Singer Manuel and others / Сингер Мануэль и другие - Windows 11 for Enterprise Administrators: Unleash the power of Windows 11 with effective techniques and strategies, 2nd Edition / Windows 11 для корпоративных администраторов [2023, PDF, EPUB, ENG]

Примеры страниц

Оглавление

Preface xiii
1
Windows 11 – Installation and Upgrading 19
Selecting the edition and channel version 20
General Availability Channel (GAC) and support timeline 20
Long-Term Servicing Channel (LTSC) and support timeline 23
Recommendations 25
Hardware requirements for Windows 11 26
Official (minimum) requirements 26
CPU limitations 28
Hardware requirements for additional features 29
Recommendations for a future-oriented hardware choice 30
Upgrading to Windows 11 31
In-place upgrades 32
Limitations and blockers of an in-place upgrade 36
Traditional wipe-and-load 40
An alternative – provisioning package (PPKG) 41
The modern way – Windows Autopilot 42
Activation of Windows 11 45
Classic activation by Multiple
Activation Key (MAK) or Key Management Services (KMS) 45
More modern via Active Directory-based activation 45
Future-oriented via Windows 10/11 Subscription Activation 46
Tips and tricks for a smooth in-place upgrade from
Windows 8.1 or 10 to Windows 11 46
Looking up SetupDiag data in case of
error/rollback 47
Integrating cumulative updates into install sources 47
Updating drivers 47
Looking at Setupact.log and Setupapi.dev.log 48
Desktop Analytics and Microsoft Endpoint Manager admin center 48
Selecting the deployment tools 49
Summary 50
2
Introduction to PowerShell 51
What is PowerShell? 51
Windows PowerShell versus PowerShell 7 52
Installing PowerShell 7 53
Keeping PowerShell up to date 56
The three key pillars of PowerShell 58
Cmdlets 58
Objects 59
The pipeline 60
PowerShell’s scripting language 61
PowerShell’s formatting features 62
Getting help 62
Modules and commands 64
Commands 64
Modules 64
Discovery 65
PowerShell and security 67
Security by default 67
PowerShell logging 68
PowerShell script block logging 68
Module logging 68
Execution policy 68
Transcription 69
Configuring PowerShell 69
Adding modules 70
Profiles 70
Group Policy 71
Using PowerShell 71
The PowerShell console 71
The Windows PowerShell Integrated Scripting Environment (ISE) 72
Windows Terminal 73
Microsoft Visual Studio Code 75
Desired State Configuration 76
Summary 78
3
Configuration and Customization 79
Evolution of WaaS 79
Image customization 81
Imaging process 81
Customizing the image 82
Microsoft Autopilot 84
BYOD scenarios 84
Upgrade expectations 85
Security mitigation 85
Internet Explorer 11 retired 86
Windows Store for Business EOL announced 86
Windows 11 Start and taskbar layout 86
Audit mode 87
Tips 87
Virtual Desktop Infrastructure 88
SCT 88
AppLocker and Windows Defender Application Guard (previously MDAC) 89
Microsoft telemetry 89
Windows Spotlight 90
Mandatory user profiles 91
Summary 93
4
User Account Administration 95
Windows account types 95
Account privileges 96
Local Administrator
Password Solution 97
Creating policies to control local accounts 99
Password policy 99
Account lockout policy 101
Managing user sign-in options 103
Mobile device management security settings 104
User Account Control 105
Privileged Access Workstation 108
Summary 108
5
Tools to Manage Windows 11 109
RSAT 109
Installing the RSAT tools 110
Updating the RSAT tools 115
Using the RSAT tools 115
The Sysinternals tools suite 116
Downloading the Sysinternals tools suite 117
Introducing the Sysinternals BGInfo tool 119
Introducing the Sysinternals PsTools suite 124
Summary 133
6
Device Management 135
Evolving business needs 135
MDM 138
Changes to GPOs in Windows 10/11 145
Enterprise- and Education-only GPOs 145
Known issues when upgrading the central policy store 145
Known issues with GPPs/GPMC 147
Servicing and patching 149
Why CUs? 150
Update deployment solutions 154
Windows 10/11 servicing 174
Summary 177
7
Accessing Enterprise Data in BYOD and CYOD Scenarios 179
What are the EUC device models? 179
The bring your own device model 180
The choose your own device model 180
Key considerations 181
Comparing options 182
Protection and governance options 183
Identity and access management 183
Information protection 184
Device configuration 184
Application management 185
Storage sync options 185
OneDrive for Business 185
Work Folders 186
Alternative EUC delivery options 186
Windows 365 Cloud PC and Azure Virtual Desktop 186
Enabling virtual private networks 188
Publishing applications via proxy 188
End user behavior analytics 189
Summary 189
8
Windows 11 Security 191
Introducing security posture 191
Zero trust 193
Defense in depth 194
Ensuring hardware security 195
TPM 196
Microsoft Pluton security processor 197
Windows Defender System Guard 199
Hypervisor-protected Code Integrity 205
Ensuring that we operate system security 208
Introducing Secure Boot and Trusted Boot 208
Exploring the Windows Security app 208
Using BitLocker for encryption 216
Security baselines 217
Ensuring user identity security 217
Windows Hello for Business 217
Microsoft Defender Credential Guard 218
Summary 220
9
Advanced Configurations 221
Virtual desktops 222
On-prem virtual desktop best practices 223
VDI configurations 224
The Windows Configuration Designer 224
Windows 11 Kiosk Mode 225
Windows Autopilot 225
The Set up School PCs application 226
Device lockdown 227
Windows Subsystem for Linux 229
Group Policy Editor 229
Remote Desktop Protocol 230
Windows Hello and Windows
Hello for Business 231
Windows Firewall with Advanced Security 232
Hyper-V 232
Windows Task Scheduler 233
Enabling BitLocker drive encryption 234
Storage Spaces Direct 234
Windows Defender Application Guard 235
Summary 235
10
Windows 11 21H2 and 22H2 Changes (versus Windows 10) 237
New Start menu and taskbar 238
New docking and multi-monitor experiences 241
New patch file format 242
“New” security options 243
Other technical changes in 21H2 244
Deprecated and removed features in 21H2 244
Windows 11 22H2 (build 22621) 245
New security options 245
Improved Start menu and taskbar 247
New inclusive features 250
Windows Studio effects 254
Further improvements to the size
and speed of updates 258
New Windows Subsystem for Android™️ 258
CI aka Moments 261
Other technical changes in 22H2 261
Deprecated and removed features in 22H2 266
Other changes 266
Further references for Windows 11 22H2 267
Summary 268
Index 269
Other Books You May Enjoy 282