Course 20697-2B: Deploying and Managing Windows 10 Using Enterprise Services (20697-2)
Cours disponible en français ou en anglais - Training available in French or in English
Durée: 5 jours
Objectifs du cours :
This course provides administrators with the knowledge and skills necessary to deploy and manage Windows 10 desktops, devices, and applications in an enterprise environment. Students learn how to plan and implement Windows 10 deployments in large organizations. Students also learn how to manage the Windows 10 installations after deployment to provide secure identity and data access using technologies related to Group Policy, Remote Access, and Workplace Join. To support a variety of device and data management solutions, Microsoft Azure Active Directory, Microsoft Intune, and Microsoft Azure Rights Management are introduced. These services are part of the Enterprise Mobility Suite, which provides identity and access management, and cloud-based device, application, and update management. In addition, Enterprise Mobility Suite offers more secure data access to information stored both in the cloud and on location within corporate networks.
Compétences acquises :
Module 1: Managing Desktops and Devices in an Enterprise Environment
This module explains the most current trends and information related to desktop and device management in the enterprise. It also provides an overview of on-premises management compared to cloud-based IT management and services.
After completing this module, students will be able to:
Module 2: Deploying Windows 10 Enterprise Desktops
This module explains the various deployment scenarios for Windows 10 and the considerations to keep in mind while performing these deployments. This module also explains how to deploy Windows 10 by using the Windows Assessment and Deployment Kit (WADK) and the Microsoft Deployment Toolkit (MDT). This module also explains how to maintain Windows 10 by using DISM and Windows Imaging and Configuration Designer (ICD). Additionally, it explains the different types of volume activation technologies and tools to manage activation.
After completing this module, students will be able to:
Module 3: Managing User Profiles and User State Virtualization
This module explains how to manage user profiles and user state using tools such as the User State Migration Tool (USMT) and User Experience Virtualization (UE-V).
After completing this module, students will be able to:
Module 4: Managing Desktop and Application Settings by Using Group Policy
This module explains how to manage Group Policy inheritance, administrative templates, and common enterprise desktop settings. This module also explains how to apply Group Policy Preferences using targeting and filtering.
After completing this module, students will be able to:
Module 5: Managing Windows 10 Sign-In and Identity
This module explains the concept of identity and explains the methods to enhance identity security. This module also explains cloud identities and the use of Azure Active Directory in enterprise organizations.
After completing this module, students will be able to:
Module 6: Managing Data Access for Windows-based Devices
This module explains how to provide secure access to company data. Solutions discussed include Device Registration (previous known as Workplace Join) and Work Folders. This module also explains how to configure and share data stored in Microsoft OneDrive.
After completing this module, students will be able to:
Module 7: Managing Remote Access Solutions
This module explains how to configure a virtual private network (VPN) and DirectAccess in Windows 10. This module also explains how to configure RemoteApp.
After completing this module, students will be able to:
Module 8: Managing Windows 10 Devices by Using Enterprise Mobility Solutions
This module provides an overview of the Enterprise Mobility + Security, Microsoft Azure Active Directory-Premium (Azure AD Premium), Azure Rights Management (Azure RMS), and Microsoft Intune.
After completing this module, students will be able to:
Module 9: Managing Desktop and Mobile Clients by Using Microsoft Intune
This module explains how to install the Microsoft Intune client software and configure and assign Intune policies. It also explains how to create Mobile Device Management (MDM) policies and enroll mobile devices to Intune. Additionally, this module explains how to use Intune to create and manage Windows Information Protection (WIP) policies.
After completing this module, students will be able to:
Module 10: Managing Updates and Endpoint Protection by Using Microsoft Intune
This module explains how to configure updates and Endpoint Protection settings and reports using Microsoft Intune.
After completing this module, students will be able to:
Module 11: Application and Resource Access by Using Microsoft Intune
This module explains how to use the Microsoft Intune Software Publisher to deploy applications to managed clients. This module also explains the use of certificate profiles, Wi-Fi profiles, and VPN profiles to control access to company resources.
After completing this module, students will be able to:
Module 12: Configuring and Managing Client Hyper-V
This module explains how to create virtual switches, virtual hard disks, and virtual machines by using Client Hyper-V.
After completing this module, students will be able to:
Connaissances requises :
Students should have at least two years of experience in the IT field and should already have the following technical knowledge:
Cours disponible en français ou en anglais - Training available in French or in English
Durée: 5 jours
Objectifs du cours :
This course provides administrators with the knowledge and skills necessary to deploy and manage Windows 10 desktops, devices, and applications in an enterprise environment. Students learn how to plan and implement Windows 10 deployments in large organizations. Students also learn how to manage the Windows 10 installations after deployment to provide secure identity and data access using technologies related to Group Policy, Remote Access, and Workplace Join. To support a variety of device and data management solutions, Microsoft Azure Active Directory, Microsoft Intune, and Microsoft Azure Rights Management are introduced. These services are part of the Enterprise Mobility Suite, which provides identity and access management, and cloud-based device, application, and update management. In addition, Enterprise Mobility Suite offers more secure data access to information stored both in the cloud and on location within corporate networks.
Compétences acquises :
Module 1: Managing Desktops and Devices in an Enterprise Environment
This module explains the most current trends and information related to desktop and device management in the enterprise. It also provides an overview of on-premises management compared to cloud-based IT management and services.
After completing this module, students will be able to:
- Discuss managing Windows 10 in an enterprise environment.
- Explain the complexities of managing a mobile workforce.
- List the challenges of supporting devices in the enterprise.
- Explain how to extend IT Management and services to the cloud.
Module 2: Deploying Windows 10 Enterprise Desktops
This module explains the various deployment scenarios for Windows 10 and the considerations to keep in mind while performing these deployments. This module also explains how to deploy Windows 10 by using the Windows Assessment and Deployment Kit (WADK) and the Microsoft Deployment Toolkit (MDT). This module also explains how to maintain Windows 10 by using DISM and Windows Imaging and Configuration Designer (ICD). Additionally, it explains the different types of volume activation technologies and tools to manage activation.
After completing this module, students will be able to:
- Describe the Windows 10 enterprise deployment process.
- Customize enterprise desktop deployments.
- Deploy Windows 10 by using MDT.
- Maintain a Windows 10 installation.
- Manage volume license activation for Windows 10.
Module 3: Managing User Profiles and User State Virtualization
This module explains how to manage user profiles and user state using tools such as the User State Migration Tool (USMT) and User Experience Virtualization (UE-V).
After completing this module, students will be able to:
- Manage user profiles and user state.
- Implement user state virtualization by using Group Policy.
- Configure UE-V.
- Manage user state migration.
Module 4: Managing Desktop and Application Settings by Using Group Policy
This module explains how to manage Group Policy inheritance, administrative templates, and common enterprise desktop settings. This module also explains how to apply Group Policy Preferences using targeting and filtering.
After completing this module, students will be able to:
- Describe Group Policy processing and management.
- Configure common settings to users and desktops by using Group Policy.
- Manage settings using Group Policy preferences.
Module 5: Managing Windows 10 Sign-In and Identity
This module explains the concept of identity and explains the methods to enhance identity security. This module also explains cloud identities and the use of Azure Active Directory in enterprise organizations.
After completing this module, students will be able to:
- Describe the concept of enterprise identity.
- Plan for cloud identity integration.
Module 6: Managing Data Access for Windows-based Devices
This module explains how to provide secure access to company data. Solutions discussed include Device Registration (previous known as Workplace Join) and Work Folders. This module also explains how to configure and share data stored in Microsoft OneDrive.
After completing this module, students will be able to:
- Describe the data access solutions.
- Implement Device Registration.
- Implement Work Folders.
- Manage online data by using cloud-based storage solutions.
Module 7: Managing Remote Access Solutions
This module explains how to configure a virtual private network (VPN) and DirectAccess in Windows 10. This module also explains how to configure RemoteApp.
After completing this module, students will be able to:
- Describe remote access solutions.
- Implement DirectAccess with Windows 10.
- Configure access to remote networks.
- Support RemoteApp for Windows 10.
Module 8: Managing Windows 10 Devices by Using Enterprise Mobility Solutions
This module provides an overview of the Enterprise Mobility + Security, Microsoft Azure Active Directory-Premium (Azure AD Premium), Azure Rights Management (Azure RMS), and Microsoft Intune.
After completing this module, students will be able to:
- Describe EMS.
- Manage directory services by using Azure AD Premium.
- Protect devices by using Azure RMS.
- Explore the options in Intune.
Module 9: Managing Desktop and Mobile Clients by Using Microsoft Intune
This module explains how to install the Microsoft Intune client software and configure and assign Intune policies. It also explains how to create Mobile Device Management (MDM) policies and enroll mobile devices to Intune. Additionally, this module explains how to use Intune to create and manage Windows Information Protection (WIP) policies.
After completing this module, students will be able to:
- Deploy the Intune client software.
- Describe Intune policies.
- Manage mobile devices by using Intune.
- Create and manage WIP policies.
Module 10: Managing Updates and Endpoint Protection by Using Microsoft Intune
This module explains how to configure updates and Endpoint Protection settings and reports using Microsoft Intune.
After completing this module, students will be able to:
- Manage updates by using Intune.
- Manage Endpoint Protection.
Module 11: Application and Resource Access by Using Microsoft Intune
This module explains how to use the Microsoft Intune Software Publisher to deploy applications to managed clients. This module also explains the use of certificate profiles, Wi-Fi profiles, and VPN profiles to control access to company resources.
After completing this module, students will be able to:
- Describe the requirements for application management by using Intune.
- Describe the application deployment process by using Intune.
- Describe how to manage access to organizational resources by using Intune.
Module 12: Configuring and Managing Client Hyper-V
This module explains how to create virtual switches, virtual hard disks, and virtual machines by using Client Hyper-V.
After completing this module, students will be able to:
- Install and configure Client Hyper-V.
- Configure virtual switches.
- Create and manage virtual hard disks.
- Create and manage virtual machines.
Connaissances requises :
Students should have at least two years of experience in the IT field and should already have the following technical knowledge:
- Networking fundamentals, including Transmission Control Protocol /Internet Protocol (TCP/IP), User Datagram Protocol (UDP), and Domain Name System (DNS)
- Microsoft Active Directory Domain Services (AD DS) principles
- Windows Server 2012 R2 fundamentals
- The Windows client operating system essentials; for example, working knowledge of Windows 8.1 and/or Windows 7