Microsoft 365 Certified Modern Desktop Administrator Associate

Deploy Windows

Deploy Windows 10

• configure language packs


• perform a clean installation


• migrate user data


• perform an in-place upgrade (using tools such as MDT, WDS, ADK, etc.)


• select the appropriate Windows edition


• troubleshoot activation issues

Perform post-installation configuration

• configure Edge and Internet Explorer


• configure mobility settings


• configure sign-in options


• customize the Windows desktop

Manage devices and data

Manage local users, local groups, and devices

• manage devices in directories


• manage local groups


• manage local users

Configure data access and protection

• configure NTFS permissions


• configure shared permissions

Configure devices by using local policies

• configure local registry


• implement local policy


• troubleshoot group policies on devices

Manage Windows security

• configure user account control (UAC)


• configure Windows Defender Firewall


• implement encryption

Configure connectivitys

Configure networking

• configure client IP settings


• configure mobile networking


• configure VPN client


• troubleshoot networking


• configure Wi-Fi profiles

Configure remote connectivity

• configure remote management


• enable PowerShell Remoting


• configure remote desktop access

Maintain Windows

Configure system and data recovery

• perform file recovery (including OneDrive)


• recover Windows 10


• troubleshoot startup/boot process

Manage updates

• check for updates


• troubleshoot updates


• validate and test updates


• select the appropriate servicing channel


• configure Windows update options

Monitor and manage Windows

• configure and analyze event logs


• manage performance


• manage Windows 10 environment

Deploy and update operating systems

Plan and implement Windows 10 by using dynamic deployment

• evaluate and select an appropriate deployment options


• pilot deployment


• manage and troubleshoot provisioning packages

Plan and implement Windows 10 by using Windows Autopilot

• evaluate and select an appropriate deployment options


• pilot deployment


• create, validate, and assign deployment profile


• extract device HW information to CSV file


• import device HW information to cloud service


• troubleshoot deployment

Upgrade devices to Windows 10

• identify upgrade and downgrade paths


• manage in-place upgrades


• configure a Windows analytics environment


• perform Upgrade Readiness assessment


• migrate user profiles

Manage updates

• configure Windows 10 delivery optimization


• configure Windows Update for Business


• deploy Windows updates


• implement feature updates


• monitor Windows 10 updates

Manage device authentication

• manage authentication policies


• manage sign-on options


• perform Azure AD join

Manage policies and profiles

Plan and implement co-management

• implement co-management precedence


• migrate group policy to MDM policies


• recommend a co-management strategy

Implement conditional access and compliance policies for devices

• implement conditional access policies


• manage conditional access policies


• plan conditional access policies


• implement device compliance policies


• manage device compliance policies


• plan device compliance policies

Configure device profiles

• implement device profiles


• manage device profiles


• plan device profiles

Manage user profiles

• configure user profiles


• configure Enterprise State Roaming in Azure AD


• configure sync settings


• implement Folder Redirection (including OneDrive)

Manage and protect devices

Manage Windows Defender

• implement and manage Windows Defender Application Guard


• implement and manage Windows Defender Credential Guard


• implement and manage Windows Defender Exploit Guard


• implement Windows Defender Advanced Threat Protection


• integrate Windows Defender Application Control


• manage Windows Defender Antivirus

Manage Intune device enrollment and inventory

• configure enrollment settings


• configure Intune automatic enrollment


• enable device enrollment


• enroll non-Windows devices


• enroll Windows devices


• generate custom device inventory reports


• review device inventory

Monitor devices

• monitor device health (e.g., log analytics, Windows Analytics, or other cloud-based tools)


• monitor device security

Manage apps and data

Deploy and update applications

• assign apps to groups


• deploy apps by using Intune


• deploy apps by using Microsoft Store for Business


• deploy O365 ProPlus; enable sideloading of apps into images


• gather Office readiness data


• configure IE Enterprise mode


• configure and implement assigned access or public devices

Implement Mobile Application Management (MAM)

• implement MAM policies


• manage MAM policies


• plan MAM


• configure Windows Information Protection


• implement Azure Information Protection templates


• securing data by using Intune