The MD-100 certification, formally titled Windows Client, is a Microsoft associate-level exam that validates your ability to deploy, configure, secure, and maintain Windows 10 and Windows 11 endpoints in a modern enterprise environment. Whether you are an IT professional transitioning into endpoint management, a help desk technician aiming to move up, or a systems administrator who wants formal proof of your Windows skills, earning the MD-100 credential is one of the most direct paths to demonstrating real-world competence with Microsoft desktop technologies.

Microsoft originally launched MD-100 as part of the Modern Desktop Administrator Associate certification, which also requires passing MD-101. Together, the two exams cover the full lifecycle of managing and protecting Windows devices in enterprise settings. The MD-100 exam focuses specifically on the client side — installing and upgrading Windows, configuring devices and apps, managing data and storage, and troubleshooting connectivity and operating system issues that arise daily in corporate environments.

Preparing for this exam requires more than memorizing bullet points. You need hands-on familiarity with Windows 10 and Windows 11 administration tools, an understanding of how Group Policy, Intune, and Azure AD interact with local clients, and the ability to troubleshoot common problems under time pressure. A structured certification guide helps you organize those broad knowledge areas into a coherent study plan that covers every exam objective without wasting time on topics outside the test's scope.

The exam itself consists of 40 to 60 questions delivered over 120 minutes. Question formats include multiple choice, drag-and-drop, case studies, and active screen items that require you to simulate real administrative tasks inside a Windows interface. Microsoft does not publish an official pass rate, but community data consistently shows that candidates who spend at least eight to twelve weeks on focused preparation have significantly higher first-attempt success rates than those who cram over a weekend.

One reason the MD-100 remains valuable in 2026 is that Windows endpoints continue to dominate enterprise desktops worldwide. Despite the growth of cloud-native and BYOD environments, most large organizations still rely on managed Windows clients as their primary productivity platform. Employers who need to staff IT support roles, endpoint engineering teams, or helpdesk escalation tiers often filter candidates by Microsoft certification status, making MD-100 a concrete differentiator on a resume.

The credential also serves as a stepping stone inside the broader Microsoft certification ecosystem. After earning MD-100 and MD-101, candidates can pursue the Microsoft 365 Certified: Enterprise Administrator Expert path, or pivot toward security-focused tracks such as SC-300 and SC-400. In this way, the MD-100 is not just a standalone achievement — it is the foundational layer of a certification portfolio that can grow with your career over time.

This guide walks you through every aspect of preparing for and passing the MD-100 exam. You will find a breakdown of the exam's domain structure, a recommended study schedule, tips for using practice tests effectively, and answers to the questions candidates ask most often. By the time you finish reading, you will have a clear, actionable roadmap to earning your MD-100 certification and advancing your IT career.

Understanding what each exam domain actually covers — and how deeply Microsoft expects you to know each area — is the most important step in building an efficient study plan. The Deploy Windows domain sounds straightforward, but it covers considerably more than clicking through the Windows installer. You need to know how to perform clean installations, in-place upgrades, and side-by-side migrations. You also need to understand the Windows Assessment and Deployment Kit (ADK), unattended installation answer files, and how to use Windows Deployment Services to push images over the network to multiple devices simultaneously.

The Manage Devices and Data domain carries the highest weight at 25 percent, which means errors here cost you disproportionately. This domain covers Azure Active Directory join and registration, Microsoft Intune enrollment, local and cloud-based identity management, and data protection technologies including BitLocker, EFS, and Windows Information Protection. You will also need to demonstrate knowledge of storage spaces, disk management, and file system permissions — areas that are often overlooked by candidates who focus exclusively on cloud management topics.

Configure Connectivity tests your ability to set up and troubleshoot network connections in enterprise scenarios. This includes configuring wired and wireless adapters, setting up VPN connections using built-in Windows clients, managing Windows Firewall rules, implementing Remote Desktop and Remote Assistance, and diagnosing common connectivity failures using tools like ipconfig, netsh, tracert, and the Windows Network Diagnostics framework. Many candidates underestimate this domain because networking feels like background knowledge, but Microsoft writes detailed scenario-based questions that require precise command syntax.

The Maintain Windows domain addresses the ongoing operational work that keeps endpoints healthy. You must understand Windows Update for Business policies, Windows Update rings, the Windows Recovery Environment (WinRE), System Restore, and push-button reset. Performance monitoring with Task Manager, Resource Monitor, and Performance Monitor is also in scope. Candidates who have worked in IT support roles often find this section the most intuitive, but the exam goes deeper than surface-level troubleshooting — you need to know specific log locations, error codes, and recovery command sequences.

Managing Apps and Features covers the methods organizations use to deploy and control software on Windows endpoints. You need to understand the Microsoft Store for Business, side-loading enterprise apps, MSIX packaging format, and how to configure app compatibility using modes like Windows XP SP3 compatibility and elevated privilege prompts. AppLocker and Windows Defender Application Control policies for restricting unauthorized executables are also tested, as are accessibility features and language pack deployments for multinational organizations.

Connecting the dots between all five domains is a cross-cutting theme of enterprise identity and security. Nearly every question on the MD-100 exam assumes that the Windows client exists inside an Azure AD-joined or hybrid-joined environment where policies flow from Intune or Group Policy, users authenticate through Microsoft 365, and security baselines are enforced at scale. Candidates who have only worked in small workgroup environments should invest extra study time building a mental model of how all these enterprise components interact before attempting the exam.

One of the most effective study approaches is to map each exam objective directly to a Microsoft Learn module and a hands-on lab task. Microsoft publishes a detailed skills outline for MD-100 on its official certification page, and pairing each line item with a practical exercise — creating a BitLocker policy, joining a VM to Azure AD, configuring a VPN client, writing a startup script — transforms abstract knowledge into retained competence. Candidates who take this approach typically score noticeably higher on scenario-based questions than those who rely on reading and video content alone.

Effective use of practice tests is what separates candidates who pass on the first attempt from those who require multiple sittings. The most common mistake is treating a practice exam as a final-week check rather than a diagnostic tool used throughout the entire study period. Taking your first full practice test at the beginning of week two — before you have reviewed everything — gives you a raw baseline that shows exactly which domains need the most attention. That data is far more valuable than a generic study plan built on guesswork about your existing strengths.

When you review your practice test results, never simply note which answers were correct and which were wrong. For every wrong answer, force yourself to articulate why the correct answer is right and why each distractor is plausible but incorrect. This active processing of wrong answers is the core mechanism by which practice tests accelerate learning. Candidates who skip the review step and only count their score miss most of the educational value of the exercise.

Pay particular attention to questions involving Azure AD join versus Hybrid Azure AD join versus Azure AD registration. These three enrollment states are tested repeatedly across multiple MD-100 domains, and many candidates lose points because they conflate the scenarios in which each state applies. Azure AD join is appropriate for cloud-first organizations; Hybrid Azure AD join serves organizations with on-premises Active Directory; and Azure AD registration covers personally owned devices in BYOD scenarios. Understanding the policy and access implications of each state is essential for answering scenario-based questions correctly.

Group Policy Objects and Intune configuration profiles are another high-yield area where precise knowledge pays dividends on exam day. The exam tests your ability to determine which tool is appropriate for a given scenario, how conflicts between policies are resolved, and what happens when a device moves from one policy scope to another. Candidates who understand the CSP-to-Group Policy mapping — the fact that many Intune settings correspond directly to registry keys that Group Policy also manages — are much better equipped to answer these nuanced questions than those who treat the two management systems as entirely separate topics.

Time management during the actual exam matters more than most candidates expect. With 40 to 60 questions in 120 minutes, you have an average of two to three minutes per question — which sounds comfortable until you encounter a case study or an active-screen task that requires reading several paragraphs of scenario context before you can answer. Practice navigating case study questions quickly: read the question first, then find the relevant facts in the scenario description rather than reading everything sequentially. This approach can save five to ten minutes that you can redirect toward harder questions.

The night before your exam, resist the urge to cover new material. Instead, spend 30 minutes reviewing your condensed reference sheets — command syntax, policy paths, enrollment flows, recovery steps — and then stop studying. Sleep and a clear head contribute more to exam performance than cramming a few extra facts into an already stressed working memory. Arrive at the testing center or open your online proctoring session well before the start time so that technical issues do not eat into your exam clock.

After you submit your exam, Microsoft typically displays a pass or fail result immediately, along with a section-by-section breakdown of your performance. Even if you pass, save that score report. If you scored below 75 percent in any domain, that gap is worth addressing before you move on to MD-101 or any other certification in your roadmap, since the same knowledge areas appear in more advanced exams where the questions are harder and the stakes are higher.

Once you have earned your MD-100 certification, the most immediate next step is deciding how to use it strategically within the Microsoft certification ecosystem. The credential on its own demonstrates strong Windows client administration skills, but its greatest value is as a component of a larger certification portfolio that signals enterprise-level competence to employers. Most candidates pair MD-100 with MD-101 to earn the Modern Desktop Administrator Associate, which is the recognized associate-level endpoint management credential that hiring managers at enterprise organizations understand and value.

From the Modern Desktop Administrator Associate, several advanced paths open up depending on your career direction. If you want to move into identity and access management, the SC-300 Microsoft Identity and Access Administrator certification builds directly on the Azure AD and Intune foundations you established in MD-100. If cloud infrastructure and security governance interest you, the SC-900 and then SC-200 or SC-400 tracks provide a structured progression that employers in regulated industries find particularly compelling.

The Microsoft 365 Certified: Enterprise Administrator Expert is the highest rung on the productivity platform certification ladder, requiring both the Modern Desktop Administrator Associate and the Microsoft 365 Messaging Administrator Associate (MS-203) or a comparable associate credential. Reaching Expert level typically takes two to three years of focused work, but candidates who plan their certification roadmap from the beginning of their career can reach it significantly faster by choosing each successive exam to maximize overlap with previous study material.

Salary data consistently shows that Microsoft certifications correlate with higher compensation in IT roles, though the magnitude varies by geography and specialization. In the United States, IT administrators holding Microsoft associate-level certifications earn median salaries roughly 10 to 20 percent higher than their non-certified peers at the same experience level, according to data from Glassdoor and the 2025 IT Skills and Salary Report published by Global Knowledge. The MD-100, as a recognized component of a valued associate credential, contributes meaningfully to that premium even in a job market where experience matters more than credentials alone.

Renewal is a requirement that many new certification holders underestimate. Microsoft certifications expire after two years if not renewed, and the renewal process involves passing an online assessment or earning continuing education credits through Microsoft Learn. The renewal assessments are open-book and untimed, making them substantially easier than the original exam — but you must actually complete them before the expiration date. Setting a calendar reminder 18 months after your exam date gives you plenty of runway to renew without scrambling.

Networking with other MD-100 and MD-102 certified professionals accelerates your growth beyond what any single exam can teach. The Microsoft Tech Community, Reddit's r/sysadmin and r/MSFT communities, and local Microsoft user groups are full of practitioners who share real-world problems, policy configurations, and Intune deployment patterns that never appear in official documentation. Engaging with these communities after certification turns a credential into a living knowledge practice rather than a static line on your resume.

Finally, consider contributing back to the community by writing blog posts, answering questions on forums, or creating study resources for the next cohort of MD-100 candidates. Teaching a topic to someone else is one of the most effective ways to solidify your own understanding, and it builds a visible professional profile that creates career opportunities beyond what the certification alone can provide. The combination of verified skills, hands-on experience, and active community participation is what transforms a certification holder into a recognized expert in Windows client management.

Building strong practical habits during your exam preparation pays dividends that extend well beyond the test itself. One of the best habits you can develop is logging every configuration change you make in your lab environment with a short note explaining what the change does and why it matters. This practice forces you to articulate the purpose of each setting in plain language — exactly the skill the MD-100 tests when it presents scenario-based questions and asks you to choose between four plausible administrative actions.

Study groups are an underutilized resource for MD-100 preparation. Finding two or three other candidates working toward the same exam and meeting weekly to discuss difficult topics creates accountability, surfaces misunderstandings before they become exam mistakes, and exposes you to study angles you might never have considered independently. Many candidates form study groups through the Microsoft Tech Community forums or through LinkedIn searches for people who have recently announced their MD-100 study goals.

When you encounter a topic that genuinely confuses you — perhaps the interaction between Intune compliance policies and conditional access, or the precedence order when Group Policy and local policy conflict — do not simply re-read the same documentation. Instead, search for a blog post written by a Microsoft MVP or a community practitioner who has solved a real problem involving that exact topic. Practitioner-written explanations often capture the nuances that official documentation glosses over, and reading about the problem in a real-world context makes the concept stick far more reliably.

PowerShell fluency is not strictly required for MD-100, but candidates who understand basic PowerShell commands for Windows administration score noticeably better on questions that involve scripting, automation, and bulk configuration tasks. You do not need to write scripts from scratch — you need to read a short PowerShell snippet and understand what it does. Practice reading Get-BitLockerVolume, Get-WindowsUpdateLog, and Add-Computer cmdlets so that when a question includes PowerShell syntax, you can evaluate it confidently rather than eliminating it as confusing.

Mock exam simulations from reputable vendors differ meaningfully in quality, and choosing the wrong practice resource can give you false confidence. The best practice tests include detailed rationale for every answer choice, updated question banks that reflect the current exam objectives (not objectives from three years ago), and scenario-based questions with realistic context paragraphs rather than simple one-sentence stems. Always check the date of the practice test's last update before purchasing — an MD-100 practice test last updated in 2021 may not reflect the Azure AD and Intune features added to the exam in later objective revisions.

Physical logistics matter more than candidates realize, especially for online proctored exams. Ensure your testing environment meets the requirements — clear desk, no notes visible, strong internet connection, working webcam and microphone — well before your exam morning. Technical issues during proctor check-in can consume fifteen to twenty minutes of your scheduled exam time, creating unnecessary stress before you have answered a single question. Do a dry run of your testing setup at least 48 hours before the exam so you have time to fix any problems that arise.

Ultimately, the MD-100 certification rewards candidates who combine systematic study with genuine curiosity about how Windows enterprise environments work. The exam is not designed to trick you — it is designed to verify that you can make sound administrative decisions in realistic scenarios. Approach your preparation with that framing, invest the time needed to build real competence rather than surface-level familiarity, and you will walk out of your exam with a passing score and a credential that reflects skills you will actually use every day in your IT career.