Click to upload or drag and drop
PDF, DOCX, PPTX, TXT, JPG, JPEG, PNG, HEIC, ODP, ODT, BMP, or TIFF
up to 20MB
Uploading...
MS-102 is the tenant-level exam: Microsoft 365 administration, Entra identity, Defender XDR security and Purview compliance, leading to the Microsoft 365 Administrator Expert certification. MD-102 is the device-level exam: deploying, managing and protecting endpoints with Intune, leading to the Endpoint Administrator Associate certification. They are different altitudes of the same job family, and for the Expert badge they connect: MD-102 is one of the three associate paths that qualify you for it, and MS-102 is the required exam on top.
Both study guides sit on Microsoft Learn and both were refreshed in 2026, so this comparison uses the current outlines, not what the exams looked like when most courses about them were recorded.
MS-102: Microsoft 365 Administrator (outline effective April 28, 2026) has four domains, and the weighting says more than the name does. The biggest domain is not administration; it is security:
| MS-102 domain | Weight |
|---|---|
| Manage security and threats by using Microsoft Defender XDR | 30 to 35% |
| Deploy and manage a Microsoft 365 tenant | 25 to 30% |
| Implement and manage Microsoft Entra identity and access | 25 to 30% |
| Manage compliance by using Microsoft Purview | 10 to 15% |
MD-102: Endpoint Administrator (new outline effective July 24, 2026) has five domains centered on the device lifecycle:
| MD-102 domain | Weight |
|---|---|
| Manage and maintain devices | 25 to 30% |
| Prepare infrastructure for devices | 20 to 25% |
| Protect devices | 15 to 20% |
| Manage and secure applications | 15 to 20% |
| Optimize endpoint operations by using automation, monitoring, and reporting | 10 to 15% |
The overlap is real but narrow: both exams touch Entra ID and both touch Defender, from opposite ends. Take Defender for Endpoint as the concrete example. MS-102 names onboarding devices to Defender for Endpoint, configuring endpoint settings and acting on the vulnerability management dashboard inside its 30 to 35 percent security domain; MD-102 approaches the same product from the device side, inside its protect devices domain. Study one exam properly and you have banked a slice of the other. The same is true of Entra join types, Conditional Access as it touches device compliance, and Windows update management. If you go deeper on the security operations side than either exam requires, that is SC-200 territory, and the SC-200 practice test page maps that blueprint separately.
MS-102's April 28, 2026 refresh was gentle: the official change log grades every edit Minor or No change. The outline now names Microsoft 365 Backup, Exposure Management, and DLP for Microsoft 365 Copilot, but the structure held.
MD-102's July 24, 2026 refresh cuts deeper: its change log grades four skill areas as Major changes, and the audience profile now says endpoint admins manage devices using Intune and agentic tools and workflows. An AI-agent clause in the audience profile of a device management exam is the clearest signal yet of where Microsoft is taking this track. If you bought an MD-102 course before mid-2026, check it against the current outline before trusting it.
Here is the structural fact that settles most vs debates: the Microsoft 365 Administrator Expert certification requires MS-102 plus at least one qualifying associate certification, and Endpoint Administrator Associate (earned by passing MD-102) is one of the three that qualify, alongside Teams Administrator Associate (MS-700) and Identity and Access Administrator Associate (SC-300).
So for many candidates the answer to MS-102 vs MD-102 is: both, in that order or reverse. MD-102 first fits people coming up from desktop and device roles; it earns an associate badge immediately and qualifies you for Expert later. MS-102 first fits admins already running a tenant who want the harder exam done while their Defender and Entra knowledge is warm. If identity is your strength, the SC-300 practice test path can replace MD-102 as the qualifying associate and overlaps heavily with the MS-102 identity domain.
Different kinds of hard. MS-102 is broad: four Defender products, two directory sync engines, Conditional Access, PIM, retention and DLP policy design. Its difficulty is scope, and it assumes you function as the integrating hub across every workload. MD-102 is deep: Autopilot provisioning, compliance policies, configuration profiles, application protection, and now whatever the agentic-workflow objectives turn into in practice. Its difficulty is precision inside one product family, mostly Intune.
Candidates who do both usually report the same pattern: MS-102 punishes admins who never leave the admin center, MD-102 punishes admins who never standardized device enrollment. Neither publishes a question count; both publish a passing score of 700 and offer a free official practice assessment on Microsoft Learn.
Order is entirely yours. There is no gate on booking MS-102 before MD-102 or the reverse; the Expert certification simply issues once both requirements exist in your transcript, whichever landed first. On expiry: Microsoft associate and expert certifications renew annually through a free online assessment on Microsoft Learn, so once you hold both, you are maintaining two renewal dates. The associate one matters more than it looks, because the Expert credential depends on a qualifying associate staying active underneath it. Put both windows in your calendar when the badges issue.
Yes. Microsoft Learn now carries a retirement warning on both the MS-102 exam page and the MS-102 study guide: the exam retires on November 30, 2026, at 11:59 PM Central Standard Time. Microsoft's standard note applies: complete the exam before the retirement date for it to count toward your certification. If you are mid-preparation, that date is your real deadline, not the date your course subscription ends. An earlier version of this article said neither exam was going away, which was accurate when the MS-102 page still showed no retirement date. It is no longer accurate, and the correction is above.
One quirk worth knowing if you go looking yourself: the MS-102 exam page is internally inconsistent right now. The warning banner at the top gives the November 30, 2026 date, while the Schedule exam block further down the same page still prints Retirement date: none. The banner is the current statement. We re-read both on August 21, 2026.
MD-102 has no announced retirement date. The Endpoint Administrator Associate certification page carries no retirement warning, its skills outline was refreshed effective July 24, 2026, and the certification page itself shows a last-updated date of July 24, 2026. Microsoft refreshes outlines for exams it intends to keep. The certification renews every 12 months through a free online assessment, and you get 100 minutes for the exam itself.
Not as a like-for-like swap, and Microsoft does not describe it that way. AB-650, Administering Microsoft 365 and AI Services, is in beta and counts toward a different credential: Microsoft 365 Certified: AI Services Administrator Associate (beta). MS-102 counts toward Microsoft 365 Certified: Administrator Expert. Different exams, different badges, different paths.
The content tells the same story. AB-650 splits into configure and manage Microsoft 365 tenants and workloads (20 to 25%), govern and secure them (40 to 45%), and manage and secure AI services in Microsoft 365 (35 to 40%). That last third, covering Copilot, agents and connected AI capabilities, has no equivalent on MS-102 at all. AB-650 is English only for now, and Microsoft notes the practice assessment usually arrives within eight weeks of an exam leaving beta.
Plenty of third-party posts are already headlined as though AB-650 is the MS-102 replacement. What Microsoft has actually published is narrower: MS-102 retires on November 30, 2026, and AB-650 exists and leads somewhere else. If your goal is specifically the Administrator Expert badge, watch the Administrator Expert certification page for how its requirements change after November 30, because that is where Microsoft will state it.
| Your situation | Take |
|---|---|
| You run tenant settings, licensing, identity and security for an organization | MS-102, then an associate exam for the Expert badge if you lack one |
| You manage devices with Intune, image machines, own enrollment | MD-102 first, MS-102 later if you want Expert |
| Your job title says both (small IT team, one admin does everything) | MD-102 first for the quicker associate win, MS-102 second |
| Identity and Conditional Access are your strongest suit | SC-300 as your associate, then MS-102 |
The method is identical because the failure mode is identical: studying evenly across domains that are not weighted evenly. Upload your notes or the official study guide and generate weighted question sets with the MS-102 practice exam generator, drilling Defender scenarios at double the rate of Purview ones because that is what the paper does. Teams rolling several admins through these certifications at once usually run the same drills through their internal training platform so everyone certifies against the same outline version. For solo candidates, any current study guide works with the certification exam generator, and both exams have free official practice assessments on Microsoft Learn worth taking as the final calibration.
Whichever you pick, pick from the current outlines. Both exams changed in 2026, one of them substantially, and prep material that predates the change logs is quietly answering last year's questions. Fifteen minutes reading the actual study guide on Microsoft Learn, with its change log and both outline versions printed in full, is worth more than any summary of it, including this one.