MD-102 & AB-650 Bootcamp: Endpoint and AI Services in 6 Days

Microsoft 365 Endpoint and AI Services Administrator (MD-102 + AB-650) Bootcamp Overview

This MD-102 and AB-650 combo bootcamp is an accelerated, instructor-led path to two Microsoft certifications in one week: Microsoft 365 Certified: Endpoint Administrator Associate and Microsoft 365 Certified: AI Services Administrator Associate. Over six hands-on days you move from managing and securing endpoints with Microsoft Intune, Windows Autopilot, Windows 365 and Microsoft Defender for Endpoint, to administering a full Microsoft 365 tenant and the AI layer now running on top of it: Microsoft 365 Copilot readiness, Microsoft Purview data protection, and agent governance through Microsoft Entra Agent ID and Agent 365. You sit Exam MD-102: Managing and Securing Microsoft 365 Endpoints by using Intune and Exam AB-650: Administering Microsoft 365 and AI Services during the camp.

Who This MD-102 and AB-650 Combo Course Is For

Microsoft writes MD-102 for the endpoint administrator who deploys and manages endpoints across platforms and device types, implements identity, security, access, policies, updates and apps for those endpoints, and optimizes endpoint operations through automation, monitoring and reporting. AB-650 is written for the Microsoft 365 and AI services administrator who configures, manages, secures and governs Microsoft 365 tenants, workloads and AI services, enabling secure and compliant productivity by governing data access, protecting information and supporting collaboration between users and agents. Both roles collaborate with architects, security administrators and other workload administrators, so the combination fits the administrator who owns the devices and the tenant services those devices reach. This camp is built for that overlap: one week covering the modern workplace from the endpoint through to Copilot and agent governance.

What You'll Learn in the MD-102 Endpoint Administrator Training

The MD-102 half follows the five skill areas Microsoft measures on the exam, in Microsoft's own weightings:

• Prepare infrastructure for devices (20-25%): adding devices to Microsoft Entra ID, choosing join types, planning device groups with dynamic membership rules; Intune enrollment settings including automatic Windows enrollment, personal enrollment for macOS, iOS and iPadOS, Android enrollment profiles, and corporate enrollment through Apple Business Manager, Samsung Knox Mobile Enrollment or Google Zero Touch; plus built-in and custom Intune and Windows 365 roles, scope tags, multi-admin approval, compliance policies, Conditional Access requiring compliance, Windows Hello for Business and Windows LAPS.
• Manage and maintain devices (25-30%): the largest area, covering Windows Autopilot deployment profiles, modes and device preparation policies, Enrollment Status Page, Windows 11 upgrades, Windows 365 Cloud PC provisioning and image management, and Windows Backup and Restore; device configuration profiles for Windows, Android, iOS/iPadOS, macOS and specialty devices such as Teams Rooms and HoloLens 2; Intune Suite add-ons including Endpoint Privilege Management, Enterprise App Catalog, Remote Help, Microsoft Cloud PKI, Microsoft Tunnel for MAM and Intune Advanced Analytics; and remote actions from wipe and retire to BitLocker key rotation and KQL device queries.
• Protect devices (15-20%): antivirus, disk encryption and firewall policies in Intune, attack surface reduction with Zero Trust principles, security baselines, App Control for Business, and Defender for Endpoint integration covering EDR policies, onboarding, threat investigation and incident triage; then update management with update rings, feature and quality updates, Windows Autopatch and Hotpatch, iOS/iPadOS and macOS update policies, Android FOTA, and Delivery Optimization.
• Manage and secure applications (15-20%): preparing and deploying Win32, line-of-business and Microsoft Store apps, Quiet Time policies, deploying and managing Microsoft 365 Apps through Intune, the Office Deployment Tool and the Microsoft 365 Apps admin center, store deployments via Apple Volume Purchase Program and Google Play, troubleshooting installation failures, and app protection and app configuration policies for managed and BYOD devices with matching Conditional Access.
• Optimize endpoint operations by using automation, monitoring, and reporting (10-15%): the newest skill area, automating Intune tasks with PowerShell and Microsoft Graph, working with Security Copilot agents in Intune to investigate threats and analyze device performance, then reporting and data visibility with custom reports, workbooks and exports, Endpoint Analytics for proactive remediations and device health scores, reliability and user experience scoring, tenant health monitoring, and alerting on compliance drift and enrollment failures.

What You'll Learn in the AB-650 AI Services Administrator Training

The AB-650 half follows the three skill areas Microsoft measures on the exam, in Microsoft's own weightings:

• Configure and manage Microsoft 365 tenants and workloads (20-25%): tenant branding, domains, organizational settings, and license management including group-based licensing, pay-as-you-go, and licenses for Microsoft 365 Copilot, Microsoft Agent 365 and Microsoft Copilot Studio; Microsoft 365 Backup setup, restore and monitoring; network connectivity insights and Service health monitoring; then workload administration across Exchange mailboxes, Teams channels and membership, Copilot settings in Teams meetings, SharePoint sites and permissions, and preparing SharePoint and OneDrive for Copilot with SharePoint Advanced Management and site exclusions.
• Govern and secure Microsoft 365 tenants and workloads (40-45%): the largest area, covering identity in Microsoft Entra with users, guests and external access, groups, roles and Privileged Identity Management, administrative units and bulk management through Microsoft Graph PowerShell; authentication methods, Entra Password Protection, self-service password reset and Conditional Access with Entra ID Protection and multifactor authentication; Microsoft Defender for Office 365 alerts, threat policies and attack simulation training; and Microsoft Purview for DLP across Exchange, SharePoint, OneDrive, Teams, endpoints and Copilot, sensitivity labels, data lifecycle management, and Data Security Posture Management (DSPM) for AI activity.
• Manage and secure AI services in Microsoft 365 (35-40%): assessing tenant and data readiness for Microsoft 365 Copilot including oversharing and data leak remediation, Copilot Search, web search, tenant Copilot settings, user experiences and Copilot Cowork; managing third-party AI providers and Copilot connectors; and the agent estate through Microsoft Entra Agent ID lifecycle workflows, agent access packages and Conditional Access, the agent registry for discovering, publishing and blocking Microsoft, third-party and custom agents, and Agent 365 for securing, governing, monitoring and evaluating compliance gaps, closing with cost, usage and service health monitoring through the Copilot Control System.

Why Choose This MD-102 and AB-650 Certification Camp

Endpoint administration and AI services administration are converging into one job, and this camp certifies you in both in a single week rather than across months of separate courses. It is led by Microsoft Certified Trainers as an authorized Microsoft Solutions Partner, using the official Microsoft courses for MD-102 and AB-650 with official hands-on labs, and both exams are administered while you attend.

• 6-day accelerated format: two associate-level Microsoft certifications, MD-102 and AB-650, in one week.
• 95% first-attempt pass rate, with a retake voucher per exam if you need it.
• Two Microsoft Official Exam Vouchers included, with no hidden exam fees.
• Microsoft official hands-on labs and vetted practice exams, plus 90 days of extended lab access after the camp.
• Onsite and online Pearson VUE testing, so you certify without booking a separate test center.
• Up to 6 months to defer your exam or re-sit the training if you need more time.
• Taught by Microsoft Certified Trainers, live online or in person in Sarasota, Florida.
• Classes run as scheduled, with no cancellations, so you can book travel with confidence.