MD-102 Prepare infrastructure for devices Practice Question
You are setting up Microsoft Intune for a new subsidiary. The subsidiary has an existing on-premises Active Directory Domain Services (AD DS) and uses Microsoft Entra Connect to synchronize users to Microsoft Entra ID. You need to enable automatic enrollment of Windows 10 devices into Intune for users who are synchronized from AD DS. What should you configure first?
⚠ Common exam trap
The trap here is assuming that Intune enrollment restrictions or Autopilot profiles enable automatic enrollment, when the actual trigger is the Mobility (MDM and MAM) setting in Microsoft Entra ID.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
In Microsoft Entra ID, configure the Mobility (MDM and MAM) settings to enable automatic MDM enrollment for Windows devices.
Automatic Intune enrollment for Windows devices is enabled through the Mobility (MDM and MAM) configuration in Microsoft Entra ID. This setting, when scoped to users or groups, allows synchronized users to automatically enroll their Windows devices. Enrollment restrictions and Autopilot profiles serve different purposes and do not initiate automatic enrollment, while device writeback is unrelated to MDM enrollment.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
In Microsoft Intune, create a Windows Autopilot deployment profile and assign it to all devices.
Why it's wrong here
Autopilot deployment profiles are used for pre-provisioning and customizing the out-of-box experience, not for enabling automatic enrollment of existing devices. They require devices to be registered with Autopilot, and do not apply to the general automatic enrollment of domain-joined or Entra-registered devices.
- ✗
In Microsoft Intune, create a device enrollment restriction that allows Windows devices and assign it to all users.
Why it's wrong here
Enrollment restrictions control which devices are allowed to enroll, but they do not initiate automatic enrollment. Without configuring the Mobility (MDM and MAM) settings in Microsoft Entra ID, devices will not automatically enroll even if restrictions permit them, so this does not enable the required automatic enrollment.
- ✗
In Microsoft Entra Connect, enable device writeback and synchronize device objects to Microsoft Entra ID.
Why it's wrong here
Device writeback is used for conditional access scenarios with on-premises AD FS, not for enabling Intune automatic enrollment. It synchronizes device objects from Microsoft Entra ID to AD DS, but does not configure the MDM enrollment settings that trigger automatic enrollment into Intune.
- ✓
In Microsoft Entra ID, configure the Mobility (MDM and MAM) settings to enable automatic MDM enrollment for Windows devices.
Why this is correct
Automatic MDM enrollment for Windows devices is configured in Microsoft Entra ID under Mobility (MDM and MAM). By setting the MDM user scope to All or a specific group, synchronized users can automatically enroll their Windows 10 devices into Intune when they join or register the device in Microsoft Entra ID, which is the required first step.
Visual reference
Go deeper
Related to this question
Learn chapter
Troubleshooting Device Enrollment and Management
Key term
Windows 10
Windows 10 is a personal computer operating system developed by Microsoft that combines the familiarity of Windows 7 with the modern features of Windows 8, designed to run on a wide range of devices from desktops to tablets.
Key term
Microsoft Intune
Microsoft Intune is a cloud-based service that helps organizations manage employee devices, apps, and security policies without needing to own or control the physical hardware.
About these practice questions
One of 556 original MD-102 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Microsoft exam blueprint
This MD-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MD-102 exam.