nerdexam
Microsoft

MD-102 · Question #518

You have a Microsoft 365 E5 subscription that contains a group named Group1. You need to ensure that only the members of Group1 can join devices to the Microsoft Entra tenant. What should you…

The correct answer is A. Device settings. To restrict which users can join devices to Microsoft Entra ID, you must configure the device settings in the Microsoft Entra admin center.

Submitted by certguy· Apr 18, 2026Prepare infrastructure for devices

Question

You have a Microsoft 365 E5 subscription that contains a group named Group1. You need to ensure that only the members of Group1 can join devices to the Microsoft Entra tenant. What should you configure in the Microsoft Entra admin center?

Options

  • ADevice settings
  • BMobility
  • CEnterprise State Roaming
  • DUser settings

How the community answered

(29 responses)
  • A
    83% (24)
  • B
    3% (1)
  • C
    3% (1)
  • D
    10% (3)

Why each option

To restrict which users can join devices to Microsoft Entra ID, you must configure the device settings in the Microsoft Entra admin center.

ADevice settingsCorrect

Within the Microsoft Entra admin center, under Device settings, administrators can specify which users or groups have permission to join devices to the Microsoft Entra tenant. By setting the 'Users may join devices to Microsoft Entra ID' option to 'Selected' and choosing Group1, only members of that group will be authorized.

BMobility

Mobility (MDM and MAM) settings configure automatic enrollment for mobile device management solutions like Intune, not direct permissions for joining devices to Microsoft Entra ID.

CEnterprise State Roaming

Enterprise State Roaming synchronizes user settings and application data across Windows devices but does not control device join permissions.

DUser settings

User settings in Microsoft Entra ID pertain to general user configurations like profile management and password reset, not device join restrictions.

Concept tested: Microsoft Entra device join restrictions

Source: https://learn.microsoft.com/en-us/entra/identity/devices/device-management-azure-portal#configure-device-settings

Topics

#Entra device join restrictions#Device settings configuration#Group-based access control#Entra admin center

Community Discussion

No community discussion yet for this question.

Full MD-102 Practice