From Microsoft Modern Desktop to Endpoint Administrator

Microsoft’s Modern Desktop Administrator Associate certification belongs to an earlier phase of the Microsoft 365 certification program. The old path centered on MD-100 and MD-101 and validated Windows 10 deployment, device management, security, and related Microsoft 365 administration. Those exams and that certification path are retired. The current endpoint-administration credential is Microsoft 365 Certified: Endpoint Administrator Associate, built around Microsoft MD-102.

The change is more than a new exam code. Modern endpoint work now spans Microsoft Intune, Microsoft Entra ID, Windows Autopilot, Microsoft Defender for Endpoint, compliance, application management, Windows 365, automation, reporting, and non-Windows platforms. Anyone using an old MD-100/MD-101 study plan should therefore treat it as historical context, not a current certification roadmap.

What the Modern Desktop Administrator path represented

The Modern Desktop Administrator Associate credential was designed for administrators responsible for deploying and managing Windows in enterprise environments. It reflected the transition away from traditional imaging and domain-only management toward Microsoft 365, cloud identity, modern deployment, and centralized device control.

That transition was important. Many of the ideas behind the old path—device enrollment, configuration, security, identity, application deployment, and lifecycle management—still exist. The difference is that the current role expects them to be handled across a broader and more cloud-centered management plane.

Why MD-100 and MD-101 are no longer the target

Old articles often describe MD-100 and MD-101 as the required exams or recommend finishing one after passing a previous Windows exam. That guidance should no longer be followed. Those exam sequences are closed, and the current certification is not earned by combining the old tests.

Keeping this distinction clear matters because endpoint technology changed alongside the certification. Windows 10 remains present in many enterprises, but current endpoint administrators also need to understand Windows 11 deployment, cloud-based management, modern identity, cross-platform enrollment, endpoint security, automated remediation, and service-driven operations.

Microsoft MD-102 is the current endpoint exam

Microsoft MD-102 Managing and Securing Microsoft 365 Endpoints is the active exam for the Endpoint Administrator Associate certification. Its current scope covers preparing infrastructure for devices, managing and maintaining devices, protecting devices, managing and securing applications, and optimizing endpoint operations with automation, monitoring, and reporting.

That scope is a useful description of the real job. Endpoint administration is not simply configuring Windows settings. The administrator has to make devices enroll correctly, keep them compliant, deploy and update applications, protect data, integrate endpoint security, manage updates, troubleshoot failures, and use telemetry to improve reliability.

Our Microsoft MD-102 guide for 2026 goes deeper into the current Intune, Entra, and automation focus.

Intune now sits at the center of the role

Microsoft Intune is the main management platform candidates should understand. That includes enrollment for Windows, macOS, iOS, iPadOS, and Android; device configuration; compliance; application deployment; update management; remote actions; reporting; and endpoint-security integration.

A useful way to study Intune is to think in lifecycle stages. How does a device enter management? Which identity owns it? Which policies apply? How are conflicts resolved? What makes the device compliant? How are applications delivered? What happens when the device is lost, replaced, or retired? This produces more durable understanding than memorizing portal locations.

Identity and compliance are inseparable from device management

Endpoint administrators work closely with Microsoft Entra ID because identity determines who can enroll devices, how devices are represented, and how Conditional Access can use compliance as an access signal. A device can be technically functional and still fail the organization’s access requirements because its identity, registration, or compliance state is wrong.

Current preparation should therefore include Microsoft Entra join and registration, groups, Conditional Access dependencies, Windows Hello for Business, local administrator controls, and the relationship between Intune compliance and resource access.

Deployment has moved beyond classic imaging

Windows Autopilot and other cloud-based deployment methods are central to the modern model. Candidates should understand user-driven, pre-provisioned, and self-deploying approaches, along with enrollment status, application delivery, naming, and troubleshooting.

The important skill is not remembering a wizard. It is being able to design a repeatable deployment that produces the intended identity, policy, application, and security state without unnecessary manual work.

Endpoint security is part of the administrator’s job

Modern endpoint administration includes antivirus policy, disk encryption, firewall configuration, attack-surface reduction, security baselines, Defender for Endpoint integration, app control, update policy, and response to endpoint risk. This does not turn the endpoint administrator into a SOC analyst, but it does require enough security understanding to deploy controls safely and interpret when those controls are causing or revealing a problem.

Application management is broader than installation

MD-102 expects candidates to reason about packaging, deployment, updates, Microsoft 365 Apps, platform stores, app protection, and app configuration. In bring-your-own-device scenarios, protecting corporate data may matter more than managing the entire device. That is why mobile application management and app-protection policy deserve the same attention as classic software deployment.

Automation and reporting now matter explicitly

Endpoint environments can contain thousands of devices, so manual administration does not scale. Current objectives include automation with PowerShell and Microsoft Graph, proactive remediation, endpoint analytics, health monitoring, reporting, and operational optimization.

This is one of the clearest differences between the older certification mindset and the current role. A strong endpoint administrator should be able to identify a recurring issue, detect it with data, automate a safe response where appropriate, and measure whether the change improved the environment.

How to transition from old MD-100/MD-101 knowledge

Do not discard everything you learned. Keep the durable Windows, identity, networking, security, application, and troubleshooting concepts. Then deliberately update the management layer: Intune, Entra, Autopilot, modern endpoint security, Windows 365, cloud-based update management, and automation.

If you already worked through the old exams, use a gap analysis instead of restarting from zero. Compare your experience against the current MD-102 objectives and spend most of your time on capabilities that did not exist or were less prominent in the earlier path.

How to know when you are ready for MD-102

You should be able to explain a device’s full lifecycle and troubleshoot it without treating each product as a separate silo. Given an enrollment failure, you should know which identity, licensing, platform, restriction, network, or policy checks to make. Given an access problem, you should distinguish device state from Conditional Access. Given an application failure, you should know how assignment, detection, requirements, and logs affect the result.

For a skills-based self-check, use our Microsoft MD-102 readiness guide and compare your practical experience with the current role.

The certification changed because the job changed

The Modern Desktop Administrator Associate credential was valuable in its time, but presenting it as a current two-exam path would be inaccurate. The modern endpoint role is broader, more cloud-managed, more security-aware, and more automated. Microsoft MD-102 reflects that change.

If you are returning to endpoint certification after studying MD-100 or MD-101, treat the old material as a foundation. Then rebuild your preparation around the current Microsoft 365 Endpoint Administrator responsibilities and the active MD-102 blueprint.