Home
WSQ - Microsoft Certified Endpoint Administrator Associate (MD-102)

WSQ - Microsoft Certified Endpoint Administrator Associate (MD-102)

The Microsoft Certified Endpoint Administrator Associate course offers an in-depth exploration into the administration and security of Microsoft Endpoint environments. Participants will start by exploring the fundamentals of endpoint management, including device enrollment and configuration profiles for users and devices. The course covers a wide range of essential topics, such as managing Microsoft Entra identities, device authentication, and the deployment and update of applications through Intune and Configuration Manager.

Advanced modules focus on enhancing endpoint security through the management of Microsoft Defender for Endpoint, implementing device compliance policies, and protecting organizational access with modern authentication methods like Windows Hello and multi-factor authentication. Learners will gain practical experience in troubleshooting security issues, coordinating access control rights, and investigating unauthorized access incidents. The course also delves into deploying devices using both on-premises and cloud-based tools, including Windows Autopilot and Azure Virtual Desktop, preparing participants to administer complex security programs and effectively analyze system updates' impacts on Microsoft Endpoint administration. By the end of this course, attendees will be equipped with the knowledge and skills to perform comprehensive Microsoft Endpoint system administration and secure enterprise environments against emerging security threats.

Learning Outcomes

By end of the course, learners should be able to:

Administer complex security programs and analyze system updates impacts on Microsoft Endpoint administration.
Perform Microsoft Endpoint system administration and configure authentication to protect against security threats
Troubleshoot Microsoft Endpoint security issues and assist users in defining access rights.
Coordinate advanced access control rights and investigate unauthorized access incidents on Microsoft Endpoint system.

Course Brochure

Download WSQ - Microsoft Certified Endpoint Administrator Associate (MD-102) Brochure

Skills Framework

This course follows the guideline of Security Administration ICT-OUS-3012-1.1 under ICT Skills Framework

Certification

Two e-certificates will be awarded to trainees who have demonstrated competency in the WSQ assessment and achieved at least 75% attendance.

Statement of Attainment (SOA) issued by WSG. You can download the SOA from here after 3-4 weeks upon completion of the course. Note that the SOA certificate title indicates the TSC title not the course title.
Certification of Completion issued by Tertiary Infotech Pte Ltd issued after the class.

Disclaimer

We are Official Microsoft Learning Partner (Org ID: 5238476). To get the official Microsoft certification, please register your certification exam at Pearson Vue Test Center.

Certification Exam at Pearson Vue

Once you are prepared for the exam, you can register for the certification here. We are Authorised Pearson Vue Testing Center. You can take the certification exam at our test center. Note that the course fee does not include the certification exam fee.

WSQ Funding

WSQ funding is only applicable to Singaporeans and PR. Subject to eligibility, the funding support is subjected to funding caps.

Effective for courses starting from 1 Jan 2024
Full Fee	GST	Nett Fee after Funding (Incl. GST)
		Baseline	MCES / SME
$2,500	$225.00	$1,475.00	$975.00

Baseline: Singaporean/PR age 21 and above
MCES(Mid-Career Enhanced Subsidy): S'porean age 40 & above

Upon registration, we will advise further on how to tap on the WSQ Training Subsidy.

You can pay the nett fee (after the WSQ training subsidy) by the following :

SkillsFuture Enterprise Credit (SFEC)

Eligible Singapore-registered companies can tap on $10000 SFEC to cover out-of-pocket expenses.Click here to submit SkillsFuture Enterprise Credit

SkillsFuture Credit

Eligible Singapore Citizens can use their SkillsFuture Credit to offset course fee payable after funding. Click here for SkillsFuture Credit submission

PSEA

Eligible Singapore Citizens can use their PSEA funds to offset course fee payable after funding.

To check for Post-Secondary Education Account (PSEA) eligibility for this course, Visit SkillsFuture (course code: TGS-2023039344)

Scroll down to “Keyword Tags” to verify for PSEA eligibility.
If there is “PSEA” under keyword tags, the course is eligible for PSEA.

Course Code: TGS-2024042603

Course Booking

The course fee listed below is before subsidy/grant, if applicable. We will apply for the grant and send you the invoice with nett fee.

$2,500.00 (GST-exclusive)

$2,725.00 (GST-inclusive)

Mode of Training *

Physical Classroom Training
Synchronised Teaching using ZOOM
On-Site Training (5 pax and above)

Course Date * Course Date

Course Time *

Sponsorship *

Self-Sponsored
Employer-Sponsored

No. of Participants

Name(s) on Certificate *

NRIC (Last 3 Digits and Alphabet)

Additional Message or Emails for Course Notification

* Required Fields

Post-Course Support

We provide free consultation related to the subject matter after the course. Please email your queries to enquiry@tertiaryinfotech.com and we will forward your queries to the subject matter experts and get back to you asap.

Course Cancellation/Reschedule Policy

We reserve the right to cancel or re-schedule the course due to unforeseen circumstances. If the course is cancelled, we will refund 100% to participants.
Note the venue of the training is subject to changes due to class size and availability of the classroom.
Note the minimal class size to start a class is 3 Pax.

Course Details

Topic 1: Explore the Enterprise Desktop

Examine benefits of modern management
Examine the enterprise desktop life-cycle model
Examine planning and purchasing
Examine desktop deployment
Plan an application deployment
Plan for upgrades and retirement

Topic 2: Explore Windows Editions

Examine Windows client editions and capabilities
Select client edition
Examine hardware requirements

Topic 3: Understand Microsoft Entra ID

Examine Microsoft Entra ID
Compare Microsoft Entra ID and Active Directory Domain Services
Examine Microsoft Entra ID as a directory service for cloud apps
Compare Microsoft Entra ID P1 and P2 plans
Examine Microsoft Entra Domain Services

Topic 4: Manage Microsoft Entra identities

Examine RBAC and user roles in Microsoft Entra ID
Create and manage users in Microsoft Entra ID
Create and manage groups in Microsoft Entra ID
Manage Microsoft Entra objects with PowerShell
Synchronize objects from AD DS to Microsoft Entra ID

Topic 5: Manage device authentication

Describe Microsoft Entra join
Examine Microsoft Entra join prerequisites limitations and benefits
Join devices to Microsoft Entra ID
Manage devices joined to Microsoft Entra ID

Topic 6: Enroll devices using Microsoft Configuration Manager

Deploy the Microsoft Configuration Manager client
Monitor the Microsoft Configuration Manager client
Manage the Microsoft Configuration Manager client

Topic 7: Enroll devices using Microsoft Intune

Manage mobile devices with Intune
Enable mobile device management
Explain considerations for device enrollment
Manage corporate enrollment policy
Enroll Windows devices in Intune
Enroll Android devices in Intune
Enroll iOS devices in Intune
Explore device enrollment manager
Monitor device enrollment
Manage devices remotely

Topic 8: Execute device profiles

Explore Intune device profiles
Create device profiles
Create a custom device profile

Topic 9: Oversee device profiles

Monitor device profiles in Intune
Manage device sync in Intune
Manage devices in Intune using scripts

Topic 10: Maintain user profiles

Examine user profile
Explore user profile types
Examine options for minimizing user profile size
Deploy and configure folder redirection
Sync user state with Enterprise State Roaming
Configure Enterprise State Roaming in Azure

Topic 11: Execute mobile application management

Examine mobile application management
Examine considerations for mobile application management
Prepare line-of-business apps for app protection policies
Implement mobile application management policies in Intune
Manage mobile application management policies in Intune

Topic 12: Deploy and update applications

Deploy applications with Intune
Add apps to Intune
Manage Win32 apps with Intune
Deploy applications with Configuration Manager
Deploying applications with Group Policy
Assign and publish software
Explore Microsoft Store for Business
Implement Microsoft Store Apps
Update Microsoft Store Apps with Intune
Assign apps to company employees

Topic 13: Administer endpoint applications

Manage apps with Intune
Manage Apps on non-enrolled devices
Deploy Microsoft 365 Apps with Intune
Additional Microsoft 365 Apps Deployment Tools
Configure Microsoft Edge Internet Explorer mode
App Inventory Review

Topic 14: Protect identities in Microsoft Entra ID

Explore Windows Hello for Business
Deploy Windows Hello
Manage Windows Hello for Business
Explore Microsoft Entra ID Protection
Manage self-service password reset in Microsoft Entra ID
Implement multi-factor authentication

Topic 15: Enable organizational access

Enable access to organization resources
Explore VPN types and configuration
Explore Always On VPN
Deploy Always On VPN

Topic 16: Implement device compliance

Protect access to resources using Intune
Explore device compliance policy
Deploy a device compliance policy
Explore conditional access
Create conditional access policies

Topic 17: Generate inventory and compliance reports

Report enrolled devices inventory in Intune
Monitor and report device compliance
Build custom Intune inventory reports
Access Intune using Microsoft Graph API

Topic 18: Deploy device data protection

Explore Windows Information Protection
Plan Windows Information Protection
Implement and use Windows Information Protection
Explore Encrypting File System in Windows client
Explore BitLocker

Topic 19: Manage Microsoft Defender for Endpoint

Explore Microsoft Defender for Endpoint
Examine key capabilities of Microsoft Defender for Endpoint
Explore Windows Defender Application Control and Device Guard
Explore Microsoft Defender Application Guard
Examine Windows Defender Exploit Guard
Explore Windows Defender System Guard

Topic 20: Manage Microsoft Defender in Windows client

Explore Windows Security Center
Explore Windows Defender Credential Guard
Manage Microsoft Defender Antivirus
Manage Windows Defender Firewall
Explore Windows Defender Firewall with Advanced Security

Topic 21: Manage Microsoft Defender for Cloud Apps

Explore Microsoft Defender for Cloud Apps
Planning Microsoft Defender for Cloud Apps
Implement Microsoft Defender for Cloud Apps

Topic 22: Assess deployment readiness

Examine deployment guidelines
Explore readiness tools
Assess application compatibility
Explore tools for application compatibility mitigation
Prepare network and directory for deployment
Plan a pilot

Topic 23: Deploy using the Microsoft Deployment Toolkit

Evaluate traditional deployment methods
Set up the Microsoft Deployment Toolkit for client deployment
Manage and deploy images using the Microsoft Deployment Toolkit

Topic 24: Deploy using Microsoft Configuration Manager

Explore client deployment using Configuration Manager
Examine deployment components of Configuration Manager
Manage client deployment using Configuration Manager
Plan in-place upgrades using Configuration Manager

Topic 25: Deploy Devices using Windows Autopilot

Use Autopilot for modern deployment
Examine requirements for Windows Autopilot
Prepare device IDs for Autopilot
Implement device registration and out-of-the-box customization
Examine Autopilot scenarios
Troubleshoot Windows Autopilot

Topic 26: Implement dynamic deployment methods

Examine subscription activation
Deploy using provisioning packages
Use Windows Configuration Designer
Use Microsoft Entra join with automatic MDM enrollment

Topic 27: Plan a transition to modern endpoint management

Explore using co-management to transition to modern endpoint management
Examine prerequisites for co-management
Evaluate modern management considerations
Evaluate upgrades and migrations in modern transitioning
Migrate data when modern transitioning
Migrate workloads when modern transitioning

Topic 28: Manage Windows 365

Explore Windows
Configure Windows
Administer Windows

Topic 29: Manage Azure Virtual Desktop

Examine Azure Virtual Desktop
Explore Azure Virtual Desktop
Configure Azure Virtual Desktop
Administer Azure Virtual Desktop

Final Assessment

Written Assessment (SAQ)
Practical Performance

Course Info

Promotion Code

Promo or discount cannot be applied to WSQ courses

Minimum Entry Requirement

Knowledge and Skills

Able to operate using computer functions
Minimum 3 GCE ‘O’ Levels Passes including English or WPL Level 5 (Average of Reading, Listening, Speaking & Writing Scores)

Attitude

Positive Learning Attitude
Enthusiastic Learner

Experience

Minimum of 1 year of working experience.

Target age group: 21-65 years old

Minimum Software/Hardware Requirement

Software:

You can download and install the following software:

Hardware: Windows and Mac Laptops

About Progressive Wage Model (PWM)

The Progressive Wage Model (PWM) helps to increase wages of workers through upgrading skills and improving productivity.

Employers must ensure that their Singapore citizen and PR workers meet the PWM training requirements of attaining at least 1 Workforce Skills Qualification (WSQ) Statement of Attainment, out of the list of approved WSQ training modules.

For more information on PWM, please visit MOM site.

Funding Eligility Criteria

Individual Sponsored Trainee

Employer Sponsored Trainee

Singapore Citizens or Singapore Permanent Residents of age 21 and above
From 1 October 2023, attendance-taking for SkillsFuture Singapore's (SSG) funded courses must be done digitally via the Singpass App. This applies to both physical and synchronous e-learning courses.
Trainee must pass all prescribed tests / assessments and attain 100% competency.
We reserves the right to claw back the funded amount from trainee if he/she did not meet the eligibility criteria.

Singapore Citizens or Singapore Permanent Residents who are DIRECT EMPLOYEE of the sponsoring company.
From 1 October 2023, attendance-taking for SkillsFuture Singapore's (SSG) funded courses must be done digitally via the Singpass App. This applies to both physical and synchronous e-learning courses.
Trainee must pass all prescribed tests / assessments and attain 100% competency.
We reserves the right to claw back the funded amount from the employer if trainee did not meet the eligibility criteria.

SkillsFuture Credit:

Eligible Singapore Citizens can use their SkillsFuture Credit to offset course fee payable after funding.

PSEA:

To check for Post-Secondary Education Account (PSEA) eligibility, goto mySkillsFuture portal and search for this course code.
Scroll down to "Keyword Tags" to verify for PSEA eligibility.
If there is “PSEA” under keyword tags, the course is eligible for PSEA.
And if there is no “PSEA” under keyword tags, the course is ineligible for PSEA.
Not all courses are eligible for PSEA funding.

Absentee Payroll (AP) Funding:

$4.50 per hour, capped at $100,000 per enterprise per calendar year.
AP funding will be computed based on the actual number of training hours attended by the trainee.

SFEC:

If the Training Provider has submitted an enrolment for course fee grant claim in Training Partners Gateway (TPGateway), SSG would be able to derive SFEC funding based on this record. There is no need for enterprise to submit any claim request and the SFEC claim will be automatically generated and disbursed.
Where there is no such record, eligible employers are required to submit an SFEC claim after course completion via the SFEC microsite.
SkillsFuture Enterprise Credit (SFEC) Microsite

Steps to Apply Skills Future Claim

The staff will send you an invoice with the fee breakdown.
Login to the MySkillsFuture portal, select the course you’re enrolling on and enter the course date and schedule.
Enter the course fee payable by you (including GST) and enter the amount of credit to claim.
Upload your invoice and click ‘Submit’

SkillsFuture Level-Up Program

The SkillsFuture Level-Up Programme provides greater structural support for mid-career Singaporeans aged 40 years and above to pursue a substantive skills reboot and stay relevant in a changing economy. For more information, visit SkillsFuture Level-Up Programme

Get Additional Course Fee Support Up to $500 under UTAP

The Union Training Assistance Programme (UTAP) is a training benefit provided to NTUC Union Members with an objective of encouraging them to upgrade with skills training. It is provided to minimize the training cost. If you are a NTUC Union Member then you can get 50% funding (capped at $500 per year) under Union Training Assistance Programme (UTAP).

For more information visit NTUC U Portal – Union Training Assistance Program (UTAP)

Steps to Apply UTAP

Note

SSG subsidy is available for Singapore Citizens, Permanent Residents, and Corporates.
All Singaporeans aged 25 and above can use their SkillsFuture Credit to pay. For more details, visit www.skillsfuture.gov.sg/credit
An unfunded course fee can be claimed via SkillsFuture Credit or paid in cash.
UTAP funding for NTUC Union Members is capped at $250 for 39 years and below and at $500 for 40 years and above.
UTAP support amount will be paid to training provider first and claimed after end of class by learner.

Job Roles

IT Support Engineer
Endpoint Security Administrator
IT Operations Analyst
Infrastructure Engineer
Systems Engineer
Desktop Support Technician
Network Engineer
IT Service Manager
IT Project Coordinator
Helpdesk Manager
IT Operations Manager
IT Business Analyst
Technical Support Specialist
IT Change Manager
IT Compliance Analyst

Trainers

Agus Salim : I am professional with more than 10 years of experience in Project Management, IT Solutions Management, and Systems Integration both in waterfall and agile methodology. He started out his career as a Web Developer before moving on to Business Analyst/Project Manager. He has strong leadership and the capability of leading a team with a proven ability to deliver projects with tight timelines. Besides his experiences in managing projects, he has good knowledge in Cybersecurity and hands-on experience in Next Generation Firewall such as Check Point. During his free time, he likes to explore Cloud Technology, especially on Microsoft Azure. Agus Salam is AWS cloud practitioner certified. I am also ACLP certied trainer.

Quah Chee Yong : Start-up experience in the field of Data Analytics and Digital Assistant/Chatbot. Blockchain Enthusiast. Lead Trainer (ACLP) in the field of AI/Data Science. General Management experience in Sales, Marketing, Business Development, Technical Services, Shipping/Marine & Supply Chain, HSSE/Risk Management and Support Functions Combination of Commercial, Operational and Technical background in MNCs covering the Asia Pacific region Staff/Stakeholders Management in a virtual matrix organizational setup spanning diverse cultures globally. I have obtained AWS certification.