MD-102 Prepare infrastructure for devices Practice Question
You need to deploy a Win32 app to Windows devices using Intune. The app requires admin privileges to install. How should you configure the deployment?
⚠ Common exam trap
Watch out — candidates often confuse 'install context' with 'assignment scope' (required vs. available), mistakenly thinking that marking an app as 'required for all users' automatically grants admin privileges, when in fact the install context must be explicitly set to 'system' for elevated installations.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Set the install context to system.
Setting the install context to 'system' runs the Win32 app installer with the SYSTEM account, which has the highest privileges on a Windows device. This ensures the installer can perform actions requiring admin rights, such as writing to Program Files or modifying system registry keys, without user interaction or credential prompts. In Intune, the system context is the only way to silently deploy apps that demand elevated permissions.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Set the install context to system.
Why this is correct
Setting the install context to system runs the app's installer under the local SYSTEM account, which already holds full administrative rights on the device. This satisfies the stem's requirement that the Win32 app needs admin privileges to install, avoiding any user-context elevation prompt during Intune deployment.
- ✗
Set the install context to user.
Why it's wrong here
User install context runs the app with the signed-in user's token, which lacks elevation, so an admin-requiring installer fails. System context installs with device privileges. User context is tempting because it suits per-user apps needing no elevation, such as user-scoped utilities.
- ✗
Assign the app as required for all users.
Why it's wrong here
Required assignment controls whether the app installs and to whom, not the privilege level the installer runs under; the install context setting governs elevation. Required is tempting because it guarantees deployment, and it would be correct when the app must install without user interaction.
- ✗
Use a line-of-business app type instead.
Why it's wrong here
Line-of-business apps use the same Win32 or MSI packaging pipeline and still honour the install context; changing app type does not grant admin rights. LOB is tempting because it simplifies packaging, and it would be correct for a simple MSI or appx needing no custom detection rules.
Go deeper
Related to this question
Learn chapter
Planning Deployment and Architecture
Key term
Win32 app
A Win32 app is a traditional Windows program that runs directly on a Windows PC, using the same system resources and displaying a standard window with menus and buttons.
Key term
Intune
Microsoft Intune is a cloud-based service that helps organizations manage their users' devices and applications, ensuring security and compliance without needing to own or control the physical hardware.
About these practice questions
One of 556 original MD-102 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MD-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MD-102 exam.