MCTS Guide to Windows 7 (DE02A)

Q: What is an operating system?

A set of programs that act as an interface between applications and the computer's hardware, managing resources and providing services.

• Receive user input from devices such as the keyboard or mouse

Some operating systems also have the following attributes:

• Multiprocessing —the ability to use multiple central processing units (CPUs) in a single system.

• Multitasking —the ability to run multiple applications simultaneously. Two common variations are:

  • Cooperative multitasking —requires multiple processes to work together for the operating system to work effectively.

  • Preemptive multitasking —forces applications to share the CPU.

• Multithreading —the ability to run multiple parts of an application simultaneously.

Q: What is the kernel?

The core component of the operating system, responsible for security, file system management, and providing a platform for applications.

Q: What is a driver?

A: A program that enables the operating system to interact with hardware devices.

Q: What is an interface?

A means for users to interact with the operating system, either through a command line or graphical user interface (GUI).

What are utilities?

Programs included with the operating system that perform system-related tasks, such as disk management and system settings.

What is an application?

A: A program designed for end users to perform specific tasks, like word processing or web browsing.

• Examples are databases, spreadsheets, and word-processing programs.

• Applications frequently come in suites.

What is Windows 10 Home

A: An edition of Windows 10 designed for home users and general consumers.

Windows 10 Home Device Encryption: windows10

A: A feature that protects data by automatically encrypting it on supported devices.

Windows Defender Antivirus windows 10

A: Built-in malware protection with regular updates to safeguard the system.

Firewall & Network Protection: windows 10

A: A feature that monitors and helps block malicious network traffic.

Secure Boot: windows 10

A: A security standard that ensures only trusted software loads during the system startup.

Windows Hello windows 10

A: Biometric authentication (face, fingerprint, or PIN) for secure sign-in.

Parental Controls: windows 10

Tools for managing children's screen time, app access, and activity reports.

Internet Protection: Window 10

Built-in protections in Microsoft Edge and SmartScreen to block harmful sites.

Microsoft Edge Browser windows 10

A: A fast and secure web browser included with Windows 10.

Battery Saver Mode windows 10

Extends battery life by limiting background activity

Mobile Connectivity window 10

Integration with Android/iOS for texting, calls, and notifications via the Your Phone app.

Voice Control windows 10

Cortana (limited in newer versions), for hands-free assistance (e.g., reminders, search).

Digital Pen & Touch Support: windows 10

• For touchscreens and stylus-enabled devices (useful for drawing, notes, and navigation).

Window 10 Pro:

• Intended for business professionals.

Offers all Home edition features, plus

BitLocker Device Encryption: Window 10 Pro:

Full disk encryption to protect data if a device is lost or stolen.

Windows Information Protection (WIP)Window 10 Pro:

Helps protect against accidental data leaks without interfering with user experience.

Mobile Device Management (MDM)Window 10 Pro:

Integrate with solutions like Microsoft Intune for centralized device management.

Windows Update for Business:Window 10 Pro:

Control over update rollout and scheduling for less disruption.

Microsoft Store for Business:Window 10 Pro:

Customized app store for managing company-specific apps.

Active Directory & Azure Active Directory Support:Window 10 Pro:

Join domains, apply user/group policies, and enable cloud-based identity management.

Group Policy:Window 10 Pro:

Control and enforce settings across users and devices.

Assigned Access:Window 10 Pro:

: Lock down a device to a single app for kiosk or public use scenarios

Enterprise State Roaming (with Azure AD):Window 10 Pro:

Sync user settings and app data across devices securely.

Hyper-V :Window 10 Pro:Window

Built-in virtualization platform to run virtual machines.

Window 10 Pro for Workstations:Window 10 Pro for Workstations:

• A version of Windows 10 built for business professionals needing high-end hardware for intense computing, fast data processing, and large storage (e.g., CAD engineers, graphic designers). It includes all Pro features plus support for up to 4 CPUs, 6TB RAM, Resilient File System (ReFS), persistent memory, and faster file sharing with SMB Direct.

ReFS (Resilient File System):Window 10 Pro for Workstations:

• Fault-tolerant storage

• Auto-correcting file system

• Optimized for large data volumes and virtual machines

• Cloud-optimized for scalability

Persistent Memory Support (e.g., NVDIMM-N):Window 10 Pro for Workstations

• Enables extremely fast read/write speeds.

• Data is retained even when the system is powered off.

• Reduces boot time and enhances app load performance.

SMB Direct (RDMA Support):Window 10 Pro for Workstations:

• Enables ultra-fast file sharing over the network.

• Features:

  • Low latency

  • High throughput

  • Low CPU usage

Window 10 Enterprise:

Designed for large organizations and enterprises with dedicated IT teams.Requires a volume licensing agreement.

• Includes all features of Windows 10 Pro, plus powerful tools for security, device management, virtualization, and productivity control.

Windows Defender Credential Guard:Window 10 Enterprise:

Uses virtualization-based security to isolate and protect credentials (like NTLM and Kerberos secrets) from attacks.

Windows Defender Application Guard:Window 10 Enterprise:

Isolates untrusted websites in a virtualized container to prevent them from accessing the system or data.

Windows Defender Application Control (WDAC):Window 10 Enterprise:

• Controls which apps and scripts are allowed to run, helping prevent unauthorized code execution.

Windows Defender Advanced Threat Protection (ATP):Window 10 Enterprise:

• Now called Microsoft Defender for Endpoint—provides advanced attack detection and response capabilities across endpoints.

Device Guard:Window 10 Enterprise:

• Locks down a device so it can only run trusted applications, providing a zero-trust environment.

DirectAccess:Window 10 Enterprise:

• Seamless, always-on remote access without the need for a traditional VPN. Useful for mobile workforces.

User Experience Control:Window 10 Enterprise:

• Customizable UI settings to limit distractions and enforce consistency (e.g., remove Windows Store, Cortana, etc.).

Microsoft Application Virtualization (App-V):Window 10 Enterprise:

• Runs applications in a virtualized environment, reducing conflicts and simplifying deployment.

Microsoft User Environment Virtualization (UE-V):Window 10 Enterprise:

• Captures and syncs user settings and preferences across different Windows installations, ensuring a consistent experience.

Windows 11 Home:

• ntended for home use.

• Offers Windows 11 most basic features.

Snap Layouts:Windows 11 Home:

helps you quickly organize multiple open windows on your screen into predefined arrangement

Desktops:Windows 11 Home:

for grouping and easily changing desktop groups

Microsoft Teams: Windows 11 Home:

for communicating with others through chats and video conferencing

Widgets: Windows 11 Home:

accessible from taskbar and customizable

• Enhanced gaming features

• Microsoft Edge

• Microsoft Store

• Touch, Pen, and Voice features

Includes security features such as: Windows 11 Home:

• Device encryption

• Find my device

• Firewall and network protection

• Internet protection

• Secure Boot

• Windows Security

• Windows Hello

• Parental controls

Windows 11 Pro: Windows 11 Home:

Intended for business professionals

Offers all Home edition features plus: Windows 11 Home:

• BitLocker device encryption

• Windows Information Protection (WIP)

• Assigned Access

• Dynamic Provisioning

• Windows Update for Business

• Support for Active Directory and Azure Active Directory

• Mobile device management

• Group Policy

• Microsoft Store for Business

• Enterprise State Roaming with Azure

• Kiosk mode setup

• Hyper-V

Windows 11 Pro for Workstations:

intended for business professionals whose work requires high-end hardware for intense computing, with fast data processing and large storage capacity. Examples include CAD engineers, graphic designers, medical scientists, and media producers.

ReFS (Resilient File System):

• Large volumes

• Automatic data correction

• Data integrity

• Resilience to corruption

Fault-Tolerant Storage & Auto-Correcting:

Especially when used with Storage Spaces, ReFS can detect and correct file system errors automatically.

Cloud-Based Optimization:

Designed to support large-scale and cloud-connected workloads, such as virtualization and massive data sets.

Persistent Memory Support (e.g., NVDIMM-N):

• Combines the speed of RAM with the durability of storage.

• Data is retained even when the system is powered off.

• Ideal for low-latency workloads and fast system startup.

SMB Direct (RDMA-capable networking):

• Enables low-latency, high-throughput file sharing across networks.

• Reduces CPU overhead for large-scale file transfers.

• Critical for high-performance computing (HPC) and real-time data processing.

Supports Intel Xeon & AMD Opteron processors:

• Optimized for workstation-class CPUs used in demanding professional environments.

• Up to 4 CPUs supported

• Up to 6 TB of RAM supported
  These limits far exceed those of Windows 11 Pro, making this edition ideal for memory-intensive and multi-threaded applications.

Windows 11 Enterprise – Overview

Designed for large organizations with dedicated IT management teams, complex security needs, and advanced device and user management requirements.

Licensing

• Requires a Microsoft Volume Licensing Agreement.

• Delivered as part of Microsoft 365 Enterprise subscriptions (E3/E5).

• Not available via standard retail or OEM channels.

Credential Guard:

Uses virtualization-based security to isolate and protect secrets (e.g., credentials) from theft.

Application Guard:

Runs untrusted apps and websites in isolated containers to prevent threats from spreading.

Application Control (WDAC):

Allows admins to whitelist apps and block unauthorized code execution.

Advanced Threat Protection (ATP):

Now part of Microsoft Defender for Endpoint, offering behavior-based, real-time threat detection and response.

Device Guard:

Enforces hardware and software integrity by locking down systems to only run trusted code.

DirectAccess

Always-on secure remote access without VPNs.

User Experience Control:

Centralized control to customize or restrict Windows interface features (e.g., remove Store, lock down settings, control Start menu layout).

Microsoft App-V (Application Virtualization):

Enables apps to run in sandboxed environments without being installed locally, reducing compatibility issues.

Microsoft UE-V (User Environment Virtualization):

• Syncs user settings and preferences across devices for a consistent experience.

🔹 Windows Enterprise E3

Best for: Mid-sized to large organizations that need better security and management than Windows Pro offers.

• All Windows 11 Pro features

• OS deployment and update control

• Device and app management (e.g., via Intune or Group Policy)

• Security enhancements like Credential Guard, WDAC

• Universal Print (serverless cloud printing)

• Integration with Microsoft 365 services

🔸 Windows Enterprise E5

Organizations needing cloud-delivered endpoint protection and threat intelligence.

Includes:

• All E3 features

• Microsoft Defender for Endpoint (full version)

• Advanced threat detection, investigation, and response tools

• Attack surface reduction policies

• Endpoint detection and response (EDR)

• Threat & vulnerability management dashboard

🔹 Windows Enterprise E3 in Microsoft 365 F3

Best for: Mid-sized to large organizations with frontline workers (e.g., retail, hospitality, field service).

Includes:

• All E3 features

• Tailored for non-desk, task-based employees

• Simplified management for shared devices or shift workers

Domain access

Accessing a domain through a domain account is a good option for large networks.

How a domain network works:

• A domain controller manages user logins, permissions, and security settings.

• User Groups:

Users with similar roles are grouped together to make managing permissions easier.

Central Database:

User accounts and settings are stored in one place, on the domain controller.

Easy Access:

Logging in with a domain account gives access to shared files, printers, and other resources.

Automatic Updates:

Any changes made by IT (like security rules or software installs) apply to all domain-connected computers.

Secure Sharing:

Domains allow safe file and data sharing across the network.

One Login = Full Access:

Once you're logged into the domain, you don’t need separate logins for each service or computer.

Workgroup

Small local networks with up to 20 computers, like in homes or small offices.

• All computers are peers to each other. There is not a central administrator.

• Each device has its own storage.

• The user manages the device.

• A user must have an account on the device to log on to it.

• Workgroups allow users to share files, printers, and local network resources.

• Workgroups usually consist of 20 or fewer computers.

Group Policy Editor (gpedit.msc)

The Group Policy Editor is a graphical snap-in for Windows settings stored in the registry.

Provides a simplified GUI for changing settings in the registry.

• Contains more than 3,000 Windows settings to choose from.

• Allows you to centrally configure and enforce settings on all computers in an Active Directory network.

• Uses the domain controller to implement the settings in an Active Directory network.

• Can also be used on a small scale for the enforcement of restrictions or to run specific scripts at specified times.

BitLocker

BitLocker is Microsoft's whole disk encryption feature.

• Is available on Pro and Enterprise editions.

• Creates a recovery key that is used to access the encrypted hard drive.

• Is designed to protect computers if lost or stolen.

• Primarily uses a Trusted Platform Module (TPM) as part of the encryption process.

  • TPM is a hardware chip often installed on newer computers by the manufacturer.

  • TPM is a crypto-processor that creates and stores cryptographic keys.

  • TPM is used for authentication.

• Allows you to encrypt an entire disk or just the data.

  • Encrypting just the data is a faster process.

  • Encrypting the entire hard drive is more secure.

User interface customization

You can customize the user interface and desktop styles. Settings you can use to personalize the user interface include:Background

• Colors

• Themes

• Transparency effects

• Taskbar items and location

• Start menu items

• Fonts

Random access memory (RAM) limitations

RAM processes data in use. Having adequate RAM for each device is very important; having the correct edition of Windows to support it is also important. Each edition of Windows has its own RAM support limitations.Home edition supports up to 128 GB of RAM.

• Pro edition supports up to 2 TB of RAM.

• Pro for Workstations edition supports up to 6 TB of RAM.

• Enterprise editions support up to 6 TB of RAM.

Remote Desktop Protocol (RDP)

RDP is a Microsoft protocol that allows remote access to a Windows machine.

• Is available on all editions except the Home edition of Windows.

• Allows a remote user to see and manipulate the machine through an encrypted exchange.

• Can expose the machine to cyber attacks. It is a best practice to implement additional security protocols when enabling RDP.

Desktop

The desktop is the working surface that contains icons you can use to access programs, files, applications, and file systems. The desktop is what you see when all programs and open folders are minimized. Installing an application often adds an icon to the desktop.

Start menu

The Start menu is the easiest way to access the most useful things on the computer.

• At the top is a search field you can use to search for a known application.

• Below the search field are apps pinned for quick access.

  • You can customize the order of the pinned apps.

  • You can add and remove pinned apps from the Start menu.

• In the top right corner, you can select All apps to list all applications on the computer in alphabetical order.

• You can right-click an app in the list and pin or unpin it to the Start menu.

• You can uninstall apps from the Start menu.

• You can change account settings, switch users, or lock the desktop from the profile section of the Start menu.

• Power options and advanced features are available in the bottom right corner. Right-click the Start button to access the advanced features for OS management.

Taskbar

The taskbar is the bar at the bottom of a Windows desktop. The taskbar:

• Allows you to move it to the left or leave it centered on the screen.

• Displays the icons of apps currently running or pinned to the taskbar. You can:

  • Access a running app by clicking the app's icon.

  • Launch a pinned app by clicking the app's icon.

• Can be hidden.

Settings app

The Windows Settings app is an easily navigable application used to configure the Windows operating system. The Settings app:

• Has a search bar at the top for quick location of a desired setting.

• Retains a category list on the left side of the page regardless of the page selected.

• Displays breadcrumb navigation at the top when accessing categories.

• Has updated visual icons.

• Contains features added from the Control Panel. For example:

  • Advanced sharing settings (Network discovery, public folder sharing, and file and printer sharing).

  • Advanced network settings.

  • Printers & scanners page.

  • Entry points for network and device settings.

• Recommends settings based on configuration selections.

Virtual desktop

A virtual desktop is a feature that allows you to create multiple desktops for organizing applications. Virtual desktops:

• Can be toggled from one to another from the taskbar.

• Allow you to run multiple programs separately on different virtual desktops.

• Allow each desktop to have a unique background to help distinguish it.

Widgets

The Widgets icon from the taskbar is an update from the Windows 10 News and Interests panel. It provides:

• Local weather.

• Trending news.

• Options to add more widgets such as to-do lists or Outlook calendar.

• Options to personalize news feed and interests.

• An option to remove it from the taskbar.

Chat

The Cha t icon on the taskbar syncs contacts on Windows or from a mobile device to Microsoft Teams. It allows the user to make video calls or chat with contacts through a Microsoft account.

Features of the Windows OS offered with Windows 11 include:

• Snap layouts that let you select layouts, grouping, and organization options for working with multiple pages on the screen simultaneously. Layout/grouping options vary depending on screen size. To use snap layouts:

  • Hover over the minimize icon to select the layout.

  • Hover over the desktop icon on the taskbar to navigate between layouts.

• The Microsoft Store which offers Windows 11 and Windows 10 apps, as well as Android apps hosted on the Amazon App Store.

• Teams (replaced the Skype options) to offer chat and video calls with contacts.

• Large touch targets and visual prompts for tablet users.

• Virtual desktops for organizing applications by topic or work environment.

• Auto high dynamic range (HDR) which expands the range of colors in many DirectX games and other newer games.

• Faster Windows Hello logon.

• Faster download time for Windows updates

Upgrade

An upgrade installation lets you move from an older version of Windows to a newer one without losing your data, settings, or applications.

Custom/clean

A clean install installs a fresh copy of Windows and erases all existing data on the drive.

• No operating system is installed

• The current OS can’t be upgraded

• You want to set up dual-boot with another OS

Windows Autopilot

Windows 10, version 1703
A cloud-based tool that makes it easy to set up and configure new Windows devices with minimal effort.

• Customizes the Out-of-Box Experience (OOBE)

• Requires just a few clicks to set up a fully configured PC

• No need for IT staff to manually install Windows or apps

• Automates large-scale deployments

• Applies custom settings, policies, and apps automatically

• Eliminates the need to re-image devices manually

Check system requirements

installing windows

Microsoft provides the PC Health Check application. Use this application to assess if your system meets all the requirements for the Windows version you want to install.