MS-102 vs MD-102: Which Microsoft 365 Exam Do You Actually Need?

MS-102 is the tenant-level exam: Microsoft 365 administration, Entra identity, Defender XDR security and Purview compliance, leading to the Microsoft 365 Administrator Expert certification. MD-102 is the device-level exam: deploying, managing and protecting endpoints with Intune, leading to the Endpoint Administrator Associate certification. They are different altitudes of the same job family, and for the Expert badge they connect: MD-102 is one of the three associate paths that qualify you for it, and MS-102 is the required exam on top.

Both study guides sit on Microsoft Learn and both were refreshed in 2026, so this comparison uses the current outlines, not what the exams looked like when most courses about them were recorded.

What each exam covers, by the current outlines

MS-102: Microsoft 365 Administrator (outline effective April 28, 2026) has four domains, and the weighting says more than the name does. The biggest domain is not administration; it is security:

MD-102: Endpoint Administrator (new outline effective July 24, 2026) has five domains centered on the device lifecycle:

The overlap is real but narrow: both exams touch Entra ID and both touch Defender, from opposite ends. Take Defender for Endpoint as the concrete example. MS-102 names onboarding devices to Defender for Endpoint, configuring endpoint settings and acting on the vulnerability management dashboard inside its 30 to 35 percent security domain; MD-102 approaches the same product from the device side, inside its protect devices domain. Study one exam properly and you have banked a slice of the other. The same is true of Entra join types, Conditional Access as it touches device compliance, and Windows update management. If you go deeper on the security operations side than either exam requires, that is SC-200 territory, and the SC-200 practice test page maps that blueprint separately.

Both exams changed in 2026, and not equally

MS-102's April 28, 2026 refresh was gentle: the official change log grades every edit Minor or No change. The outline now names Microsoft 365 Backup, Exposure Management, and DLP for Microsoft 365 Copilot, but the structure held.

MD-102's July 24, 2026 refresh cuts deeper: its change log grades four skill areas as Major changes, and the audience profile now says endpoint admins manage devices using Intune and agentic tools and workflows. An AI-agent clause in the audience profile of a device management exam is the clearest signal yet of where Microsoft is taking this track. If you bought an MD-102 course before mid-2026, check it against the current outline before trusting it.

The connection: neither exam alone makes you Administrator Expert

Here is the structural fact that settles most vs debates: the Microsoft 365 Administrator Expert certification requires MS-102 plus at least one qualifying associate certification, and Endpoint Administrator Associate (earned by passing MD-102) is one of the three that qualify, alongside Teams Administrator Associate (MS-700) and Identity and Access Administrator Associate (SC-300).

So for many candidates the answer to MS-102 vs MD-102 is: both, in that order or reverse. MD-102 first fits people coming up from desktop and device roles; it earns an associate badge immediately and qualifies you for Expert later. MS-102 first fits admins already running a tenant who want the harder exam done while their Defender and Entra knowledge is warm. If identity is your strength, the SC-300 practice test path can replace MD-102 as the qualifying associate and overlaps heavily with the MS-102 identity domain.

Which is harder?

Different kinds of hard. MS-102 is broad: four Defender products, two directory sync engines, Conditional Access, PIM, retention and DLP policy design. Its difficulty is scope, and it assumes you function as the integrating hub across every workload. MD-102 is deep: Autopilot provisioning, compliance policies, configuration profiles, application protection, and now whatever the agentic-workflow objectives turn into in practice. Its difficulty is precision inside one product family, mostly Intune.

Candidates who do both usually report the same pattern: MS-102 punishes admins who never leave the admin center, MD-102 punishes admins who never standardized device enrollment. Neither publishes a question count; both publish a passing score of 700 and offer a free official practice assessment on Microsoft Learn.

Can you take them in either order, and do they expire?

Order is entirely yours. There is no gate on booking MS-102 before MD-102 or the reverse; the Expert certification simply issues once both requirements exist in your transcript, whichever landed first. On expiry: Microsoft associate and expert certifications renew annually through a free online assessment on Microsoft Learn, so once you hold both, you are maintaining two renewal dates. The associate one matters more than it looks, because the Expert credential depends on a qualifying associate staying active underneath it. Put both windows in your calendar when the badges issue.

One more retirement question comes up constantly because of this year's wave of exam retirements: neither exam is going away. As of July 2026, the MS-102 exam page states Retirement date: none, and MD-102 is about to receive a refreshed outline effective July 24, 2026, which is what Microsoft does to exams it is keeping, not cutting. Microsoft retired PL-900 in July and retires AZ-204 at the end of July 2026, and that news bled into every certification forum, but the Microsoft 365 admin track was refreshed, not cut.

Decision table

How to prepare for either

The method is identical because the failure mode is identical: studying evenly across domains that are not weighted evenly. Upload your notes or the official study guide and generate weighted question sets with the MS-102 practice exam generator, drilling Defender scenarios at double the rate of Purview ones because that is what the paper does. Teams rolling several admins through these certifications at once usually run the same drills through their internal training platform so everyone certifies against the same outline version. For solo candidates, any current study guide works with the certification exam generator, and both exams have free official practice assessments on Microsoft Learn worth taking as the final calibration.

Whichever you pick, pick from the current outlines. Both exams changed in 2026, one of them substantially, and prep material that predates the change logs is quietly answering last year's questions. Fifteen minutes reading the actual study guide on Microsoft Learn, with its change log and both outline versions printed in full, is worth more than any summary of it, including this one.