MS-102 Study Guide 2026

Co-management connects existing ConfigMgr-managed Windows devices to Intune and allows organizations to progressively shift specific management workloads (e.g., Compliance, Device Configuration) from on-premises ConfigMgr to cloud-based Intune.

Fresh Start reinstalls a clean version of Windows 10/11, removes OEM bloatware, and gives the administrator the option to keep the user's personal files while ensuring a clean OS state.

A key best practice in tenant-to-tenant migrations is to pre-instantiate (create) user accounts in the target tenant before moving data. This ensures that when data is migrated, it has an owner, which helps maintain proper access controls and permissions from the start.

The Microsoft 365 Compliance Center (now part of the Microsoft Purview compliance portal) provides tools and capabilities to help organizations manage their compliance risks and meet regulatory requirements. It offers features for data governance, eDiscovery, data loss prevention, and privacy management. Its role is critical in helping organizations adhere to laws like GDPR, HIPAA, and other industry-specific regulations by providing a centralized compliance management platform.

The Microsoft 365 Security & Compliance Center (now largely split into Microsoft Purview compliance portal and Microsoft 365 Defender portal) is the central hub for administrators to define, implement, and monitor security and compliance policies across their Microsoft 365 environment. It provides tools for data loss prevention, eDiscovery, information governance, threat management, and data privacy. Its purpose is to help organizations meet regulatory obligations and protect sensitive information.

Device restriction profiles in Intune include settings to block Microsoft accounts and other consumer features on Windows 10/11 devices, keeping devices focused on corporate identities.