1212 Final Part 1

Windows Editions

• Windows 10 Home: Designed for personal use, offering basic features and security (device encryption, firewall, Windows Defender, Windows Hello, Secure Boot). Includes essential features like battery saver mode, mobile device connectivity, and Microsoft Edge.

• Windows 10 Pro: Intended for business professionals, including all Home edition features plus advanced security (BitLocker, Windows Information Protection), mobile device management, business updates, Microsoft Store for Business, and support for Active Directory, Azure Active Directory, and Group Policy. Includes features for dynamic provisioning and enterprise state roaming. Hyper-V virtualization is included.

• Windows 10 Pro for Workstations: Tailored for high-end computing needs (CAD, graphic design, etc.), incorporating all Pro features and enhanced capabilities for performance-critical tasks, including:

  • Resilient File System (ReFS): Provides fault-tolerant, auto-correcting cloud-based storage.
  • Persistent Memory: Utilizing non-volatile memory modules (NVDIMM-N) for faster data access and retention even during power outages.
  • SMB Direct: Optimizes network data transfer.
  • Hardware: Support for Intel Xeon or AMD Opteron processors and up to 4 CPUs and 6 TB of memory.

• Windows 10 Enterprise: Targeted at large organizations with IT support and requiring volume licensing. Offers all Pro features plus enhanced security:

  • Credential Guard: Additional protection for user credentials.
  • Application Guard: Provides isolated app environments.
  • Application Control: Enhanced control over which applications run.
  • Advanced Threat Protection (ATP): Protects against advanced threats.
  • Device Guard: Enforces system security policies.
  • Other: Additional features for direct access, user experience control, and specific Microsoft virtualization tools.

• Windows 11 Home: Optimized for personal use, featuring snap layouts, desktops, Microsoft Teams integration, widgets, enhanced gaming, and security features.

• Windows 11 Pro: Offers all Home features plus enterprise-level functionalities:

  • BitLocker: Device encryption.
  • Windows Information Protection: Enhances security.
  • Assigned Access and Dynamic Provisioning: Simplified deployment.
  • Other: Enhanced management and support. Support for Active Directory and Azure Active Directory, Mobile device management, Group Policy, Microsoft Store for Business, and Enterprise State Roaming. Includes Kiosk mode setup and Hyper-V.

• Windows 11 Pro for Workstations: Designed for high-performance business use (engineering CAD/graphic design, etc.), including all Pro features with resilient file systems (ReFS), persistent memory, and network optimization (SMB Direct), and similar hardware specifications.

• Windows 11 Enterprise: Intended for large organizations, requiring a licensing agreement and included in Microsoft 365 Enterprise. Offers all Pro features plus enterprise security protections. Includes: - Windows Enterprise E3: For medium-to-large organizations, including OS deployment and update control, device and application management, and enhanced security provisions..

  - **Windows Enterprise E5:** Ideal for cloud-delivered endpoint security, including all E3 features plus Defender for Endpoint.
  

• Windows 11 Enterprise E3 in Microsoft 365 F3: Targeted at large organizations with frontline workers, including E3 features and additional security protections.

Windows Differences

• Removed Features (Windows 10 to 11): People (pinned contacts), Skype, Timeline, Cortana (not default), Internet Explorer, S Mode (limited to Home), Tablet Mode, and Wallet.

Minimum Hardware Requirements

• Windows 10: 1 GHz processor, 1 GB RAM, 16 GB disk space, DirectX 9 graphics.
• Windows 11: 1 GHz or faster processor (2+ cores), 4 GB RAM, 64 GB storage, UEFI, Secure Boot, TPM 2.0, DirectX 12 or later, 720p display.

Upgrades

• In-place upgrades: Preserve user data and applications but may preserve existing problems.

• Clean installs: Backup data, perform a fresh install, then restore data (using USMT).

• Upgrade methods: Manual (from installation media), or automated (MDT, WDS, ADK).

Virtualization Overview

• Virtualization: Creates software-based representations (VMs) enabling multiple OS runs on a single physical machine.

• Type 1 Hypervisor: Runs directly on hardware (bare metal).

• Type 2 Hypervisor: Installed as an application.

• Hyper-V (Microsoft): Supports hardware virtualization to create and run VMs.

• Host machine: The physical computer providing resources to the VMs.

Licensing

• Digital license: Linked to a Microsoft account, tied to the hardware (reactivation might be required for significant hardware changes).

• Product key: Linked to the hardware; reactivation required for major hardware changes.

• Licensing management: Using KMS, ADBA, or MAK for volume licensing.

Windows Configuration

• Start menu: Customizable (recently added/used apps, folders).

• Taskbar: Customizable (hiding, badges, icons).

• Desktop Environment: Customizable (background, lock screen, settings).

• Notifications: Customizable (icons, sounds, Focus Assist).

Microsoft Edge

• IE Mode: Provides access to IE-compatible websites in Edge.

• Edge Collections: Web clipping tool.

• Extensions: Customizable add-ons.

• Reading View: Removes distractions from web pages.

Desktop Application Management

• Compatibility check: Verify compatibility with your Windows version.

• Malware scan: Ensure security.

• Restore point: Protect against unforeseen issues.

• Installation process: Follow on-screen instructions carefully.

• Management: Manage apps through the Windows Settings app.

• Repair/Uninstall: Options for resolving issues with apps or for uninstalling.

Local Printer Sharing

• Sharing a printer: Allowing remote users access.

• Network discovery: Turning on network discovery and file sharing options.

• Permissions: Managing print and document permissions.

• Printing: Standard vs. management functions.

Print Management

• Methods: From Control Panel, Windows search, or PowerShell.

• Management tasks: Viewing, adding, deleting, managing printers, drivers, queues.

Imaging and Deployment

• Image files: Copies of system settings.

• WIM files: Windows Imaging Format (file-based).

• MDT (Microsoft Deployment Toolkit): Tools for automating Windows deployments.

• Sysprep: Prepares the image for deployment by removing unique identifiers.

• WinPE (Windows Preinstallation Environment): Special Windows environment to create/modify images.

• Images capture: Using DISM in Windows PE mode.

• Autopilot: Simplified deployment process for new Windows devices.

User State Migration Tool (USMT)

• Migration tool: Translates user profiles and data to new systems.
  • ScanState: Collects user data
  • LoadState: Migrates user data.

Active Directory

• Active Directory (AD): Centralized directory service for users, groups, computers.

• Domain: Basic administrative unit of Active Directory.

• Organizational Unit (OU): Nested folders within a domain for easy organization.

• Objects: Identifiable resources (users, groups, computers).

• Domain controller: Server holding a copy of AD database.

• Replication: Copying changes between domain controllers.

User Accounts

• Local accounts: Created on individual computers.

• Domain accounts: Stored in Active Directory.

• Microsoft accounts: Synced across devices and services.

Other Security Considerations

• Privileged accounts: Accounts with elevated access and higher risk because of access to sensitive data.

• Securing privileged accounts: Implement zero-trust security, using least privilege principles.

• Zero-trust model: Granting minimal access to resources as needed.

• Security technologies: Utilizing strong authentication approaches like multi-factor authentication (MFA), encryption, access controls, and device health monitoring.

• Windows Defender Credential Guard: Improves system-level protection of sensitive credentials.

Test your knowledge about the features of Windows 10 and 11 editions. This quiz covers key differences between Professional, Home, and Workstation editions, as well as minimum requirements and security features. Perfect for both IT professionals and Windows enthusiasts!