Microsoft 365 Endpoint Administrator Associate MD-102 Practice Question
Your company allows employees to work on their personal Windows 11 laptops. Users sign in to Windows with their own Microsoft accounts but must get single sign-on to Microsoft 365 resources and comply with Conditional Access. The devices must not be joined to the on-premises domain and should appear in Microsoft Entra ID with the Join type AzureADRegistered. Which action should you instruct users to perform on their laptops?
First join the laptop to the on-premises Active Directory domain so it becomes Hybrid Azure AD joined.
During Windows setup, select the option to join the device to Microsoft Entra ID using a work account.
Use Windows Autopilot in pre-provisioned deployment mode to add the device to Microsoft Entra ID.
Open Settings and add the work account under Access work or school to register the device with Microsoft Entra ID.
Azure AD registration (also known as workplace join) is intended for personally owned devices. The user keeps signing in to Windows with a local or personal Microsoft account and then adds a work or school account through Settings > Accounts > Access work or school. This process creates a device object in Microsoft Entra ID whose join type is AzureADRegistered. If Intune automatic MDM enrollment is configured, the device can also become managed, but it is not joined to either Microsoft Entra ID or on-premises Active Directory.
By contrast, joining during the out-of-box experience produces an AzureADJoined device, a hybrid join requires the device to be in the on-premises domain, and Windows Autopilot pre-provisioning is used for corporate-owned devices and also results in an Azure AD join, not a registration. Therefore, the correct choice is to register the device with Microsoft Entra ID from the Access work or school settings.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is the difference between AzureADRegistered and AzureADJoined devices?
Open an interactive chat with Bash
What is Conditional Access, and how does it apply to AzureADRegistered devices?
Open an interactive chat with Bash
How does Intune automatic MDM enrollment work with AzureADRegistered devices?
Open an interactive chat with Bash
Microsoft 365 Endpoint Administrator Associate MD-102
Prepare infrastructure for devices
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .