nerdexam
Microsoft

MD-102 · Question #107

Your company has a Microsoft 365 subscription. A new user named Admin1 is responsible for deploying Windows 10 to computers and joining the computers to Microsoft Azure Active Directory (Azure AD). Ad

Sign in or unlock MD-102 to reveal the answer and full explanation for question #107. The question stem and answer options stay visible for context.

Submitted by rachelw· Apr 18, 2026Prepare infrastructure for devices

Question

Your company has a Microsoft 365 subscription. A new user named Admin1 is responsible for deploying Windows 10 to computers and joining the computers to Microsoft Azure Active Directory (Azure AD). Admin1 successfully joins computers to Azure AD. Several days later, Admin1 receives the following error message: "This user is not authorized to enroll. You can try to do this again or contact your system administrator with the error code (0x801c0003)." You need to ensure that Admin1 can join computers to Azure AD and follow the principle of least privilege.

Options

  • AAssign the Global administrator role to Admin1.
  • BModify the Device settings in Azure AD.
  • CAssign the Cloud device administrator role to Admin1.
  • DModify the User settings in Azure AD.

Unlock MD-102 to see the answer

You've previewed enough free MD-102 questions. Unlock MD-102 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Topics

#Azure AD device join#Device enrollment policy#Least privilege#Windows 10 devices
Full MD-102 Practice