Microsoft · hands-on lab
MS-102 Lab 4: Manage Secure User Access and Privileged Identity Management
Require MFA with Conditional Access, deploy Pass-through Authentication and Smart Lockout, and configure PIM with admin, self and teammate approval.
- 180 minutesTime in the lab
- AdvancedLevel
- 17 tasksChecked automatically
- CertificateVerifiable link when you finish
What you will do
- Exercise 1 · Task 1: Create a Conditional Access policy to implement MFA
- Exercise 1 · Task 2: Test MFA for both an included and excluded user
- Exercise 1 · Task 3: Deploy Microsoft Entra Pass-Through Authentication
- Exercise 1 · Task 4: Deploy Microsoft Entra Smart Lockout
- Exercise 2 · Task 1: Configure the Global Administrator role to require approval
- Exercise 2 · Task 2: Assign an eligible group to the Global Admin role
- Exercise 2 · Task 3: Submit a request for the Global Admin role
- Exercise 2 · Task 4: Approve the request for the Global Admin role
- Exercise 3 · Task 1: Create an eligible group for the Helpdesk Admin role
- Exercise 3 · Task 2: Configure the Helpdesk Administrator role for self-activation
- Exercise 3 · Task 3: Self-activate the Helpdesk Admin role
- Exercise 3 · Task 4: Verify a PIM notification was issued
- Exercise 4 · Task 1: Create an eligible group for the Intune Admin role
- Exercise 4 · Task 2: Configure the Intune Administrator role to require approval
- Exercise 4 · Task 3: Submit a request for the Intune Admin role
- Exercise 4 · Task 4: Approve the request for the Intune Admin role
- Exercise 4 · Task 5: Verify a PIM notification was issued
How it works
The lab opens in your browser: a real terminal or desktop, nothing to install. Work through the tasks, press Check after each one and the portal verifies your work. Stuck? Ask for a hint. Finish every task and you get a certificate page with its own verification link for LinkedIn or your CV.