70-685 : Enterprise Desktop Support Technician for Windows 7

Define enterprise technician as a bridge from desktop support to server and network environments, using tools to diagnose issues, educate users on security, monitor threats, manage software, and document actions.

Explore Windows 7's built-in troubleshooting in Control Panel, prioritizing common issues across programs, hardware, network, and appearance. Access Help, Action Center, and recovery options for quick problem resolution.

Learn to use the Windows 7 troubleshooter, explore the advanced apply repairs automatically option, and review troubleshoot categories from network to printers, plus remote assistance and recovery options.

Explore how Windows troubleshooters diagnose network issues and navigate the network and sharing center. Apply fixes and verify results, including the diagnostics policy service and viewing troubleshooting history.

Learn how to use the problem steps recorder to capture step-by-step actions, background processes, and screenshots, save the results as a zip web page, and email them for troubleshooting.

Demonstrates using the problem steps recorder to capture a user's troubleshooting actions, save them as a zip, and share an html report with the help desk.

Learn to use group policy to install software by configuring a distribution point, hidden shares, and correct path mapping. Compare assigning versus publishing, and handle upgrades and add/remove programs prompts.

Apply default enforcement rules to all files, including dynamic link libraries, while excluding administrators who install software to control the network, and note certificate rules may impact performance.

AppLocker competes with software restriction policies; both cannot be on the same system, and AppLocker rules win, with group policy configuration and audit mode testing to ensure legitimate apps run.

AppLocker runs only on Windows 7 ultimate or enterprise, policies created on Windows 7 professional apply only to those editions, requiring Windows Server 2008 RSAT and Group Policy Management Console.

Explore AppLocker rules in local group policy editor, configuring executable, Windows Installer, and script rules. Learn to enforce or audit policies and create rules by publisher, path, or file hash.

Discover AppLocker advantages over software restriction policies, including digital signature rules and executable, install, and script controls, and how to configure rule enforcement via the group policy management editor.

Limit AppLocker to enterprise or ultimate Windows 7; require Windows 7 professional or XP to rely on software restriction policies, with conversion limits for internet zone, per-machine, or registry rules.

Learn installation permissions and compatibility on Windows 7, including group policy deployment, admin rights, dependencies, vendor support, and true compatibility beyond banners and XP compatibility tools.

Use the control panel to select a program, run compatibility checks, and fix issues. If the results aren’t successful, take the next step by downloading the Application Compatibility Toolkit.

Explore the application compatibility toolkit to analyze applications before deployment. Use the data collection package and log processing service to populate the ACT database.

Learn to locate, download, install, and run the compatibility toolkit, including the toolkit manager, 32-bit and 64-bit options, and enterprise configuration with SQL server and local databases.

Explore Windows automated installation kit and OEM pre-installation kit to automate deployments of Windows 7 with applications, including OEM hardware considerations for Dell and other manufacturers.

Explore how Windows Installer manages program installation and configuration via MSI files, why upgrading the installer helps, and how to troubleshoot with msiexec and re-register commands.

Evaluate legacy app compatibility by checking UAC, protected mode, and elevated privileges. Assess OS version requirements with the upgrade advisor, Wow64, 16-bit and 32-bit programs, and Windows resource protection redirects.

Manage Windows Update via control panel or quick search, view update history and status, adjust settings to schedule automatic installs, and hide or restore updates, which can update some applications.

Access Windows update through Windows Explorer and tools, inspect update history and status, and configure change settings to control automatic updates in a controlled environment.

Learn to manage updates with a WSUS server administrator, classify critical security updates, configure downstream servers, push approved updates to sites or branches, and review synchronization and update status.

Discover Windows Management Instrumentation (WMI) in Windows 7, enabling remote process control, scheduled tasks, remote reboots, software inventory, and event log queries, with AD group policy integration.

Use WMI tasks to enforce software installations via group policy, filter by hardware and prerequisites, and monitor applications such as Microsoft Operations Manager, Exchange, and SQL Server.

Review Internet Explorer privacy settings, including cookies and their session data, pop-up blocking, and private browsing. Learn to manage cookies, enable private mode, and use keyboard shortcuts ctrl+shift+p and ctrl+shift+f.

Explore how the smart screen filter checks websites for safety, lets you manually verify sites, report unsafe ones, and manage on/off configuration to stay protected.

Learn to manage browsing history and private data, delete temporary files, cookies, histories, form data, and passwords, and preserve favorite site data to speed up access during backups.

Explore group policy restrictions to customize Internet Explorer through local computer policy, including browser titles, logos, toolbar options, proxy settings, favorites, and security configurations for enterprise desktops.

Define the enterprise desktop technician role and learn to troubleshoot desktop issues with troubleshooters, install methods (easy and difficult), security lockdowns, and securing Internet Explorer in enterprise settings.

Master startup recovery with advanced boot options—safe mode, safe mode with networking, and safe mode with command prompt—plus boot logging and last known good to repair startup issues.

Access the advanced startup options by pressing f8 before Windows loads to troubleshoot startup issues, including safe mode variants, boot logging, and last known good.

Demonstrates using the Windows recovery environment to troubleshoot Windows 7, including startup repair, system restore, system image recovery, memory diagnostics, and bootrec via the command prompt.

Enable system protection on Windows 7, configure protection settings and disk space, and create restore points to roll back changes with System Restore.

Learn how boot configuration data is stored and modified in Windows 7, including hibernation, startup options, and using bcdedit to edit the registry hive and boot settings.

Manage windows services with net start and net stop, inspect startup items via msconfig, and apply safe boot options to troubleshoot boot issues and permanent boot settings.

Learn to use BCDEdit.exe to view, edit, back up, and restore the boot configuration data, and run it with elevated administrator privileges to safely manage startup options via /?.

Demonstrates using BCDEdit, run with elevated privileges, to view and modify the boot configuration data, including creating, exporting, importing, and setting the default entry and display order.

Enumerate and export boot entries with BCDEDIT, back them up, then delete boot data to demonstrate recovery. Rebuild the boot configuration data from the Windows installation disk and verify startup.

Learn how Windows background services run without a user interface, such as the spooler that forwards print jobs, and how their logon accounts and dependencies shape operation.

Configure Windows services through control panel, computer management, or command line; set startup types, manage dependencies, define failure actions, and disable unused services to improve performance and security.

Explore configuring Windows services by using the services console, compare extended versus standard views, set startup types, logon accounts, recovery options, and dependencies to troubleshoot service behavior.

Identify why Windows services fail by checking log files and stop codes from blue screens, or dependency errors. Use the Action Center and Event Viewer for troubleshooting and enabling tracing.

Explore Windows 7 troubleshooters that empower users to diagnose issues, reduce help desk load, and learn system basics. Create and deploy custom troubleshooters with PowerShell, WMI, and certificates.

Identify the root cause with WMI checks, write the resolver script, and verify outcomes by re-running the troubleshooter. If multiple issues exist, it offers a choice and continues with resolution.

Use event viewer as a first stop for troubleshooting, filter for errors, and archive logs. Create custom views for application, system, security, and setup events, and monitor remote machines.

Explore the Event Viewer in Windows, including application, security, and system logs, with custom views, filters, and attached tasks to monitor events and identify issues.

Explore properties in event viewer, including event id, source, date, and computer name; use custom views, filters, and the actions pane to save logs, attach tasks, and import custom views.

Windows 7 supports event forwarding, sending event logs to a central monitoring server for enterprise level monitoring. Configure collectors, permissions, and network settings to forward events from PCs, servers, routers.

Create collector initiated event subscriptions using the management console, Event Viewer, or a domain-wide GPO, and test with the event create utility to forward to Event Viewer.

Explore how the Windows Experience Index rates your system by processor, memory, hard drive transfer rate, and graphics subscores, showing that the lowest subscore limits feature availability.

Explore how graphics, memory, processor, and hard drive scores determine a base score, and how slow drives lower performance. Fix with reducing startup programs, disk cleanup, indexing, or upgrading hardware.

Explore the Windows experience index, view sub scores for processor, memory, graphics, gaming, and hard drive, and learn how the lowest scores affect the base score and overall performance.

Explore Windows 7 language packs, licensing limits on single language editions, and how Ultimate or Enterprise editions enable switching between languages and deleting extras, with the default language non-deletable.

Learn how Windows 7 language packs shrink for image deployments and use DISM to modify languages offline, while logs in Windows directory can be archived when size limits are reached.

Language packs offer two deployment options: full packs with licensing and interface packs as add-ons, and upgrades from Windows XP remove all lips, requiring reinstallation in Windows 7.

Explain Windows 7 multilingual deployments by edition, noting single language editions auto-delete language packs after choosing a default language. Ultimate and enterprise allow language switching during setup; default pack kept.

Image a Windows 7 workstation to mirror the entire machine and redeploy the OS, apps, and user data across the network for fast recovery using image X and tsis prep.

Windows deployment services, or WDS, is a server-based tool to create Windows 7 images and convert images from the reverse remote installation service, using the WDSUTIL command-line interface.

Learn to use ImageX commands to manage Windows image (.wim) files, including capturing and applying volume images, committing changes, compressing, deleting images, and listing files for multi-image deployments.

Export an image between Windows and manage multiple images with image x commands. Mount with read-write or read-only, split large files, unmount when finished, to reimage without booting.

Explore Internet Explorer compatibility mode, adjust compatibility view settings, and add websites to the list so sites auto revert to compatibility when needed, including Office 365 examples.

Explore Windows 7 network access using the network and sharing center to control how your device is seen, with network location categories, a network map, and diagnostics.

Explore the Windows 7 network and sharing center to locate networks, manage adapters, configure sharing and profiles, and troubleshoot connections with map and diagnostic tools.

Learn to connect to and disconnect from a vpn on a windows 7 workstation using the network and sharing center. Delete unused vpn connections by removing the virtual network adapter.

Assess a wired network issue by determining scope—one user or many—and verify IPv4 and IPv6 settings, hardware adapters, and potential application or server problems.

Explore the evolution of 802.11 wireless standards, from 802.11a and 802.11b to 802.11g and 802.11n, including 2.4 and 5 gigahertz frequencies, speeds, and typical ranges, with a 1980 origin note.

Lock down wireless security by hiding the network name, applying strong authentication and encryption, and using certificates, access point login, or MAC address filtering to control access.

Explore WEP, WPA, and WPA2 encryption methods, noting WEP’s age and vulnerabilities, WPA’s temporal key integrity protocol, and WPA2’s AES-based security for wireless networks.

Enable automatic configuration through group policy and Windows connect now to detect and connect to wireless networks on standalone or Active Directory devices, and import configuration via USB drive.

Explore network architecture by visualizing how a gateway and router work together, using diagrams to show what the setup looks like and how it functions.

Configure and troubleshoot IPv4 addresses and subnet masks, and apply default gateways, to understand how devices share a network id and reach other networks through a gateway.

Explore how gateways and routers connect dissimilar networks using two network cards with matching network IDs, and troubleshoot connectivity by pinging the default gateway to gauge reach.

Compare local area networks (LAN) and wide area networks (WAN). Include CAN and MAN, and note leased lines, scheduling, and traffic management.

Master IPv4 address configuration, subnet masks, and network ID versus host ID using octets. Compare static and DHCP setups, gateways, DNS scopes, and APIPA 169.254 fallback.

Explore the tcp/ip utilities suite to diagnose and troubleshoot network connections, including arp, ping, ipconfig, trace route, pathping, DNS, net, and diagnostic commands that reveal routes, hostnames, and DNS status.

Use nslookup to test dns servers, inspect forward and reverse zones, and verify pointer records and replication. Trace routes reveal path and hops from your workstation to a target.

Explore IPv6 as a gradual upgrade from IPv4, highlighting 128-bit hex addresses, address exhaustion, link-local addressing, tunneling with IPv4 networks, and coexistence with Windows 7.

Explore name resolution concepts, from hosts files and NetBIOS to DNS, and learn how machines resolve names to IP addresses across Windows and non-Microsoft networks.

Explore how DNS uses zone files to map host records and MX entries within a domain, and how replication and Active Directory enable client name resolution.

Learn how the hosts file maps ip addresses to host names, using aliases and comments, and why local hostname resolution sits alongside dns with simple local loopback testing.

Explore Windows internet name service (WINS) and how it resolves NetBIOS names to IPs, the 16-byte BIOS name, and why legacy apps require WINS.

Explore the default order of name resolution methods: hostname lookup, local DNS cache, DNS servers, netbios name cache, and the hosts file, before querying Windows server or broadcasting.

explain llmnr Windows 7, resolving names over IPv4 and IPv6 in small networks, supported by Vista and Server 2008, and show how to disable via group policy under DNS client.

Clear the resolver cache, ping the host by IP and by name to distinguish connectivity from name resolution, and verify or adjust the hosts file and nslookup.

Configure IPsec to encrypt selected traffic end-to-end, using Windows Firewall with advanced security or group policy, ensure policies on each side, and apply IP filters to balance security with performance.

Explore IPsec authentication and compare Kerberos, certificates, and pre-shared keys for securing connections in active directory and non-domain environments.

Explain how Windows 7 network profiles classify connections as domain, private, or public and adjust security settings to protect laptops on public Wi‑Fi, home, or office networks.

Compare dial-up, VPN, and direct access remote connections for Windows 7 and Server 2008, explaining secure, encrypted access, bidirectional vs one-way communication, and server-side configuration.

Compare vpn and dial-up authentication protocols, from pap and chap to ms-chapv2 and eap, highlighting security trade-offs and the role of extensible authentication using smart cards and pins.

Enable direct access configuration ensures seamless, office-like experience for remote users by securely exposing servers and ports, enforcing group policy, IPv6 support, and encryption through a standard port set.

Discover direct access authentication methods, including ipv6 only, machine authentication that applies group policies even when no user is logged on, and security with smartcards, passwords, and pins.

Learn to use the Connection Manager Administration Kit (CMAC) to create and distribute template VPN profiles across client computers, handling 32-bit and 64-bit templates, with the CMAC download from Microsoft.

Check user account properties and routing remote access policies, ensure explicit allow or deny, IP address availability, and proper maximum connection time settings.

Explore the basics of networking in Windows 7, including connecting to networks, accessing resources, securing remote work setups, and considerations for enterprise desktop technicians across environments.

Discover how the encrypting file system uses a user certificate and symmetric keys, with private keys encrypting the file and public keys encrypting the symmetric keys.

Explore how EFS uses a file encryption key protected by the user’s public key, decrypted by private key, with recovery agent’s encrypted copy and color-coded files in Windows Explorer.

Explain how EFS uses a symmetric key to decrypt files, the need for NTFS formatting, and configuring a recovery agent with domain controller key backups.

Configure EFS on Windows 7 by ensuring NTFS, then use the cipher command line tool (or DXi) to encrypt, decrypt, update certificate information, and generate keys for first recovery agents.

Best practices for EFS include sharing encrypted files with multiple users, configuring a recovery agent in Active Directory, decompressing before encryption, and backing up the key for portability.

Determine if your computer has TPM by checking Control Panel security for BitLocker; if present, TPM exists. If not, use a removable USB drive to enable startup encryption, BIOS permitting.

Configure BitLocker via group policy by selecting from four categories: global settings for all drives, operating system drive settings, fixed data drive settings, and removable drive settings.

Train users on BitLocker usage, enable multi-factor authentication on OS drives, store recovery in Active Directory, suspend and resume protection after recovery, and disable standby mode via Group Policy.

BitLocker to go encrypts removable media and unlocks with password or smart card; Windows 7 supports read/write access, while Windows XP is read-only, with a similar recovery process.

Explore Internet Explorer's zone-based security, including Internet and intranet zones with restricted and trusted sites. Evaluate add-ons and toolbars, noting how they extend functionality and may introduce malware.

Learn how to configure Internet Explorer in Windows 7, including internet options, home pages, and tabbed browsing. Explore privacy, security settings, cookies, add ons, and pinning to the task bar.

Block incoming and outgoing traffic with firewalls—hardware or software, including built-in Windows Firewall—and open only essential ports for applications, such as 80 for http.

Navigate Windows Firewall with Advanced Security, manage inbound and outbound rules across domain, private, and public profiles, and import, export, and restore default policies via group policy.

Explore creating exceptions within rules and scanner properties, deciding when to enable, allow, or block connections, and applying user-based exclusions for administrators or owners.

Enable logging in Windows Firewall with Advanced Security per network profile, including domain, private, and public, and apply profile-specific rules to monitor attempts on public networks.

Identify common operating system attacks including viruses, spyware, worms, man-in-the-middle, and key loggers, and explain how they damage hardware, software, and data, including address book email propagation.

Explore the registry editor, back up and export registry branches, and navigate hives like local machine and current user to safely configure Windows settings.

Explore how to locate and use the Windows 7 Action Center from the Control Panel, review security, maintenance, and backup messages, and adjust settings.

Back up your PC with onsite backups and offsite encrypted portal for OS and data, and harden the system by disabling unused services, tightening the firewall, and applying updates.

Apply defense in depth with a current antivirus on Windows 7, keep definitions up to date, enable real-time scanning, and configure rules for attachments and links, including quarantine or removal.

Learn how spyware differs from viruses, how it spies on you, tracks and records your activities, compromises private data, and uses your web behavior to trigger targeted pop-ups.

Update Internet Explorer through Windows updates and disable unnecessary add-ons or toolbars. Use private browsing and SmartScreen filtering to block phishing and ensure cookies disappear after each session.

Identify signs of infection by noticing unfamiliar programs, unexpected pop ups, unauthorized configuration changes, or strange user accounts, and regularly scan event logs to detect hidden malware and performance slowdowns.

Explore how vpn (virtual private networks) enable mobile users and branch offices to securely connect to headquarters and access server resources, email, and file sharing remotely.

Explore the SSTP VPN protocol, which tunnels over https via port 443 to bypass firewalls, delivering confidentiality, integrity, and authentication, plus IKEv2 with IP tunnel mode and mobility support.

Evaluate vpn authentication methods from pap to eap, noting pap's plain text credentials, chap's challenge-response, ms-chap v2 mutual authentication, and eap with x509 certificates and smart cards.

Explore how network policies secure Windows networks with conditions, constraints, and settings that govern who can access resources. Learn default deny behavior and how administrators tailor policies for safe authentication.

Identify how network policies flow determines access by evaluating the first matching policy, dialin properties, and explicit allows or denies for VPN and remote access.

Learn how to use remote desktop to connect from a Windows 7 workstation to a server, configure display and local resources, and manage authentication and sessions.

Configure remote desktop security parameters through the group policy editor, manage credential saving with RTP, and explore remote desktop services options to strengthen access controls.

Explore server-side group policy settings for remote desktop in Windows 7, including licensing, session hosts, and policy options for time limits, resource redirection, and client credentials.

Configure remote assistance via group policy to manage connections, keys, and versions from Vista onward; control session logging, bandwidth optimization, warning messages, and policies for soliciting or offering help.

Direct access connects you to a corporate network without a vpn, supports shares and email, uses ipv6 for bidirectional access, and requires Windows 7 and Server 2008 as internet-facing.

Improve network performance with branch cache by serving file shares from a local cache, reducing bandwidth and delivering a seamless office experience through hosted or distributed cache modes.

Learn to create custom power plans, adjust balance and power saver settings, optimize display sleep, hard drive, wireless, PCI Express, processor cooling, and advanced options for energy efficiency.

Explore physical hardware and driver failures, including accidental damage and overheating, and learn how backup planning and driver updates mitigate risks across Windows 7 environments.

Learn to retrieve hardware information with system information and device manager, inspect hardware resources and cdrom details, and manage drivers through driver details, updates, and inf file options.

Troubleshoot hardware using diagnostic and OEM tools, review event viewer, verify Windows 7 compatibility on the vendor site, and remove or roll back drivers as needed.

Identify components most likely to fail in computers and laptops: ram, hard drives, optical drives, cooling fans, cpu, gpu, and power supply; plan backups according to machine importance.

Run the Windows memory diagnostic or BIOS POST to detect memory issues; ensure memory is properly seated, dust-free, and installed in pairs, and test by removing modules to diagnose.

Hard drives are the most common hardware to fail, so identify failure with bad sectors and event logs. Also ensure backups, proper drivers, and firmly seated power and data cables.

Learn how to check hard drive space on a Windows 7 workstation, review capacity and free space with properties, and use disk management and tools like check disk and backup.

Determine whether a network card issue is hardware or connectivity related, then inspect cabling, hardware settings, legacy hardware, resource conflicts, drivers, and gateway configuration for tcp/ip.

Safely replace a power supply by unplugging it completely, draining residual charge, diagnosing symptoms like random freezes or reboots, testing with a multimeter, and properly disposing of faulty units.

Use Windows 7 troubleshooters and safe mode to diagnose hardware, then monitor reliability, resource, and performance monitors to spot bottlenecks. Check Disk validates hard drive integrity and cleans up errors.

Use resource monitor to inspect hardware resources across overview, CPQ, memory, disk, and network, isolate activity by process, view network statistics, TCAP connections, open ports, and disk usage.

Explore real-time system data in Resource Monitor, viewing cpu, disk, network, and memory usage. Learn to filter processes, services, handles, and io details to diagnose performance.

Explore performance monitor to view current and historical statistics, use data collectors sets and reports, and analyze counters for processor time, memory, disk, and network to diagnose performance.

Create and manage data collector sets in performance monitor on Windows 7, using templates or manual counters to collect performance data, event traces, and save logs for later analysis.

Use reliability monitor to assess computer reliability by reviewing problem history, indicators, and what went wrong to determine whether any crashes occurred.

Identify bottlenecks by analyzing resource usage with reliability monitors and testing each hardware component. Tune memory and disk interactions one change at a time, noting page file effects.

Learn how Windows assigns a program to a specific processor using process affinity in Task Manager, and how to adjust priority, end processes, open file locations, and manage multiple users.

Fine-tune memory, disk, processor, and network configurations to boost Windows 7 performance. Optimize page files across multiple disks, isolate disk-intensive apps, update drivers, and set processor affinity and network settings.

Explore how device drivers connect the operating system to hardware, manage signing and driver store, and use device manager in safe mode on Windows 7 to update or disable drivers.

Learn to remove unsigned drivers by using a verification tool, create a temp folder for the drivers, disable the hardware device, and restart to prevent installation.

Use PNPUtil.exe to manually add signed driver packages to the Windows 7 driver store, enabling plug-and-play for new devices like printers.

Update, rollback, or remove drivers using Device Manager and inspect hardware details. Remotely access Device Manager on another Windows 7 machine with administrative privileges to manage drivers.

Boot into safe mode to test driver reliability by loading Windows with minimal drivers. Press F8 at the exact start of Windows loading to reach safe mode.

Driver updates can trigger a blue screen; use safe mode to rollback or uninstall the driver. Use the last known good configuration to revert, but login may negate it.

Use compatibility mode to install legacy programs with drivers in Windows 7, emulate an older operating system, and restart the setup.

Configure the page file to let the hard drive act as memory, using system properties and the advanced performance settings. Set a custom initial and maximum size and click set.

Configure virtual memory by manually adjusting the page file across disks, choosing a fixed or custom size, moving it to another volume, defragging, and applying changes after a restart.

Navigate Control Panel power options to tune balanced plans and advanced settings, reducing costs and extending battery life for laptops and desktops across a network.

Learn to manage usb devices using control panel and group policy to prevent or control installation of removable media, reducing virus risks and unauthorized use.

Mobile users can set location aware default printers, switching by home, office, or client site. The network identifies locations by gateway's MAC address, requiring a reset when the gateway changes.

XPS based printing creates a file using a simple, format-neutral document standard. Print from any Windows program to an XPS printer, viewable with the XPS viewer or Internet Explorer.

Explore printer driver issues in Windows 7, including backward compatibility with XP via the gdi-based architecture, and how kernel-mode drivers are blocked for system protection.

Learn how the spooler service monitors the spool folder and print jobs, redirects output to printers, and how to pause, move, or restart the spooler with net commands.

Evaluate spooler options that let quick printing for small jobs and full spooling for large ones, depending on user needs and client computers or network printer behavior.

Explore configuration options for print servers, spoolers, and printer pools to manage print job priority and availability, with scheduling for large or after-hours jobs.

Learn how printer pools route print jobs to a single printer by monitoring ports and sending tasks to a free device, whether over physical or IP connections, maintaining exact consistency.

Explore how group policy under computer configuration pre populates printer search locations, with printer names matching computers and Active Directory Sites publishing to locate supporters and remove unavailable printers.

Explore internet printing with web services and the internet printing protocol to print from shared printers to non-microsoft and unix printers via a port monitor.

Discover how local printers demand administrator rights and network installations use permissions, including print, manage documents, and manage printers, with groups like everyone and administrators, plus read and take ownership.

Explore location aware printing and how mobile users leverage default network printers and permissions. Note that this behavior applies only to Windows 7 Professional, Ultimate, or Enterprise editions.

Learn to identify and troubleshoot Windows 7 hardware across diverse components, determine upgrade needs, and use tools to isolate issues affecting printers and networks.

Explore centralizing configurations with group policy objects in an active directory domain, including linking and filtering by user or computer, and using the group policy editor on standalone Windows 7.

Watch a hands-on demo of creating and configuring a local group policy object on a Windows 7 machine, including adjusting computer and user configurations, admin templates, and local registry changes.

Explore how administrative templates extend group policy to configure the Windows firewall with advanced security and Internet Explorer maintenance, control traffic and logging, and define slow link detection.

Discover how Group Policy applies across local computers, sites, domains, and an organizational unit in Active Directory, and how processing order and precedence shape policy outcomes.

Explore how group policy settings depend on computer or user location, GPO linkage, and permissions, including the impact of dot net versions on policy application.

Apply domain- and site-level GPOs to target Portland Maine site staff, tailor software versions for departments, and block policies using direct links or filters.

employ synchronous GPO processing on Windows Server, aligning computer and user policies during sign-in; computer policy runs before login, while user policy runs before the desktop and shell become active.

Use loopback processing in an Active Directory environment to ensure computer policies take precedence over user policies at login, choosing merged or replaced mode where replaced uses only computer object.

Explore event viewer to filter and archive system, security, and application logs, pinpointing Active Directory, group policy, and log in failures quickly.

Centralize configurations using group policy fundamentals and event forwarding, focusing on how policies themselves centralize management and the server factors to consider, beyond specific policy rules.

Differentiate local machine authentication from domain authentication in Active Directory, noting the SAM database, local policies, and trust between the domain and the machine, which unlocks domain resources.

Learn how Windows 7 user accounts are created and authenticated across local machines and domain, using Computer Management and Active Directory Users and Computers to roam or log on.

Learn multi-factor authentication by combining something you know, something you are, and something you have, such as username and password with a fingerprint or a smart card.

Join this Active Directory overview to understand forests, domains, and domain trees that share a common schema and namespace, and learn how trusted relationships enable cross-domain access and security boundaries.

Use DNS in a Windows 7 Active Directory network to enable domain controller discovery and login. Employ DHCP for IP assignment and time synchronization across domain controllers.

Discover how dynamic host configuration protocol assigns IP addresses, subnet masks, and gateways to Windows 7 clients, and how DHCP can update DNS and renew or release them with ipconfig.

Explore how time servers use Kerberos authentication and the PDC emulator role on domain controllers to sync time, manage time critical changes, and configure with net time and W32tm.

Join a Windows 7 machine to a domain so the machine account authenticates with the domain controller through trusted relationships, with domain passwords rotating every 30 days.

Configure user and service accounts with proper permissions, logon hours, machine access, password expiration policies, and smartcard requirements for temporary or service-based logons.

Cached credentials let you log in when the domain controller is unavailable; default is 10 logons, adjustable or off via group policy, and password changes update the cache.

Explore how user profiles store personal settings, including desktop, start menu, and favorites, how public profiles share applications, with backups and imports possible, while hidden items may occur.

Roaming user profiles are stored in a file share, so user settings move with the user when the server is backed up, but they increase login time.

Troubleshoot logon errors by reading the on-screen message, verifying accounts in Active Directory Users and Computers, and checking event logs on the authenticating machine or domain controllers.

Learn how drive mappings create virtual pointers to network shares, comparing manual versus automatic (logon script) mappings, including persistent mappings, user profile impact, and group policy implementation.

Learn to map network drives using Windows Explorer, net use commands, or login scripts, with persistent, user-specific drive maps via group policy to follow users across logins.

Share folders on the network by setting permissions that control access to folders and files, including full control, read and change, and read-only options, noting how names can cause confusion.

learn how offline files let you work with server files from a local cached copy, synchronize changes when reconnecting, and resolve conflicts with Sync Center in Windows 7.

Configure offline files on the server side to cache only user-specified items or cache all shared folder content, balancing confidentiality and disk usage for courseware.

Configure shared folders and caching options on Windows Server, then enable offline files on the client and synchronize offline copies with Sync Center.

Explore sync center in Windows 7 to manage offline files, encryption of online files, and synchronization status, including conflicts and errors, with a simple navigation to resolve issues.

Troubleshoot offline files by confirming group policy enables the feature in Windows 7 and on the share. Verify the domain user is logged on with cached credentials.

Explore Windows 7's transparent caching, which doesn't provide offline file access, stores files in a temporary cache for slow networks, and writes changes to the server immediately when you save.

Understand how shared and NTFS permissions determine access across network shares and locally. Favor NTFS restrictions to secure files while using share permissions to extend access where appropriate.

Explore how NTFS deny permission acts as the strongest access control, overriding read and write rights for Sandra and groups, and how access control lists prioritize explicit denies over allows.

Discover how DFS delivers distributed file access through logical paths that point to multiple servers. Administrators update pointers, enable replication, and load balancing to ensure seamless access to shared resources.

Back up regularly, since restore partitions can fail if the drive dies or the laptop is stolen. Schedule backups with Task Scheduler and store them on external media.

Explore the login process, desktop layout, and how users access resources. Learn about DFS structure and file shares, and how offline caching keeps work accessible on the road.