Microsoft 365 Endpoint Administrator Associate MD-102 Practice Question

Azure AD join (now called Microsoft Entra join) is intended for organization-owned Windows devices when no on-premises Active Directory exists. It requires users to sign in with their Microsoft Entra ID accounts and, when automatic MDM enrollment is configured in Microsoft Entra ID, the join process can enroll the devices into Intune for management.

Azure AD registered targets personally owned (BYOD) devices where the primary sign-in is a local or personal Microsoft account, so it does not satisfy the requirement to restrict sign-in to corporate Entra ID accounts.

Hybrid Azure AD join relies on on-premises Active Directory domain-joined computers synchronizing to Entra ID; because the organization lacks an on-premises AD, it is not applicable.

Workgroup membership with only MDM enrollment would allow Intune management, but users would still sign in locally and not exclusively with Entra ID credentials, so it does not meet the single sign-on requirement.