What is the difference between MD-102 and MS-102?
MD-102 focuses on endpoint management using Intune, Autopilot, Entra ID, and Defender — it is the right certification for administrators whose primary responsibility is device management. MS-102 covers the full Microsoft 365 tenant including identity, Defender, compliance, retention, and DLP across all workloads.
MD-102 focuses specifically on endpoint management — deploying and securing devices using Intune, Autopilot, Entra ID, and Defender. It leads to the Microsoft 365 Certified: Endpoint Administrator Associate credential and is the right certification for administrators whose primary responsibility is device management and endpoint security.
MS-102 covers the full Microsoft 365 tenant administration scope including identity synchronization, threat protection with Defender, compliance, retention, DLP, and sensitivity labels across all M365 workloads. It leads to the Microsoft 365 Administrator certification.
MD-102 suits administrators responsible primarily for device fleets and endpoint security. MS-102 suits administrators responsible for the entire Microsoft 365 environment across identity, security, compliance, and multi-workload governance.
Related Information
- MD-102: endpoint management scope · MS-102: full M365 tenant scope
- MD-102: 5-day course, CHF 119 · MS-102: 5-day course, CHF 119
- MD-102: Intune, Autopilot, Entra ID, Defender (device) · MS-102: Defender (tenant), DLP, retention, identity sync
- Choose MD-102 if: primary role is device fleet management and endpoint security
- Choose MS-102 if: responsible for the full M365 environment across identity, security, compliance, and all workloads
Expert Insight
Organizations frequently confuse the scope of these two certifications when planning training paths for their IT team. MD-102 is the right choice when the administrator's primary accountability is device fleet management and endpoint security. MS-102 is the right choice when the administrator's primary accountability is the full Microsoft 365 tenant — identity, security, compliance, and all workloads. Sending a device-focused admin to MS-102 before MD-102 produces a certification mismatch with their daily responsibilities.
Well-prepared organizations treat MD-102 and MS-102 as complementary, not competing. The ideal MS-102 candidate has already completed MD-102 (or equivalent endpoint experience) and uses MS-102 to extend their scope to tenant-level governance, threat protection, compliance, and cross-workload administration — building up from device to platform.
Topics
Related Answers
What does the MD-102 exam cover?
The MD-102 exam tests deploying Windows endpoints using Autopilot and Intune, configuring identity and access with Microsoft Entra ID, managing application deployment, evaluating and enforcing compliance policies, and securing endpoints using Microsoft Defender. The passing score is 700.
byRamzi AYNATI
Who should attend MD-102 endpoint administrator training?
MD-102 is designed for endpoint administrators managing large device fleets, IT operations engineers in hybrid environments, security administrators enforcing zero trust policies, and M365 administrators aligning endpoint strategy with compliance. Windows administration and Entra ID experience are required.
byManuel VARTANIAN
What is the MD-102 certification and what does it qualify you to do?
The MD-102 exam leads to the Microsoft 365 Certified: Endpoint Administrator Associate credential, which validates the ability to deploy, configure, and secure enterprise endpoints using Microsoft Intune, Entra ID, and Autopilot. The passing score is 700.
byManuel VARTANIAN