Microsoft 365 Endpoint Administrator Associate MD-102 Practice Question
Your company manages Windows 11 devices with Microsoft Intune. For auditing purposes, the security operations team wants all changes to local administrator membership to appear in Endpoint security reports rather than in device configuration reports. You must add a Microsoft Entra security group named Helpdesk to the built-in Administrators group on a set of Entra-joined laptops without removing any existing local administrators. Which Intune policy type should you create and assign to meet the requirement?
Create an Endpoint security Account protection policy that uses the Local user group membership profile to add the Helpdesk group.
Deploy a Windows configuration profile that uses the Local user group membership template.
Configure a Device restrictions profile that elevates Helpdesk members to administrators.
Assign a compliance policy that requires the Helpdesk group to be in the local Administrators group.
Endpoint security Account protection policies include the Local user group membership profile, which lets you add Microsoft Entra users or groups to built-in local groups while retaining current members. Because the security team requires the policy to surface in Endpoint security reporting, an Account protection policy is the correct choice. A Windows configuration profile that uses the same template would work technically, but it would be reported under Device configuration, not Endpoint security, so it does not meet the stated requirement. Device restrictions and compliance policies cannot directly modify local group membership.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is the Endpoint security Account protection policy used for in Microsoft Intune?
Open an interactive chat with Bash
What makes the Local user group membership profile different from other Intune profiles?
Open an interactive chat with Bash
Why is a Windows configuration profile not suitable in this scenario?
Open an interactive chat with Bash
Microsoft 365 Endpoint Administrator Associate MD-102
Prepare infrastructure for devices
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .