage local users

• configure NTFS permissions
• configure shared permissions

• configure local registry
• implement local policy
• troubleshoot group policies on devices

• configure user account control (UAC)
• configure Windows Defender Firewall
• implement encryption

Configure networking

• configure client IP settings
• configure mobile networking
• configure VPN client
• troubleshoot networking
• configure Wi-Fi profiles

• configure remote management
• enable PowerShell Remoting
• configure remote desktop access

• perform file recovery (including OneDrive)
• recover Windows 10
• troubleshoot startup/boot process

• check for updates
• troubleshoot updates
• validate and test updates
• select the appropriate servicing channel
• configure Windows update options

• configure and analyze event logs
• manage performance
• manage Windows 10 environment

Plan and implement Windows 10 by using dynamic deployment

• evaluate and select an appropriate deployment options
• pilot deployment
• manage and troubleshoot provisioning packages

• evaluate and select an appropriate deployment options
• pilot deployment
• create, validate, and assign deployment profile
• extract device HW information to CSV file
• import device HW information to cloud service
• troubleshoot deployment

• identify upgrade and downgrade paths
• manage in-place upgrades
• configure a Windows analytics environment
• perform Upgrade Readiness assessment
• migrate user profiles

• configure Windows 10 delivery optimization
• configure Windows Update for Business
• deploy Windows updates
• implement feature updates
• monitor Windows 10 updates

• manage authentication policies
• manage sign-on options
• perform Azure AD join

Plan and implement co-management

• implement co-management precedence
• migrate group policy to MDM policies
• recommend a co-management strategy

• implement conditional access policies
• manage conditional access policies
• plan conditional access policies
• implement device compliance policies
• manage device compliance policies
• plan device compliance policies

• implement device profiles
• manage device profiles
• plan device profiles

• configure user profiles
• configure Enterprise State Roaming in Azure AD
• configure sync settings
• implement Folder Redirection (including OneDrive)

• implement and manage Windows Defender Application Guard
• implement and manage Windows Defender Credential Guard
• implement and manage Windows Defender Exploit Guard
• implement Windows Defender Advanced Threat Protection
• integrate Windows Defender Application Control
• manage Windows Defender Antivirus

• configure enrollment settings
• configure Intune automatic enrollment
• enable device enrollment
• enroll non-Windows devices
• enroll Windows devices
• generate custom device inventory reports
• review device inventory

• monitor device health (e.g., log analytics, Windows Analytics, or other cloud-based tools)
• monitor device security

Deploy and update applications

• assign apps to groups
• deploy apps by using Intune
• deploy apps by using Microsoft Store for Business
• deploy O365 ProPlus; enable sideloading of apps into images
• gather Office readiness data
• configure IE Enterprise mode
• configure and implement assigned access or public devices

• implement MAM policies
• manage MAM policies
• plan MAM
• configure Windows Information Protection
• implement Azure Information Protection templates
• securing data by using Intune