70-697: Configuring Windows Devices

Explore Windows 10's start menu evolution, including live tiles, app pinning, groups, and two start menus—regular and administrative—alongside built-in search across files, apps, and the store.

Windows 10 marks a universal, cross-device operating system rather than a simple revision. It unifies the start experience with live tiles and adopts an Apple-like update model.

Discover how Windows 10 enhances user experience with task view, virtual desktops, snap assist, and a refined action center, notifications, and tablet mode.

Shows how Windows 10 uses a continuous update model, with insider preview program and update rings, and integrates with cloud services like Azure, Office 365, Intune, and OneDrive.

Explore Windows 10's primary features, including the start menu, virtual desktops, task view, snap assist, and tablet mode, plus Microsoft Edge, universal apps, and Windows Hello sign-in.

Explore Cortana, the Windows 10 digital assistant, as it searches, sets location-based reminders, reads your calendar, shows weather and traffic, and you can customize with sports alerts and voice commands.

Learn how Windows 10 versions differ by edition, including home, pro, enterprise, and education, why features vary, and how volume licensing and Software Assurance enable enterprise deployments.

Explore features not supported in Windows 10 Home, such as domain join, group policy, BitLocker drive encryption, signed access, remote desktop, virtualization, AppLocker, direct access, and enterprise data protection.

Explore the new Windows 10 pro and enterprise features, including Windows To Go creator, direct access, Azure Active Directory join, and the Windows Store for organizations.

Navigate and use Windows 10, understand the start menu's evolution with live tiles, pin and group apps, resize tiles, and access settings, search, and recent items to support users.

Explore how the Windows 10 start menu provides access to the settings app, the primary hub for basic configuration across system, network, personalization, and security.

Explore Windows 10 desktop changes, including enhanced snap features, task view with virtual desktops, tablet mode, and improved notifications, plus pinning items to start or taskbar for quick access.

Explore Cortana, the Windows 10 personal digital assistant, as you perform local and web searches, set reminders, and convert spoken commands into calendar events.

Explore how the Windows 10 settings app, accessible from the start menu, centralizes basic configuration for system, devices, network and internet, and updates, largely replacing the control panel.

Explore how Windows 10 evolves the Microsoft operating system, last version with updates via Windows Update, uniting features from Windows 7, 8, and 8.1 and branch cache and direct access.

Explore Windows 10 deployment strategies, comparing standard deployments for single machines with enterprise imaging and Windows Deployment Services for deploying across many devices.

Explore standard Windows 10 deployment by identifying preparation steps, hardware and software requirements, and deployment options to upgrade or migrate from Windows 7 or 8 to Windows 10.

Compare Windows 10 editions—home, pro, enterprise, and education—and 32-bit and 64-bit variants, noting features like domain join and bit locker. Note that installation remains the same across editions for deployments.

Explore how Windows editions differ, from core experiences to business features, and learn which editions—home, pro, enterprise, and education—support management, updates, and security options.

Assess Windows 10 hardware requirements for deployment and use, from 1 ghz cpu and 2 gb ram to 16 gb disk; consider 64-bit, uefi, secure boot, tpm 1.2, and hyper-v.

Assess compatibility and verify device drivers to ensure hardware interaction and system stability during Windows installations. Most devices use digitally signed drivers, with 32-bit and 64-bit architectures supported.

Check hardware and application compatibility using the compatibility center for Windows 10 deployments, and test enterprise rollouts to anticipate user account control, 64-bit, registry, and deprecated components issues.

Learn how the application compatibility toolkit, ASC database, and enterprise agents verify desktop compatibility, report issues, and mitigate Windows updates and app compatibility challenges, including running legacy apps in Hyper-V.

Explore the Windows assessment and deployment kit, its deployment tools and application compatibility toolkit, and how to prepare workstations for enterprise imaging and USMT-based migration.

Explore Windows 10 deployment options, including clean install, upgrade, and migration, and learn when to use each based on scenario and preferences to migrate data and settings.

Explore clean installations, image-based deployments, and in-place upgrades to Windows 10, including free upgrades from Windows 7/8/8.1 and migration options that back up and migrate your data and settings.

Explore manual and image-based Windows installation options, including DVD, network share, and pre-boot environments, with emphasis on enterprise deployment, reference images, and automation considerations.

Describe Windows to go, which installs Windows on removable USB storage for portable OS and data, while disabling hibernation, internal drives, TPM, and recovery options, mobility alternative to VDI.

Configure Windows boot options by using a virtual hard drive (VHD or VHDX) with Hyper-V to boot a native Windows install from a file, enabling portable multiboot and easy backups.

Explore the native boot process by creating a virtual disk with DiskPart or Disk Management, deploying a Windows image with DSM using Apply image, and booting with the bcdboot utility.

Demonstrates a manual Windows 10 installation in Hyper-V, choosing edition, creating partitions, and completing setup from a DVD image with an optional product key.

Upgrading Windows devices preserves user data, settings, and installed applications with minimal impact and no extra storage, but cannot switch from 32-bit to 64-bit.

Evaluate hardware and applications compatibility, back up your data, disable antivirus during the upgrade, perform the upgrade to Windows 10, and verify data, settings, and updates afterward.

Demonstrates upgrading a Windows 7 machine to Windows 10 Enterprise, from selecting updates and keeping files to a seamless install, with notes on later reverting the upgrade.

Compare clean install with upgrade migration by replacing the operating system and migrating user data. Learn side-by-side and in-place migration, plus storing user state data on local or network shares.

Evaluate advantages and disadvantages of migrating versus upgrading, such as a fresh start and improved performance, against the need for tools, reinstallation, and extra storage to choose the best method.

Back up the hard drive before a wipe and clean install, then capture user state data using PC mover Express or USMT tools, and reinstall apps before restoring the state.

Windows easy transfer is no longer available, as users upgrade from Windows 7, 8, and 8.1. Laplink PC mover Express provides the same tool to move applications and data seamlessly.

Explore the migration tools for upgrading Windows devices, including us empty and the Windows automated deployment kit, and examine scan state and load state workflows.

Back up before upgrading, and if a failure occurs, Windows 10 can revert to the previous operating system. Access the revert option in settings, update and recovery, within one month.

Revert a Windows 10 upgrade to the previous version via the settings app, update & security, and recovery within a one-month window, noting password use and possible lost changes.

Discover how image based deployment uses a custom Windows image and Windows deployment services to enable mass, repeatable deployment with no-cost ADK tools across many computers.

Explain image-based deployment using the Windows image file format (WIM) to store multiple compressed OS images in one file, enabling online servicing, non-destructive installs, and bootable, multi-hardware deployments.

Discover tools for automated Windows installations, including image files and answer files, the catalog, and the Windows assessment and deployment toolkit components for image-based deployments.

Examine the most common automated installation using standard images from the product DVD or custom images, with reference computers, capture, and deployment via Windows Deployment Services.

Learn how answer files automate Windows installations using an XML answer file to customize standard images, modify partitions, drivers, and network settings with Windows system image manager.

Explore answer files and configuration passes in Windows setup, from the PC phase to offline servicing and OOBE, detailing how packages, features, accounts, and scripts are configured.

Use a reference computer to create a standard image that you can clone and deploy to all systems, ensuring a consistent OS, pre-installed applications, updates, and policy-driven settings.

Use sysprep to generalize a reference computer, removing SIDs and activation data, so cloned images deploy with unique names, ready for out-of-box experience or audit reboots via an answer file.

Use sysprep, the system preparation utility, to generalize a reference Windows installation for imaging. Reboot to the mini setup wizard (OOBE) and automate with an answer file for cloning.

Explore Windows PE, a compact bootable environment for troubleshooting, recovery, and automated image deployment, with ntfs and tcp/ip support, network file sharing, and 32/64-bit driver compatibility.

Learn to capture and apply Windows PE images using DSM, DiskPart, and network shares; customize the Windows PE environment, build bootable media, and manage images for OS deployment.

Use DISM to capture and apply Windows images, replacing ImageX, enable offline servicing and running-system modifications for installation automation, then prepare disks with diskpart and apply the captured image.

Use dism to manage offline images by adding or removing images, packages, drivers, features, and updates or service packs in wim files, then mount, commit, and save changes for deployment.

Understand how Windows activation works across retail, OEM, and volume licensing, using installation IDs and product keys, with the software license manager tool to view status.

Master enterprise activation with volume licensing by using Volume Activation Services on Windows Server 2012, exploring mass activation, Active Directory activation, and MAK activation, enabling activation without direct Microsoft access.

Explain mass activation for enterprise networks using a KMS host on Windows Server 2012/2012 R2, with clients activating over port 1688 via internal DNS SRV records.

Extend the Active Directory schema on Windows Server 2012, install the Volume Activation Services role, and automatically activate domain-joined Windows clients with a generic key for 180 days.

Explore Windows 10 deployment options, from clean installs to upgrades and migrations, and learn prep steps, hardware requirements, and automated imaging with WIM, Sysprep, and WDS for enterprise deployments.

Deploy virtual Windows 10 desktops with Client Hyper-V, creating virtual machines and managing storage with VHDX files and snapshots for testing purposes by developers and testers.

Enable client Hyper-V on Windows 10 pro or enterprise 64-bit machines to run multiple virtual machines natively. Export and import VMs for test environments and XP compatibility.

Identify hardware requirements for client Hyper-V on Windows 10 pro, including 64-bit CPU and SLAT. Plan RAM across host and guests and use Hyper-V Manager, VM connection, and PowerShell module.

Enable Hyper-V on Windows 10 through optional features, then use Hyper-V manager to create virtual machines and virtual disks. Leverage PowerShell module to manage VMs, snapshots, and networks.

Create virtual machines with Hyper-V using the wizard or New-VM. Name the VM, allocate memory (static or dynamic), and connect a virtual switch, linking OS installation media (dvd or iso).

Configure virtual machines by allocating CPU and memory within host limits, choose static or dynamic startup RAM, attach IDE or SCSI controllers, set network switches, and enable integration services.

Export and import virtual machines with Hyper-V using PowerShell or Hyper-V manager, porting VMs between hosts or to a physical file for later use.

Learn to configure Hyper-V virtual machines, create external and internal switches, assign virtual NICs, and install a guest OS from an ISO, with memory, CPU, and security settings.

Configure virtual machine storage with virtual disks, compare IDE and SCSI controllers. IDE supports 2 TB and 2 controllers; SCSI supports 4 controllers and 64 disks per controller.

Prefer dynamic hard disks for space efficiency and speed. Use VHDX by default for up to 64 TB and better data protection, unless Windows Server 2008 Hyper-V compatibility is required.

Create a point-in-time copy of a running virtual machine, called a checkpoint or snapshot, to revert changes without affecting the VM's current state in test environments.

Explore managing virtual hard drives and snapshots in client Hyper-V, including creating new VHD disks, fixed vs dynamic sizes, differencing disks, and checkpoints.

Enable client Hyper-V on 64-bit Windows 10 Pro or Enterprise. Export, import, and manage virtual machines with VHD/VHDX storage and checkpoints.

Explore the Windows 10 device configuration toolbox, from settings and control panel to PowerShell, and learn when to use basic versus advanced options for single or multiple computers.

Compare how settings app, control panel, Microsoft Management Console, and Windows PowerShell address configuration needs for end users and IT professionals across different scenarios.

Explore advanced administrative tools in computer management, including event viewer, performance monitor, resource monitor, task manager, disk defragmenter, registry editor, firewall, and device manager, for configuring and troubleshooting Windows devices.

Explore Windows 10 management tools from the settings app to the control panel and administrative tools, and learn to use the Microsoft Management Console, PowerShell, and registry with care.

Explore how Windows 10 common configuration options live in the settings app, accessible via built-in search or Cortana, with the settings organized into sections for quick navigation.

Explore essential system settings in Windows 10, including display, multi-monitor, notifications, multitasking, power and sleep, storage usage, maps, and default apps in the Settings app.

Explore the devices category in the settings app to view connected printers and scanners, adjust mouse and touchpad settings, and enable typing features like auto correct and auto form fill.

Explore data usage, VPN and dial-up, wired and wireless connections, and proxy settings in the Windows 10 network and internet settings, a gateway to common networking configurations.

Explains how to personalize Windows devices by customizing backgrounds, colors, and the lock screen using personal photos or downloaded images. Covers themes and Start menu options in the personalization settings.

Configure user accounts in the accounts category, set your account and profile photo, link a Microsoft account, manage sign-in options with password or picture-based sign-in, and sync settings across devices.

Configure date and time, daylight savings options, region and language settings; explore speech recognition and ease of access accessibility controls, including on screen keyboard, while privacy options address security.

Configure Windows Update to tailor how your system receives updates, manage Windows Defender, and explore backup and recovery options, including file history, System Restore, and activation in Settings.

Explore the windows settings app to configure display and system options, personalize your desktop, manage icons and taskbar, adjust privacy, accounts, updates, and default apps.

Learn how to manage user accounts across home and enterprise environments, using local, Microsoft, and domain accounts (Active Directory or Azure AD) with synchronization and access to resources.

Configure and manage user accounts in the settings app, linking accounts to Microsoft accounts and enabling family, other user, or assigned access with time restrictions.

Link a local account to a Microsoft account to synchronize settings across devices and access cloud services like OneDrive, mail, calendar, Outlook.com, Xbox Live, and Office 365.

Explore how to configure local and domain accounts in Windows 10, link Microsoft accounts, set up Active Directory, and manage family, work, and school users.

Offer scalable, centralized administration with a single set of accounts and delegated control through organizational units and group policy, enabling single sign-on.

Join windows 10 computers to an Active Directory domain by locating a domain controller via DNS, using domain user credentials, and restarting to log in.

Learn how to join a Windows 10 computer to a domain using system settings to change domain membership. Enter domain credentials and reboot to log in with a domain account.

Explore the control panel as a key Windows 10 tool for advanced configuration, with seven major categories, accessible via search, Start, Run, or the settings 'additional options' link.

Explore how Windows 10 preserves a control panel for advanced configuration, accessible via settings app links, search, or the administrative start menu, covering programs, hardware, user accounts, network, and more.

Explore Windows administrative tools in Settings and Control Panel, including Computer Management, Event Viewer, iSCSI Initiator, Performance Monitor, Print Management, System Information, and Windows Firewall with Advanced Security.

Explore how the Microsoft Management Console and snap-ins enable centralized administration, including remote management via RPC, with tools like Event Viewer, Device Manager, and Performance Monitor.

Learn how to access and customize administrative tools using the Microsoft Management Console, add snap-ins, and build custom consoles for quick remote management of Windows systems.

Install remote server administration tools (RSAT) on Windows 10 to access administrative tools in Control Panel and manage Active Directory, DNS, DHCP, IP address management, and WSUS via Server Manager.

Install remote server administration tools on Windows 10 to extend server management capabilities; download, install, then enable tools like Group Policy, Active Directory, DNS, and Remote Desktop.

Learn how to configure remote management of Windows 10 devices using PC remote procedure call, WinRM, and firewall rules, including event logs, remote services, and group policy guidance.

Compare remote assistance and remote desktop in Windows 10, enable network level authentication, configure firewall rules, and manage remote connections, drive access, and session behavior.

Explore Windows PowerShell, a scripting command line interface for enterprise automation that enables local and remote administration, thousands of cmdlets, and access to the file system, registry, and certificate stores.

Learn how Windows PowerShell commands follow a verb-noun syntax, use named parameters with dash, and choose verbs like Get, Set, or New to manage objects, services, and network settings.

Explore Windows PowerShell basics: use tab completion for commands, run scripts (.ps1), manage variables with the dollar sign, leverage transitional aliases, and access help with Get-Help.

Explore Windows PowerShell as a command-line administration tool, mastering verb-noun syntax, piping, filtering, and formatting to manage processes, services, event logs, and IP addresses.

Master the Windows PowerShell ISE, a graphical host for writing, testing, and debugging scripts with command, output, and script panes, plus providers, snap-ins, modules, a profile, syntax coloring, and Intellisense.

Experience the power of PowerShell ISE for learning and debugging scripts with Intellisense, color coding, and selective execution. Learn to query commands, view details, and obtain results like IP addresses.

PowerShell enables remote command-line administration via WS-Management, letting you manage network computers and run scripts on multiple machines. It allows remote sessions, system restore points, and firewall rule changes.

Learn remoting types, including fan-out one-to-many management across multiple computers from a single console and one-to-one interactive remoting for troubleshooting a remote computer.

Explore native remoting capabilities, using the computer name parameter with commands such as get-service and get-eventlog, and manage remote sessions with invoke-command, new-session, and enter-session, with useSSL for ws-management security.

Learn to use several cmdlets for PowerShell remoting to manage remote computers with the computer name parameter, including get-process, get-service, get-eventlog, get-wmiobject, and perform domain joins, removals, and remote restarts.

Use PowerShell remoting to manage remote computers via sessions. Configure firewall rules and connect to domain or private networks for remote commands.

Review Windows 10 configuration options, focusing on the Settings app for common tasks, Control Panel for advanced settings, and Microsoft Management Console snap-ins for local or remote account administration.

Connect Windows 10 to networks by configuring TCP/IP, IP addresses, and name resolution; set up wireless connections, remote access with VPN or direct access, and troubleshoot connectivity.

Configure Windows network connectivity by understanding TCP/IP, IPv4 and IPv6, and the four essential components: IP address, subnet mask, default gateway, and DNS.

Explore how 32-bit IP addresses use four dotted decimal octets to define network ID and host ID via the subnet mask, and why a default gateway matters.

Configure local area networks with private address spaces (10.0, 172.16, 192.168), NAT routing, and standard subnet masks; apply advanced IP configurations for enterprise networks.

Learn to work with IP addresses and subnet masks through binary and decimal conversions, determine network and host IDs, and use the ending process to identify the network portion.

Explore Windows 10 tools to configure ipv4 for connectivity via settings or the network and sharing center, and prefer automatic dhcp for easier, error-free ip management.

On first network connection, choose home, work, or public, and Windows 10 remembers the choice to apply private or public profile using network location awareness.

Configure windows network connectivity using the settings app or network and sharing center to view and modify ip address, dns, and ipv4 properties, including automatic or static options.

Explore why IPv6 uses 128-bit addresses to replace IPv4 and enable automatic configuration, with QoS, IPsec, and dual-stack Windows 10 deployments.

Identify IPv6 addresses as 128-bit hexadecimal values, with 16-bit groups, leading-zero elimination, and double colon for zero runs. Compare IPv6 to MAC addresses and note /64 CIDR.

Examine ipv6 address types: unicast, multicast, and anycast; global unicast addresses are public, while link local and unique local addresses support local networks.

Explore IPv6 autoconfiguration: stateless methods let a node self-configure via neighboring routers, while stateful methods rely on a DHCP server to assign an address and options; stateful is preferred.

Learn how name resolution maps user-friendly names to IP addresses using DNS and FQDN, where Windows computer names form the DNS host name in an Active Directory domain.

Learn how dns resolves names to ip addresses via the local dns server, root name servers, and authoritative domain servers, with caching to speed lookups.

Configure DNS server addresses in adapter settings to enable name resolution, verify with ipconfig and ping, and use resolve-dnsname to prepare for domain join.

Wireless connectivity enables mobility and flexibility in homes and public spaces, boosting productivity, but interference and security concerns can keep actual speeds well below Ethernet.

Learn about infrastructure versus ad hoc wireless networks, and why infrastructure mode, using a router and wireless access point connected to a modem and internet, is the common setup.

Windows 10 supports the latest wireless options and security protocols, outlining wifi standards from 802.11b to 11ac and 2.4 GHz and 5 GHz with OS, NIC, and access point support.

Explore wireless security protocols, from open system and shared key authentication to the weaknesses of WEP, and how WPA and WPA2-enterprise with 802.1X centralize authentication.

Implement network segmentation with router packet filters and optional firewall between wireless clients and the LAN, and reinforce security with MAC filtering, disabled SSID broadcast, and WPA/WPA2.

Identify the essential components for wired and wireless connections, including a network interface card, properly configured ip/tcp, a physical cable or wireless access point, and ssid security or login requirements.

Explore Windows 10 settings to manage Wi‑Fi with a wireless NIC, including automatic connections to open hotspots, sharing with contacts, Wi‑Fi sense, and metered connections.

Connect to wireless networks easily on Windows 10, which automatically detects available networks, prompts for a security key on secured networks, and lets you manage Wi-Fi settings.

Explore remote access types over wide area networks for mobile clients connecting to a corporate office or cloud based virtual network, using Windows 10 with VPN and direct access.

Learn how virtual private networks enable remote access by creating point-to-point connections over the public internet, using tunneling and encryption. Explore remote access and site-to-site VPNs for wide area networks.

Configure remote access and site-to-site VPN connections for individual and mobile clients, detailing encapsulation, authentication, and encryption settings across PPTP, IPsec, and IKE.

Windows 10 offers four tunneling protocol options for VPNs, including PPTP and L2TP with IPsec, with PPTP being old and vulnerable and L2TP/IPsec adding encryption but NAT traversal challenges.

Learn about Windows tunneling protocols like SSTP and IKEv2/IPsec, their use of SSL over port 443, IPsec encryption with AES-256, and automatic VPN reconnect features.

Configure a Windows 10 VPN connection via network and sharing center or settings, specify IP address, VPN type, and sign-in options, then connect and review advanced IPv4 and authentication settings.

DirectAccess provides an automatic internet-based connection from corporate laptops to the corporate network, serving as an alternative to VPN; it requires enterprise Windows 10 and domain membership.

Explore the core components of direct access, including the client and server roles, IPsec IPv6 tunneling, network location server detection, NRPT-driven DNS with group policy and PKI-based authentication.

Learn practical connectivity troubleshooting with Windows tools like ipconfig, ping, tracert, and nslookup to verify IP configuration, DNS resolver cache, and active connections on Windows 10.

Troubleshoot connectivity with Windows PowerShell utilities alongside ipconfig, diagnosing IP configurations and DNS cache. Identify APIPA addresses and verify DHCP server configuration to resolve address problems.

Master network troubleshooting by verifying configuration with ipconfig, checking the default gateway and subnet, and using PowerShell commands plus ping, traceroute, and DNS tools to test connectivity and DNS resolution.

Learn to share data and printers in Windows 10, manage storage with storage spaces, and configure NTFS and shared folder permissions for local and remote access.

Master managing hard disks in Windows 10, including partitions and volumes, storage spaces, disk maintenance, troubleshooting offline or foreign disks, and handling virtual hard disks and native boot VHD.

Compare MBR and GUID partition table styles, noting MBR's four-partition and 2 TB limits and GUID's up to 128 partitions, 18-exabyte volumes, and CRC-based redundancy.

Explore disk management tools in Windows 10, including storage settings, cleanup, and mounting points, partitioning and drive letters, plus storage spaces and command options like DiskPart or PowerShell.

explores Windows 10 disk management tools—settings storage, disk management, storage spaces feature, and PowerShell and DiskPart—showing how to view disks, manage partitions, and assign drive letters or mount points.

Initialize the disk in disk management and choose MBR or GPT; use GPT for more than 2 terabytes or EFI boot, and convert only with admin rights after backing up.

Compare mbr disk basics and dynamic disks, where basic supports four partitions and dynamic disks support volumes that span across multiple drives, including spanned, striped, and mirrored volumes.

Explore simple volumes on a disk and spanned volumes across multiple disks; simple volumes lack fault tolerance and performance gains, while spanned volumes provide a single drive letter for usability.

Striped volumes stripe data in 64 KB chunks across three or more disks to boost throughput, but provide no fault tolerance in Windows 10 software RAID 0.

Map partitions to drive letters or mount points to access volumes; use NTFS or another file system, and assign a drive path like C:\data to improve flexibility.

Resize volumes in Windows 10 by extending simple or spanned volumes to create unallocated space. Defragment first, then shrink a volume by moving paging files or virtual memory off it.

Use the disk management utility to initialize disks, choose a partition style, create NTFS volumes with drive letters or mount points, and configure basic span, striped, and mirrored volumes.

Understand fragmentation in disk optimization: data is broken into pieces and clusters mapped to physical sectors; deletions create whitespace and noncontiguous storage, slowing access.

Defragmentation rearranges files to optimal locations to boost disk performance using the optimized drives tool; it runs automatically, and you can adjust frequency, volumes, and ensure 15 percent free space.

Configure disk quotas in Windows 10 NTFS to limit per-volume space, enabling monitoring and restriction of user disk usage via disk properties, group policy, and a command line utility.

Learn how virtual hard drives, stored as a single portable file, enable backup and support disk operations while used with virtual machines, Hyper-V, and native boot on Windows 10.

Create virtual hard drives with diskpart, PowerShell, or disk management. Use the VHDX format for up to 64 TB on Windows 8.1 and later, with dynamic disks for expanding space.

Explore storage spaces in Windows 10 and Server 2012, using storage pools to combine disks and create virtual drives with fault tolerance options like mirrors and parity.

Learn how storage spaces in Windows 10 group multiple disks into a storage pool, create a volume with a file system, and add drives for resiliency with mirror or parity.

Learn to grant the appropriate level of data access on local Windows 10 systems and file servers to avoid unauthorized access and security breaches.

Explore authentication and authorization as foundational Windows access controls, noting that authentication precedes authorization. Detail multi-factor methods, biometrics, and ACL-based permissions on NTFS.

Explore how authorization uses access control lists and per-resource permissions to grant or deny read, modify, delete, or full control to local or domain user accounts.

Explore network models, including workgroup, domain, and home group, and compare centralized vs decentralized administration, local security databases, and how Active Directory enables domain authentication and resource access.

Create a home group in small networks, set a name and password, and grant access to documents, pictures, music, videos, and printers via the network and sharing center.

Configure and manage file access by applying NTFS permissions and shared folder permissions, using ACLs and ACEs to control access locally and over the network.

Configure NTFS access using discretionary ACL; view permissions in the Security tab to assign standard permissions like read, write, modify, or full control.

Special permissions provide granular access beyond standard rights, e.g., read expands to read attributes, list folder data, read extended attributes, and read permissions, while read and execute enables traversal.

Explore NTFS permissions on Windows, distinguishing explicit and implicit permissions and how explicit and inherited entries interact in access control lists, including the deny and allow precedence and default inheritance.

remember that permissions are cumulative; the permissive level from explicit and inherited permissions applies. use effective permissions tool to verify access, and remember shared folder permissions can override NTFS allowances.

Windows 10 now provides conditions for permissions based on group membership or the device used, in conjunction with dynamic access control introduced in Windows Server 2012, increasing permission management flexibility.

Demonstrates NTFS permissions using access control lists on files and folders, covering inheritance, explicit permissions, disabling inheritance, effective access, and using get-ACL and set-ACL to manage and copy permissions.

Understand how folder permissions inherit to files and how copying or moving affects those permissions. Compare copying within or across partitions and moving within the same partition.

Explore Windows 10 file compression beyond permissions, including NTFS file/folder compression, copy/move behavior, and using compressed zip folders to consolidate files for transport.

Explore how to share folders over the network using NTFS, and understand how shared folder permissions grant or deny access to data inside.

Explore two basic sharing types in Windows 10—any folder sharing and public folder sharing—then use basic or advanced sharing to control shared names, permissions, concurrency, and caching.

Share files and folders using File Explorer, the sharing tab in folder properties, or the sharing wizard, and use net share, PowerShell, or the SMB share commands to grant access.

Share folders over the network using the share tab and NTFS permissions, then learn advanced sharing options, hiding shares with a dollar sign, and admin shares in computer management.

Evaluate how NTFS and shared folder permissions combine on a network resource, where the most restrictive applies; set shared folder permissions to full control and use NTFS for granularity.

Explore work folders in Windows 8.1 and Windows Server 2012, enabling access to personal files from devices outside the domain via a sync share on a file server with encryption.

Configure work folders on a file server with file and storage services role and http access. Create sync shares with personal folders, use ssl certificate, and sync every 10 minutes.

Explore how a logical printer maps to a print device, with ports such as LPT, USB, or TCP/IP, and how print drivers (postscript, PCL, SML) and the spooler service work.

Understand how Windows classifies local versus network printers and when they auto-install or require the add printer wizard. Learn to connect to printers and deploy network printers via group policy.

Understand direct attached printers as local printers, sharing them with network hosts requires permissions, and assign the default print permission, manage documents, and manage printers (full control) as needed.

Learn to manage printers in Windows using the settings app, devices and printers, and the print management snap for enterprise control, driver management, and group policy deployment.

Explore Windows printer management using settings and devices and printers, learn to add printers via the wizard or manual IP, and manage queues and the spooler service.

Ensure data is accessible to authorized users and protected from unauthorized users by managing storage and NTFS permissions, then configure shared folders, work folders, and printers on Windows devices.

Manage apps in Windows 10, including desktop and Windows Store apps, and learn installing, configuring, and supporting both types while comparing Microsoft Edge and Internet Explorer 11 for backward compatibility.

Install and configure critical business applications to support user productivity and ensure availability. Distinguish between desktop Office apps and modern universal apps from the Windows Store for effective deployment.

Explore manual and automatic application installs, including executable deployment from media or network shares, uac prompts and admin privileges, via group policy, System Center Configuration Manager, and Microsoft Intune.

Set default programs in settings or control panel to assign file types to apps, such as .docx opening in Word or html files.

Learn how modern apps from the Windows Store work in Windows 10, accessible from the Start menu or Cortana, requiring a Microsoft account, and mirroring across desktop, phone, and tablet.

Administrators control the windows store with local or domain policies, disabling or restricting apps, while side loading distributes digitally signed line of business apps via GPO, DSM, or PowerShell.

Edge, Windows 10's web browser, offers features like writing on web pages saved to OneNote, Cortana search and voice, reading view, and a hub for favorites and reading list.

Explore how Microsoft Edge streamlines configuring settings via the more actions ellipsis, covering reading mode, favorites, write on web pages, share, private browsing, zoom, find on page, and pin start.

Explore Microsoft Edge on Windows 10, including the customizable home page with news and favorites. Utilize reading view, reading list, web notes, and sharing options.

Windows 10 provides Internet Explorer 11 for backward compatibility alongside Edge, installed by default but behind the scenes. When pages render poorly, use Internet Explorer via compatibility view and manage privacy features such as in private browsing, cookies, pop-up blocker, smart screen filter, and add-ons.

Explore Edge privacy features, including private browsing that doesn't save history or form data, tracking protection against third-party content, and enhanced delete history with cookie controls.

Explore the smart screen filter, phishing protection, and certificate checks, and learn to manage active-x controls, cross-site scripting protection, and protected mode in internet explorer 11 for safe browsing.

Configure Windows apps and browsers to ensure user availability, covering desktop, modern, and Windows Store apps, installation methods, customization, and Edge and Internet Explorer 11 settings.

Discover how to secure Windows 10 devices through defense in depth, focusing on local security policies and security templates, Windows firewall, IPsec, and volume-level encryption and Encrypting File System.

Highlight how security is everyone's responsibility, define vulnerability, threat, and risk, and show how internet exposure creates vulnerabilities and threats, guiding mitigation to minimize risk and plan action.

Understand defense in depth as a layered security strategy across data, application, host, network, and physical controls, including access control, encryption, hardening, antivirus, firewalls, and user awareness.

Protect against unauthorized access with file and folder permissions, optional encryption, Active Directory Rights Management Services, and BitLocker volume encryption for flash drives and laptops.

Configure local security policies in Windows 10 to mitigate security risk, prevent unauthorized logons, and manage access via GPO in Active Directory, with domain policies overriding local settings in conflicts.

Configure local security by using user account control introduced in Windows Vista to prompt for admin credentials or consent, with Windows 7 and Windows 10 refining prompts and usability.

Explore the two kinds of user account control prompts, credentials and consent prompts, and how admin privileges, admin approval mode, and elevation affect program installations and permissions in Windows.

Explore configuring Windows UAC notification settings across basic control panel and advanced group policy, including default secure desktop prompts, non-dimming variants, and options to always or never notify.

Explore local security options in Windows 10, including local security policy, local group policy, password settings, user rights, the firewall, and user account control options.

Explore malware types such as viruses, worms, trojan horses, macros, spyware, adware, and email attachments, and learn how to defend systems with installed, configured, and updated anti-malware software.

Explore Windows Defender, the built-in antivirus in Windows 10, with automatic definition updates, scheduled scans, and severity-based actions that quarantine, notify, or remove threats.

Explore Windows Defender, the built-in anti-malware in Windows 10, with real-time protection and automatic updates. Learn to manage exclusions, run quick or full scans, and review quarantined items.

Enable the Windows firewall to protect network communications with a host-based, defense-in-depth approach, and use IPsec connection security rules for authentication and encryption.

Configure firewall basics in control panel, approve program access via prompts, and push Windows Firewall with Advanced Security inbound and outbound rules across multiple systems with group policy for consistency.

Identify and manage three network profiles: public, private, and domain, applying firewall rules to each and noting domain activation for domain networks and that multiple profiles can be active.

Configure Windows firewall across private, public, and domain networks to balance security and access. Manage inbound and outbound rules and apply consistent settings via GPO.

Discover how windows firewall integrates with ipsec to protect data at the network layer, delivering integrity, confidentiality, and non repudiation in site-to-site vpn tunnel scenarios.

Configure IPsec on Windows devices to secure site-to-site VPN and internal host-to-host traffic, including Exchange and SQL Server communications, using ESP, AH, and IKE for encryption and authentication.

Learn to configure IPsec using Windows firewall with advanced security, including inbound and outbound rules and connection security rule; explore isolation, tunnel, and custom, with policies via PowerShell and GPO.

Explore authentication options in IPsec on Windows devices, including inbound and outbound security, mutual authentication, and choosing among digital certificates, Kerberos v5, or pre-shared keys.

Monitor and troubleshoot Windows Firewall with advanced security by examining connection security rules and the IPsec stack's main mode and quick mode, using policy snap-in and command-line tools.

Explore how the Windows Firewall implements IP security (IPsec) through connection security rules. Create rules, configure inbound and outbound rules, and monitor security associations via group policy.

Explore data security for Windows 10 by applying cryptography, including symmetric, private key, and public key encryption, and understand hashing for verification on the NTFS file system.

Explore how the Encrypting File System (EFS) on NTFS provides transparent data encryption and automatic decryption, using certificates from a CA or self-signed certs for secure sharing.

Learn how Windows encryption uses a file encryption key and public and private keys to protect data on NTFS, with a data recovery field and a recovery agent.

Configure Windows 10 encryption options via Local Security Policy or GPO, enabling 256-bit AES, smart card key storage, and per-user offline file encryption.

Windows BitLocker encrypts the entire volume, providing online data protection and decrypting at startup and re-encrypting on shutdown, with TPM verification to prevent offline tampering and ensure boot integrity.

BitLocker To Go extends encryption to removable drives, enabling password-protected keys or smart card unlocks and optional automatic decryption on trusted hosts, all configured via a Windows Explorer wizard.

Explore BitLocker requirements and modes, using a TPM chip or a USB key, with a separate unencrypted boot partition and OS encryption, plus optional startup pin.

Explore BitLocker drive encryption on Windows 10 Pro or Enterprise, including enabling it via Control Panel or policy, and enable additional authentication at startup to run without a TPM.

Explore Windows 10 security essentials, including local security policies, group policy options, firewall and IPsec protections, and data encryption with EFS and BitLocker for exam-ready configuration.

Configure and maintain Windows 10 by using updates, monitoring tools, and device and driver management to troubleshoot issues, optimize performance, recover files, and handle startup processes.

Explore how Windows Update delivers critical updates and security patches for the OS and applications, including hot fixes, feature updates, and the automatic updates client.

Navigate to the settings app, updates and security, to manage automatic updates, notifications, and scheduled installs, then view update history or remove troublesome updates as needed.

Configure Windows Update via group policy to automate or notify updates; implement WSUS for centralized control, policy-based restarts, wake-on-update, and admin vs non-admin notifications.

Learn to monitor and optimize Windows device performance by evaluating system responsiveness, diagnosing bottlenecks across the processor, memory, disk, network, and using tools to identify and replace faulty components.

Use performance monitor for real-time and scheduled insights into system responsiveness. Create data collector sets with performance counters across processor, memory, disk, and network, and review reports to identify bottlenecks.

Resource Monitor provides pre-configured, advanced monitoring for memory, disk, network, and CPU; filter by application to isolate disk, memory, network, or CPU activity and troubleshoot performance problems.

Discover Windows 10 performance monitoring tools from task manager to resource monitor and performance monitor. Analyze cpu, memory, disk, and network usage, startup impact, and data collector reports for troubleshooting.

Explore how memory problems, driver issues, and network configurations affect the reliability and stability of Windows 10, leading to crashes, blue screens, startup failures, and network communication problems.

Use reliability monitor to view a two-week timeline of failures across OS, hardware, and applications, and supplement with memory diagnostics, network diagnostics, and problem reports and solutions tool for insights.

Explore reliability monitor in control panel to view a timeline of application, Windows, and miscellaneous events; identify stability issues and view technical details, reports, and possible fixes.

Event Viewer serves as the troubleshooting hub in Windows, letting you view application and system logs, filter information, warning, and error events, and create custom views or remotely collect logs.

Use Windows 10 Event Viewer to troubleshoot with application, system, and security log, filter errors, and create custom views to consolidate events for quick diagnosis.

Understand how Windows manages device drivers—digitally signed by Microsoft, updated via Microsoft Update, with 32/64-bit varieties, and the driver store and packages for secure installation.

Explore plug-and-play concepts, automatic driver installation in Windows 10, network device detection, and the driver store where administrators stage drivers and enable optional Windows store apps for users.

Configure drivers with the Microsoft plug and play utility to manage the driver store, add or view packages, and use device manager, devices and printers, and device stage for troubleshooting.

Install new device drivers quickly when released, via Windows Update or manual updates through device manager. Download digitally signed drivers from the manufacturer’s site and avoid third-party sources.

Drivers run with system level privileges; unsigned drivers may work if you trust the source, but signature verification and signing improve security and reduce support issues.

Explore how to manage device drivers using Device Manager and devices and printers, update or roll back drivers, and verify hardware details with System Information.

Learn how to recover files and devices in Windows 10 by using backups to protect against accidental deletion, malware, and total device loss, and manage incremental versions.

Configure file history in control panel to automatically back up contacts, desktop, favorites, documents, music, videos, and pictures every hour on Windows, enabling restoration of deleted files and previous versions.

Enable full system backups with the Windows backup utility, including scheduled and on-demand backups to local or network targets, and use system image backups to restore the system drive.

Master Windows 10 file history for user data backups by selecting a drive or network location, configuring frequency and retention, and understanding how incremental versions and exclusions work.

Explain how Windows boots: BIOS tests hardware, locates the active partition, and loads the boot manager, which uses the BCD to locate OS and load kernel and boot-time drivers.

Explore how Windows manages device drivers, including signatures, the driver store, and plug-and-play. Learn to use Device Manager and PnPUtil to install, update, and troubleshoot drivers.

Initiate the startup sequence from BIOS/POST to MBR, boot manager, and kernel initialization, load drivers, display the Windows 10 black splash screen, and complete with user logon.

Learn how to use the Windows recovery environment to repair startup failures, reset the PC, perform system restore or system image recovery, startup repair, and access the command prompt.

Enable automatic system restore points to allow rollbacks after updates or app installs, and use msconfig to control boot options, startup programs and services, and launch admin tools.

Explore safe mode variants in Windows, including networking and command prompt, to boot with basic drivers and diagnose startup issues using boot logging and other advanced options.

Implement Windows updates with WSUS or Group Policy, monitor performance and reliability with Performance Monitor and Task Manager, keep drivers updated, and back up files with File History for recovery.