MOC On-Demand: 20697-2-Deploying and Managing Windows 10 Using Enterprise Services - On-Demand Course

Section 1: Managing Desktops and Devices in an Enterprise Environment
This section discusses the most current trends and information related to desktop and device management in the enterprise. It also provides an overview of on-premises management compared to cloud-based IT management and services.

Topics :
Managing Windows 10 in the Enterprise
Managing a Mobile Workforce
Supporting Devices in the Enterprise
Extending IT Management and Services to the Cloud
Lab : Planning for Windows 10 and Device Management in the Enterprise
Reading the scenario

Section 2: Deploying Windows 10 Enterprise Desktops
This section discusses the various deployment scenarios for Windows 10 and the considerations to keep in mind while performing these deployments. This module also explains how to deploy Windows 10 by using the Windows Assessment and Deployment Kit (WADK) and the Microsoft Deployment Toolkit (MDT). This module also explains how to maintain Windows 10 by using DISM and Windows Imaging and Configuration Designer (ICD). Additionally, it explains the different types of volume activation technologies and tools to manage activation.

Topics :
Overview of Windows 10 Enterprise Deployment
Customizing Enterprise Desktop Deployments
Deploying Windows 10 by Using MDT
Maintaining a Windows 10 Installation
Volume License Activation for Windows 10
Lab : Building a Reference Image by Using Windows Assessment and Deployment Kit (ADK) Tools
Configuring Custom Windows PE Boot Media
Creating a Custom Answer File by Using Windows SIM
Installing a Reference Computer by Using an Answer File
Preparing a Reference Computer by Using Sysprep
Capturing a Reference Computer
Lab : Using MDT to Deploy Windows 10 Desktops
Creating and Configuring an MDT Deployment Share
Creating a Task Sequence
Deploying a Windows 10 Image by Using MDT
Lab : Maintaining a Windows 10 Installation by Using Windows ICD
Creating and Configuring a Windows ICD Provisioning Package

Section 3: Managing User Profiles and User State Virtualization
This section discusses how to manage user profiles and user state using tools such as the User State Migration Tool (USMT) and User Experience Virtualization (UE-V).

Topics :
Managing User Profiles and User State
Implementing User State Virtualization by Using Group Policy
Configuring UE-V
Managing User State Migration
Lab : Configuring User Profiles and User State Virtualization
Configuring Roaming User Profiles and Folder Redirection
Implementing and Configuring UE-V
Lab : Migrating User State by Using USMT
Creating and Customizing USMT XML Files
Capturing and Restoring User State on a Target Computer

Section 4: Managing Desktop and Application Settings by Using Group Policy
This section discusses how to manage Group Policy inheritance, administrative templates, and common enterprise desktop settings. This module also explains how to apply Group Policy Preferences using targeting and filtering.

Topics :
Managing Group Policy Objects
Configuring Enterprise Desktops by Using Group Policy
Overview of Group Policy Preferences
Lab : Configuring Group Policy Objects and Settings
Managing Windows 10 by Using Group Policy
Lab : Using Group Policy Preferences to Manage Desktop Settings
Configuring Group Policy Preferences to Apply Drive and Printer Mapping

Section 5: Managing Windows 10 Sign-In and Identity
This section discusses the concept of identity and explains the methods to enhance identity security. This module also explains cloud identities and the use of Azure Active Directory in enterprise organizations.

Topics :
Overview of Enterprise Identity
Planning for Cloud Identity Integration
Lab : Integrating a Microsoft Account with a Domain Account
Signing up for a Microsoft Account
Connecting a Microsoft Account to a Domain Account
Lab : Joining Windows 10 to Azure Active Directory
Signing up for Office 365 and Azure Trial Subscriptions
Joining Windows 10 to Azure Active Directory

Section 6: Managing Data Access for Windows-based Devices
This section discusses how to provide secure access to company data. Solutions discussed include Device Registration (previous known as Workplace Join) and Work Folders. This module also explains how to configure and share data stored in Microsoft OneDrive.

Topics :
Overview of Data Access Solutions
Implementing Device Registration
Implementing Work Folders
Managing Online Data Using Cloud-Based Storage Solutions
Lab : Configuring Data Access for Non-Domain Joined Devices
Configuring Work Folders
Lab : Managing Data Access by Using OneDrive
Configuring OneDrive

Section 7: Managing Remote Access Solutions
This section discusses how to configure a virtual private network (VPN) and DirectAccess in Windows 10. This module also explains how to configure RemoteApp.

Topics :
Overview of Remote Access Solutions
Supporting DirectAccess with Windows 10
Configuring VPN Access to Remote Networks
Supporting RemoteApp
Lab : Implementing DirectAccess
Configuring the DirectAccess Server
Configuring DirectAccess Clients
Validating Remote Connectivity
Lab : Configuring RemoteApp
Creating an RD Sessiion Host Deployment
Installing and Publishing a Remote Application
Validating RemoteApp Functionality

Section 8: Managing Windows 10 Devices by Using Enterprise Mobility Solutions
This module provides an overview of the Enterprise Mobility + Security, Microsoft Azure Active Directory-Premium (Azure AD Premium), Azure Rights Management (Azure RMS), and Microsoft Intune.

Topics :
Overview of the EMS
Overview of Azure Active Directory Premium
Overview of Azure RMS
Overview of Intune
Lab : Implementing an Intune Subscription
Signing Up for an Intune Trial Subscription
Adding Intune Users

Section 9: Managing Desktop and Mobile Clients by Using Microsoft Intune
This section discusses how to install the Microsoft Intune client software and configure and assign Intune policies. It also explains how to create Mobile Device Management (MDM) policies and enroll mobile devices to Intune. Additionally, This section discusses how to use Intune to create and manage Windows Information Protection (WIP) policies.

Topics :
Deploying the Intune Client Software
Overview of Intune Policies
MDM by Using Intune
Overview of WIP
Lab : Installing the Intune Client Software and Configuring a Policy
Installing the Intune Client Software
Configuring Intune Policy Settings
Lab : Managing Mobile Devices Using Intune
Configuring and Enrolling Mobile Devices into Intune
Configuring a WIP Policy in Intune

Section 10: Managing Updates and Endpoint Protection by Using Microsoft Intune
This section discusses how to configure updates and Endpoint Protection settings and reports using Microsoft Intune.

Topics :
Managing Updates by Using Intune
Managing Endpoint Protection
Lab : Managing Updates and Endpoint Protection by Using Microsoft Intune
Configuring Updates in Intune
Configuring Endpoint Protection in Intune

Section 11: Application and Resource Access by Using Microsoft Intune
This section discusses how to use the Microsoft Intune Software Publisher to deploy applications to managed clients. This module also explains the use of certificate profiles, Wi-Fi profiles, and VPN profiles to control access to company resources.

Topics :
Application Management by Using Intune
The Application Deployment Process
Managing Access to Organizational Resources
Lab : Deploying Applications by Using Microsoft Intune
Publishing Applications for Deployment in Intune
Deploying and Monitoring Application Deployment
Lab : Managing Resource Access by Using Intune
Configuring Certificate Deployment in Intune
Configuring Conditional Access Policies

Section 12: Configuring and Managing Client Hyper-V
This section discusses how to create virtual switches, virtual hard disks, and virtual machines by using Client Hyper-V.

Topics :
Installing and Configuring Client Hyper-V
Configuring Virtual Switches
Creating and Managing Virtual Hard Disks
Creating and Managing Virtual Machines
Lab : Installing Client Hyper-V
Creating a Virtual Switch, a Virtual Hard Disk, and a Virtual Machine
Creating a Virtual Switch, a Virtual Hard Disk, and a Virtual Machine