Deploy Windows Client - Prepare for Client Deployment

Minimum system requirements for Windows 10 32-bit.

1 GHz processor

1 GB RAM

16 GB disk space

Display: 800x600

DirectX 9.0

Minimum system requirements for Windows 10 64-bit.

1 GHz processor

2 GB RAM

20 GB disk space

Display: 800x600

DirectX 9.0

Minimum system requirements for Windows 11.

1GHz processor

4 GB RAM

64 GB disk space

TPM 2.0

UEFI

DirectX 12

What is Endpoint Analytics?

A tool in Microsoft Intune or SCCM used for improving user productivity and reducing IT support costs by providing insights into the user experience. -- In Intune home page to Reports > Endpoint Analytics

What is the purpose of Readiness Assessment for deployment of Windows 10/11?

Identify:

hardware issues,

minimum hardware requirements,

driver issues,

software incompatibility

PC Health Check is a tool that can be run on an individual computer do determine if it's suitable to run Windows 11. What can you use to check Windows 11 compatibility on a large number of computers at once?

Endpoint Analytics

What role is required for sysadmins to use Endpoint Analytics?

Endpoint Security Manager

What are the requirements of Endpoint Analytics?

-Intune and/or SCCM

-Client diagnostic level is set to "Optional" using GP or MDM

In order to use Endpoint Analytics, what does the Windows 10 diagnostics level need to be set to on the client machine?

(Note: You can change how much diacnostics data is uplouded to the MS cloud from the "Diagnostics & Feedback" applet in Settings)

"Optional" in Windows settings or "Full" in Intune.

What settings in Intune need to be enabled to use Admin Center Reports?

Windows data and Windows license verification

In Intune, you can access reports about about device readiness for Windows update by navigating to:

Home > Reports > under Device management > Windows updates.

What is Microsoft Endpoint Configuration Manager (MECM) (Previously known as SCCM)

A tool used for managing servers and workstations in an Active Directory environment before Intune came along.

What is a shim?

A way to fix an application incompatibility.

What is the MAP toolkit (Microsoft Assessment and Planning)

A downloadable LAN-based assessment tool that can provide detailed readiness assessment reports on a Windows machine.

What are the two automated deployment options?

Traditional methods and Dynamic methods

Traditional Deployment methods are where an organisation creates a custom _________ of the ideal workstation.

image -- Deployed across a LAN or at depot

PXE stands for:

Preboot Execution Environment

A common network-based deployment method involves PXE booting a device when then receives the boot and install image from a server which is running the _____ role.

WDS -- Windows Deployment Services

A deployment method that modifies an existing Windows installation to make it the ideal workstation.

Dynamic Deployment -- Assumes most new devices come with Windows already installed out of the box. This deployment method won't work on a device that doesn't already have Windows 10/11 installed.

What's the main difference between traditional and dynamic deployment methods?

Traditional deployment methods replace the existing Windows installation with a completely new image while dynamic deployment modifies the existing Windows installation.

Since dynamic deployment methods modify an installation rather than replace it, they are:

-faster to deploy

-less demanding on the network as a result of lighter payloads

What are some Dynamic Deployment tools?

Intune + Azure AD Premium

Windows Configuration Designer

Windows Autopilot

Subscription activation

Look at picture for what intune and Azure AD Premium can do

Ok I see

What is s Provisioning Package?

A package of settings, apps, and data specific to an enterprise. Can be applied to a running computer without needing to reimage.

What tool is used to create a Provisioning Pagkage?

Windows Configuration Designer -- WCD for short. Comes with the WADK

What is a .ppkg file?

A provisioning package

What is the Windows Assessment Deployment Kit (WADK)

The Windows Assessment and Deployment Kit Windows ADK- and Windows PE add-on has the tools you need to customize Windows images for large-scale deployment.

What Can WCD do?

With Windows Configuration Designer you can create provisioning packages that do cool stuff like this.

What does OOBE stand for and what is it?

Out of Box Experience -- The Windows set up screen that appears when you turn on a newly unboxed computer

How do you apply a provisioning package (.ppkg) at the OOBE screen?

Quickly tap the Windows key five times

What are some ways provisioning packages can be applied on a computer that already has Windows installed?

-Via USB. Settings > Accounts > Access work or school > Add or remove a provisioning package

-Double click the .ppkg file from the USB, network drive, or SharePoint

What is Migrate ?

A way of installing a new Operating System. User settings, data, and apps are wiped with this method. This method is more suitable when moving from Windows 7/8 to Windows 10/11.

What is an in-place upgrade?

A way of installing a new Operating System. User settings and data remain in place with this method. This method is better when moving to a similar Operating System like Windows 10 to Windows 11.

What is the "User State"?

The collection of data and settings that pertain to each user. It describes settings and data that determine the user environment.

What is NTUSER.DAT ?

The file containing user-specific registry entries in a user profile.

What is the Appdata folder?

A folder where user-specific application data, settings, and preferences are stored. -- This includes things like preferences, configuration settings, and even cached data

The Appdata folder contains subfolders which are divided according to whether the contents do or do not ______

sync. The Local and LocalLow folders do not sync.

What is the roaming folder?

The Roaming folder is used to store data that will be synced across multiple Windows systems. This is often used for storing settings like bookmarks, saved passwords, and so on.

If you're going to restore a user state on a newly imaged computer, make sure you install all the applications first. Why?

Otherwise the app installer might overwrite the user's settings with default settings.

What is the User State Migration Tool (USMT)

It is a tool used to migrate user settings from one operating system to another.

scanstate

A command used in the USMT. Scans a system for user settings and data and exports them in a migration file on an external location like a USB or network drive.

loadstate

A command used by the User State Migration Tool -USMT- to copy user settings and data temporarily stored on a server or removable media to a new computer. Also see scanstate.

What is UE-V (User Experience Virtualization) ?

A tool that syncs user's Windows and application settings to a server. Settings sync down to any device. -- Typically used in on-prem or hybrid environments

User Experience Virtualisation (UE-V) can be used as an alternative to USMT. Just remember that UE-V does not sync _____

user data -- like Documents folder

User Experience Virtualisation (UE-V) is available on which operating systems?

Windows 10 and later for Enterprise and Education editions

What is Enterprise State Roaming?

A tool that allows secure synchronisation of users' application and Windows settings to the cloud. This means they'll have the same experience no matter which Windows device they sign into. -- This is managed through Azure. You can enable it for all, selected, or no devices

Enterprise State Roaming is best used in what kind of environment? Cloud, hybrid, or on-prem?

Cloud -- though it can be used in a hybrid environment

What is required in order for an org to enable Enterprise State Roaming?

Azure AD Premium membership OR Enterprise Mobility + Security -EMS- license

Some nifty things about Enterprise State Roaming are:

-Central on/off switch and configuration by AAD group

-Per-user sync reporting via Azure portal

-Data and setings are encrypted in transit by Azure RMS -Azure Rights Management-

What is Known Folder Move? (AKA PC Folder Backup)

A feature in OneDrive that lets a user sync the Documents, Pictures, and Desktop folders to OneDrive. Can be enabled via OneDrive Settings, Group Policy, or Intune. -- This is an alternative to USMT for files

Work Folders

A role service that's a component of the File and Storage Services role; allows users to synchronize documents between company file servers and mobile devices.

Why is Windows Home edition not suitable for business use?

-No BitLocker

-No Remote Desktop

-No domain networking

-Cannot participate in MDM

What is Windows Pro edition suitible for?

Power users and small business. -- Features Bitlocker, RDP, Domain networking, MDM, Enterprise State Roaming

What Windows Edition is most ideal for large organisations due to the plethora of features for enhanced security, management, and other stuff.

Windows Enterprise Edition -- Only available through subscription based purchasing of licenses

Long Term Servicing Channel (LTSC)

A special variation of Windows that doesn't get the usual feature updates, only the quality updates. Intended for mission critical servers that can't affort to have stystem stability affected by a Windows feature update.

Windows Education is essentially the same as Enterprise but is tailored for use in academic organisations. Licenses can only be purchased by ______

academic institutions

S Mode

- Special locked-down configuration of Windows 10 or Windows 11.

- Users cannot install any applications except those in the MS store, and the only browser permitted to run is Edge.

- PowerShell cannot run either.

- If the administrator turns it off, it cannot be enabled again.

Fresh Install (High Touch Installation)

Installing Windows from a flash drive or setup DVD is called ____

Lite Touch Installation (Lite TI)

What kind of deployment is it called when you install Windows using ADK or MDT?

Windows Autopilot

A cloud-based service that is used to automate the provisioning of computers running Windows 10/11.

In-place upgrade

An upgrade that replaces the existing OS with the new OS but maintains all the roles and features installed on the existing OS.

What is DISM?

A command-line tool used to create, manage, modify, and repair Windows images. --It's also included in the Windows ADK--

What does DISM stand for?

Deployment Image Servicing and Management

What are some features that Windows Enterprise has?

-Applocker

-Universal print

-Start menu layout control

-Microsoft Defender features such as credential guard, application control, application guard

-Desktop analytics

Windows Enterprise LTSC (What does it stand for?)

Long Term Servicing Channel

What is Windows Enterprise LTSC used for?

It's used for devices that need a reliable and unchanging environment in order to operate over an extended period without disruptions. Allows delaying of feature updates and only receives monthly quality updates.

What's the difference between an E3 and an E5 license?

E5 has more security features and Power BI

To use Endpoint Analytics you need to set the diagnostic level on client machines. How do you enable this in Intune?

Tenant Administration > Connectors and Tokens > Windows Data > enable "Enable features that require Windows diagnostic data in processor configuration"