MD-102 Prepare infrastructure for devices Practice Question
You administer Microsoft Intune for Northwind Traders. The security team wants to prevent users from enrolling personally owned Windows 10 devices while still allowing corporate-owned devices to enroll. You need to configure a device enrollment restriction that blocks personal Windows devices. Which platform setting should you modify?
⚠ Common exam trap
Watch out — candidates often confuse Windows (ConfigMgr) or Windows Mobile with the platform that governs standard Windows 10 MDM enrollment, which is Windows (MDM).
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Windows (MDM)
Intune device enrollment restrictions are configured per platform. Windows 10 and Windows 11 devices that enroll in MDM use the Windows (MDM) platform. To block personal Windows devices while allowing corporate ones, an administrator sets the Windows (MDM) platform to Block for personally owned devices. Other platform entries such as Windows (ConfigMgr) or Windows Mobile do not apply to standard Windows 10 MDM enrollment.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Windows Mobile
Why it's wrong here
Windows Mobile is a legacy platform setting for Windows Phone and similar devices, which are not the Windows 10 personal computers in question. Modifying this setting has no effect on Windows 10 enrollment. The requirement targets Windows 10 devices enrolling as Windows (MDM), so choosing Windows Mobile would leave the personal-device enrollment path open.
- ✓
Windows (MDM)
Why this is correct
Device enrollment restrictions in Intune have a per-platform configuration, and Windows devices enroll as Windows (MDM). Setting the Windows (MDM) platform to Block for personally owned devices prevents users from enrolling personal Windows 10 devices while still allowing corporate devices to enroll. This is the correct platform to modify for the stated requirement.
- ✗
Windows (ConfigMgr)
Why it's wrong here
Windows (ConfigMgr) applies to devices enrolled through the Configuration Manager co-management enrollment path, not to standard Windows MDM enrollment. Blocking this platform would not affect personal Windows 10 devices enrolling directly into Intune. The security team's requirement is about MDM-enrolled Windows devices, so this platform is not the right target.
- ✗
Windows (MDM) under Corporate Device Identifiers
Why it's wrong here
Corporate device identifiers are used to pre-tag devices by IMEI, serial number, or manufacturer so that they are treated as corporate. They do not themselves block personal devices; they only mark known corporate devices. The requirement is to block personal Windows devices, which is achieved by setting the Windows (MDM) platform restriction to Block for personally owned devices.
Go deeper
Related to this question
Learn chapter
Deploying Applications with Intune
Key term
Intune
Microsoft Intune is a cloud-based service that helps organizations manage their users' devices and applications, ensuring security and compliance without needing to own or control the physical hardware.
Key term
Security
Security in IT is the practice of protecting systems, networks, and data from unauthorized access, damage, or theft.
About these practice questions
One of 556 original MD-102 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Microsoft exam blueprint
This MD-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MD-102 exam.