Microsoft 365 Endpoint Administrator Associate MD-102 Practice Question
Your company has a Microsoft 365 E3 subscription and a hybrid Microsoft Entra ID tenant. All Windows 11 computers are on-premises domain-joined and appear in Microsoft Entra ID as hybrid joined. You must ensure that only computers located in the HR organizational unit automatically enroll in Intune the next time any user signs in. What should you do?
Link a Group Policy Object that enables the setting "Enable automatic MDM enrollment using default Azure AD credentials" to the HR OU and set the MDM user scope in Microsoft Entra ID to All.
Assign the Device Enrollment Manager role to an HR administrator and instruct them to enroll each HR computer through the Company Portal app.
Generate a Windows provisioning package in Intune that contains an enrollment token and email it to all HR users.
Create a Windows Autopilot deployment profile assigned to the HR device group and enable the Convert all targeted devices to Autopilot setting.
Hybrid-joined Windows devices can be enrolled in Intune automatically when two conditions are met: the Microsoft Entra ID MDM user scope includes the users who sign in, and the Group Policy setting "Enable automatic MDM enrollment using default Azure AD credentials" is applied to the devices. By linking a Group Policy Object that contains this setting to the HR OU, you target only HR computers. Setting the MDM user scope to All (or a group that contains the relevant users) completes the requirement with no user interaction.
An Autopilot deployment profile does not affect already-provisioned hybrid-joined devices. A provisioning package emailed to users still requires each user to run the package manually. Assigning the Device Enrollment Manager role enables bulk manual enrollments but does not provide silent, automatic enrollment for existing domain-joined devices.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is Microsoft Entra ID?
Open an interactive chat with Bash
What is the significance of hybrid-joined devices?
Open an interactive chat with Bash
What does 'Enable automatic MDM enrollment using default Azure AD credentials' in Group Policy do?
Open an interactive chat with Bash
Microsoft 365 Endpoint Administrator Associate MD-102
Prepare infrastructure for devices
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .