WSQ - Microsoft Certified Endpoint Administrator Associate (MD-102)

Topic 1: Explore the Enterprise Desktop

• Examine benefits of modern management
• Examine the enterprise desktop life-cycle model
• Examine planning and purchasing
• Examine desktop deployment
• Plan an application deployment
• Plan for upgrades and retirement

Topic 2: Explore Windows Editions

• Examine Windows client editions and capabilities
• Select client edition
• Examine hardware requirements

Topic 3: Understand Microsoft Entra ID

• Examine Microsoft Entra ID
• Compare Microsoft Entra ID and Active Directory Domain Services
• Examine Microsoft Entra ID as a directory service for cloud apps
• Compare Microsoft Entra ID P1 and P2 plans
• Examine Microsoft Entra Domain Services

Topic 4: Manage Microsoft Entra identities

• Examine RBAC and user roles in Microsoft Entra ID
• Create and manage users in Microsoft Entra ID
• Create and manage groups in Microsoft Entra ID
• Manage Microsoft Entra objects with PowerShell
• Synchronize objects from AD DS to Microsoft Entra ID

Topic 5: Manage device authentication

• Describe Microsoft Entra join
• Examine Microsoft Entra join prerequisites limitations and benefits
• Join devices to Microsoft Entra ID
• Manage devices joined to Microsoft Entra ID

Topic 6: Enroll devices using Microsoft Configuration Manager

• Deploy the Microsoft Configuration Manager client
• Monitor the Microsoft Configuration Manager client
• Manage the Microsoft Configuration Manager client

Topic 7: Enroll devices using Microsoft Intune

• Manage mobile devices with Intune
• Enable mobile device management
• Explain considerations for device enrollment
• Manage corporate enrollment policy
• Enroll Windows devices in Intune
• Enroll Android devices in Intune
• Enroll iOS devices in Intune
• Explore device enrollment manager
• Monitor device enrollment
• Manage devices remotely

Topic 8: Execute device profiles

• Explore Intune device profiles
• Create device profiles
• Create a custom device profile

Topic 9: Oversee device profiles

• Monitor device profiles in Intune
• Manage device sync in Intune
• Manage devices in Intune using scripts

Topic 10: Maintain user profiles

• Examine user profile
• Explore user profile types
• Examine options for minimizing user profile size
• Deploy and configure folder redirection
• Sync user state with Enterprise State Roaming
• Configure Enterprise State Roaming in Azure

Topic 11: Execute mobile application management

• Examine mobile application management
• Examine considerations for mobile application management
• Prepare line-of-business apps for app protection policies
• Implement mobile application management policies in Intune
• Manage mobile application management policies in Intune

Topic 12: Deploy and update applications

• Deploy applications with Intune
• Add apps to Intune
• Manage Win32 apps with Intune
• Deploy applications with Configuration Manager
• Deploying applications with Group Policy
• Assign and publish software
• Explore Microsoft Store for Business
• Implement Microsoft Store Apps
• Update Microsoft Store Apps with Intune
• Assign apps to company employees

Topic 13: Administer endpoint applications

• Manage apps with Intune
• Manage Apps on non-enrolled devices
• Deploy Microsoft 365 Apps with Intune
• Additional Microsoft 365 Apps Deployment Tools
• Configure Microsoft Edge Internet Explorer mode
• App Inventory Review

Topic 14: Protect identities in Microsoft Entra ID

• Explore Windows Hello for Business
• Deploy Windows Hello
• Manage Windows Hello for Business
• Explore Microsoft Entra ID Protection
• Manage self-service password reset in Microsoft Entra ID
• Implement multi-factor authentication

Topic 15: Enable organizational access

• Enable access to organization resources
• Explore VPN types and configuration
• Explore Always On VPN
• Deploy Always On VPN

Topic 16: Implement device compliance

• Protect access to resources using Intune
• Explore device compliance policy
• Deploy a device compliance policy
• Explore conditional access
• Create conditional access policies

Topic 17: Generate inventory and compliance reports

• Report enrolled devices inventory in Intune
• Monitor and report device compliance
• Build custom Intune inventory reports
• Access Intune using Microsoft Graph API

Topic 18: Deploy device data protection

• Explore Windows Information Protection
• Plan Windows Information Protection
• Implement and use Windows Information Protection
• Explore Encrypting File System in Windows client
• Explore BitLocker

Topic 19: Manage Microsoft Defender for Endpoint

• Explore Microsoft Defender for Endpoint
• Examine key capabilities of Microsoft Defender for Endpoint
• Explore Windows Defender Application Control and Device Guard
• Explore Microsoft Defender Application Guard
• Examine Windows Defender Exploit Guard
• Explore Windows Defender System Guard

Topic 20: Manage Microsoft Defender in Windows client

• Explore Windows Security Center
• Explore Windows Defender Credential Guard
• Manage Microsoft Defender Antivirus
• Manage Windows Defender Firewall
• Explore Windows Defender Firewall with Advanced Security

Topic 21: Manage Microsoft Defender for Cloud Apps

• Explore Microsoft Defender for Cloud Apps
• Planning Microsoft Defender for Cloud Apps
• Implement Microsoft Defender for Cloud Apps

Topic 22: Assess deployment readiness

• Examine deployment guidelines
• Explore readiness tools
• Assess application compatibility
• Explore tools for application compatibility mitigation
• Prepare network and directory for deployment
• Plan a pilot

Topic 23: Deploy using the Microsoft Deployment Toolkit

• Evaluate traditional deployment methods
• Set up the Microsoft Deployment Toolkit for client deployment
• Manage and deploy images using the Microsoft Deployment Toolkit

Topic 24: Deploy using Microsoft Configuration Manager

• Explore client deployment using Configuration Manager
• Examine deployment components of Configuration Manager
• Manage client deployment using Configuration Manager
• Plan in-place upgrades using Configuration Manager

Topic 25: Deploy Devices using Windows Autopilot

• Use Autopilot for modern deployment
• Examine requirements for Windows Autopilot
• Prepare device IDs for Autopilot
• Implement device registration and out-of-the-box customization
• Examine Autopilot scenarios
• Troubleshoot Windows Autopilot

Topic 26: Implement dynamic deployment methods

• Examine subscription activation
• Deploy using provisioning packages
• Use Windows Configuration Designer
• Use Microsoft Entra join with automatic MDM enrollment

Topic 27: Plan a transition to modern endpoint management

• Explore using co-management to transition to modern endpoint management
• Examine prerequisites for co-management
• Evaluate modern management considerations
• Evaluate upgrades and migrations in modern transitioning
• Migrate data when modern transitioning
• Migrate workloads when modern transitioning

Topic 28: Manage Windows 365

• Explore Windows
• Configure Windows
• Administer Windows

Topic 29: Manage Azure Virtual Desktop

• Examine Azure Virtual Desktop
• Explore Azure Virtual Desktop
• Configure Azure Virtual Desktop
• Administer Azure Virtual Desktop

Final Assessment 

• Written Assessment - Short Answer Questions (WA-SAQ)
• Practical Performance (PP)

Promotion Code

Promo or discount cannot be applied to WSQ courses

Minimum Entry Requirement

Knowledge and Skills

• Able to operate using computer functions
• Minimum 3 GCE ‘O’ Levels Passes including English or WPL Level 5 (Average of Reading, Listening, Speaking & Writing Scores)

Attitude

• Positive Learning Attitude
• Enthusiastic Learner

Experience

• Minimum of 1 year of working experience.

Target age group: 21-65 years old

Minimum Software/Hardware Requirement

Software:

You can download and install the following software:

• Microsoft Endpoint Manager
• PowerShell

Hardware: Windows and Mac Laptops

About Progressive Wage Model (PWM)

The Progressive Wage Model (PWM) helps to increase wages of workers through upgrading skills and improving productivity. 

Employers must ensure that their Singapore citizen and PR workers meet the PWM training requirements of attaining at least 1 Workforce Skills Qualification (WSQ) Statement of Attainment, out of the list of approved WSQ training modules.

For more information on PWM, please visit MOM site.

Funding Eligility Criteria

Steps to Apply Skills Future Claim

• The staff will send you an invoice with the fee breakdown.
• Login to the MySkillsFuture portal, select the course you’re enrolling on and enter the course date and schedule.
• Enter the course fee payable by you (including GST) and enter the amount of credit to claim.
• Upload your invoice and click ‘Submit’

SkillsFuture Level-Up Program

The  SkillsFuture Level-Up Programme provides greater structural support for mid-career Singaporeans aged 40 years and above to pursue a substantive skills reboot and stay relevant in a changing economy. For more information, visit SkillsFuture Level-Up Programme

Get Additional Course Fee Support Up to $500 under UTAP

The Union Training Assistance Programme (UTAP) is a training benefit provided to NTUC Union Members with an objective of encouraging them to upgrade with skills training. It is provided to minimize the training cost. If you are a NTUC Union Member then you can get 50% funding (capped at $500 per year) under Union Training Assistance Programme (UTAP).

For more information visit NTUC U Portal – Union Training Assistance Program (UTAP)

Steps to Apply UTAP

• Log in to your U Portal account to submit your UTAP application upon completion of the course.

Note

• SSG subsidy is available for Singapore Citizens, Permanent Residents, and Corporates.
• All Singaporeans aged 25 and above can use their SkillsFuture Credit to pay. For more details, visit www.skillsfuture.gov.sg/credit
• An unfunded course fee can be claimed via SkillsFuture Credit or paid in cash.
• UTAP funding for NTUC Union Members is capped at $250 for 39 years and below and at $500 for 40 years and above.
• UTAP support amount will be paid to training provider first and claimed after end of class by learner.

Appeal Process

1. The candidate has the right to disagree with the assessment decision made by the assessor.
2. When giving feedback to the candidate, the assessor must check with the candidate if he agrees with the assessment outcome.
3. If the candidate agrees with the assessment outcome, the assessor & the candidate must sign the Assessment Summary Record.
4. If the candidate disagrees with the assessment outcome, he/she should not sign in the Assessment Summary Record.
5. If the candidate intends to appeal the decision, he/she should first discuss the matter with the assessor/assessment manager.
6. If the candidate is still not satisfied with the decision, the candidate must notify the assessor of the decision to appeal. The assessor will reflect the candidate’s intention in the Feedback Section of the Assessment Summary Record.
7. The assessor will notify the assessor manager about the candidate’s intention to lodge an appeal.
8. The candidate must lodge the appeal within 7 days, giving reasons for appeal 
9. The assessor can help the candidate with writing and lodging the appeal.
10. he assessment manager will collect information from the candidate & assessor and give a final decision.
11. A record of the appeal and any subsequent actions and findings will be made.
12. An Assessment Appeal Panel will be formed to review and give a decision.
13. The outcome of the appeal will be made known to the candidate within 2 weeks from the date the appeal was lodged.
14. The decision of the Assessment Appeal Panel is final and no further appeal will be entertained.
15. Please click the link below to fill up the Candidates Appeal Form.

• IT Support Engineer
• Endpoint Security Administrator
• IT Operations Analyst
• Infrastructure Engineer
• Systems Engineer
• Desktop Support Technician
• Network Engineer
• IT Service Manager
• IT Project Coordinator
• Helpdesk Manager
• IT Operations Manager
• IT Business Analyst
• Technical Support Specialist
• IT Change Manager
• IT Compliance Analyst

Sanjiv Venkatram:
Sanjiv Venkatram is a highly accomplished IT strategist and enterprise systems architect with more than 25 years of experience in Microsoft technologies, infrastructure management, and automation. As a certified Microsoft Azure Solutions Architect and DevOps Engineer Expert, he has led numerous digital transformation initiatives involving large-scale deployments, endpoint security, and identity management across financial and government sectors. Sanjiv specializes in designing modern device management frameworks that enhance security, compliance, and user productivity across enterprise networks.

In “Microsoft Certified Endpoint Administrator Associate (MD-102),” Sanjiv guides participants through the planning, deployment, and management of modern endpoints using Microsoft Intune, Entra ID, and Windows Autopilot. His sessions emphasize zero-trust security principles, cloud policy configuration, and lifecycle management. By combining hands-on labs with strategic implementation frameworks, he equips learners with the technical and managerial skills to oversee secure, scalable endpoint infrastructures in hybrid work environments.

Agus Salim: Agus Salim is an experienced IT systems engineer and certified trainer with over 15 years of expertise in endpoint management, cybersecurity, and enterprise systems administration. A WSQ-accredited adult educator and Microsoft Certified Professional, he has trained corporate clients in device management, Windows Server administration, and cloud-based security solutions. His practical experience in managing hybrid infrastructures makes him adept at bridging traditional on-premises systems with modern Microsoft cloud environments.

In “Microsoft Certified Endpoint Administrator Associate (MD-102),” Agus focuses on the implementation of secure endpoint management solutions using Microsoft Endpoint Manager and Intune. His training covers device provisioning, compliance policies, and remote monitoring for both Windows and mobile platforms. Through structured, hands-on exercises, he enables learners to master the configuration and protection of enterprise endpoints—ensuring efficient, secure, and compliant IT operations.

Kishan Raaj: Kishan Raaj is a Microsoft Certified Azure Data Scientist and SAP Certified Application Specialist with over 20 years of experience in enterprise IT, data science, and cloud architecture. He has delivered projects and training across Asia for clients such as Accenture, Hitachi, and Singapore Power, specializing in Microsoft cloud technologies, Power BI, and machine learning integration. A WSQ-certified ACTA trainer, Kishan has accumulated over 15,000 hours of instructional experience, combining deep technical knowledge with strong business acumen.

In “Microsoft Certified Endpoint Administrator Associate (MD-102),” Kishan helps participants master endpoint deployment, security, and policy management in Azure-integrated environments. His sessions emphasize automation, analytics, and the integration of Microsoft tools for enterprise device control. Leveraging his cross-disciplinary expertise in AI, cloud computing, and systems engineering, he enables learners to optimize device performance, enhance compliance, and streamline administrative operations across enterprise infrastructures.

Alec Tan Chee Wee: Alec Tan is an experienced IT consultant and solutions architect with over 15 years of expertise in Microsoft systems, cloud infrastructure, and endpoint management. He has successfully delivered enterprise-level implementations in Azure Active Directory, Intune, and Microsoft 365, supporting clients in designing secure, automated device management solutions. His strong technical foundation and problem-solving approach allow him to bridge development, operations, and user experience in modern IT environments.

In “Microsoft Certified Endpoint Administrator Associate (MD-102),” Alec focuses on hands-on learning in endpoint configuration, policy deployment, and security monitoring using Microsoft Intune and Windows Autopilot. His sessions emphasize best practices in identity management, compliance automation, and hybrid cloud integration. Through guided demonstrations and scenario-based learning, he prepares participants to efficiently manage devices and user experiences across complex enterprise networks.

Bernard Peh: Bernard Peh is a seasoned IT professional, consultant, and ACLP-certified educator with over two decades of experience in information systems, enterprise architecture, and IT governance. He has held leadership and instructional roles across corporate training, government, and higher education institutions, specializing in digital transformation and modern workplace solutions. Bernard is well-known for his structured, learner-focused training style that connects Microsoft technologies to real-world business outcomes.

In “Microsoft Certified Endpoint Administrator Associate (MD-102),” Bernard trains professionals to deploy, secure, and troubleshoot enterprise devices in Microsoft 365 environments. His sessions emphasize the application of Microsoft Intune, Endpoint Manager, and security policies to ensure organizational compliance and efficiency. By combining theory with hands-on practice, he equips participants to manage enterprise endpoints effectively and support modern, secure digital workplaces.