What is the difference between MD-102 and MS-102?
MD-102 focuses on endpoint management using Intune, Autopilot, Entra ID, and Defender — it is the right certification for administrators whose primary responsibility is device management. MS-102 covers the full Microsoft 365 tenant including identity, Defender, compliance, retention, and DLP across all workloads.
MD-102 focuses specifically on endpoint management — deploying and securing devices using Intune, Autopilot, Entra ID, and Defender. It leads to the Microsoft 365 Certified: Endpoint Administrator Associate credential and is the right certification for administrators whose primary responsibility is device management and endpoint security.
MS-102 covers the full Microsoft 365 tenant administration scope including identity synchronization, threat protection with Defender, compliance, retention, DLP, and sensitivity labels across all M365 workloads. It leads to the Microsoft 365 Administrator certification.
MD-102 suits administrators responsible primarily for device fleets and endpoint security. MS-102 suits administrators responsible for the entire Microsoft 365 environment across identity, security, compliance, and multi-workload governance.
Related Information
- MD-102: endpoint management scope · MS-102: full M365 tenant scope
- MD-102: 5-day course, CHF 119 · MS-102: 5-day course, CHF 119
- MD-102: Intune, Autopilot, Entra ID, Defender (device) · MS-102: Defender (tenant), DLP, retention, identity sync
- Choose MD-102 if: primary role is device fleet management and endpoint security
- Choose MS-102 if: responsible for the full M365 environment across identity, security, compliance, and all workloads
Expert Insight
Organizations frequently confuse the scope of these two certifications when planning training paths for their IT team. MD-102 is the right choice when the administrator's primary accountability is device fleet management and endpoint security. MS-102 is the right choice when the administrator's primary accountability is the full Microsoft 365 tenant — identity, security, compliance, and all workloads. Sending a device-focused admin to MS-102 before MD-102 produces a certification mismatch with their daily responsibilities.
Well-prepared organizations treat MD-102 and MS-102 as complementary, not competing. The ideal MS-102 candidate has already completed MD-102 (or equivalent endpoint experience) and uses MS-102 to extend their scope to tenant-level governance, threat protection, compliance, and cross-workload administration — building up from device to platform.
“MD-102 owns the device layer. MS-102 owns the entire tenant. One is a specialty; the other is the top of the Microsoft 365 admin stack.”
ISO 27001 Senior Lead Implementer • Certified Artificial Intelligence Professional
What's next?
Explore related training
Browse all: Microsoft TrainingsMS-900: Microsoft 365 Certified: Fundamentals
One-day course establishing foundational knowledge of Microsoft 365 and cloud services. Covers Microsoft 365 capabilities, security, compliance, privacy, and subscription models. Prepares for the MS-900 Microsoft 365 Certified: Fundamentals exam.
View courseMS-102: Microsoft 365 Administrator
This course prepares participants to administer Microsoft 365 tenants, identities, security controls, and compliance workflows in production environments. It addresses the operational reality of hybrid identity, endpoint access, threat exposure, and retention obligations across Microsoft 365 services. Participants work through tenant configuration, synchronization choices, Defender operations, and Purview enforcement decisions that affect daily administration. Abilene Academy delivers the course through active consultants who teach from implementation and operations experience, not theory alone. It is designed for professionals targeting the Microsoft 365 Administrator role after completing at least one Microsoft 365 role based administrator path.
View courseSC-300: Microsoft Identity and Access Administrator
Four-day course on implementing and managing identity and access solutions using Microsoft Azure AD. Covers identity configuration, conditional access, application access management, and identity governance. Aligned with Microsoft Identity and Access Administrator Associate certification.
View courseRelated Answers
What does the MD-102 exam cover?
The MD-102 exam tests deploying Windows endpoints using Autopilot and Intune, configuring identity and access with Microsoft Entra ID, managing application deployment, evaluating and enforcing compliance policies, and securing endpoints using Microsoft Defender. The passing score is 700.
byRamzi AYNATI
Who should attend MD-102 endpoint administrator training?
MD-102 is designed for endpoint administrators managing large device fleets, IT operations engineers in hybrid environments, security administrators enforcing zero trust policies, and M365 administrators aligning endpoint strategy with compliance. Windows administration and Entra ID experience are required.
byManuel VARTANIAN
What is the MD-102 certification and what does it qualify you to do?
The MD-102 exam leads to the Microsoft 365 Certified: Endpoint Administrator Associate credential, which validates the ability to deploy, configure, and secure enterprise endpoints using Microsoft Intune, Entra ID, and Autopilot. The passing score is 700.
byManuel VARTANIAN
More from MD-102: Endpoint Administrator
What does the MD-102 exam cover?
The MD-102 exam tests deploying Windows endpoints using Autopilot and Intune, configuring identity and access with Microsoft Entra ID, managing application deployment, evaluating and enforcing compliance policies, and securing endpoints using Microsoft Defender. The passing score is 700.
Who should attend MD-102 endpoint administrator training?
MD-102 is designed for endpoint administrators managing large device fleets, IT operations engineers in hybrid environments, security administrators enforcing zero trust policies, and M365 administrators aligning endpoint strategy with compliance. Windows administration and Entra ID experience are required.
What is the MD-102 certification and what does it qualify you to do?
The MD-102 exam leads to the Microsoft 365 Certified: Endpoint Administrator Associate credential, which validates the ability to deploy, configure, and secure enterprise endpoints using Microsoft Intune, Entra ID, and Autopilot. The passing score is 700.
Browse all FAQs →
Full knowledge base