Chapter 1

Deploy Windows

The MD-100 Windows 10 exam focuses on how to install Windows 10 efficiently and with the least amount of administrative effort. You need to understand how to plan and prepare the Windows 10 installation, along with the installation process itself, activation, and any potential issues along the way. You’ll be expected to know how to perform an in-place upgrade from another version of Windows and how to migrate user data, configure hardware devices, manage device drivers, and perform post-installation configuration. For users who operate Windows 10 using a different language, you will also be expected to know how to configure additional languages and regional settings.

Skills covered in this chapter:

Skill 1.1: Deploy Windows 10

Devices will be shipped with a ready-to-use version of Windows 10. For a number of reasons, you may want to replace it with a newer or different version of Windows. In a corporate environment, you may need to install Windows 10 on many devices, which requires careful consideration, planning, and preparation. This skill explores the requirements and preparations necessary for the deployment of Windows 10.

It is important to select the appropriate edition of Windows 10 for your organization. Windows 10 is available across many device types, including tablets, laptops, and desktop computers. Also, also it is available in multiple editions and in both 32-bit and 64-bit architecture versions. You need to choose the appropriate edition and version that provides the capabilities your users require.

After determining which edition you want to install, consider how best to deploy Windows 10. You can choose between simple interactive installations using local Windows 10 media, or you can deploy Windows 10 to your organization’s devices by using one of several deployment technologies.

Select the appropriate Windows edition

Windows 10 is available in several different editions, and you should choose the most appropriate version for your personal or business needs. The specific editions of Windows 10, listed in Table 1-1, are designed to address the varying needs of this diverse user base.

TABLE 1-1 Windows 10 editions

Edition

Features

Windows 10 Home

Designed primarily for home users with features such as:

  • Microsoft Edge, the new web browser

  • Continuum Tablet mode for touch-capable devices

  • Cortana, the new personal digital assistant

  • Windows Hello biometric sign-in

  • Virtual Desktops

  • Projecting To This PC

  • Activity History

  • Windows Ink

  • A number of built-in universal Windows apps, such as Photos, Maps, Mail, Calendar, Music, and Video

  • Supports maximum 128 GB of RAM

Note that in Windows 10 Home, you cannot control Windows feature and quality updates as was possible on earlier Windows versions; these updates are received and installed automatically.

Windows 10 Pro

Includes the same features as in Windows 10 Home but also provides:

  • Domain Join

  • Group Policy Management

  • Ability to join Azure Active Directory

  • BitLocker

  • Enterprise Mode Internet Explorer

  • Client Hyper-V

  • Remote Server Administration Tools For Windows 10

  • Assigned Access

  • Remote Desktop

  • Windows Update for Business

  • Enterprise Data Protection

  • Microsoft Store For Business

  • Support for 2 CPUs and maximum 2 TB of RAM

Windows 10 Pro for Workstations

Includes the same features as in Windows 10 Pro but also provides:

  • SMB Direct using RDMA (Remote Direct Memory Access)

  • ReFS (Resilient File System)

  • Licensed for installation on PCs using server-grade Intel Xeon and AMD Opteron processors, and up to 4 CPUs and maximum 6 TB of RAM

  • Persistent Memory using NVDIMM-N memory modules

  • Ultimate Performance power plan for desktop devices

Windows 10 Enterprise

Windows 10 Enterprise builds on the features of Windows 10 Pro and is available to Volume Licensing customers only. Windows 10 Enterprise provides additional features of relevance to larger organizations, including:

  • Always On VPN (introduced in the Windows 10 Anniversary Update)

  • DirectAccess

  • Windows To Go Creator (prior to the May 2020 update)

  • AppLocker

  • Support for BranchCache

  • Start Screen Control with Group Policy

  • Managed User Experience

  • Windows Defender Credential Guard

  • Windows Defender Application Control

  • Windows Defender Application Guard

  • Microsoft Application Virtualization (App-V)

  • Microsoft User Experience Virtualization (UE-V)

In addition to the ability to manage updates to Windows with Windows Update for Business, Enterprise customers can access the Long-Term Servicing Channel (LTSC) deployment version of Windows 10 Enterprise.

Windows 10 Enterprise LTSC

Long-Term Servicing Channel is a specialized edition of Windows 10 Enterprise that receives security and other important updates in the normal way but does not receive feature updates. This enables organizations to know that their environment will not change over time. Windows 10 Enterprise LTSC does not include built-in apps that are subject to change, including:

  • Chromium-based Microsoft Edge browser

  • Microsoft Store client

  • Cortana

  • Many built-in universal Windows apps

Windows 10 Education

Provides the same features as Windows 10 Pro and Windows 10 Enterprise but does not offer support for LTSC. Windows 10 Education is only available through academic Volume Licensing.

The Windows 10 in S mode is a mode of Windows 10 and not an edition. It is designed to be the safest and most stable version of Windows ever. Windows 10 in S mode is a limited, locked-down version of Windows 10. To reduce the total cost of ownership (TCO), you can only install applications from the Microsoft Store and browse the internet using the Microsoft Edge browser. Windows 10 in S mode allows the following usage:

  • Microsoft Edge only

  • Bing search engine

  • Microsoft Store apps only

  • Not able join Active Directory Domain Services (AD DS) domain

  • Azure AD Domain Join, which is available in Windows 10 Pro in S mode and Windows 10 Enterprise in S mode

PCs ship with one of three versions of Windows 10 in S mode:

  • Windows 10 Home in S mode

  • Windows 10 Professional in S mode

  • Windows 10 Enterprise in S mode

Users can freely opt to leave S mode—for example, to switch to Windows 10 Pro—by installing the Switch out of S mode app from the Microsoft Store. This action is a one-time decision—once you’ve taken the PC out of S mode, it cannot be put it back into S mode.

Note Windows 10 Business

Microsoft also provides a special business-focused license that can be applied to the Windows 10 Pro edition. This is called Windows 10 Business, and the upgrade license is included as part of Microsoft 365 Business Premium. You can upgrade Windows 7, 8, and 8.1 Professional to Windows 10 Pro and then apply the Windows 10 Business license. You cannot purchase the standalone version of Windows 10 Business edition; therefore, it is not listed in Table 1-1. To review further details about Microsoft 365 Business Premium, visit the Microsoft website at https://docs.microsoft.com/en-us/microsoft-365/business/support/microsoft-365-business-faqs?view=o365-worldwide.

Also, Microsoft has released Windows 10 Internet of Things (IoT) editions—Windows IoT Core and Windows IoT Enterprise. These can be used to operate small industrial devices, such as control devices and specialist industrial computing systems.

For businesses that require a long period of support for their IoT installations, Microsoft has released Windows 10 IoT Core Long-Term Servicing Channel (LTSC) together with Windows 10 IoT Core Services, which provides a subscription with access to 10 years of support for the IoT releases.

Need More Review? Learn More About The Windows 10 Editions

To find out more about these Windows 10 editions, visit the Microsoft website at https://www.microsoft.com/en-us/windowsforbusiness/compare.

Choose 32-bit or 64-bit versions

If you are installing Windows 10, you can choose between 32-bit and 64-bit versions of all desktop editions of Windows 10. Nowadays, you should choose 64-bit versions unless there is a compelling reason to use 32-bit versions, such as your hardware does not support the 64-bit architecture. As of this writing, nearly all devices are supplied with 64-bit versions of Windows 10 on 64-bit architecture.

Note Windows 10 On Arm

Microsoft also provides a special ARM version of Windows 10 that runs on PCs powered by ARM processors. Windows 10 on ARM runs all x86, ARM32, and ARM64 Universal Windows Platform (UWP) apps from the Microsoft Store. To find out more, visit the Microsoft website at https://docs.microsoft.com/en-us/windows/arm.

The various edition features described in Table 1-1 are applicable for both 32-bit and 64-bit versions. However, the 32-bit version of Windows 10 is no longer offered to original equipment manufacturers (OEMs) since Windows 10 version 2004. The majority of devices will ship with the 64-bit versions of Windows 10 as they provide a number of advantages, including the following:

  • Memory The 64-bit versions of Windows 10 can address more physical memory than 32-bit versions. Specifically, 32-bit versions are physically limited to just under 4 GB of RAM, whereas 64-bit versions of Windows are limited by the edition of Windows 10 installed.

  • Security Features such as Kernel Patch Protection, mandatory kernel-mode driver signing, and Data Execution Prevention (DEP) are available only in 64-bit versions of Windows 10.

  • Client Hyper-V This feature is only available on 64-bit versions of Windows 10. Your hardware must also support second-level address translation (SLAT).

  • Performance The 64-bit processors can handle more data during each CPU clock cycle. This benefit is only realized when running a 64-bit operating system.

Determine Windows 10 Edition requirements for particular features

A number of general and security features available in some editions of Windows 10 require specialist hardware or software configuration that you should know. This section covers how to:

  • Identify hardware and configuration requirements for general Windows 10 features

  • Identify hardware and configuration requirements for Windows 10 security features

General Features

These features provide general usability and functional improvements and include the following:

  • Client Hyper-V Enables you to create, manage, and run virtual machines that you can install with different guest operating systems to support, perhaps, earlier line-of-business (LOB) apps that will not run natively on Windows 10. Requirements of the Client Hyper-V feature are as follows:

    • A 64-bit version of either the Windows 10 Pro or Windows 10 Enterprise and Education edition.

    • A computer that supports SLAT.

    • Additional physical memory to support running the virtual machines. A minimum of 4 GB of memory is recommended.

  • Cortana You can use Cortana as a digital assistant to control Windows 10 and perform tasks such as writing email, setting reminders, and performing web searches. Because Cortana is voice-activated and -controlled, your Windows 10 device requires a microphone.

  • Continuum Windows 10 is available on a variety of devices types and form factors. With Continuum, Microsoft endeavors to optimize the user experience across device types by detecting the hardware on your device and changing to that hardware. For example, Windows 10 determines when you are using a non-touch desktop computer and enables traditional interaction with the operating system by use of a mouse. For users of hybrid devices, such as the Microsoft Surface Pro, when you disconnect a keyboard cover, Windows 10 switches to Tablet mode.

  • Miracast Windows 10 uses Miracast to connect your Windows device wirelessly to an external monitor or projector. You will need a Miracast-compatible external monitor or projector to use this functionality. If your display device doesn’t support Miracast, you use a Miracast display adapter that supports Windows Display Driver Model (WDDM), such as a Microsoft Wireless Display adapter, and a Wi-Fi adapter that supports Wi-Fi Direct.

  • InstantGo Included with computers designed for connected standby, InstantGo allows network connectivity in standby mode. This way, the device can receive updates, mail, and Skype calls even with the screen turned off.

  • Touch Windows 10 is a touch-centric operating system. Although you do not need touch to use Windows 10, some features are made more usable through the use of touch. To use touch, your tablet or display monitor must support touch.

  • OneDrive Users of OneDrive are entitled to 5 GB of free online storage. OneDrive provides this storage. OneDrive functionality is built into the Windows 10 operating system, and it is easy to use. You must have a Microsoft account to use OneDrive.

  • Sync your settings When you use more than one Windows 10 device, it is convenient for your user settings to move with you to the new device. You can use the Sync Your Settings feature of Windows 10 to ensure that settings such as theme, Internet Explorer and Edge settings (including favorites), passwords, language, and ease of access are synchronized between your devices. You must have a Microsoft account to use this feature.

Note Active Stylus Support

Some touch devices have screens that support active stylus input. Active styluses provide for pressure-sensitive input and enable you to use your device for accurate note taking and drawing. Passive styluses are supported on all touch devices but do not support these more advanced features.

Security Features

Windows 10 also has a number of features that can help make your device more secure, including:

  • BitLocker Drive Encryption A Trusted Platform Module (TPM) version 1.2 or higher works with BitLocker to store encryption keys. This helps protect against data theft and offline tampering by providing for whole-drive encryption. Requirements for BitLocker are:

    • A device with either Windows 10 Pro or Windows 10 Enterprise installed.

    • Optionally, you should use a TPM. Using a TPM with BitLocker enables Windows to verify startup component integrity. You do not require a TPM in your computer to use BitLocker, but using a TPM does increase the security of the encryption keys.

  • Windows Device Health Attestation With the increase in use of users’ own devices, it is important to ensure that Windows 10 devices connecting to your organization meet the security and compliance requirements of your organization. Device health attestation uses measured boot data to help perform this verification. To implement device health attestation, your Windows 10 devices must have TPM version 2.0 or higher.

  • Secure Boot Secure Boot protects the platform until the Windows kernel is loaded. When Secure Boot is enabled, you can only start the operating system by using an operating system loader that is signed using a digital certificate stored in the UEFI Secure Boot signature database. This helps prevent malicious code from loading during the Windows 10 start process. Requirements for Secure Boot include:

    • Computer firmware that supports Unified Extensible Firmware Interface (UEFI) v2.3.1 Errata B, and for which the Microsoft Windows Certification Authority is in the UEFI signature database

  • Multifactor authentication (MFA) This is a process that provides user authentication based on at least two factors: something the user knows, such as a password, and something the user has, such as a biometric feature (fingerprint or facial features), or a device, such as a cell phone. Requirements for two-factor authentication are:

    • Biometric devices that support the Windows Biometric Framework, such as a fingerprint reader, a smartphone, or an illuminated infrared camera using Windows Hello

    • A biometric attribute, such as facial recognition, iris detection, or a fingerprint

Note Windows Hello

Windows Hello for Business provides enterprises with the tools and policies to implement and manage multifactor authentication within their organization’s infrastructure.

  • Virtual Secure Mode This feature moves some sensitive elements of the operating system to trustlets that run in a Hyper-V container that the Windows 10 operating system cannot access. This helps make the operating system more secure. Currently, this feature is only available in the Windows 10 Enterprise edition.

  • Virtual Smart Card This feature offers comparable security benefits in two-factor authentication to that provided by physical smart cards. Virtual smart cards require a compatible TPM (version 1.2 or later).

Perform a clean installation

Although most computers are purchased preinstalled with Windows 10, many organizations prefer to reinstall the operating system to avoid the additional software that OEMs often include with their computers. This software is often referred to as bloatware and can include utilities and tools or trial versions of software such as Microsoft 365 or antispyware software that are unwanted.

As shown in Table 1-2, there are several methods of installing Windows 10 on a device, and you should familiarize yourself with each prior to taking the exam.

TABLE 1-2 Windows installation methods

Installation Method

Description

Install from DVD

Windows 10 is no longer shipped on DVDs. You can use the downloadable media obtained from the Windows 10 website, Microsoft Volume Licensing Service Center (VLSC), or Visual Studio Subscriptions and burn it to DVD media.

Install from USB

Use this method to install the operating system on one computer at a time. Installation from a USB device is quicker than using a DVD. You must modify BIOS or UEFI settings to enable booting from USB.

Install from Windows Deployment Services

Requires Windows Deployment Services (WDS), which is a role installed on Windows Server 2019. WDS also requires Dynamic Host Configuration Protocol (DHCP) on the network. The target computer network card must support Preboot Execution Environment (PXE). Using WDS allows automated installation of system images and deployment of Windows to multiple computers simultaneously by using multicast.

Install an image from Windows Preinstallation Environment (Windows PE)

Boot the device by using Windows PE, and then use one of the following deployment options.

  • Use Deployment Image Servicing and Management (DISM) to apply the Windows image.

  • Use the Microsoft Deployment Toolkit (MDT) deployment solution.

  • Use the System Center Configuration Manager (Current Branch) deployment solution (Configuration Manager).

Both MDT and Configuration Manager are enterprise-level solutions that enable you to deploy Windows to hundreds or thousands of devices at once and configure lite-touch installation (LTI) or zero-touch installation (ZTI) for either minimal user interaction or no user interaction, respectively, during the deployment.

Install over the network

Start the computer by using Windows PE and connect to a copy of the installation files stored on a shared network folder. You would use this method when you are unable to use a USB device, WDS, MDT, or Configuration Manager.

Note Create Windows 10 Installation Media

To obtain the latest version of Windows 10 that you can use to upgrade a device or download to create installation media on a DVD or USB, visit https://www.microsoft.com/software-download/windows10.

If you intend to start your PC from your installation media, such as a USB drive, you may need to configure your BIOS or UEFI to allow this. You can do so by modifying the BIOS or UEFI setting or choosing a custom boot order during the startup process.

During a clean installation on a new hard drive, perform the following steps to install Windows 10:

  1. Insert your installation media and start your computer.

  2. At the Windows Setup screen, choose the appropriate language and regional settings and then select Next.

  3. In the Windows Setup window, select Install Now.

  4. In the Activate Windows dialog box, enter your product key or select I Don’t Have a Product Key, and then select Next.

  5. On the Applicable notices and license terms page, accept the License Terms and select Next.

  6. On the Which type of installation do you want? page, choose Custom: Install Windows only (Advanced).

  7. On the Where do you want to install Windows? page, select Drive 0 Unallocated Space and select Next.

Note Existing Operating System Drive

For a clean installation of Windows 10 on a device on which an operating system is already installed, erase this partition by either formatting or deleting any partitions present during the setup process.

The installation begins. To install Windows 10 for personal use, perform the following steps:

  1. On the Let’s start with region. Is this right? page, select the regional settings.

  2. On the Is this the right keyboard layout? page, select the keyboard layout settings.

  3. On the Want to add a second keyboard layout? page, add a layout or select Skip.

  4. On the Let’s connect you to a network page, select a network connection.

  5. On the How would you like to set up? page, choose Set up for personal use and select Next.

  6. On the Let’s add your account page, create a local offline account by selecting Offline account. Or you can enter your Microsoft account and password or select Create account.

  7. On the Create a PIN page, select Create PIN and enter a PIN.

  8. On the Choose privacy settings for your device page, choose your settings and then select Accept.

  9. On the Use your phone from your PC page, select Skip for now or Remind me later.

  10. On the Back up your files with OneDrive page, select Next. Or select Only save files to this PC to skip this step.

  11. On the Make the most of your 365 with a free Microsoft 365 trial page, select I have a product key, select No thanks, or select Try for free.

  12. On the Let Cortana help you get things done page, choose whether to enable Cortana. The remainder of the setup process will continue. You are now signed in.

Depending on your hardware performance, Windows should complete the clean installation process within 10–15 minutes, and the machine will restart several times. Nowadays most devices are fitted with a solid-state drive (SSD), which will outperform slower traditional hard drives. During the final stages of installation, Windows installs device drivers specific to the hardware.

Identify an installation strategy

You can choose among a number of methods when considering how best to install Windows 10. Generally, the size of your organization and the number of devices that you must install will determine the strategy that you select. The available strategies have different prerequisites, and some might require additional software components and configuration before you can begin installing Windows 10. Table 1-3 describes the strategies available.

TABLE 1-3 Windows 10 installation strategies

Deployment option

Description

High-touch retail media deployment

Suitable for small organizations with few devices to install with Windows 10. Requires no specialist IT skills or additional services or components. All that is required is one or more copies of the Windows 10 installation media, which can be provided on a DVD or on a USB storage device, or even from a shared folder on a network file server.

Low-touch deployment

Suitable for larger organizations that intend to install a few hundred devices, using limited installer intervention. Because the strategy relies on the use of image deployment and additional services, such as Windows Deployment Services (WDS) and, optionally, Microsoft Deployment Toolkit (MDT), some specialist IT skills are also required.

Zero-touch deployment

For very large organizations with thousands of devices. Requires a considerable investment in IT skills to facilitate this strategy. Also requires the use of MDT and System Center Configuration Manager (Current Branch) to deploy Windows 10 using no installer intervention.

Determine the appropriate installation media

Windows 10 uses an image-based installation and deployment model, with the Windows operating system installation files packaged inside an image file that is used as an installation source during the installation process.

A default installation image, Install.wim, is provided on the installation media in the Sources folder. Although you can choose to use this default image, you can also configure it to create custom installation images that better suit the needs of your organization. Customizations might include:

  • Selecting a particular edition of Windows 10

  • Choosing which Windows features are enabled

  • Including Wi-Fi profiles and virtual private network (VPN) profiles

  • Adding universal apps or desktop applications

The Windows Assessment and Deployment Kit (Windows ADK) contains a number of tools that you can use to create and manage Windows 10 images to support your installation needs:

  • DISM The Deployment Image Servicing and Management (DISM) command-line tool enables you to capture, deploy, and manage Windows images. You can use the tool to install, uninstall, configure, and update Windows features, packages, drivers, and international settings in a WIM file or VHD, which can be either online or offline.

  • Windows Configuration Designer This tool, as shown in Figure 1-1, enables you to provision Windows 10 features and runtime settings by using provisioning packages (with the extension .ppkg) to quickly configure a Windows 10 device without having to install a new image.

This screenshot shows the Windows Configuration Designer. The Start page tab is visible with Create on the left and Recent Projects on the right.

FIGURE 1-1 Windows Configuration Designer

You can then deploy these custom images and packages to target computers within your organization that require Windows 10. You can perform this deployment in a number of ways and by using a variety of deployment technologies and tools, depending on the installation strategy you previously selected. Options include:

  • DVD installation You can create installation DVD media, or you can use a customized image that you created. The device you are installing to requires an optical drive.

  • USB installation You can use the default or custom Windows images. This method is quicker than using a DVD, and although it does not require an optical drive, you might need to reconfigure your computer’s BIOS or UEFI firmware settings to support startup from USB.

  • WDS deployment To use this method, Dynamic Host Configuration Protocol (DHCP) must be available to network clients on your network, and your target computers running Windows 10 must support Preboot Execution Environment (PXE). Combined with unattended answer files and custom images, you can use this method to deploy multiple images to multiple computers at the same time by using multicast.

  • Image-based installation By starting your computer into Windows Preinstallation Environment (Windows PE), you can use DISM to apply an image locally to the target computer. Alternatively, you can use MDT and System Center Configuration Manager (Current Branch) to deploy the image and desktop apps to the target devices.

  • Shared network folder installation You can use Windows PE to start your computer and map a network drive to installation files and images on a network file shared folder. This method is comparatively inefficient and has been replaced by the other methods previously described.

  • Windows SIM The Windows System Image Manager (Windows SIM) shown in Figure 1-2 enables you to create installation answer files for use in automated deployments. These answer files contain the configuration options used to install Windows 10. You can then associate these answer files with a local copy of the installation media, perhaps on a USB memory stick to provision Windows 10 using a semi-automated interactive installation.

This screenshot shows the Windows System Image Manager. The file named autounattend.xml is open. The screen is split into five parts, with the Distribution Share on the top left, the Windows Image in the lower-left side, the Answer File in the center, the Display Properties on the right side, and the Messages section displayed in the bottom. Within the Answer File section, the Display item is highlighted

FIGURE 1-2 Windows System Image Manager

Note Naming the Answer File

If you copy the answer file you create by using Windows SIM to the location of the installation media, name the file autounattend.xml. Windows setup knows to search for this named file in the root of the installation media.

  • Windows PE Windows PE (WinPE) is used to start a computer that is being deployed with Windows 10. It enables access to Windows file systems and is, in essence, a small Windows operating system. You can use the generic Windows PE provided on the product DVD, or you can create your own using tools found in the Windows ADK to address your specific deployment needs. You can then launch Windows PE from a DVD or a USB memory stick or across the network using PXE.

Note Download and Install the Windows ADK

A Windows ADK for Windows 10, version 20H2 is not available and will not be released. You should use the Windows ADK for Windows 10, version 2004 to deploy Windows 10, version 20H2. To obtain the latest version of the Windows Assessment and Deployment Kit, you should visit https://docs.microsoft.com/en-us/windows-hardware/get-started/adk-install.

Perform an in-place upgrade

The most efficient method of installing Windows 10 on existing computers is to perform an in-place upgrade. This method is fully supported and recommended by Microsoft.

It is important to understand the terminology used when describing the process of upgrading to Windows 10. Upgrade is often used generically to explain the licensing process of upgrading from an earlier version of Windows to a later version. You can also upgrade the edition of Windows that replaces an existing operating system, such as Windows 8.1 to Windows 10. On a semi-annual basis, Windows 10 will automatically perform an in-place upgrade of Windows 10 to the latest version of Windows 10.

When manually upgrading to Windows 10, you update the existing operating system and perform what is called an in-place upgrade on existing hardware. All user data and settings are retained. For most users, this is now the recommended procedure.

Supported upgrade paths

Performing an in-place upgrade can be the simplest option, especially when you have only a few computers to upgrade. However, you cannot perform an in-place upgrade on computers running a Windows version that does not share the same feature set as the edition of Windows 10 that you want to install.

Table 1-4 lists the supported upgrade paths based on the Windows edition.

TABLE 1-4 Supported upgrade paths to Windows 10

Earlier Windows Edition

Windows 10 Home

Windows 10 Pro

Windows 10 Enterprise

Windows 8/8.1

X

Windows 8/8.1 Pro

X

Windows 8/8.1 Enterprise

X

Windows 7 Starter

X

Windows 7 Home Basic

X

Windows 7 Home Premium

X

Windows 7 Professional

X

Windows 7 Ultimate

X

Windows 7 Enterprise

X

You will notice from Table 1-4 that direct upgrades between different editions are not supported. That is, you cannot upgrade directly from Windows 7 Home to Windows 10 Enterprise.

Note Upgrading From Windows 7 Home

If you want to upgrade from Windows 7 Home to Windows 10 Enterprise, you can achieve that in a two-stage process. First, upgrade to Windows 10 Home and then upgrade to Windows 10 Enterprise.

After you have determined whether your upgrade path is supported, choose how to perform the process of upgrading to Windows 10.

Considerations For Performing An In-Place Upgrade

When determining whether to use the in-place upgrade method to upgrade to Windows 10, consider the following factors:

  • It is a simple process and is ideal for small groups of computers.

  • It provides for rollback to the earlier version of Windows.

  • User and application settings and user data files are retained automatically.

  • Installed applications are retained; however, retained applications might not work correctly after upgrading from an earlier Windows version.

  • You do not need to provide for external storage space for data and settings migration.

  • It does not allow for edition changes and is available only on supported operating systems (see Table 1-4).

  • It does not provide the opportunity to start with a clean, standardized configuration.

Perform an in-place upgrade to Windows 10

As you have seen, there are three ways to upgrade to Windows 10. The recommended method by Microsoft is to use an in-place upgrade. This is the method that will be used for all future upgrades of Windows 10 using Windows Update. Using an in-place upgrade enables you to retain all the users’ applications, data files, and user and application settings. During the in-place upgrade, the Windows 10 setup program automatically retains these settings.

Important Back Up Data Files

It is important to perform a backup of user data files that may be stored locally prior to launching an in-place upgrade to guard against possible data loss.

You perform an in-place upgrade to Windows 10 when your users will continue to use their existing computers. To perform an in-place upgrade, complete the following procedure:

  1. Evaluate the user’s computer to determine that it meets minimum hardware requirements for Windows 10 and that Windows 10 supports all hardware.

  2. Verify that all applications work on Windows 10.

  3. Optionally, back up the user’s data files.

  4. Run the Setup.exe program from the root of the Windows 10 installation media.

  5. Choose Upgrade when prompted and complete the setup wizard.

Note Upgrading Devices Within A Corporate Environment

If your existing operating system is unstable or runs slowly, you may not want to perform an in-place upgrade to Windows 10. If the device is in a corporate environment and you previously deployed the earlier version of Windows using an automated deployment method, you can re-deploy the operating system again. Once complete, allow the corporate apps and settings to be applied and then perform an in-place upgrade to Windows 10. This two-stage process will take longer to perform, but it can provide an alternative method of deploying Windows 10 until you evaluate your deployment strategy.

The in-place upgrade process works well and is now the recommended deployment method Microsoft suggests for upgrading devices that run Windows 7 or Windows 8.1 to Windows 10.

Upgrade Windows 10 using enterprise tools

An enterprise that needs to upgrade existing devices will typically use tools that allow the process to be automated, with multiple devices being upgraded simultaneously.

Two of the most common tools for an enterprise to use are Windows Deployment Services (WDS) and Microsoft Deployment Toolkit.

Windows Deployment Services

Windows Deployment Services is a Windows Server 2019 role that allows you to deploy Windows 10 within an on-premises environment. WDS can set up new clients with a network-based installation remotely, without needing to install directly from CD or DVD media. The Windows 10 image to be deployed can be customized and added to a server running WDS, which then transmits the image to clients using multicast functionality across the network.

WDS is installed on a Windows 2019 server and requires several prerequisites to be in place, including AD DS, DHCP, and DNS. When you deploy images using WDS you can also manage device drivers that will be needed by the client, though you are more likely to perform driver management through either MDT or Configuration Manager because these deployment tools offer more flexibility but with an increased level of complexity.

Microsoft Deployment Toolkit (Mdt)

MDT is a free, fully supported deployment toolkit from Microsoft. In addition to the tools required to deploy Windows 10, MDT provides end-to-end guidance and best practices guidelines that you can use to plan, build, and deploy Windows operating systems. MDT builds on top of the core deployment tools in the Windows ADK and can be fully integrated with Configuration Manager to customize, capture, and deploy images, applications, and device drivers to devices.

At the core of MDT are Task Sequences that allow you to automate each stage of an image capture and subsequent deployment. Because each item within the Task Sequence, as shown in Figure 1-3, can be independently configured you have a huge amount of flexibility and control over each stage of the processes.

This is a screenshot of the MDT Task Sequence showing many tasks listed on the left side with the Gather task selected. On the right side of the screen are two tabs, Properties (selected) and Options.

FIGURE 1-3 MDT Task Sequence

MDT allows you to deploy images using either a Lite Touch or Zero Touch method. Lite Touch and Zero Touch are names of the two solutions, and both can be fully automated and used with the standalone MDT solution (Lite Touch) or integrated with Configuration Manager (Lite Touch and Zero Touch).

A Lite Touch installation requires someone on the remote computer to boot from a boot image. After the boot image is started, the entire installation process for the operating system and apps can be automated. With Zero Touch you utilize the tools within Configuration Manager current branch to deploy to a device. Devices with a BIOS and network card that support Wake-on-LAN can be sent a “Magic Packet” across the network that allows it to be powered on or awakened from standby. The device then receives the image and completes the installation completely unattended.

Note Get Started With MDT

The detailed capabilities of the MDT and the Windows Assessment and Deployment Kit (Windows ADK) are beyond the scope of this book. If you need to deploy hundreds or even thousands of devices within an on-premises environment, consider using MDT. You can review an overview of the features, components, and capabilities of the Microsoft Deployment Toolkit by visiting https://docs.microsoft.com/windows/deployment/deploy-windows-mdt/get-started-with-the-microsoft-deployment-toolkit.

Upgrade using installation media

An enterprise will normally obtain Windows 10 media through the volume licensing channel and can download it from the Volume Licensing Service Center (VLSC) at https://www.microsoft.com/licensing/servicecenter/default.aspx. VLSC media can use either a Multiple Activation Key (MAK) or Key Management Service (KMS), which is used during the installation process and is tied to the enterprise license agreement with Microsoft.

Alternatively, purchased retail media can be used, which is supplied on a USB thumb drive or by a direct download from the online Microsoft Store.

Another option is to use the Media Creation Tool (MCT), which generates a ready-to-use, bootable USB flash drive. You can also download an ISO file that can be used for the installation, which would need to be burned to a writable DVD. Media created with the MCT cannot be used for upgrading a Windows Enterprise edition client. When you run the MCT, when prompted on the What Do You Want To Do? page, select Create Installation Media and then select Next.

Note Media Creation Tool (MCT)

You can download the MCT at https://www.microsoft.com/software-download/windows10.

If you are trying to use the wrong media or if you are trying to upgrade from an unsupported operating system, there should be an entry such as the following:

Info [windeploy.exe] OEM license detected, will not run SetupComplete.cmd

With all upgrades, you must ensure that you understand the requirements for a successful upgrade, such as having at least 2 GB of RAM and enough disk space. On the exam, you might face scenarios in which you are asked to upgrade from one architecture to another architecture that is not supported. You may be presented with the current system drive having insufficient disk space. To resolve disk space issues, you could attempt one of the following resolutions to complete the upgrade:

  • Run the Disk CleanUp Wizard, remove any unwanted files, and empty the Recycle Bin.

  • Uninstall apps, files, and language packs that you do not need.

  • If possible, expand the volume by using the Disk Management tool.

  • Move personal files off the system drive and onto another drive or external drive.

If the system fails during the upgrade due to a compatibility issue, you can troubleshoot the cause by reviewing the setupact.log and setuperr.log files found at C:$Windows.~BTSourcespanther. You will need to grant yourself read permissions to the log file to open it. Some of the most common codes are shown in Table 1-5.

TABLE 1-5 Setuperr.log errors relating to upgrading

Error Code

Description

CsetupHost::Execute result = 0xC1900200

PC not meeting the system requirements for Windows 10.

CsetupHost::Execute result = 0xC190020E

Insufficient free hard drive space.

CsetupHost::Execute result = 0xC1900204

Migration choice (auto upgrade) not available—wrong Windows 10 SKU or architecture.

CsetupHost::Execute result = 0xC1900208

Compatibility issues found (hard block).

CsetupHost::Execute result = 0xC1900210

No issues found.

If you want to check the system for compatibility only, you can run Setup.exe with a command-line switch, which will check for compatibility but not perform the actual upgrade. The following command is an example:

Setup.exe /Auto Upgrade /Quiet /NoReboot /DynamicUpdate Disable /Compat ScanOnly

Windows 8.1 and later editions of Windows support mounting an ISO disk image directly in File Explorer. You can download the Windows 10 ISO and upgrade Windows 8.1 without first having to create installation media such as a DVD or bootable USB. For Windows 7, you must use bootable media, extract the files contained in the ISO, or use a third-party tool to mount the ISO.

A major advantage of upgrading rather than performing a clean installation (sometimes referred to as a wipe-and-load scenario) is that all the applications, settings, and data on the PC are retained during an upgrade. This often results in a much quicker process, and the device can be returned to the user in the shortest possible time.

Need More Review? Windows 10 Enterprise: FAQ For It Professionals

This Microsoft resource is useful to obtain answers to common questions about installation for Windows 10 Enterprise. Visit https://docs.microsoft.com/windows/deployment/planning/windows-10-enterprise-faq-itpro#administration.

As part of the pre-upgrade checks, Windows 10 will validate the following:

  • Whether UEFI is used (UEFI v2.3.1 or later is required for Secure Boot).

  • System Host is not configured to boot from VHD.

  • The system is not installed as a Portable Workspace (for example, using Windows To Go).

Details of the setup compatibility checks can be reviewed in the log file found at C:$WINDOWS.~BTSourcesPanthersetupact.log. The installation process proceeds in the same way as the in-place upgrade using Windows Update.

Migrate user data

With the rapid adoption of Microsoft 365, more data than ever before is now stored in cloud-based storage such as OneDrive for Business and SharePoint Online. Despite this trend, file server–based shared storage and local storage is still the most common data storage location for businesses.

Both cloud-based and server-based storage data backup and migration are outside of the scope of this exam, but you need to know how enterprises can migrate both user data and Windows settings from an earlier version of Windows to Windows 10. The procedure for migrating user data has not changed over the years, but you will be expected to understand the process.

Migrate from previous versions of Windows

The amount of user affinity with their devices is often overlooked by support professionals. If allowed, users can invest significant time and effort to customize and personalize their working environment, and this can include the Windows operating system and applications. When upgrading from an older operating system, it is very common for the user to be presented with a new device running the new version of Windows after the old device is removed. This can sometimes cause significant loss of productivity while the user becomes familiar with the updated operating system and reconfigures settings to their preferences.

The level of user personalization of the device can include the following:

  • Desktop appearance, sounds, themes, and backgrounds

  • Start menu customization

  • Icons and file associations

  • Files and folders stored locally

  • Device and power settings

  • Application settings, such as autotype and template locations

Migration strategies

You perform a migration to Windows 10 when your users have new computers on which to install Windows 10 and you want to preserve settings and data from their old computers. During the process, you perform the following high-level procedures:

  1. Verify that all existing required applications work on Windows 10.

  2. Ensure that the appropriate edition of Windows 10 is installed on the user’s new computer.

  3. On the new computer, install the required applications.

  4. Back up the user’s data files and settings from the old computer using User State Migration Tool (USMT).

  5. Restore the user’s data files and settings on the new computer using USMT.

You can use either a side-by-side migration or a wipe-and-load migration strategy to perform a migration. These migration scenarios are summarized as follows:

  • A side-by-side migration In this scenario, the source and destination computers for the upgrade are different machines. You install a new computer with Windows 10 and then migrate the data and most user settings from the earlier operating system to the new computer.

  • A wipe-and-load migration In this scenario, the source and destination computer are the same. You back up the user data and settings to an external location and then install Windows 10 on the user’s existing computer. Afterward, you restore user data and settings.

Perform A Side-By-Side Migration

When you opt to use the side-by-side migration strategy, illustrated in Figure 1-4, use the following procedure to complete the task:

  1. Either obtain a computer with Windows 10 preinstalled or install Windows 10 on a new computer. When Setup.exe prompts you, choose Custom (Advanced). This is the destination computer.

  2. Install the same applications on the destination computer as are presently on the source computer.

  3. Create an external intermediate storage location, such as a file server–shared folder or an external hard drive, for the storage of user data and settings. This storage must be accessible from both the source and destination computers.

  4. Use USMT to collect the user’s data and settings from the source computer and store them to the external intermediate store.

  5. Use USMT to collect the user’s data and settings from the external intermediate store and install them in the destination computer.

This is a diagram that shows the Windows 7 desktop PC on the left side as the source computer, arrows moving left to right, and the Windows 10 desktop PC on the right side receiving the user state.

FIGURE 1-4 Side-by-side migration to Windows 10

Perform A Wipe-And-Load Migration

When you opt to use the wipe-and-load migration strategy, illustrated in Figure 1-5, use the following procedure to complete the task:

  1. Create an external storage location, such as a file server–shared folder or an external hard drive, for the storage of user data and settings.

  2. Use USMT to collect the user’s data and settings and store them in the external location.

  3. Install Windows 10 on the existing computer. When Setup.exe prompts you, choose Custom (Advanced).

  4. Reinstall the applications on the computer.

  5. Use USMT to restore the user’s data and settings from the external location.

This diagram shows the source and destination computer on the left side and the Intermediate Store on the right, with arrows moving the user state between the two sides.

FIGURE 1-5 Wipe-and-load migration to Windows 10

Considerations For Performing A Migration

When determining whether to use one of the two migration methods outlined to upgrade to Windows 10, consider the following factors:

  • You have an opportunity to create a clean installation, free from remnant files and settings.

  • You can reconfigure the existing disk partitions.

  • You can upgrade to any Windows 10 edition, regardless of the earlier Windows edition.

  • Migration is a more complex process, and you must use migration tools such as USMT to migrate user data and settings.

  • You need to provide storage space for user settings and files to be migrated.

  • Applications are not retained, and you must manually reinstall these.

Perform a user state migration

When computers are being replaced or refreshed on a large scale, the loss of user productivity can be significant. In this scenario, you can use USMT version 10, which is available as part of the Windows ADK.

The Windows ADK is available from the following Microsoft website at https://docs.microsoft.com/windows-hardware/get-started/adk-install.

User state migration is performed in two phases as follows:

  1. Settings and data are captured (collected) from the source computer and stored in a secure migration store using the ScanState.exe tool.

  2. Captured settings and data are restored on the destination computer, using the LoadState.exe tool.

USMT is a collection of the following three command-line tools that can be scripted to capture and migrate data efficiently and securely; it is intended for performing large-scale automated deployments:

  • ScanState.exe

  • LoadState.exe

  • UsmtUtils.exe

You choose which data is captured, and these settings are stored in migration XML files as follows:

  • MigApp.xml

  • MigDocs.xml

  • MigUser.xml

  • Custom XML files that you can create

The XML files provide the migration rules that USMT needs to process.

You can also create a Config.xml file that is used to specify files or settings, which will be excluded from the migration.

Important Install Applications

USMT does not migrate applications; only the supported applications’ settings are migrated. Therefore, any required applications must be already installed on the destination computer so that the captured app settings can be reinstated.

As part of both migration strategies, you must migrate user data and settings to the destination computer. Consequently, it is important to determine where these data and settings reside. The types of data that USMT can capture and migrate are shown in Table 1-6.

TABLE 1-6 Data types accessible by USMT

Data Type

Example

Description

User data

Documents, video, music, pictures, desktop files, Start menu, Quick Launch settings, and Favorites

Folders from each user profile.

Shared Documents, Shared Video, Shared Music, Shared Desktop files, Shared Pictures, Shared Start menu, and Shared Favorites

Folders from the Public profiles.

File

USMT searches fixed drives, collecting files that have any of the file name extensions that are defined in the configuration XML file.

Access control lists (ACLs)

USMT can migrate the ACL for specified files and folders.

Operating system components

Mapped network drives, network printers, folder options, users’ personal certificates, and Internet Explorer settings

USMT migrates most standard operating system settings.

Supported applications settings

Microsoft Office, Skype, Google Chrome, Adobe Acrobat Reader, Apple iTunes, and more

USMT migrates settings for many applications, which can be specified in the MigApp.xml file.

The version of each application must match on the source and destination computers.

With Microsoft Office, USMT allows migration of the settings from an earlier version of an Office application.

Need More Review? USMT 10.0 Overview

This Microsoft resource provides an in-depth review of USMT, usage considerations, and in-depth references. Visit https://docs.microsoft.com/en-us/windows/deployment/usmt/usmt-overview#.

The following settings are not migrated when you use USMT:

  • Local printers, hardware-related settings

  • Device drivers

  • Passwords

  • Customized icons for shortcuts

  • Shared folder permissions

  • Files and settings, if the operating systems have different languages installed

After you have installed the USMT included in the Windows ADK, you have the components described in Table 1-7.

TABLE 1-7 USMT components

Component

Description

ScanState

Scans a source computer and collects files and settings, writing them to a migration store. (The store file can be password protected and can be compressed and encrypted if required, although you cannot use the /nocompress option with the /encrypt option.) You can turn off the default compression with the /nocompress option.

LoadState

Migrates the files and settings from the migration store to the destination computer.

USMTUtils

Compresses, encrypts, and validates the migration store files.

Migration XML files

MigApp.xml, MigUser.xml, or MigDocs.xml files, and custom XML files USMT uses to configure the process.

Config.xml

Used with /genconfig to exclude data from a migration.

Component manifests

Controls which operating system settings are to be migrated. These are specific to the operating system and are not modifiable.

Need More Review? User State Migration Tool Command-Line Syntax

To review further details about using USMT or the syntax of the ScanState and LoadState commands, refer to the Microsoft website at https://docs.microsoft.com/windows/deployment/usmt/usmt-command-line-syntax.

To initiate the collection of the files and settings from the source computer, use the following steps:

  1. Ensure that you have a backup of the source computer.

  2. Close all applications.

  3. Open an elevated command prompt, and run ScanState using this command:

    ScanState \remotelocationmigrationmystore /config:config.xml / i:migdocs.xml
    /i:migapp.xml /v:13 /l:scan.log
    
  4. Run UsmtUtils with the /verify switch to ensure that the migration store is not corrupted, using UsmtUtils /verify C:mystorestorename.img.

  5. On the destination computer, install the operating system, install any applications that were on the source computer, and then close any open applications.

  6. Run the LoadState command, specifying the same XML files that you used when you ran ScanState using this command:

    LoadState \remotelocationmigrationmystore /config:config.xml / i:migdocs.xml
    /i:migapp.xml /v:13 /l:load.log
    
  7. Restart the device and verify whether some of the settings have changed.

Note USMT Tools

You can find the USMT tools within the C:Program Files (x86)Windows Kits10Assessment and Deployment KitUser State Migration Tool folder on your computer. You need to use the tools that match your architecture (amd64, arm64, and x86).

You can also use ScanState to migrate user settings from an offline Windows system, including the Windows.old folder. A Windows.old folder is created when you perform an in-place upgrade of a modern version of Windows to Windows 10. The ability to access user settings contained within the offline Windows.old folder can be advantageous in the following scenarios:

  • Improved performance if the Windows.old folder is local

  • Simplified end-to-end deployment process by migrating data from Windows.old by enabling the migration process to occur after the new operating system is installed

  • Improved success of migration, because files will not be locked for editing while offline

  • The ability to recover and migrate data from an unbootable computer

  • The flexibility to perform the migration at any time

Need More Review? USMT Technical Reference

You can find the technical reference relating to USMT 10 at https://docs.microsoft.com/windows/deployment/usmt/usmt-technical-reference.

Configure Windows for additional regional and language support

When Windows 10 was released, it offered support for 111 languages, spanning 190 countries and regions. You can download any of the additional languages for Windows 10, which allows users to view menus, dialog boxes, and other user interface items in their preferred languages.

To add an input language to your device, perform the following steps:

  1. Open Settings > Time & Language > Language.

  2. Under Language, select Add A Language.

  3. Select the language you want to use from the list or enter the language name in the search bar.

  4. Select Next.

  5. Choose the optional language features you want for the selected language, as shown in Figure 1-6, and select Install. The language pack is downloaded and installed.

    This screenshot shows the Install Language Features dialog box. The dialog box lists five check boxes, the first three of which are available and selected. The choices are: Install Language Pack And Set As My Windows Display Language, Speech, Handwriting, Basic typing, and Optical Character Recognition.

    FIGURE 1-6 Choose a language to install

  6. Log out of the device and then sign in to display the new default display language.

When adding a language to Windows 10, you can see which language features are available. These include:

  • Display language

  • Text-to-speech

  • Speech recognition

  • Handwriting support

You also have the option to set the language as your primary Windows display language after the language pack has been installed. Additional language options are available for common languages. Select the installed language and then select the Options button to configure features such as region-specific fonts (e.g., accents), regional formats, handwriting, pen settings, keyboards, and spell-checking options.

Installing Local Experience Packs

You can also modify the default language used by Windows 10 by adding a Local Experience Pack from the Microsoft Store. These packs perform the same configuration changes as the Language options in the Settings app, allowing you to enhance Windows with your chosen language, including navigation, menus, settings, and help topics.

To add a local language using the Microsoft Store, search for the required language and download it or use the link to add a Local Experience Pack on the Language page in the Settings app. If you need to add a Local Experience Pack to an offline image, you can add the Language Interface Packs (LIPs) APPX files and their associated license files, which can be found in the LocalExperiencePack folder on the Language Pack ISO. OEMs and system builders with Microsoft Software License Terms can download the Language Pack ISO and Feature on Demand ISO from the Microsoft OEM site or the Device Partner Center. IT professionals can find ISOs containing all available language resources on the Microsoft Next Generation Volume Licensing site at https://licensing.microsoft.com.

After the language is installed, you can set it to be the default language for your device or remove the language. On the Language page in the Settings app, you can also configure the Administrative Language Settings to copy your international settings to the Windows welcome screen, system accounts, and new user accounts, as shown in Figure 1-7. Systemwide changes require administrative privileges.

This screenshot shows the Welcome Screen And New User Accounts Settings dialog box. The top part of the screen includes settings for Current User, Welcome Screen, and New User Accounts. The bottom part of the screen has two check boxes for copying the current settings to the Welcome Screen And System Accounts (checked) and New User Accounts (unchecked).

FIGURE 1-7 Modifying administrative language settings

Using the DISM command-line tool

You can also use the DISM command prompt to perform deployment of language components. As an example, if you want to modify an offline Windows image to add a language pack, first mount the Windows image, mount the Language Pack ISO and the Features on Demand ISO with File Explorer, and then use the following command:

Dism /Image:"C:mountwindows" /Add-Package /PackagePath="D:x64langpacks
Microsoft-Windows-Client-Language-Pack_x64_fr-fr.cab"

To add the Luxembourgish language, which requires the fr-FR base language and is delivered as an LXP (learning experience platform) file, use the following command:

DISM /Image:"C:mountwindows" /Add-ProvisionedAppxPackage /PackagePath=
"D:LocalExperiencePacklb-luLanguageExperiencePack.lb-LU.Neutral.appx"
/LicensePath: "D:LocalExperiencePacklb-luLicense.xml"

To remove the same LIP, which was added through LXP, you would use this command:

Dism /remove-provisionedappxpackage /packagename:Microsoft.LanguageExperiencePack.
lb-LU._neutral__8wekyb3d8bbwe

Once you have completed the configuration, you need to capture the changes by committing the changes to the Windows image using the following command:

Dism /Commit-Image /MountDir:"C:mountwindows"
Using the Lpksetup command-line tool

You can also use the Lpksetup tool to perform language pack operations on language pack CAB files.

To launch the Lpksetup Wizard, use the following steps:

  1. Download and then mount the Language Pack ISO.

  2. Select the Windows key+R to open the Run dialog box.

  3. Enter lpksetup.exe and then select OK.

  4. Step through the wizard and browse to the Language Pack location on the mounted ISO.

  5. Locate the language pack as shown in Figure 1-8 and select Next.

    This screenshot shows the Install Or Uninstall Display Languages dialog box. Below the Select The Display Languages To Install heading is a Browse box with a drop-down menu option. Selecting the arrow shows a list of languages. In this figure, the English (United Kingdom) language is selected.

    FIGURE 1-8 Perform language pack operations using Lpksetup

  6. In the Review and accept the Microsoft software license terms dialog box, select I accept the license terms and select Next.

  7. The language pack installation completes.

  8. Select Close.

If you want to automate the process or bypass the user interface (UI) and perform unattended or silent-mode language pack installations, you can also use the Lpksetup.exe command-line tool. You need to run the Lpksetup command using an elevated command prompt. The syntax is

lpksetup.exe /i * /p <path>

This example installs all language packs that are located on installation media specified in the <path> location. The command-line options available for Lpksetup are shown in Table 1-8.

TABLE 1-8 Lpksetup command-line options

Option

Description

/i

Installs the specified language packs. If you do not include * or language after /i, you are asked to continue the installation through the UI.

*

Wildcard character that represents all language packs found in the language_pack_path or the directory where lpksetup.exe is located.

Language-region

Specifies the language pack or packs to be installed or uninstalled.

/u

Uninstalls the specified language packs. If you do not include * or a language after /u, you are asked to continue the uninstall through the UI.

/r

Suppresses the need to restart after an operation is complete.

/p language_pack_path

Indicates the path of the language packs to install.

/s

Performs a silent and unattended operation that requires no user input.

/f

If the computer is required to restart, forces a restart even if other users are logged on to the computer.

Note Full Language Packs Are Not Interchangeable

Language components are not interchangeable between Windows 10 and Windows Server, but some LIPs are. You must also match the version of Windows to the language pack. For example, Windows 10, version 2004 must use the Windows 10, version 2004 language pack.

Skill 1.2: Perform post-installation configuration

After you have provisioned Windows 10, you must ensure that the user is productive as soon as possible. Enabling a consistent Windows environment that looks and behaves the same regardless of the device used can be helpful. Users should be able to browse the internet safely and in accordance with corporate policies. Devices that are used by mobile users can be configured dynamically to provide them with optimal power settings and preconfigured connectivity to resources such as secure VPNs and Wi-Fi networks.

Customize the Windows desktop

After Windows 10 has been activated, you can customize the user interface and personalize Windows. Devices enrolled in Microsoft Intune or joined to Azure Active Directory will be activated automatically if a digital license has been assigned. The Windows 10 user interface may be familiar to users of Windows 7 because it has a Start menu, a desktop, and a taskbar.

It is important for you to understand how to customize the Windows 10 user interface, including Start and taskbar layout, desktop, and notification settings. That way, you can ensure that the operating system interface meets the needs of the users in your organization.

Customize Windows 10 Start

For users of earlier versions of Windows, the appearance of Start may be significantly different to what they have been used to. Start is dynamic, and its appearance depends on your device type. For example, on a device with a small screen such as a tablet, Start appears full screen, by default, which is easier to navigate when using a touch device.

If you are using a non-touch device, then, by default, Windows 10 displays Start as a menu that combines aspects that may be similar to the Start menu found in Windows 7 and Windows 8.1 (see Figure 1-9). This display is more easily navigated by using a mouse rather than touch.

This screenshot shows the Windows Start screen, which has small app icons on the left and larger tiles on the right.

FIGURE 1-9 Start displayed as a partial screen

You can configure the Start menu behavior from the Settings app. Open the Settings app, select Personalization, and then select the Start tab. You can then select the option Use Start Full Screen, as shown in Figure 1-10.

This screenshot shows the Settings App with the Personalization setting selected. On the right side of the screen, the options for configuring the Start menu settings is listed including Show More Tiles On Start (Off), Show App List In Start Menu (On), Show Recently Added Apps (On), Show Most Used Apps (Off), Show Suggestions Occasionally In Start (On), Use Start Full Screen (Off), and Show Recently Opened Items In Jump Lists On Start Or The Taskbar (On). Below these options is a link to choose which folders appear on Start.

FIGURE 1-10 Start menu settings

The Start customizations shown in Figure 1-10 are:

  • Show more tiles on Start This setting enables you to display more tiles when Start is configured for partial-screen mode.

  • Show app list in Start menu Displays an alphabetical list of all apps on the left side of the Start screen.

  • Show recently added apps Any recently installed apps are marked as new in Start.

  • Show most used apps Windows 10 tracks your app usage and lists your most frequently used apps in a Most Used Apps list in Start.

  • Show suggestions occasionally in Start This setting enables or disables app suggestions in Start.

  • Use Start full screen Enables Start to display full screen. This is more useful on a tablet device than on a device with a mouse.

  • Show recently opened items in Jump Lists on Start or the taskbar and in File Explorer Quick Access This setting enables Windows 10 to remember recently opened files and list those in the context menu of apps appearing in Start or on the taskbar.

  • Choose which folders appear on Start This setting enables you to set shortcuts for the following folders on Start: File Explorer, Settings, Documents, Downloads, Music, Pictures, Videos, Network, and Personal Folders.

Convertible Devices

Convertible devices, including the Microsoft Surface Pro, can switch in and out of Tablet mode with the removal and reattachment of the keyboard, or by reorienting the device. When a device switches like this, you can choose whether Windows should switch to full-screen Start (Tablet mode) automatically, as shown in Figure 1-11.

This screenshot shows a pop-up dialog box that asks “Do You Want To Switch To Tablet Mode?” with buttons for Yes and No below a drop-down menu option with Always Ask Me Before Switching displayed.

FIGURE 1-11 The Tablet mode prompt on a convertible laptop

You can configure the default behavior through the Settings app. Select System and then open the Tablet Mode tab. As shown in Figure 1-12, you can then configure the following options:

  • When I Sign In:

    • Use Tablet Mode

    • Use Desktop Mode

    • Use The Appropriate Mode For My Hardware

  • When This Device Automatically Switches Tablet Mode On Or Off:

    • Don’t Ask Me And Don’t Switch

    • Always Ask Me Before Switching

    • Don’t Ask Me And Always Switch

  • Hide App Icons On The Taskbar In Tablet Mode

  • Automatically Hide The Taskbar In Tablet Mode

This screenshot shows the Settings App with the System item displayed and the Shared Experiences tab selected. On the right side, the Tablet mode options are available. Under the title When I Sign In, a drop-down menu displays the Use The Appropriate mode For My Hardware option. Below this another drop-down menu displays the options for When I Use This Device as a Tablet with the option Don't switch to tablet mode currently selected. Additional text at the bottom of this area says What Is Tablet Mode? with a short explanation and links to Get Help and Give Feedback.

FIGURE 1-12 Tablet mode options

Note Tablet Mode

Tablet mode also changes applications so that they run full screen.

Configuring Start Tiles

In addition to enabling or disabling Start full-screen behavior, you can customize the application tiles that appear on Start and how those tiles look and behave. From Start, right-select the appropriate app, as shown in Figure 1-13. Select Unpin From Start.

This screenshot shows the Windows Start screen with a Tile context menu showing three options; Unpin from Start, More, and Uninstall.

FIGURE 1-13 Customizing Start screen with a mouse

When a tile is pinned to Start, you can configure it. Right-select the tile, and from the context menu, you can choose:

  • Unpin From Start

  • Resize

    • Choose from Small, Medium, Large, and Wide, depending on the app.

  • More

    • If the app is a Microsoft Store app, choose from Turn Live Tile Off, Pin To Taskbar, App Settings, Rate And Review, and Share.

    • If the app is a desktop app, choose from Pin To Taskbar, Run As Administrator, and Open File Location.

  • Uninstall

Note Uninstalling Desktop Apps From Start

If the app you select to uninstall is a desktop app, Programs And Features opens in Control Panel enabling you to manually remove the desktop app.

If your device is touch-enabled, the procedure is slightly different from using a mouse to configure tiles. Rather than right-selecting a tile from Start, you must touch and hold a tile. Then you can unpin the tile by using the Unpin icon. Use the ellipse button (three dots) to access the context menu, as shown in Figure 1-14.

This screenshot shows the Windows Start screen with the Phone Companion tile selected and a Tile context menu displayed. The context menu has four options; Unpin From Start, Resize, More, and Uninstall.

FIGURE 1-14 Customizing Start screen with touch

Grouping Start Tiles

After you have added the required tiles to Start, you might want to group the tiles. You can perform the following actions on groups:

  • To create a new group of tiles, simply drag a tile to an area of unused space on Start.

  • To name a group, hover your mouse or tap the screen immediately above the group of tiles and then enter the name for your group in the text box that appears.

  • To move tiles between groups, drag the required tile to the new group.

Export Start Layout

Although you can manually drag and resize tiles on Start for each computer in your organization, this approach is not practical at scale. Within a corporate environment, you can control the Start layout by creating a customized Start screen on a test computer and then export the layout to other devices.

Not all editions of Windows 10 support customizing Windows 10 Start and taskbar with Group Policy. These are shown in Table 1-9.

TABLE 1-9 Windows 10 Start and taskbar support

Windows Version

Supported Edition

Windows 10, version 1607

Windows 10 Enterprise and Windows 10 Education

Windows 10, version 1703

Windows 10 Pro, Windows 10 Enterprise, and Windows 10 Education

You can choose to export a layout that applies a full or partial Start layout:

  • Full Start layout Users cannot pin, unpin, or uninstall apps from Start. Users cannot pin any apps to Start.

  • Partial Start layout The contents of the specified tile groups cannot be changed. Users can move groups and can create and customize their own groups.

The Start layout is exported as an XML file, which can then be deployed to devices using one of the following:

  • Group Policy

  • Windows Configuration Designer provisioning package

  • Mobile device management (MDM)

On your test computer, you can customize the Start layout prior to exporting the layout. Customization can include:

  • Pin apps to Start.

  • Unpin the apps that you don’t want to display.

  • Drag the tiles on Start to reorder or group apps.

  • Resize tiles.

  • Create your own app groups.

  • Name groups.

Once you have configured the desired Start layout, you use the Export-StartLayout Windows PowerShell cmdlet to export the Start layout to an XML file using the following procedure:

  1. Open Windows PowerShell.

  2. Run the Export-StartLayout –path <path><file name>.xml cmdlet.

  3. You can optionally edit the XML file to add a taskbar configuration.

  4. Copy the exported file to a shared folder.

  5. Deploy the XML file using any of the deployment methods.

If you use Group Policy, you must specify the XML file in the GPO: User Configuration PoliciesAdministrative TemplatesStart Menu and TaskbarStart Layout. To do this, complete the following procedure:

  1. Open Group Policy Management Console (GPMC) to configure a domain-based GPO.

  2. Navigate to the appropriate AD DS container, such as your domain.

  3. Open an existing GPO for editing or create a new GPO, link it to your chosen container, and open it for editing.

  4. Navigate to the User ConfigurationPoliciesAdministrative TemplatesStart Menu And Taskbar folder and open the Start Layout GPO.

  5. Enable the GPO and, in the Start Layout File text box, type the full UNC path name to your XML file; for example, \LON-SVR1MarketingMarketing.XML as shown in Figure 1-15.

    This screenshot shows the Start Layout Group Policy page. The policy is enabled and in the options section in the lower-left of the screen is the path for the Start Layout File: \LON-SVR1MarketingMarketing.XML. On the right side of the screen is the Help information relating to the Start Layout GPO.

    FIGURE 1-15 Deploy custom Start using Group Policy

  6. Select OK and close Group Policy Management.

For the policy to be effective, users must sign out and sign back in. Alternatively, you can issue a Gpupdate.exe /force command from an elevated command prompt to force GPO propagation.

To configure a partial Start screen layout, you should export the Start layout and then open the layout XML file. You should then add LayoutCustomizationRestrictionType="Only SpecifiedGroups" to the <DefaultLayoutOverride> element as follows:

<DefaultLayoutOverride LayoutCustomizationRestrictionType="OnlySpecifiedGroups">

Then save the file and deploy the settings.

If you like, you can update an existing Start layout by replacing the XML file that is specified in the Start Layout policy settings with an XML file that has a newer time stamp.

Need More Review? Manage Windows 10 Start and Taskbar Layout

For more information about customizing Start and taskbar layout, visit the Microsoft website at https://docs.microsoft.com/en-us/windows/configuration/customize-and-export-start-layout.

In addition to the Start layout, you can control other aspects of Start with Group Policy. Table 1-10 shows the elements that you can control with GPOs and the respective values to use within GPOs. Unless otherwise noted, the path for these GPO settings is User ConfigurationPoliciesAdministrative TemplatesStart Menu And Taskbar.

TABLE 1-10 Using Group Policy to configure Start

Start Element

Policy

User Tile

Remove Logoff On The Start Menu

Most Used

Remove Frequent Programs List From The Start Menu

Suggestions

Computer ConfigurationPoliciesAdministrative TemplatesWindows Components Cloud ContentTurn Off Microsoft Consumer Experiences

Power

Remove And Prevent Access To The Shut Down, Restart, Sleep, And Hibernate Commands

All Apps

Remove All Programs List From The Start Menu

Jump Lists

Do Not Keep History Of Recently Opened Documents

Start Size

Force Start To Be Either Full Screen Size Or Menu Size

All Settings

Prevent Changes To Taskbar And Start Menu Settings

Note Manage Windows 10 Start and Taskbar Layout

If you have a workgroup environment, you may want to create a default Windows 10 Start and taskbar layout XML file. For the settings to be applied to all users on a device, copy the XML file to C:UsersDefaultAppDataLocalMicrosoftWindowsShelllocation.

Customize The Desktop

In addition to customizing Start to your requirements, you can configure the desktop and related settings. To configure the desktop, select Start > Settings > Personalization.

From the Personalization Settings app, you can configure the following settings:

  • Background You can select and configure a desktop background color or picture image, or you can select a slideshow of images.

  • Colors On the Color tab, you can choose a color scheme and optionally configure the following options.

    • Enable transparency effects.

    • Show accent color on the following surfaces: Start, taskbar, Action Center, title bars, and window borders.

    • Choose the default app mode: Light or Dark.

    • Access the High Contrast Settings.

  • Lock Screen From the Lock Screen tab, as shown in Figure 1-16, you can select and configure a background image to display when your Windows 10 device is locked. A feature called Windows Spotlight allows you to display different background images on the lock screen each day and will occasionally suggest Windows 10 features that the user hasn’t tried yet, such as Snap Assist. In addition, you can:

    • Choose a Lock Screen background image.

    • Choose an app to show Detailed Status (for example, Calendar).

    • Choose apps to Show Quick Status (for example, Facebook, Mail, Calendar, or Alarms & Clock).

    • Configure Cortana Lock Screen Settings.

    • Show Lock Screen background picture on the Sign-In Screen.

    • Configure Screen Timeout Settings and Screen Saver Settings.

      This screenshot shows the Personalization section of the Settings App. The Lock Screen tab is in view, and on the right side of the screen is a Preview of the lock screen displaying a picture of sand flats with a purple and orange colored sky. Below this is the heading Background, and a drop-down menu showing Windows Spotlight. Background Picture On The Sign-In Screen (On). Lastly, there are two links to configure Screen Timeout Settings and Screen Saver Settings.

      FIGURE 1-16 Customizing the Lock Screen

  • Themes This setting enables you to configure and apply theme settings. Themes enable you to define combinations of background, color, sound, and mouse cursor settings. You can also configure desktop icon settings, such as whether to display the Recycle Bin on the desktop. Underneath the Change Theme section is a link to Get More Themes in Microsoft Store. In the Microsoft Store, you can download of additional themes that are available free, as shown in Figure 1-17.

    This screenshot shows the Themes section of the Settings App. There are three rows of brightly colored pictures with 9 pictures on each row. Each picture is displayed as a square image with the name of the picture and a rating (in stars) underneath. The theme pictures include Japanese islands, an underwater shot of a swimming turtle and a Toucan perched in a hole in a tree.

    FIGURE 1-17 Additional themes

  • Start You can also configure Start settings, as previously discussed.

  • Taskbar From this tab, among other settings, you can:

    • Lock the taskbar.

    • Automatically hide the taskbar when in Desktop or Tablet mode.

    • Use small taskbar buttons.

    • Configure the way running tasks and apps combine on the taskbar.

    • Configure whether the Command Prompt will appear instead of Windows PowerShell on Start; you can also configure whether the Command Prompt appears in the menu when the Windows key+X is pressed.

    • Change the taskbar location.

    • Customize the notifications area.

    • Turn system icons on or off.

    • Customize the taskbar appearance when using multiple displays.

    • Customize the People settings.

Multiple desktops

Windows 10 provides support for multiple desktops. This provides a simplistic multitasking view. Rather than running apps in multiple windows on the same desktop, you can create additional desktops for groups of apps or for individual apps. Multiple desktops can be useful for keeping unrelated windows or projects organized; multiple desktops are also useful for quickly switching to a clean desktop before a meeting.

To add a new desktop, select the Task View button on the taskbar and then select New Desktop in the upper-left of the display. You can also add a new desktop by pressing Windows key+Tab on your keyboard, or you can swipe with one finger from the left of your screen if you have touch.

To switch between desktops, select the Task View button, press Windows key+Tab, or swipe with one finger from the left of your touchscreen. You can then select the appropriate desktop, as shown in Figure 1-18.

This screenshot shows the Task View feature being used to manage multiple desktops. At the top of the screen Desktop 1 and Desktop 2 are shown as small images (with Desktop 2 selected). To the right of these is a plus sign underneath the words New Desktop. In the main section of the screen there is a background picture of a lady running along a beach at the edge of the water with rugged cliff stacks rising from the sea. Overlaid on top of this image is a larger image of Desktop 2.

FIGURE 1-18 Virtual desktops

To remove a desktop, select the Task View button on the taskbar and then hover over the desktop that you want to delete and then select the X on the desktop.

Configure Action Center and taskbar

In Windows 10, Microsoft introduces an improved Action Center, as shown in Figure 1-19. The Action Center is accessible by swiping from the right or by selecting the Notifications icon in the system tray.

This screenshot shows the Action Center Notifications area. The notifications area is in two sections. In the top section there is a link to Manage Notifications and then underneath this is the Skype logo with the notification that Skype is now enabled. In the bottom section there is a link to Collapse on the left-hand side and a link to Clear All Notifications on the right. At the bottom of this section are 9 selection tiles offering the options Location, Night Light, All Settings, Network, Connect, Project, VPN, Focus Assist, and Screen Snip.

FIGURE 1-19 The Action Center

Action Center includes the following elements:

  • Quick Action tiles As shown at the bottom of Figure 1-19, the displayed tiles are configurable and dependent on your device.

  • Notifications area You can configure how Windows notifies you of events.

Configure Quick Action Tiles

The Quick Action tiles are shortcuts to commonly used features of the Windows 10 operating system. The expanded view allows a larger number of tiles to become visible, as shown in Figure 1-20. The specific tiles that appear in the expanded view will depend on your device type and orientation. For example, if your computer is not a tablet and is not capable of converting into a tablet, the Tablet Mode tile is not available. By default, in the expanded view, the following tiles are available:

  • Tablet mode Enables you to switch between Tablet and Desktop modes.

  • Rotation Lock Enables or disables the rotation lock. Normally, the display orients itself based on the orientation of your Windows 10 device, switching between landscape and portrait modes. Use this option to lock the orientation regardless of physical orientation.

  • Airplane Mode Disables all internal radios in the device, including Wi-Fi and Bluetooth, for use when you travel on an aircraft. This mode is also convenient when you want to conserve battery power.

  • All Settings Provides a convenient shortcut to the Settings app.

  • Connect Enables you to find and connect to media servers. This includes Xbox and other devices running Windows that are sharing their media files. It can also include devices, such as TV set-top boxes.

  • Project Enables you to link your device to an external monitor or wireless display.

  • Battery Saver Only available when your device is running on battery alone; helps reduce power consumption. You can configure Power Options and Battery Saver in the Settings app.

  • VPN Switches to the VPN tab in the Network & Internet Settings app. From there, you can set up, configure, or connect to a VPN.

  • Bluetooth Enable or disable the Bluetooth radio.

  • Brightness Enables you to control display brightness. Select this tile to step through brightness levels in 25 percent increments.

  • Wi-Fi Enables or disables the Wi-Fi connection.

  • Focus Assist (Called Quiet Hours in earlier versions of Windows 10) Allows you to avoid distracting notifications when you need to stay focused by reducing the notifications you receive.

  • Night Light Toggles your display to remove white light. You can configure Night Light in the Settings app.

  • Location Enables or disables location services. Many services use location to customize services, such as mapping apps, for your device.

You can modify which Quick Action tiles are displayed by selecting the Edit Your Quick Actions link and then rearranging the location of the tiles by dragging and dropping them within the Settings app, as shown in Figure 1-20.

This screenshot shows the Notifications and Actions section of the Settings App. On the right side of the screen the options for configuring Notifications are listed. The Get Notifications option is set to On. Underneath checkboxes for Show Notifications on the Local Screen, Show reminders, Allow Notifications to Play Sound, Show Me the Windows Welcome Experience, Suggest Ways I can Finish Setting up my Device to Get the Most out of Windows and Get Tips and Tricks are all selected. On top of this manage Notifications and Action area is a pop-up menu showing a recent notification message that Skype has been enabled.

FIGURE 1-20 Windows 10 Quick Actions settings

Configure Notifications

When Windows 10 wants to inform you about something, it raises a notification. You can see and act on the notifications in a list shown in Action Center. To respond to a notification, select it. You can remove notifications by selecting Clear All at the top of the page.

Windows notifies you about a variety of operating system events and situations, including the need to obtain updates or perform an antivirus scan, and Windows also prompts you about which actions you want to take when a new device, such as a USB memory stick, has been detected.

As shown in Figure 1-21, you can configure which notifications you receive by opening Settings. Select System > Notifications & Actions. Under Notifications, you can configure the following options:

  • Show Notifications On The Lock Screen

  • Show Reminders And Incoming VoIP Calls On The Lock Screen

  • Allow Notifications To Play Sounds

  • Show Me The Windows Welcome Experience After Updates And Occasionally When I Sign In To Highlight What’s New And Suggested

  • Suggest Ways I Can Finish Setting Up My Device To Get The Most Out Of Windows

  • Get Tips, Tricks, And Suggestions As You Use Windows

This screenshot shows the Notifications and Actions section of the Settings App. On the right side of the screen the options for configuring Notifications are listed. The Get Notifications option is set to On. Underneath checkboxes for Show Notifications on the Local Screen, Show reminders, Allow Notifications to Play Sound, Show Me the Windows Welcome Experience, Suggest Ways I can Finish Setting up my Device to Get the Most out of Windows and Get Tips and Tricks are all selected.

FIGURE 1-21 Configuring Windows 10 notifications

You can also configure notifications from individual apps. As shown in Figure 1-22 under the Get Notifications From These Senders heading, you can enable or disable notifications for each listed sender. If you select a sender from the list, such as for Skype, as shown in Figure 1-22, you can fine-tune the notifications for the application, including turning them on or off:

  • Notifications

  • Show Notification Banners

  • Show Notifications In Action Center

  • Hide Content When A Notification Arrives

  • Number Of Notifications Visible In Action Center

  • Priority Of Notifications In Action Center

This screenshot shows the Notifications settings for the Skype App. The Notification slider button to set to On. Underneath this options are selected to Show Notification Banners and to Show Notifications in the Action Center. Next are two slider buttons to Hide Content When Notifications are on Lock Screen (set to Off) and Play a Sound When a Notification Arrives (set to On). Then a drop down box provides options to set the Number of Notifications Visible in Action Center (set to 3). At the bottom the setting Priority of Notifications in Action Center has 3 radial button options of Top, High and Normal (with Normal selected).

FIGURE 1-22 Configuring Windows 10 notifications for specific apps

Configure The Taskbar

You have seen how to configure the taskbar using the Settings app. The same functionality is available if you right-select the taskbar. Administrators can also pin additional apps to the taskbar and remove default pinned apps from the taskbar.

This is achieved by adding a <TaskbarLayout> section to a layout modification XML file used to configure the Start screen.

You can specify which apps are added to the taskbar using the Application User Model ID (AUMID) or Desktop Application Link Path (the local path to the application). The easiest method to obtain the AUMID or Desktop Application Link Path is to extract the information from the Export-StartLayout cmdlet we saw earlier by following these steps:

  1. Pin the required application to the Start menu on a reference or testing PC.

  2. Open Windows PowerShell and run the Export-StartLayout cmdlet.

  3. Open the generated XML file.

  4. Identify the entry corresponding to the app you pinned.

  5. Look for a property labeled AppUserModelID or DesktopApplicationLinkPath.

Once you have obtained the app information, you can configure the taskbar using these steps:

  1. Create the XML file and include the <CustomTaskbarLayoutCollection> section.

  2. Use the AUMID or Desktop Application Link Path to identify the apps to pin to the taskbar.

  3. Add xmlns:taskbar="http://schemas.microsoft.com/Start/2014/TaskbarLayout" to the first line of the file, before the closing >.

  4. Use <taskbar:UWA> and AUMID to pin Universal Windows Platform apps.

  5. Use <taskbar:DesktopApp> and the Desktop Application Link Path to pin desktop applications.

The layout modification XML file can be applied to devices using Group Policy or a provisioning package created in Windows Configuration Designer.

Need More Review? Configure Windows 10 Taskbar

This Microsoft resource contains sample taskbar configuration XML files that can help you configure the taskbar, and it discusses how to remove default apps. Visit https://docs.microsoft.com/windows/configuration/configure-windows-10-taskbar#sample-taskbar-configuration-added-to-start-layout-xml-file.

Configure The Notifications Area

As shown in Figure 1-23, you can also configure taskbar options from the Personalization area of the Settings app. Open the Personalization area and then select the Taskbar tab. There are several headings on the Taskbar page with options for each:

  • Taskbar

    Options include:

    • Lock The Taskbar

    • Automatically Hide The Taskbar In Desktop Mode

    • Automatically Hide The Taskbar In Tablet Mode

    • Use Small Taskbar Buttons

    • Use Peek To Preview The Desktop When You Move Your Mouse To The Show Desktop Button At The End Of The Taskbar

    • Replace Command Prompt With Windows PowerShell In The Menu When I Right-Click The Start Button Or Press Windows Key + X

    • Show Badges On Taskbar Buttons

    • Taskbar Location On Screen

    • Combine Taskbar Buttons

    • How Do I Customize Taskbars?

  • Notifications Area

    Options include:

    • Select Which Icons Appear On The Taskbar

    • Turn System Icons On Or Off

    Options include:

    • Clock

    • Volume

    • Network

    • Power

    • Input Indicator

    • Location

    • Action Center

    • Touch Keyboard

    • Windows Ink Workspace

    • Touchpad

    • Microphone

    • Meet Now

  • Multiple Displays

    Options include:

    • Show Taskbar On All Displays

    • Show Taskbar Buttons On

    • Combine Buttons On Other Taskbars

  • People

    Options include:

    • Show Contacts On The Taskbar

    • Choose How Many Contacts To Show

    • Show My People Notifications

    • Play A Sound When A My People Notification Arrives

    • Show My People App Suggestions

    • Help From The Web

This screenshot shows the Taskbar area of the Settings App. The top 7 settings are slider buttons of Lock The Taskbar (On), Automatically Hide the Taskbar In Desktop Mode (Off), Automatically Hide the Taskbar In Tablet Mode (Off), Use Small Taskbar Buttons (Off), Use Peek to Preview the Desktop (Off), Replace Command Prompt with Windows PowerShell when I right-click the Start Button (On) and Show Badges on Taskbar Buttons (On). Underneath are 2 drop-down menus to Manage the Taskbar Location on the screen (set to Bottom) and to Combine Taskbar buttons (set to Always Hide Labels). At the very bottom of the screenshot there are links for How Do I Customize Taskbars?, Select Which Icons Appear on the Taskbar and Turn System Icons On or Off.

FIGURE 1-23 Configuring the notifications area

Configure Microsoft Edge

Microsoft Edge, shown in Figure 1-24, is a web browser that provides a consistent interface across device types, such as Windows 10–based tablets, laptops, and smartphones. The interface is simple and touch-centric, making it the ideal browser for devices running Windows 10. Microsoft Edge is also available on Android and iOS devices.

This screenshot shows the official Microsoft webpage for Microsoft Edge. The image on the webpage shows a river between two ranges of hills. In the middle of the river is the blue Microsoft Edge swirl logo. The title of the webpage is Welcome to Microsoft Edge and the subtitle is Select an Option Below to Learn about Microsoft Edge in a Few Quick Steps. Underneath these titles are three buttons of Find Your Favorites, Install Extensions and Try Collections.

FIGURE 1-24 Microsoft Edge

For readers not familiar with Microsoft Edge, it is the default browser for all Windows 10 devices. Windows 10 shipped originally with an HTML-based browser, but this was replaced in January 2020 with a new version of Edge, which uses the open source Chromium browser engine. All versions of Windows 10, version 1803 and newer will support the updated version of Microsoft Edge. In addition to Microsoft Edge, Windows 10 provides Internet Explorer 11 (IE11). Microsoft Edge is used for modern websites, and IE11 is included for compatibility with enterprise web apps that use older web technologies like ActiveX.

Because Microsoft Edge supports only the latest web standards, it offers users a fast and safe browsing experience. Microsoft Edge is like Windows 10 in that it is regularly updated. Because it was first introduced with Windows 10, many new features and functionality have been added, including the ability to manage tabs, read e-books, write on webpages, and more.

Microsoft Edge includes a number of features not available in Internet Explorer 11. These include:

  • Kiosk mode, which allows only Microsoft Edge to display a specific site in full-screen mode as used in digital/interactive signage or for public browsing

  • Collections, which allow you organize webpages; similar to favorites

  • Extensions, which allow you add additional functionality from the Microsoft Store or Chrome Web Store to enhance and customize your browser

You can install extensions in Microsoft Edge by performing the following steps:

  1. Launch Microsoft Edge.

  2. On the Settings and More menu (the three ellipsis in the top-right corner), select Extensions.

  3. On the Extensions page, select Get extensions for Microsoft Edge, as shown in Figure 1-25.

  4. In the Edge Add-ons site, select the extension that you want to install.

  5. Select Get and then select Add Extension.

This screenshot shows the official Microsoft webpage for Microsoft Edge with the Extensions tab showing. The words Personalize Your Browser With Extensions has a Learn More weblink. Underneath is a section called Installed Extensions with a box called From Microsoft Store. Inside the box are the words Office and View, Edit, And Create Office Documents in Your Browser. There is a slider button in the right of this box set to On. At the bottom of the webpage is a button with the title Get Extensions for Microsoft Edge.

FIGURE 1-25 Microsoft Edge Extensions

It is important to know how to configure Microsoft Edge, including how to migrate web favorites to this new browser, to support your organization’s users. Microsoft Edge has streamlined settings that you can easily configure from the to Settings link in the browser, as shown in Figure 1-26.

This screenshot shows the Microsoft Edge More Actions menu. The menu includes the options of New Tab, New Window, New InPrivate Window, Zoom, Favorites, History, Downloads, Apps, Extensions, Collections, Print, Share, Find On Page, Read Aloud, More Tools, Settings, Help and Feedback and Close Microsoft Edge.

FIGURE 1-26 Configuring settings in Microsoft Edge

From this window, you can access the following options:

  • New Tab Enables you to open a new browser tab

  • New Window Enables you to open a new browser window

  • New InPrivate Window Provides the same privacy options enabled by InPrivate browsing in Internet Explorer

  • Zoom Enables you to zoom in or out on a webpage

  • Favorites Opens your webpage favorites

  • History Opens your webpage history

  • Downloads Opens your download history

  • Apps Enables you to install browser web apps

  • Extensions Opens your browser add-ins and offers a list of suggested extensions

  • Collections Enables you customize your collections of webpages

  • Print Enables you to print the webpage

  • Web Capture Enables you create a snip of part of whole of a webpage and optionally add notes

  • Share Enables you to quickly share a webpage or web URL to OneNote, your phone, and email

  • Find On Page Searches for content on the current webpage

  • Read Aloud Narrates the content on the current webpage

  • More Tools Provides additional tools:

    • Save Page As Allows you to save a webpage

    • Cast Media To Device Enables you to send content, such as a video, to wireless media devices

    • Pin To Taskbar Enables you to pin frequently accessed webpages directly to the taskbar

    • Pin To Start Enables you to pin frequently accessed webpages directly to your Start page

    • Launch Taskbar Pinning Wizard Helps you find the websites that you use most, and then pin them to the taskbar

    • Browser Task Manager Opens the version of Task Manager that enables you to end specific browser tasks that are misbehaving, as shown in Figure 1-27

    • Developer Tools Opens a new developer console

This screenshot shows the Browser Task Manager Window. Different tasks are listed with the App: Microsoft Edge Add-ons highlighted. On the bottom right of the Browse Task Manage Window is an End Process button.

FIGURE 1-27 Microsoft Edge Browser Task Manager

Need More Review? Configure IE Mode on Microsoft Edge

In previous versions of Microsoft Edge, you could use a menu item and select Open In Internet Explorer 11. This functionality is disabled by default. The replacement method to open a legacy website is to use the IE mode on Microsoft Edge. This mode allows legacy websites to be opened within Microsoft Edge using the Trident MSHTML engine from Internet Explorer 11. To enable this feature, you should review the prerequisites. Visit https://docs.microsoft.com/en-us/deployedge/edge-ie-mode.

From the Settings cog at the bottom of the window, you can access additional submenus that enable you to add and configure your browser profiles, view browser-stored passwords, review store payment information, review stored addresses, import browser data, and configure your profile preferences.

In the previous version of Microsoft Edge, the sync was limited to the Windows sync ecosystem based on OneDrive. With the new Microsoft Edge Chromium, Edge will sync across all the platforms, such as Windows 7, Windows 8.1, iOS, Android, and macOS.

If you create a browser profile and allow the profile to sync your browsing data across devices, you can then access additional settings within the Settings area, including:

  • Favorites

  • Passwords

  • Addresses and more (form-fill)

  • Collections

  • Settings

Customize Microsoft Edge

One of the benefits of the integration between Windows 10 and Microsoft Edge is the extensive ability to customize Microsoft Edge for your organization. These settings cover every aspect of the modern browser, including configuring default tabs, security settings, allowed extensions, browser experience preferences, and more.

There are over 160 configuration options relating to Microsoft Edge, version 77 and later that can be applied to devices using either Group Policy management or Microsoft Intune.

To view the available policies for Microsoft Edge within Intune, follow these steps:

  1. Sign in to the Microsoft Endpoint Manager portal.

  2. Select Devices in the left-hand navigation pane.

  3. Select Configuration Profiles (under the Policy heading).

  4. On the top command bar, select Create Profile.

  5. In the drop-down list below Platform, select Windows 10 and later.

  6. In the drop-down list below Profile Type, select Templates.

  7. In the drop-down list below Template Name, select Administrative Templates.

  8. Select the Create button.

  9. On the Create Profile page, enter a profile name and then select Next.

  10. On the Configuration Settings page, select the folder category containing the templates, or select the individual policy from the policies listed below the folders, as shown in Figure 1-28. The policies are sorted alphabetically.

  11. Select a policy to open a dialog box on the right side where you can configure the policy.

This screenshot shows the Create Profile area of the Microsoft Endpoint Manage Admin Center. A selection list of Microsoft Edge Computer Configuration settings are shown with the setting Enable Favorites Bar highlighted.

FIGURE 1-28 Microsoft Edge configuration policies

Need More Review? Configure Microsoft Edge Policy Settings with Microsoft Intune

For more information about configuring Microsoft Edge policy settings using Microsoft Intune, visit the Microsoft website at https://docs.microsoft.com/deployedge/configure-edge-with-intune.

If your organization uses Group Policy, you can locate 55 Microsoft Edge Group Policy settings in the following location:

Computer ConfigurationAdministrative TemplatesWindows ComponentsMicrosoft Edge

Microsoft Edge kiosk mode

If you are running Windows 10, version 1809 (Professional, Enterprise, and Education editions only), you can use Microsoft Edge in a kiosk environment using assigned access. The assigned access feature allows you to lock down a Windows 10 device to run a single app or multiple apps only; the device can then be used in a public space such as a kiosk.

Microsoft Edge in kiosk mode allows you to operate a digital signage for presentation in a public area or to deploy devices for members of the public to use for web browsing in InPrivate mode. You can modify the behavior of Microsoft Edge when it’s running in kiosk mode by configuring the appropriate policy, as shown in Table 1-11.

TABLE 1-11 Microsoft Edge kiosk mode policy

Management Tool

Policy

Group Policy

Configure Kiosk Mode

Microsoft Intune

ConfigureKioskMode

Microsoft Edge in kiosk mode supports four configuration types, as shown in Table 1-12. The Group Policy settings are shown in Figure 1-29.

This screenshot shows the Configure Kiosk Mode Group Policy page. The Configure Kiosk Mode policy has been enabled with the setting 0 configuring Full Screen Digital Signage and Interactive Display and configuring Normal Microsoft Edge Running in Assigned Access. On the right side of the screen is the Help information relating to the Configure Kiosk Mode GPO.

FIGURE 1-29 Microsoft Edge kiosk mode GPO

Microsoft Edge kiosk mode can be set up in various configurations depending on your requirements, as listed in Table 1-12.

TABLE 1-12 Microsoft Edge kiosk mode configuration types

configuration Type

Description

Single-app – Digital/ interactive signage

  • Runs Microsoft Edge InPrivate displaying a single website running in full-screen mode for the following scenarios:

    • Digital signage Rotating advertisement or menu requiring no user interaction.

    • Interactive signage Allows user interaction, which is restricted to within the page, such as a building business directory or restaurant order/pay station.

  • Prevents any other uses, such as browsing the internet.

  • Policy setting = Not configured (0 default).

Single-app – InPrivate Public browsing

  • Runs a limited, multi-tab version of Microsoft Edge.

  • Microsoft Edge is the only app users can use on the device—they can browse publicly or close Microsoft Edge using the End Session button.

  • The session will reset after 5 minutes of user inactivity, which will restart Microsoft Edge with a new session.

  • Public browsing is useful within a public library or hotel concierge desk.

  • Policy setting = Enabled (1).

Multi-app – Normal browsing

  • Runs Microsoft Edge with all browsing features and preserves the user data and state between sessions.

  • With assigned access, apps that have dependents may not work as expected. For example, if the Microsoft Store is not available, installing Microsoft Edge extensions will not work.

  • Policy setting = Not configured (0 default).

Multi-app – InPrivate Public browsing

  • Runs a multi-tab version of Microsoft Edge InPrivate in full-screen mode. Users can open and close Microsoft Edge and launch other apps that have been allowed by assigned access. No “End session button” is shown and users close Microsoft Edge normally, which clears their browsing session.

  • Policy setting = Enabled (1).

When you use Microsoft Edge in kiosk mode, the default experience includes:

  • Safer browsing Microsoft Edge in kiosk mode for public browsing runs Microsoft Edge InPrivate mode. This protects user data and deletes the browsing history, temporary internet files, and cookies once the session has ended or is reset.

  • Automatic browser session reset Microsoft Edge kiosk mode has a built-in timer, which resets the browser session to the default URL after 5 minutes of idle time.

  • Default URLs You must configure the URL to load when the kiosk session launches. The URL sets the Home button, Start page, and New Tab page.

  • Assigned access required Kiosk mode policy settings for Microsoft Edge are not applied unless Microsoft Edge is run using assigned access.

Configure Kiosk Mode

To set up a single-app device using Microsoft Edge kiosk mode on a device running Professional, Enterprise, or Education edition, follow these steps:

  1. On the kiosk device, select Start, search for kiosk, and then select Set up a kiosk (assigned access).

  2. On the Set up a kiosk page, select Get started.

  3. Enter a name to create a new kiosk local account and select Next.

  4. On the Choose a kiosk app page, select Microsoft Edge and then select Next.

  5. Select how Microsoft Edge displays when running in kiosk mode:

    1. As a digital sign or interactive display

    2. As a public browser

  6. Select Next.

  7. Enter the URL to load when the kiosk launches.

  8. Configure the idle time before Microsoft Edge resets (options include never, five minutes to 24 hours), and select Next.

  9. On the You’re done! page, select Close.

  10. Review the settings on the Set up a kiosk page. Under Advanced settings, you will see that if the device crashes, no error message will be displayed, and the device will automatically restart.

  11. Restart the device for Microsoft Edge kiosk mode to run.

Note Microsoft Edge Kiosk Mode First Run

The Welcome To The Best Windows Ever page will appear the first time you run Microsoft Edge kiosk mode. You should end this session by selecting the End Session button and then selecting Yes, which will restart Microsoft Edge and display the configured home page.

To end Microsoft Edge kiosk mode, you need to select Ctrl+Alt+Delete and then sign in to the device using another account. Once kiosk mode is enabled, the device will always automatically sign in and launch the configured app as a kiosk using assigned access.

To disable using Microsoft Edge as a kiosk using assigned access, follow these steps:

  1. On the kiosk device, select Ctrl+Alt+Delete.

  2. On the sign-in screen, sign in using another account.

  3. Select Start, search for kiosk, and then select Set up a kiosk (assigned access). (If Search is not available, you can access Set up a kiosk in Settings app > Accounts > Other users.)

  4. On the Set up a kiosk page, under kiosk Info, select the kiosk username.

  5. Select Remove kiosk.

  6. On the Remove kiosk page, select Remove.

Need More Review? Deploy Microsoft Edge Kiosk Mode

This Microsoft resource provides additional information relating to deploying and configuring Microsoft Edge kiosk mode using GPOs and Microsoft Intune, including a comprehensive list of the Microsoft Edge policies that you can use to enhance the kiosk experience. Visit https://docs.microsoft.com/en-us/deployedge/microsoft-edge-configure-kiosk-mode.

Ie Mode On Microsoft Edge

You have seen how Microsoft Edge offers safer browsing for modern websites and apps, but the majority of the web—including company intranet sites—is still using older versions of HTML, ActiveX controls, and unsupported third-party add-ins. Internet Explorer 11 (IE11) is included with Windows 10 to allow users to continue to access these websites in a supported, safe, and secure way.

IE mode on Microsoft Edge is a business-focused feature that allows you to operate a dual-browser experience, using Microsoft Edge as your default browser but automatically switching to use the Trident MSHTML engine from IE11 for legacy sites that cannot be viewed in Microsoft Edge.

It is unrealistic to expect enterprises to permit viewing of websites and apps that can only be viewed by Microsoft Edge. We can expect that newer development projects will be written using modern web standards, which will be supported by Microsoft Edge.

For widespread compatibility problems with your popular, or required, websites and apps opening in Microsoft Edge, you can populate the Enterprise Mode Site List with these sites so that they seamlessly open in IE mode. Once the user finishes browsing the site, they can continue to browse using Microsoft Edge.

Using IE mode allows you to continue to use Microsoft Edge as your default browser, while also ensuring that websites and apps needed by your users continue working.

IE mode includes the following features:

  • Web app and website compatibility Allows many legacy web apps to run unmodified within Microsoft Edge.

  • Enterprise Mode Site List Manager Provides a management tool for website lists.

  • Centralized Control Specify the websites or web apps that IE Mode will use and store this XML file on a website or network, or you can store it locally.

  • Integrated Browsing Once set up, users can browse the web normally, letting the browser change modes automatically.

  • Data Gathering IE mode can be used to collect website compatibility issues from your users’ browsing activity, which you can use to add URLs to your central site list.

Configure Ie Mode

To enable and configure IE mode for Microsoft Edge, first download and install the latest Microsoft Edge Policy Template from https://www.microsoft.com/en-us/edge/business/download. Then use the following steps:

  1. Open Group Policy Editor.

  2. Select Computer Configuration > Administrative Templates > Microsoft Edge.

  3. Select Configure Internet Explorer integration.

  4. Select Enabled.

  5. Under Options, as shown in Figure 1-30, set the drop-down value to:

    1. Internet Explorer mode, if you want sites to open in IE mode on Microsoft Edge

    2. Internet Explorer 11, if you want sites to open in a standalone Internet Explorer 11 window

    3. None, if you want to stop users from configuring Internet Explorer mode via edge://flags or through the command line

  6. Select OK or Apply to save this policy setting.

This screenshot shows the Configure Internet Explorer Integration Group Policy page. The Configure Internet Explorer Integration policy is enabled and a drop-down menu shows the possible options of Internet Explorer 11, Internet Explorer Mode, and None. On the right side of the screen is the Help information relating to the Configure Internet Explorer Integration GPO.

FIGURE 1-30 IE Mode Site List GPO

Once you have enabled Internet Explorer mode, you can configure the IE Mode.

In the Site List XML file, all sites that have the element <open-in>IE11</open-in> will open in IE mode. To create or reuse a Site List XML file, use the following steps:

  1. Open Group Policy Editor.

  2. Select Computer Configuration > Administrative Templates > Windows Components > Internet Explorer.

  3. Double-click Use the Enterprise Mode IE website list.

  4. Select Enabled.

  5. Under Options, type the location of website list. You can use one of the following locations:

    1. (Recommended) HTTPS location: https://iemode/sites.xml

    2. Local network file: \networksharessites.xml

    3. Local file: file:///c:/Users/<user>/Documents/sites.xml

  6. Select OK or Apply to save these settings.

Need More Review? Use IE Mode to Improve Compatibility

To learn more about using and configuring Microsoft Edge in IE mode and the Enterprise Mode Site List, visit this Microsoft website article at https://docs.microsoft.com/en-us/deployedge/edge-ie-mode.

Configure Internet Explorer

Although Microsoft Edge is suitable for most users when browsing modern websites, Internet Explorer 11 is included to provide backward compatibility for websites that require features currently not supported in Microsoft Edge. Because your users might use both browsers, it is important to know how to configure both Microsoft Edge and Internet Explorer.

Internet Explorer contains a number of security and privacy features that can help make browsing safer. Specifically, the Protected Mode, InPrivate Browsing, and InPrivate Filtering features help maintain user privacy, whereas the Windows Defender SmartScreen helps guard against malicious websites and software. To help your users get the best from Internet Explorer, you must know how to configure these and other settings.

Note Download Internet Explorer 11

If you have removed Internet Explorer 11, you can download it from the Microsoft Store or from the download page at https://docs.microsoft.com//troubleshoot/browsers/how-to-repair-or-reinstall-ie.

To access Internet Explorer settings, open Internet Explorer and select the Tools menu (cog), as shown in Figure 1-31.

This screenshot shows the Tools menu of Internet Explorer with the options of Print, File, Zoom, Safety, Open With Microsoft Edge, Add site to Apps, View Downloads, Manage add-ons, F12 Developer Tools, Go to pinned sites, Compatibility View settings, Internet options, and About Internet Explorer.

FIGURE 1-31 Accessing Internet Explorer settings

You can then choose from among the following options:

  • Manage Add-Ons Enable enhancements to some websites, such as providing toolbars and extensions, search providers, multimedia support, and enhanced content. Use this option to enable and disable add-ons.

  • Compatibility View Settings Most websites render as intended in Internet Explorer 11, but some sites use design standards for earlier versions of Internet Explorer. If you encounter websites that do not render correctly, you can use Compatibility View settings to force Internet Explorer to render the website as if it was using an earlier version of Internet Explorer. To render a website using an earlier version of Internet Explorer, from the Compatibility View Settings dialog box, enter the name of the website and select Add.

  • Internet Options To configure additional settings, select Internet Options. This opens the dialog box shown in Figure 1-32.

This screenshot shows the dialog box for Internet Explorer settings. The left most General tab of the dialog box is showing. With the following settings configured; the Home Page is set to http://go.microsoft.com, the Start With Home Page option is selected and Webpages are configured to be displayed in tabs. There are two sections at the bottom of the dialog box. The Browsing History section includes buttons for Delete and Settings and the Appearance section includes buttons of Colors, Languages, Fonts and Accessibility.

FIGURE 1-32 Configuring settings in Internet Explorer

The Internet Options dialog box has the following tabs:

  • General Available options are:

    • Home Page Create home page tabs by entering addresses, each on its own line.

    • Startup Choose Start With Tabs From The Last Session or Start With Home Page.

    • Change How Webpages Are Displayed In Tabs Selecting the Tabs button opens the Tabbed Browsing Settings dialog box, where you can control how tabbed browsing behaves, such as warning you when multiple tabs are closed at once, showing previews for individual tabs in the taskbar, and showing you how to deal with pop-ups.

    • Browsing History This portion of the dialog box includes options to delete elements of browsing history, such as Temporary Internet Files, History, and Caches And Databases.

    • Appearance Four buttons—Colors, Languages, Fonts, and Accessibility—provide you with options for managing the appearance of websites.

  • Security Available options are:

    • Security Zone Settings You can configure the four security zones’ settings. The zones are Internet, Local Intranet, Trusted Sites, and Restricted Sites. You can add or remove websites from these zones and configure the security settings for each zone. The Internet Zone is the default zone for all websites and has medium-high security settings, which allows users to perform most tasks.

    • Enable Protected Mode Protected Mode makes it more difficult for malware to be downloaded, thereby helping to protect users from attack by running an IE process with greatly restricted privileges on Windows 10. It is enabled by default.

  • Privacy Available options are:

    • Sites This option enables you to define cookie handling on a per-site basis.

    • Advanced This option enables you to define whether to accept, block, or prompt for first-party and third-party cookies.

    • Never Allow Websites To Request Your Physical Location Select this option if you want to prevent sites from requesting your physical location.

    • Turn On Pop-up Blocker This setting is enabled by default. The Settings button enables you to configure per-website settings for notification pop-up handling.

    • Disable Toolbars And Extensions When InPrivate Browsing Starts

  • Content Available options are:

    • Certificates This option enables you to view your certificates and trusted publishers.

    • AutoComplete This option enables you to define autocomplete options for the address bar, forms, and usernames and passwords. You can also delete autocomplete history here.

    • Feeds And Web Slices This option enables you to define the default schedule and frequency of when feeds and web slices from online content are updated.

  • Connections Available options are:

    • Dial-Up And Virtual Private Network These settings are for connecting to the internet.

    • LAN Settings This setting allows you to configure script settings and configure IE to use a web proxy server.

  • Programs Available options are:

    • Define How Internet Explorer Opens This setting allows you to configure the default browser.

    • Manage Add-Ons This setting allows you to enable or disable browser add-ons installed on your system.

    • Configure HTML Editing This option allows you to choose the program that you want Internet Explorer to use for editing HTML files.

    • Internet Programs This option allows you to select the programs you want to use for other internet services such as email.

    • Manage File Associations This option allows you to select the file types that you want Internet Explorer to open by default.

  • Advanced Many options are available, enabling you to fine-tune Internet Explorer configuration and behavior. You can also reset Internet Explorer settings to their default condition.

Although you can manually configure these settings in Internet Explorer on each computer, you can also use more than 1,600 GPOs in an AD DS domain environment to configure the settings for computers at scale.

The GPO settings for Internet Explorer are located in the Computer ConfigurationPoliciesAdministrative TemplatesWindows ComponentsInternet Explorer node.

There are 11 child nodes within the main Internet Explorer node, as shown in Figure 1-33, including GPOs that control privacy, compatibility view, and security features. You can configure the same settings on the User Configuration node if necessary.

This screenshot shows the Local Group Policy Editor. A menu on the left hand side shows the Internet Explorer folder selected. On the right hand side all of the possible Local Policy settings for Internet Explorer are listed with the Turn Off Favorites Bar setting selected. A short description of the Turn Off Favorites Bar setting is shown at the top of the right pane.

FIGURE 1-33 Internet Explorer Group Policy

Need More Review? Group Policy and Internet Explorer 11

To review further details about the GPO settings available for Internet Explorer 11, refer to the Microsoft website at https://docs.microsoft.com/internet-explorer/ie11-deploy-guide/group-policy-and-ie11.

Internet Explorer 11 will continue to receive security updates through its supported lifespan. Internet Explorer is a component of the operating system and follows the Lifecycle Policy of Windows 10. Internet Explorer 11 bugs will be evaluated by Microsoft on a case-by-case basis.

Microsoft recommends that users use Microsoft Edge as their default browser, and Microsoft supports Internet Explorer 11 for backward compatibility. The latest features and platform updates will only be available in Microsoft Edge.

Implement activation

Activation is a very important part of configuring and managing Microsoft products and remaining within the Microsoft Software License Terms.

In some environments, the activation process will be fully automated, or silent, and it is easy to overlook it. This section explores Windows 10 activation options and procedures that you need to understand.

Like most Microsoft products, Windows 10 requires activation. Activation verifies that your copy of Windows 10 is genuine and that it hasn’t been used on more devices than the license terms allow. Only a valid product key can be used to activate Windows 10. Figure 1-34 shows the current activation status of a computer running Windows 10 Professional.

This screenshot shows a Windows PowerShell window. The PowerShell cmdlet slmgr -dli has been executed, and a Windows Script Host pop-up dialog box shows the license status of the device.

FIGURE 1-34 Viewing the activation status of Windows 10

You can activate Windows 10 in several ways—by using an internet-accessible service at Microsoft, by telephone, or by using bulk activation methods such as Key Management Service (KMS) and Active Directory–based activation. This section explores activation and the methods you can use to manage your organization’s Windows 10 activation.

Select an activation method

To activate Windows 10, you might need a product key, a 25-character code that looks like this:

PRODUCT KEY: XXXXX-XXXXX-XXXXX-XXXXX-XXXXX

Not all Windows 10 installations require the use of a product key to activate, relying instead on a digital license (called a digital entitlement in Windows 10, Version 1511). A digital license is a method of activation in Windows 10 that doesn’t require you to enter a product key; instead, digital licenses are connected to your Microsoft account. Once your PC is connected to the internet and you log into your Microsoft account, the activation takes place.

You must use a product key for activation when:

  • You purchase Windows 10 from a retail store or authorized reseller, either as a physical product or as a digital download.

  • You do not have a digital license.

  • Your organization has a Microsoft volume licensing agreement for Windows 10.

  • You purchase a new device on which Windows 10 is preinstalled.

You do not need a product key for activation and can rely on a digital license when:

  • You upgrade to Windows 10 from an eligible device running a genuine copy of Windows 7 or Windows 8.1.

  • You purchase Windows 10 from the Microsoft Store.

  • You purchase Windows 10 Pro upgrade from the Microsoft Store.

  • You use Windows 10, version 1803 or later on a device with a firmware-embedded activation key.

  • You are a Windows Insider and upgrade to the newest Windows 10 Insider Preview build on an eligible device that was running an activated earlier version of Windows and Windows 10 Preview.

The method you use to activate Windows 10 is determined by a number of factors, including how you obtained Windows 10 and whether your organization has a volume license agreement in place with Microsoft. The following scenarios determine how you activate Windows 10:

  • Retail If you purchase Windows 10 from a retail store or from an authorized retailer, it should come with a unique product key, which can be found on a label inside the Windows 10 box. For a digital copy of Windows 10, you should have access to the product key, which may be stored in a digital locker accessible through the retailer’s website. You can enter the key during or after installation to activate your copy of Windows 10.

  • OEM If you purchase a new computer on which Windows 10 is preinstalled, it comes with a product key, which is included with the device packaging or included as a card or on the Certificate of Authenticity (COA) attached to the device. You can activate Windows by using this product key.

  • Microsoft volume licensing Microsoft offers several volume licensing programs to suit different organizational sizes and needs. These programs support both Active Directory–based activation and KMS.

Volume Activation Services

For large organizations with many hundreds or even thousands of devices, using manual product key entry and activation is impractical; it is both error prone and time-consuming. For these reasons, Microsoft provides three methods for volume activation:

  • Key Management Service (KMS) You can use this Windows Server role service to activate Windows 10 in your organization’s network. Client computers connect to the KMS server to activate, thereby negating the need to connect to Microsoft for activation. It is not necessary to dedicate a server computer to perform activation with the KMS role.

  • Active Directorybased activation A device running Windows 10 that is connected to your organization’s domain network and that is using a generic volume license key (VLK) can use Active Directory–based activation. Periodically, the client must renew the license from the licensing service. Therefore, for the activation to remain valid, the client device must remain part of your organization’s domain. As with KMS, you do not need to dedicate a server to the Active Directory–based activation role.

  • Multiple Activation Key Multiple Activation Key (MAK) uses special VLKs that can activate a specific number of devices running Windows 10. You can distribute MAKs as part of your organization’s Windows 10 operating system image. This method is ideal for isolated client computers, which will benefit from a one-time activation using the hosted activation services provided by Microsoft.

To use either KMS or Active Directory–based activation to manage your volume activations, the Volume Activation Services server role must be running on a Windows Server 2016 R2 or Windows Server 2019 computer and be configured to use either KMS or Active Directory–based activation. You need to activate the role with Microsoft so that the service can activate devices. This step involves entering and validating a KMS host key with Microsoft, either online or by telephone.

An administrator can manage the organization’s volume activations centrally using the Volume Activation Management Tool (VAMT) from a Windows 10 or Windows Server 2016 R2 computer. You can download the VAMT as part of the Windows Assessment and Deployment Kit (Windows ADK).

Activate Windows 10

If you are using one of the volume activation methods, you do not need to perform any tasks on your Windows 10–based devices because Windows 10 will automatically remain in an activated state while the volume license agreement is in place. However, if you are manually managing activation on Windows 10–based devices following installation, you must complete the following procedure:

  1. Select Start > Settings.

  2. Select Update & Security > Activation > Change product key.

  3. In the Enter a product key dialog box, enter your 25-character product key.

  4. On the Activate Windows page, select Next.

  5. When prompted, select Close.

After you have activated Windows 10, you can view the activation status on the Activation tab of the Update & Security section of the Settings app. Also, you can view and manage the activation status of your Windows 10–based product by using the slmgr command. For example, Figure 1-34 showed the result of entering the slmgr -dli command. You can see that Windows 10 Pro is licensed properly.

Activate Windows 10 virtual machines

For Windows 10 virtual machines running on Windows 10, version 1803 or later versions, a new feature called Inherited Activation allows Windows 10 virtual machines to inherit an activation state from their Windows 10 hosts.

When a user creates a new Windows 10 virtual machine (VM) using a Windows 10 local host, the VM will automatically inherit the activation state from a host machine. Inherited Activation requires that both the host computer and the VM are running Windows 10, version 1803 or later and that the host computer has been activated using a Windows 10 E3/E5 or A3/A5 license.

Troubleshoot activation issues

When a device running Windows 10 is not activated, you are presented with a watermark on the lower-right corner of the screen requesting that you activate Windows. Additionally, you cannot personalize the device, such as changing wallpaper, accent colors, lock screen, themes, or sync settings between devices.

Unlike earlier versions of Windows, there is no grace period for how long you can use Windows 10 without activation. In the Windows 10 license agreement, users are authorized to use Windows 10 only if they are properly licensed and the software has been properly activated with a genuine product key or by another authorized method.

If you are having trouble activating Windows 10, you could try these actions to resolve common activation issues.

Volume License Activation Renewal

If you are using one of the volume activation methods, and your device falls out of activation, you should ensure that the device has network connectivity and that the user has signed onto the device successfully using their corporate credentials. If the activation process does not trigger automatically within two hours, there may be an issue with KMS.

Client computers that use KMS must have their activation status renewed at least once every 180 days. Clients achieve renewal by connecting to the KMS host located on the network. By default, devices will attempt to renew their activation every seven days following a reboot or restart of the KMS client service. If KMS activation fails, then the client will retry every two hours, and after 180 days have elapsed following activation, the device will fall out of activation.

If client devices are within the renewal window but fail to automatically activate (perhaps they are present on the network for only a short time), you can force a manual activation while the device is on the network by running or scripting the command slmgr /ato using administrative privileges.

Checking Activation Status

To check activation status in Windows 10, follow these steps:

  1. Open the Settings app.

  2. Select Update & Security and then select Activation.

  3. View the activation status.

  4. If Windows 10 isn’t activated, select the Troubleshoot link, shown in Figure 1-35.

This screenshot shows the Activation screen of the Settings App. The available settings are displayed on the left side, with the Activation tab contents displayed on the right side. The activation status of the Windows device is displayed. At the top of the screen the text states unable to reach Windows activation servers. Below this text is a link to Troubleshoot and another link to Change Product Key.

FIGURE 1-35 Troubleshoot activation

Activating Windows 10 For The First Time

Windows 10 comes preinstalled with most new Windows devices. These devices will automatically activate once the device is connected to the internet.

If you manually install Windows 10 on a device that has not previously had an activated copy of Windows 10 on it, you’ll need to use a valid product key to activate the device. This scenario also covers if you install a different edition of Windows 10 that wasn’t previously activated on the device. For example, if you install Windows 10 Pro on a device that had Windows 10 Home installed on it, then you will need to provide a valid Windows 10 Pro product key to activate the device.

Activating After Reinstalling Windows 10

If you need to reinstall Windows 10, this could cause issues with your activation status depending on how Windows 10 was originally installed on your device.

If you bought Windows 10 from the Microsoft Store, or if you activated a free upgrade to Windows 10, then you have a digital license for the device.

As long as you reinstall the same edition of Windows 10 onto your device, you won’t need a product key. If you’re asked to enter a product key during reinstallation, you should skip this step. Windows 10 will automatically activate online after the installation is complete.

Activation Issues After A Hardware Configuration Change

If significant hardware changes are made to a device (such as replacing the motherboard), Windows 10 might fall out of activation. Devices running Windows 10, version 1607 or later that have been used with a Microsoft account will have a digital license linked to the device. If the activation error codes 0x803f7001 or 0xC004C008 appear on the Activation page of the Settings app, you should use the Activation troubleshooter to reactivate Windows.

If the motherboard was replaced under warranty—by the OEM, for example—then the device should reactivate automatically, or a replacement product key should have been provided.

Note Firmware Upgrade

Consider checking whether the motherboard manufacturer has a firmware update available. This update should be applied prior to installing Windows; otherwise, upgrading the firmware after activation might require the system to fall out of activation.

Activating Refurbished Devices Running Windows 10

A refurbished device running Windows 10 can be activated using the product key on the Certificate of Authenticity label attached to the device. Use the following procedure:

  1. Open the Settings app.

  2. Select Update & Security and then select Activation.

  3. Select Change product key.

  4. Enter the 25-character product key found on the Certificate of Authenticity and follow the instructions.

Use The Activation Troubleshooter

The Activation troubleshooter is available for all users on the Activation tab in the Settings app. If the device has not been activated, running the troubleshooter can locate a digital license linked to the Microsoft account used on the computer and then prompt you to try activation again.

Sometimes when you run the Activation troubleshooter or attempt to activate a device the activation will fail, and an error code and message will be presented to the user.

Common Activation Errors

If you see an error code relating to Windows 10 activation, you can check the list of error codes in Table 1-13 and follow the suggested steps to resolve it. It is not necessary to remember the error codes for the exam, though it is useful to understand the various issues that can arise when activating Windows.

TABLE 1-13 Windows 10 activation errors

Error

Description

0xC004F211

Windows reported that the hardware of your device has changed. Use the Activation troubleshooter to reactivate Windows 10 after you make a hardware change or purchase a new Windows license.

0xC004F212, 0xC004F034, 0xC004F210, 0xC004E016

The product key does not match the installed edition of Windows 10. Reinstall the correct edition of Windows 10 or enter a different product key.

You might also see this error if the current edition of Windows installed on the device doesn’t match the edition of the digital license.

0xC004F213

Windows reported that no product key was found on your device. A digital license is associated with the device hardware, but this is no longer available if the hardware of the device has changed. Use the Activation troubleshooter to reactivate Windows 10 after you make a hardware change or purchase a new Windows license.

0x803f7001 or 0x800704cF

A valid Windows 10 license couldn’t be found to activate Windows 10. If you have a valid product key, select Change Product Key, and then enter the 25-character product key. If you don’t have a valid product key, you will need to purchase a new Windows license.

0xC004C060, 0xC004C4A2, 0xC004C4A2, 0x803FA067L, 0xC004C001, 0xC004C004, 0xC004F004, 0xC004C007, 0xC004F005, 0xC004C00F, 0xC004C010, 0xC004C00E, 0xC004C4A4, 0xC004C4A5, 0xC004B001, 0xC004F010, 0xC004F050

The product key entered can’t be used to activate Windows. Enter a different product key or buy a new product key.

The activation servers were busy; wait a while and then select Activate.

If you upgraded to Windows 10 using the free upgrade offer, Windows 10 should automatically be activated if you didn’t make any significant hardware changes to your device (such as replacing the motherboard).

If you continue to have problems with activation, contact customer support.

0xC004C003

The Windows 10 product key entered isn’t valid. Product keys are unique; if a key has already been used, it’s marked as not valid.

0xC004FC03

If you’re not connected to the internet or your firewall settings are preventing Windows from completing the activation process online, Windows will not be able to activate. You could try to activate Windows by phone.

0xC004E028

This error is shown if a device is already in the process of activation. Wait for the first request to complete.

0x8007267C

This error appears if the device is not connected to the internet or the activation server is temporarily unavailable.

0xD0000272, 0xC0000272, 0xc004C012, 0xC004C013, 0xC004C014

If the activation server is temporarily unavailable, Windows will automatically be activated when the service comes back online.

0xC004C008, 0xC004C770, 0x803FA071

The product key has already been used on another PC, or it’s being used on more PCs than the Microsoft Software License Terms allow.

0xC004F00F

You might see this error if a product key for the Enterprise edition of Windows is used to activate Windows 10 Home or Windows 10 Pro.

0xC004C020

A Volume License has been used on more PCs than the Microsoft Software License Terms allow.

0x8007232B, 0xC004F074, 0xC004F038, 0x8007007B

A product key for the Enterprise edition of Windows has been used to activate Windows 10 Home or Windows 10 Pro, or a work device is trying to activate, but the device is not connected to the workplace’s network.

0x80072F8F

The date and time for the PC is incorrect, or Windows has trouble connecting to the online activation service and can’t verify your product key. Use the network troubleshooter to identify and repair any network problems.

0xC004E003

If third-party software has changed system files, then Windows activation may fail. Restore the system files back to an earlier point in time and try to activate again.

0x80004005

Windows activation has failed. Use the Activation troubleshooter, and if this doesn’t work, you might need to reset your PC.

0x87e10bc6

An error occurred with the activation server or licensing service. Wait a few minutes, try again, and then use the Activation troubleshooter.

Alternatively, launch the Microsoft Store app and if the Microsoft Store app shows there was a problem, select Try Again, which should resolve the issue.

Note Activate Windows by Phone

Sometimes, you will not be able to connect to the internet to complete the activation process. In that case, you can activate Windows 10 by phone. To find your local freephone telephone number, enter SLUI 04 in the search box on the taskbar and select the SLUI 04 command. Select your country and then use the telephone number and installation ID provided to access the automated phone system to activate Windows. Phone activation cannot be used for Windows 10 Pro, Edu, or Windows 10 Pro for Workstations editions.

Configure mobility settings

For users of mobile devices such as the Surface range of Windows 10 tablets and laptops, a priority is to be able to conserve battery life so that extended device use is possible. Mobile devices are often used away from the office or home environment, and it is important to know how to configure power settings in Windows 10 to meet your users’ needs.

Mobile devices can be used to display information, such as PowerPoint presentations during meetings, and enabling the presentation settings within Windows 10 can configure the device for a presentation and reduce distractions and interruptions.

Configure basic power options

You can control Windows 10 power settings in several ways. On a mobile device, you can configure basic power options by using the Power & Sleep tab in the System Settings app, as shown in Figure 1-36.

This screenshot shows the Power and Sleep area of the Settings App. On the right side of the screen options for configuring Screen and Sleep settings are displayed. Including drop down boxes for Screen settings of On Battery Power Turn Off After (set to 15 minutes) and When Plugged in Turn Off After (set to 25 minutes). Drop-down boxes for Sleep settings include On Battery Power PC Goes to Sleep After (set to 15 minutes) and When Plugged in PC Goes to Sleep After (set to 25 minutes).

FIGURE 1-36 Power & Sleep options

On the Power & Sleep tab, you can configure the following options:

  • Screen Available options are:

    • On battery power, turn off after Select a value or choose Never.

    • When plugged in, turn off after Select a value or choose Never.

  • Sleep Available options are:

    • On battery power, PC goes to sleep after Select a value or choose Never.

    • When plugged in, PC goes to sleep after Select a value or choose Never.

You can configure additional power options by selecting the Battery tab, as shown in Figure 1-37, and setting the following options:

  • Overview View estimated battery time remaining.

  • Battery saver Configure when Battery Saver is enabled, implement Battery Saver until the next charge, and configure lower screen brightness while the device is using Battery Saver.

  • Battery usage per app View a report showing battery usage over the preceding 24 hours or one week.

This screenshot shows the Battery area of the Settings App. On the right side of the screen the Battery is shown to be at 100% power and there are options for configuring the Battery Saver and Battery Usage per App. In the Battery Saver area there is a toggle button set to On to enable the Battery Saver feature and a drop down for Turn Battery Save on Automatically At is set to Always. A checkbox is selected for the setting Lower Screen Brightness While in Battery Saver. In the Battery Usage Per App section a Time Period drop down is set to 1 Week and there is a list of apps and their battery usage percentages of Google Chrome (59%), Roblox Game Client (13%), Skype (9%) and Discord (6%).

FIGURE 1-37 Battery options

Configure power plans

In addition to the battery settings available within the Settings app, Windows 10 provides access to configure a power plan. By default on Windows 10, version 1709 (Fall Creators Update), you are shown only the Balanced power plan.

Previous versions of Windows 10 offered the following plans:

  • Power Saver

  • Balanced

  • High Performance

  • Ultimate Performance

You can access the power plan settings from the Settings app by selecting System > Power & Sleep, and then selecting the Additional Power Settings link.

You can create a new power plan by selecting Create A Power Plan and then configuring basic options, such as whether your device will prompt you for a password when it wakes up, and what the power buttons and lid do on your computer. To reconfigure a plan, select Change Plan Settings. In the settings options, you can also choose Change Advanced Power Settings to configure detailed plan settings.

Windows 10 Pro For Workstations

If you’re running Windows 10 Pro for Workstations, there is an additional Ultimate Performance power plan scheme available. This plan is intended to be used on high-end workstation devices that demand increased performance. The policy implements fine-grained power management techniques that allow devices to run at maximum performance by removing the power management, performance, and efficiency trade-offs that are normally present in Windows 10.

Unless you are using the Windows 10 Pro for Workstations edition, the Ultimate Performance power plan will be hidden in Power Options. The plan is also not available on battery-powered devices.

Configure Power Settings

You can exert more granular control over your computer’s power settings by using the Additional Power Settings link in the Settings app or by opening the Power Options item in Control Panel. You can switch power plans, and you can also configure these options:

  • Choose What The Power Buttons Do This option enables you to specify the actions to be taken when the power button on the device is pressed.

  • Choose What Closing The Lid Does This option enables you to specify the actions to be taken when the device lid is closed.

  • Create A Power Plan This option enables you to create a new device power plan with custom settings.

  • Change When The Computer Sleeps This option enables you to specify the idle time delay before the system automatically puts the device into sleep mode.

If you aren’t already familiar with these features, take some time now to explore them. Be sure to create your own personal power plan by using the Create A Power Plan option because you might see something about that on the exam. Additionally, you’ll need to know how to monitor battery usage from the Notification area of the taskbar and how to change common mobility settings, such as the power plan type and display brightness.

Using Powercfg.Exe

Powercfg.exe is a command-line tool you can use to configure and manage power settings. Using Powercfg.exe, you can view the power plans available and export power plans. Powercfg.exe can be useful when configuring a batch of devices, each with the same hardware specifications, such as a rollout of new laptops. You would create a custom power plan on one device, and then export the power management plan to a file using Powercfg.exe. You would then import the plan to the other devices using either Powercfg.exe or Group Policy.

To get a list of the available power plans using this command, enter powercfg.exe list at a command prompt. If you haven’t yet created any custom plans, you’ll only see the default plan in Windows 10, as shown in Figure 1-38. Choose the plan to export and note the GUID value. To export the policy, open an elevated command prompt, and run powercfg.exe export power.pow GUID (where the GUID value used is the plan that you want to export). The plan that is enabled has an * character at the end of the scheme.

This screenshot shows a Command Prompt window running powercfg.exe. The executable has been ran and the information of Active, Balanced and the Power Scheme GUID (which is a 32 digit hexadecimal number) is shown.

FIGURE 1-38 Windows 10 power plan(s), as shown by Powercfg.exe

Need More Review? Powercfg Command-Line Options

For more information about Powercfg.exe command-line options, visit https://docs.microsoft.com/windows-hardware/design/device-experiences/powercfg-command-line-options.

There are some other parameters you can use with Powercfg.exe. You should review these so that you are familiar with them.

  • changename Modifies the name of a power scheme and optionally, its description

  • -delete Deletes the power scheme with the specified GUID

  • -setactive Makes the specified power scheme active on the system

  • /deviceenablewake and /devicedisablewake Enables or disables a device from waking the system from a sleep state

  • /systempowerreport Generates a diagnostic system power transition report

  • /batteryreport Generates a report of battery usage characteristics over the lifetime of the system

Some of the modern reports, such as the battery usage or system power reports, are generated in HTML format and provide a huge amount of detail, which is invaluable if you are troubleshooting issues with battery life or device power consumption.

Creating Power Policies

You can use Group Policy to set policies related to the available power plans. Use the Group Policy Management Editor to navigate to Computer ConfigurationAdministrative TemplatesSystemPower Management. When you expand Power Management in the left pane, you can see the additional containers: Button Settings, Energy Saver Settings, Hard Disk Settings, Notification Settings, Power Throttling Settings, Sleep Settings, and Video And Display Settings. In the right pane, you can see two options: Specify A Custom Active Power Plan and Select An Active Power Plan, as shown in Figure 1-39. For a custom power plan, you need to supply the GUID from the power plan.

This screenshot shows the Local Group Policy Editor. A menu on the left-hand side shows the Power Management folder selected. On the right-hand side all of the possible Local Policy settings for Power Management are listed with the Select An Active Power Plan setting selected. A short description of the Select An Active Power Plan setting is shown at the top of the right pane.

FIGURE 1-39 The Power Management node in the Local Group Policy Editor

When you select one of the seven nodes under Power Management, more options appear. You can control every aspect of power management here. For instance, in the Sleep Settings node, you can configure, enable, and disable the following (and more):

  • Specify The System Sleep Timeout (Plugged In) Enables you to specify the period of inactivity before the system is put into sleep mode while plugged into a power outlet

  • Specify The System Sleep Timeout (On Battery) Enables you to specify the period of inactivity before the system is put into sleep mode while running on battery power

  • Require A Password When The Computer Wakes (Plugged In) Specifies whether the user is prompted for a password when the system resumes from sleep while plugged into a power outlet

  • Require A Password When The Computer Wakes (On Battery) Specifies whether the user is prompted for a password when the system resumes from sleep while running on battery power

  • Allow Standby States (S1 S3) When Sleeping (Plugged In) Specifies whether a device can use standby states other than hibernate when putting the computer in a sleep state while plugged into a power outlet

  • Allow Standby States (S1 S3) When Sleeping (On Battery) Specifies whether a device is able to use standby states other than hibernate when putting the computer in a sleep state while running on battery power

You should review these policies in each node to familiarize yourself with the various options available.

Viewing Process Power Usage

A new feature within Task Manager allows you to view the instantaneous power usage of apps and services using your device’s power.

Task Manager now includes two new columns in the Processes tab, as displayed in Figure 1-40, to show the energy impact of the running process on your system. You can use this information to determine the levels of power that apps and services are using. Task Manager considers the processor, graphics, and disk drive power when calculating power usage. Two columns are available, as follows:

  • Power Usage Provides an instantaneous view of apps and services using power

  • Power Usage Trend Provides a power usage trend over the previous two minutes for running apps and services

This screenshot shows Task Manager. On the left hand side processes that are currently running are listed. On the right hand side data for each process is organized as a table of percentages. With percentage data for CPU, Memory, Disk, Network, GPU, GPU Engine, Power Usage and Power Usage Trend calculated for each process.

FIGURE 1-40 View Process Power Usage with Task Manager

Using Task Manager, you can also see if a process has been suspended. To view suspended apps, look in the Status column of the Processes tab for a leaf icon. In Figure 1-40, you can see that the Your Phone app has been suspended. When the cursor is hovered over the leaf icon next to Microsoft Edge, a tooltip describing the status is displayed.

Configure presentation settings

Windows 10 includes a useful utility called the Windows Mobility Center, which can be used to configure various mobility settings, all from one location. Depending on your system, some or all of the following settings, shown in Figure 1-41, will be available on your mobile device:

  • Brightness Enables you to adjust the brightness of your display.

  • Volume Enables you to adjust the speaker volume of your device; also, you can select the Mute check box to silence the speaker.

  • Battery Status Lets you view how much charge is remaining on your battery and change the active power plan.

  • Screen Orientation Lets you change the orientation of your device screen from portrait to landscape, and vice versa.

  • External Display Enables connection of an additional monitor to your device.

  • Sync Center Enables you to sync with external data sources, such as Offline Files.

  • Presentation Settings Lets you turn on presentation settings during a presentation. Enabling presentation settings will temporarily have the following effects:

    • Disables pop-ups and notifications area pop-ups (such as from Outlook)

    • Prevents Windows from going into sleep mode

    • Prevents Windows from turning the screen off

    • Uses the display background and volume settings defined in the Presentation Settings, as shown in Figure 1-41

This screenshot shows the Windows Mobility Center. There are 7 mobility options in two rows (with 4 options on the top row and 3 on the bottom). Each mobility option is displayed in a square box along with a relevant picture and either a button, slider, or drop down available to manage each setting. Settings include Display Brightness, Volume, Battery Status, Screen Orientation, External Display, Sync Center and Presentation Settings.

FIGURE 1-41 Windows Mobility Center

The Windows Mobility Center is only available on mobile devices, such as laptops and tablets.

The Presentation Settings utility, as shown in Figure 1-42, can be used in association with the Windows Mobility Center to configure turning off the screen saver, controlling the volume, and selecting a background image to be displayed when you give a presentation.

This screenshot shows the Presentation Settings dialog box. There are four settings managed by checkboxes of I am Currently Giving a Presentation (enabled), Turn Off The Screen Saver (enabled), Set The Volume To (not enabled) and Show This Background (enabled). The Show This Background setting includes a list of images that can be selected and a Browse button. To the right of the list of images an image thumbnail is displayed and a drop box to manage the position of the image is set to Fit To Screen

FIGURE 1-42 Adjust settings before giving a presentation

You can access the Presentation Settings utility on a mobile device by selecting the Presentation Settings icon or by using these steps:

  1. Select Start and search for Presentation Settings.

  2. In the search results, select Adjust settings before giving a presentation.

  3. The Presentation Settings utility appears, as shown in Figure 1-42.

Configure printers and external devices

To function properly, hardware requires special software designed for Windows 10 to communicate with it. This software is referred to as a device driver. When Windows 10 detects new hardware, the system automatically attempts to install one of the built-in drivers included as part of the operating system. The printer drivers are provided in the Windows 10 Driver Store, or you can use the drivers provided by the OEM, or you can download drivers through Windows Update. A common reason for a computer to fail to start, or to start with errors, is because a device driver is faulty or corrupted.

Install devices

New and updated hardware device drivers are regularly submitted to Microsoft by equipment vendors for testing and cataloging. As part of Windows Update, Windows 10 automatically detects the presence of new device drivers, downloads them, and installs them.

New hardware is typically installed automatically when it’s added to Windows 10; the operating system detects and identifies the new hardware through the Plug and Play feature. Windows 10 supports new hardware connected through a variety of connection methods, including USB, Wi-Fi, and Bluetooth. In addition to backward compatibility for existing and earlier hardware, newer technologies, such as near-field communication (NFC) and Miracast for wireless displays, have built-in support in Windows 10.

For advanced users or for managing or troubleshooting a hardware device issue, you can use Device Manager. Device Manager provides information about each device, such as the device type, device status, manufacturer, device-specific properties, and device driver information.

There are multiple ways to load the Device Manager, including:

  • Right-selecting the Start button and selecting Device Manager

  • Entering Device Manager in Search

  • Opening Control Panel, selecting Hardware And Sound, and then selecting Device Manager

The Device Manager default view (devices by type) is shown in Figure 1-43.

This screenshot shows the Presentation Settings dialog box. There are four settings managed by checkboxes of I am Currently Giving a Presentation (enabled), Turn Off The Screen Saver (enabled), Set The Volume To (not enabled) and Show This Background (enabled). The Show This Background setting includes a list of images that can be selected and a Browse button. To the right of the list of images an image thumbnail is displayed and a drop box to manage the position of the image is set to Fit To Screen

FIGURE 1-43 Device Manager showing the devices by type view

You can expand and explore each node in Device Manager and then select a device. All devices have properties, and you can view them by right-selecting the desired device and selecting Properties. The Properties dialog box for a device is shown in Figure 1-44.

This screenshot shows the device properties dialog box for the Logitech Webcam. The Driver tab is selected. At the top is shown the device name, driver provider and other properties. Below are sections for Driver Details, Update Driver, Roll Back Driver (grayed out), Disable Device and Uninstall Device.

FIGURE 1-44 Device Properties

If you added a new peripheral and Windows 10 does not immediately recognize it, first check that the device is connected properly and that no cables are damaged. You should ensure that the external device is powered on and not in sleep or standby mode. You can also open Device Manager and launch the Scan For Hardware Changes Wizard from the Action menu, which will locate previously undetected hardware and then configure it for you.

Update Device Drivers

Most computers that you’ll work with have different hardware components, such as mother- boards, disk controllers, graphics cards, and network adapters. Fortunately, Windows 10 is designed to work with an extensive list of hardware devices, and it benefits from Plug and Play, which tries to detect new devices automatically and then installs the correct driver software. If Windows has a problem with a device, you must troubleshoot the cause. Troubleshooting can involve locating the correct or updated device drivers and installing them.

Windows 10 automatically attempts to install a device driver, and if one is not available locally, it attempts to locate one through Windows Update. For most systems, devices and their associated drivers remain constant and require no further administrative effort. In the following instances, you might need to update, disable, or reinstate a previous driver:

  • Windows 10 detects that a newer driver is available through Windows Update.

  • You want to install a newer device driver manually, typically obtained from the manufacturer’s website.

  • The device is not performing or functioning correctly with the current driver.

  • A new or beta version of a driver is causing stability issues.

To update a specific driver, select the device in Device Manager and select Update Driver from the Action menu.

Windows 10 offers you two choices for updating the driver:

  • Search Automatically For Drivers

  • Browse My Computer For Drivers

Typically, users allow Windows to locate, download, and install an updated device driver automatically if one is available through Windows Update. This is the default method.

If you have the installation media that came with the hardware, you can use the browse feature to locate the correct driver. The Windows 10 Update Driver Software Wizard can automatically search through the subfolders in the media and locate all the relevant drivers for the device.

If you have already downloaded a specific device driver from the manufacturer, such as a video driver from NVIDIA, you might need to run the driver installation wizard included in the download files, which includes additional software besides the device driver.

If Windows determines that the current driver is the most up-to-date or best driver available, you can confirm the version number of the driver by viewing the properties of the driver in Device Manager. If you have a more recent driver that you want to use, you must manually uninstall the current driver and then manually install the more recent driver.

Remove an individual driver update

Sometimes it is important to remove a device driver completely from the system. It might be corrupted or incompatible with your system. If Windows determines that the driver is valid and up-to-date, it is impossible to use another device driver while the current driver is present. To uninstall an unwanted device driver, use the following steps:

  1. Open Device Manager.

  2. Locate the device with the problem driver, right-select it, and choose Uninstall device.

  3. In the Uninstall device dialog box, select Uninstall.

If the item relates to an unwanted Windows Update, use the following steps:

  1. Open Settings, select Update and Security, and on the Windows Update tab, select View update history.

  2. Select Uninstall updates. The Installed updates page appears, and you should locate and uninstall the unwanted update by selecting it from the list and then selecting Uninstall.

If the driver will not uninstall, try restarting the computer and attempting the procedure again. Only as a last resort should you try to delete the software manually. You can use the PnPUtil.exe command-line tool and remove the INF files that are associated with the device as shown:

PnPUtil.exe -a -d <path to the driver> <drivername>.inf

Note Driver Installation and Removal are Administrative Functions

You must use administrative privileges to install or uninstall a device or driver package by using Device Manager.

Because different hardware types have different functions and features, review the tabs on the Properties screen. Not all devices have the same tabs, and some devices do not offer the ability to view or modify the device driver.

Configure and manage printers

Printers offer the ability to print documents, pictures, webpages, and much more. You need to understand how to install a printer and configure it for use by the Windows 10 user. When you connect a modern printer via USB directly to a device, Windows 10 will automatically discover and download the most appropriate driver. For a printer that is required to be shared from the Windows 10 device or attached directly to the network, additional configuration may be required to enable other devices to print to it.

Most modern printing devices support Plug and Play, but a device that offers wireless or network-attached printing must be configured using the Add Printer Wizard or the specialist software provided with the printer.

Windows 10 includes an optional Print Management app to manage printers when Windows 10 acts as a print server. Most users will use the Printers & Scanners options in the Settings app, which provide basic printer management such as Add, Remove, and Set As Default Printer.

You still have previous printer tools in the Devices And Printers section of Control Panel or from the link at the bottom of the Printers & Scanners options in the Settings app. The Devices And Printers Control Panel item is the same interface as in previous versions of Windows. This section focuses on the new features relating to printing with Windows 10.

Manage printers by using Print Management

The Print Management console is available for you to manage your print devices from a single management console. Print devices connected to your PC can be shared, and you can manage the properties of the device. If you are using a Windows 10 Pro and Enterprise edition version, you will need to add the Print Management Microsoft Management Console (MMC), displayed in Figure 1-45, using the following steps:

  1. Select the Windows key+R to launch the Run dialog.

  2. In the Run dialog box, type printmanagement.msc and press Enter to open the Print Management console.

A screenshot shows the Print Management console in Windows 10. There are more than 10 printers listed. The administrator has selected the NPI86DC93 (HP LaserJet Professional P1102w) printer.

FIGURE 1-45 Managing printers

If Print Management fails to open and you receive an error message, that means you must add the Print Management Console feature via the Optional Features applet in the Settings app as follows:

  1. Open the Settings app.

  2. Select Apps.

  3. Select Optional features.

  4. To add a feature, select the +Add a feature link at the top of the page.

  5. On the Add an optional feature page, select Print Management Console.

  6. Select Install.

The Print Management console offers you a single location to perform the following printer-related management tasks:

  • Add and delete print devices

  • View printers and print servers

  • Add and remove print servers

  • Add and manage print drivers

  • Deploy printers using Group Policy

  • Open and manage printer queues

  • View and modify status of printers

  • Use the filter feature to view printers based on filters

If you right-select a printer, you are presented with a list of some action items that can be performed on the selected printer. These include the following tasks:

  • Open Printer Queue

  • Pause Printing

  • Deploy With Group Policy

  • Set Printing Defaults

  • Manage Sharing

  • Print Test Page

  • Enable Branch Office Direct Printing

  • Properties

  • Delete

  • Rename

  • Help

Note Remote Printers

You can use the Print Management console to manage both local and remote printers. Devices And Printers in Control Panel can only manage locally connected printers.

Add and remove print servers and printers

The Print Management console shows your local Windows 10–based printing devices. You can configure the console to manage other Windows-based print servers that are available on your network if you have the appropriate permissions to manage. To add other print servers within Print Management, you must first add them by right-selecting the Print Servers node and then selecting Add/Remove Print Servers.

In addition to managing other print servers, you can add or delete printers locally or remotely on any print server that is added to the Print Management console. You add printers by using Network Printer Installation Wizard, which is similar to the Add Printer Wizard in Devices and Printers.

The Network Printer Installation Wizard enables you to:

  • Scan the local subnet for network printers

  • Add a TCP/IP or Web Services for Devices (WSD) printer by IP address or host name

  • Add a new printer by using an existing port

  • Create a new port and add a new printer

Understand Type 4 printer drivers

To simplify and reduce the complexity of printer drivers, Microsoft uses the new Type 4 printer driver model for Windows 10.

The Type 4 printer driver model allows printer manufacturers to create a single Print Class Driver that supports similar printing features and languages that are common to a large number of printer models and across common printing languages such as PCL, PostScript, and XPS.

Unlike Type 3 drivers, Type 4 drivers are not supplied and downloaded from a print server on demand.

The Type 4 printer driver model simplifies driver operations with the following benefits:

  • Sharing a printer does not require adding additional drivers that match the client architecture.

  • Type 4 drivers support multiple printer models.

  • Driver packages are small and install quickly.

  • OEMs can separate the printer driver from the printer software.

Need More Review? V4 Printer Driver

For more information about Type 4 printer drivers, visit https://docs.microsoft.com/en-us/windows-hardware/drivers/print/v4-printer-driver.

Manage printers by using Windows PowerShell

More than 20 Windows PowerShell cmdlets can be used to manage printers. Some of the most common cmdlets are shown in Table 1-14.

TABLE 1-14 Windows PowerShell printer cmdlets

Cmdlet

Description

Add-Printer

Adds a printer to the specified computer

Add-PrinterDriver

Installs a printer driver on the specified computer

Add-PrinterPort

Installs a printer port on the specified computer

Get-PrintConfiguration

Gets the configuration information of a printer

Get-Printer

Retrieves a list of printers installed on a computer

Get-PrinterDriver

Retrieves the list of printer drivers installed on the specified computer

Get-PrinterPort

Retrieves a list of printer ports installed on the specified computer

Get-PrinterProperty

Retrieves printer properties for the specified printer

Remove-Printer

Removes a printer from the specified computer

Remove-PrinterDriver

Deletes printer drivers from the specified computer

Remove-PrintJob

Removes a print job on the specified printer

Rename-Printer

Renames the specified printer

Restart-PrintJob

Restarts a print job on the specified printer

Resume-PrintJob

Resumes a suspended print job

Set-PrintConfiguration

Sets the configuration information for the specified printer

Set-Printer

Updates the configuration of an existing printer

Set-PrinterProperty

Modifies the printer properties for the specified printer

To list all the available cmdlets, enter the following command into a Windows PowerShell console:

Get-Command -Module PrintManagement

Configure Windows 10 by using provisioning packages

You saw in the initial deployment of Windows 10 that you can use the Windows Configuration Designer tool to create provisioning packages with specific configurations and settings. The Windows Configuration Designer is a component of the Windows 10 ADK. This tool can also be used after deployment to configure Windows 10 without the need for installing a new image. This dynamic provisioning can be useful in small to mid-sized organizations and bring-your-own-device (BYOD) scenarios, which may not use more complex tools such as MDT, Configuration Manager, or Microsoft Intune.

To create a provisioning package that contains the collection of apps and settings customized for your deployment, you use the Windows Configuration Designer tool. The package is then applied to devices. Typical examples of these customizations include:

  • Changing the Windows edition from Professional to Enterprise

  • Configuring VPN and Wi-Fi profiles

  • Enrolling devices in Microsoft Intune

  • Installation of modern applications (Universal Windows Platform apps using the file extension .appx)

The Windows Configuration Designer is wizard driven and allows you to create the provisioning packages in a PPKG file format. The PPKG files created by the Windows Configuration Designer contain the desired customizations and can be applied to Windows 10 either during or after the initial deployment has taken place.

Note Install Windows Configuration Designer

You can install the Windows Configuration Designer app from the Microsoft Store. To install Windows Configuration Designer on older operating systems or in languages other than English, you need to install it from the Windows Assessment and Deployment Kit (ADK) for Windows 10 from here: https://docs.microsoft.com/en-us/windows/configuration/provisioning-packages/provisioning-install-icd.

To create a new provisioning package, use the following steps:

  1. Open Windows Configuration Designer.

  2. On the Start page, as shown in Figure 1-46, choose your desired wizard-based option.

    A screenshot shows the Windows Configuration Designer start page. In the central pane are 6 tiles under the Create heading and to the right under the Recent Projects heading is a single tile named Open.

    FIGURE 1-46 Windows Configuration Designer home screen

  3. Select Advanced Provisioning to configure all the available runtime settings.

  4. Enter a name for your project, and then select Next.

  5. Select the settings you want to configure, based on the type of device, and then select Next.

  6. On the Import a provisioning package (optional) page, you can select Finish to create your project, or browse to and select an existing provisioning package to import to your project, and then select Finish.

  7. In the Available customizations pane, you can configure settings for the package.

Configure Microsoft Store settings

The Microsoft Store is an online portal for acquiring Universal Windows apps. The Windows apps run in resizable windows similar to traditional desktop apps and typically consume less memory and processing demands. You need to know how to manage user access to the Microsoft Store to control the installation and use of these applications. Organizations can also use the Microsoft Store for Business, which enables enterprises to create their own private portal that contains preapproved and custom applications.

Universal Windows apps

The Microsoft Store allows you to access and install Universal Windows apps on all editions of Windows 10. In addition to the memory and processing benefits, the apps can be updated seamlessly and automatically (though you can modify this behavior). Each app installation installs in the background and creates a shortcut in the user’s Start menu under All Apps.

Users with multiple devices can install each Microsoft Store app up to 10 times. After 10 instances, the user will receive a prompt to remove an application from one of their devices.

In Windows 10 version 20H2, the list of provisioned apps includes the following:

  • Alarms & Clock Shows world time and acts as an alarm, stopwatch, and timer

  • Calculator Includes a programmer mode for binary, octal, and hexadecimal values, along with common standard and scientific modes, and a converter for measurements

  • Calendar Keeps track of appointments and other events

  • Camera Captures still images and video

  • Connect Enables you to use your computer as an extended screen from your phone or other device

  • Cortana Is a digital personal assistant

  • Feedback Hub Enables you to share bug reports and suggestions with the Windows development team

  • Get Help Puts you in touch with Microsoft’s Virtual Agent for automated troubleshooting

  • Groove Music Is a music player

  • Mail Creates, sends, receives, and manages email

  • Maps Displays maps and aerial photos along with directions between points

  • Mixed Reality Portal Features a 3D environment to explore and customize with application shortcuts and virtual desktops

  • Microsoft Edge Is the modern web browser in Windows 10

  • Microsoft Solitaire Collection Includes solo card games and online challenges and tournaments

  • Movies & TV Plays videos that you create, purchase, or rent

  • Microsoft News Provides headlines and links for current news on subjects

  • OneDrive Manages synchronization with your OneDrive cloud storage

  • Office Provides details about your Office 365 subscription and lists Office files that you have recently worked with

  • OneNote Is an app for creating, storing, and managing notes

  • Paint 3D Is a 3D version of the classic Paint app

  • Photos Stores, organizes, and displays your collection of pictures

  • Skype Is an app for communicating with others via text message or videoconferencing

  • Snip & Sketch Is a tool for capturing and editing screen images to replace the Snipping tool, which is still included

  • Sticky Notes Provides a place to store notes

  • Tips Offers videos and other instructional material about Windows 10

  • Video Editor Allows you to create new videos

  • Voice Recorder Captures notes in audible form

  • Weather Displays current conditions and detailed forecasts for locations around the world

  • Xbox Game Bar and Xbox Console Companion Connects you to the world of computer gaming

  • Your Phone Connects your Windows 10 device to your Android device

Universal Windows apps are stored in a hidden folder, %ProgramFiles%WindowsApps. You can view this folder, but it is locked so that only Microsoft Store or the Windows System account can view, run, or modify its contents. Each app is located within a subfolder, such as Microsoft.WindowsCalculator_10.2101.10.0_x64__8wekyb3d8bbwe for the built-in Calculator app.

Microsoft Store vs. Microsoft Store for Business

The Microsoft Store for Business allows enterprises to customize a store for their staff to access a curated list of apps. Administrators can purchase, approve, and distribute applications to their staff. In addition to purchasing apps, administrators can upload and make available any Universal Windows apps that will appear in the Microsoft Store app for users.

There are some differences between the Microsoft Store and the Microsoft Store for Business, as shown in Table 1.15.

TABLE 1-15 Microsoft Store vs. Microsoft Store for Business

Microsoft Store

Microsoft Store for Business

Purchasing requires a Microsoft account.

Purchasing requires an Azure AD account.

Each user purchases their own license for an application.

An administrator can purchase multiple application licenses.

You can deploy applications only through the Microsoft Store.

You can deploy applications through the Microsoft Store and by using deployment tools.

The store contains Universal Windows apps only.

The store contains Universal Windows apps, desktop apps, and Android apps.

Available in all Windows 10 editions.

The store is available only in Windows 10 Pro,

Enterprise, and Education editions.

You can disable user access to the Microsoft Store by modifying the registry or by using Group Policy. The steps for using Group Policy are as follows:

  1. Open the Local Group Policy Editor.

  2. In the left pane of the Local Group Policy Editor, navigate to Computer ConfigurationAdministrative TemplatesWindows ComponentsStore.

  3. In the right pane of Store in Local Group Policy Editor, select Turn off the store application or Disable all apps from the Microsoft Store.

  4. Configure the enabled setting in the policy to prevent access the Microsoft Store.

  5. Close the Local Group Policy Editor.

Configure application settings

Universal Windows apps that are part of Windows 10 are built using a common set of development UI guidelines. This allows for a consistent appearance and customization. For all Universal Windows apps, you can view the various app settings in the Settings app.

Examples of options that are available in an app’s settings include:

  • Configuration options Affect the behavior of the app, such as choosing between Celsius or Fahrenheit as default units for temperature in a weather app

  • Changing account settings Settings for notifications or accessibility options in a mail app, for example

  • User’s preferences Settings for sound effects or color themes, for example

  • App information Settings such as privacy policy, help, app version, or copyright information

In the Groove Music app, for example, the settings are accessible by selecting the cog icon in the bottom-left corner, as shown in Figure 1-47. Various settings are included with the app that use the consistent appearance available with all Universal Windows apps.

A screenshot shows the Settings page. Along the left there are several icons, with the settings cog icon selected. There are options to configure settings including Music on this pc, Playback, Media info (set to on) and Display artist art (set to off).

FIGURE 1-47 Groove app settings page

In the Apps section of the Settings app, you have additional settings that you can configure for installed apps. On the Apps & Features page of the Settings app, you can select an app and configure the advanced options. For the Groove music app, the advanced options allow you to configure the following settings:

  • App Permissions Allow the app to run in the background.

  • Defaults Select which apps to use as the default app.

  • Terminate Immediately terminate the app and its related processes.

  • Reset Delete all of the app’s data and reset the app to its defaults.

  • Uninstall Remove the app and its settings from Windows 10.

  • App Add-ons & Downloadable Content List any add-ons that are installed for the app.

In the Default Apps section of the Settings app, you can select which apps you want to use for common operations such as listening to music, viewing pictures, checking mail, and accessing the internet.

To modify an app, select the app icon and then select your preferred default app from the list presented, as shown in Figure 1-48, or choose the option Look For An App In The Microsoft Store and then install a new app.

A screenshot shows the Default apps page within Settings. Along the left there are several options for other app related pages, including Apps & features, Default apps, Offline maps, Apps for websites, Video playback and Startup. In the center pane, Groove Music has been selected under the Music section. In the dialog box there are three choices of app presented; Groove Music (Recommended for Windows 10), Windows Media Player and Look For An App In The Microsoft Store.

FIGURE 1-48 Choose default apps

Configure and manage services

Services are essential to the smooth operation of Windows 10. They perform functions that support other apps. Most services operate at a low level and are not visible to the user; they can even run when no user is signed in. You can view the account that a service uses, such as the Local System account (which has elevated privileges), or a user account, within the Services console.

You need to know how to view installed services, as well as start, stop, and configure them.

View Services console

The tool for viewing the services running on your computer is the Services console, though you can also view running services by using Task Manager. Launching the Services snap-in (Services.msc), as shown in Figure 1-49, with administrator privileges allows you to gain full functionality in the Services console, where you can view service settings, and start or stop services, change the startup type, and make other configuration changes.

A screenshot shows the Services console. One service, Print Spooler is highlighted and on the left pane are links to Stop and Restart the service.

FIGURE 1-49 The Services console

To the left of the list of services is a pane that displays Extended and Standard views. You can select the tab at the bottom of the window to show the extended view, which provides descriptive information of the selected service and includes links for starting, stopping, or pausing the selected service.

Most essential services are configured by Windows to start automatically when your device starts and will be stopped as part of the shutdown process. If you browse the list of services, some are set with the Automatic (Delayed Start) option, which starts the service 2 minutes after the startup completes. This is useful for smoothing the startup process by preventing congestion for system resources during the first few minutes of startup. An additional option is Trigger Start, which allows Windows to run or stop a service as needed in response to other events, such as not running the service unless you enable another service first.

If you are troubleshooting system resources such as memory or other performance issues, you can also stop and restart a service manually. A common example for stopping a service is because it isn’t working properly. For example, if print jobs get stuck in the print queue, you can easily stop and then restart the Print Spooler service, which will often resolve the issue.

Configuring services

In addition to stopping or starting a service, you can review or modify the way a service starts up and what happens if it doesn’t start properly. In the Services console, open the service’s properties by double-clicking the service, as displayed in Figure 1-50.

A screenshot shows the properties dialog box for a service. The General tab is displayed, which shows the services name and description, the startup parameters and buttons for controlling the service.

FIGURE 1-50 Print Spooler Properties

On the General tab, you specify the startup type:

  • Automatic (Delayed Start) The service starts shortly after the device starts.

  • Automatic The service starts when the computer starts.

  • Manual The service doesn’t start automatically at startup; it can be started by a user, a program, or a dependent service.

  • Disabled The service can’t be started.

There are additional startup options on the Log On tab of the Properties dialog box that allow you to specify a sign-in account other than the Local System account.

If you need to configure a Trigger Start option, you will have to configure this using the SC (Sc.exe) command-line program, which communicates with the Service Control Manager.

Recovering services

When services stop working or “fail over,” they can be configured to perform an automatic action, such as restart. Services may stop for various reasons, such as a driver error, network outage, or performance bottleneck. The settings on the Recovery tab of the Properties dialog box allow the service recovery settings to be configured and affect what happens if a service fails.

You can perform a different action the first time a service fails and on the second or subsequent failures. The Recovery tab enables you to assign the following responses:

  • Take No Action The service enters the stop state and the stoppage is entered in the event log.

  • Restart The Service The device waits for the time specified in the Restart Service After box and then tries to start the service.

  • Run A Program The device runs the app you specify in the Run Program section.

  • Restart The Computer This option restarts the device. Once the option is enabled, you can configure additional settings in the Restart Computer Options, such as specifying a message to be broadcast to users warning them of the impending shutdown.

Service dependencies

Services often work with other services, and therefore, if a service stops working, it can have a cascading effect on other services that depend on the functions of the stopped service. You can view the effect of dependent services by attempting to start a service that depends on other services; the dependent services will be started. Similarly, if you stop a service upon which others are dependent, these other services will also be stopped. The dependency information is available on the Dependencies tab of a service’s Properties dialog box.

Viewing services from Task Manager

In Task Manager, the status of a service is available on the Services tab. You can also right-select any service to open a context menu and start, stop, or restart the service. The context menu also allows you to open the Services console, or you can select the Open Services link at the bottom of Task Manager.

You can also display a running service with its process identifier (PID) and then view other programs and services being run under that PID. Only running services will display a PID, as shown in Figure 1-51.

A screenshot shows the Services tab of Task Manager. The EventLog service is selected, and the context menu is displayed with the restart option highlighted.

FIGURE 1-51 Viewing services within Task Manager

Right-selecting one of the services allows you to stop or restart the service. You can also select Go To Details from the context menu to open the Details tab in Task Manager with the particular process (typically, Svchost.exe) highlighted that uses the same PID.

Another method of retrieving a list of services is to use PowerShell. Here, you would use the Get-Service cmdlet, which lists all services on a device. You can refine the PowerShell command to list only running services as in the following example:

Get-Service | Where-Object {$_.Status -eq "Running"}

The following example shows how to start the Application Identity service by using the –Name parameter:

Start-Service –Name "Application Identity"

Chapter summary

  • Windows 10 is available in many editions, including Windows 10 Home, Windows 10 Pro, Windows 10 Pro for Workstations, Windows 10 Enterprise, and Windows 10 Education.

  • Windows 10 in S mode is a special edition of Windows 10 that is a limited, locked-down version of the operating system.

  • Some features of Windows 10 require special hardware or additional configuration, such as biometric sensors or TPM.

  • You cannot perform an in-place upgrade from a 32-bit version of Windows to the 64-bit version of Windows 10.

  • There are multiple methods of implementing Windows 10, including performing clean installations and upgrading a prior version of Windows.

  • You can choose between three upgrade strategies: in-place, side-by-side, and wipe-and-load.

  • You can use a number of tools in Windows ADK, including the Windows Configuration Designer, to customize and distribute Windows 10 settings for deployment throughout your organization.

  • Windows Configuration Designer generates provisioning packages with the .ppkg file extension that can customize Windows 10.

  • You can migrate user and application settings from one device to another by using the USMT.

  • USMT uses ScanState and LoadState to migrate data and can use compression or encryption during the migration process.

  • Windows 10 can be configured with additional language features, including the display language, text-to-speech, speech recognition, and handwriting support.

  • You can use the Lpksetup command-line tool to implement silent-mode language pack installations.

  • Windows 10 requires activation, which can be performed manually or automatically.

  • Microsoft provides a number of ways to manage Windows 10 volume activation.

  • Microsoft provides the Activation Troubleshooter, which can identify issues experienced with activating Windows 10.

  • Windows Hello is a two-factor biometric authentication mechanism built into Windows 10.

  • Dynamic Lock enables you to pair a Bluetooth device, such as an Android smartphone, to your Windows 10 device, which will automatically lock the device when the Bluetooth device is moved away from the PC.

  • You can customize the Start menu, desktop, taskbar, and notification settings individually or by using Group Policy, provisioning packages, or mobile device management.

  • Customizing the Start layout using XML templates and GPOs requires Windows 10 Pro, Windows 10 Enterprise, or Windows 10 Education.

  • Microsoft Edge is a cross-platform web browser for Windows 10 that supports touch devices, inking, reading mode, and secure browsing.

  • Microsoft Edge is the recommended web browser for Windows 10 and includes many features not available with Internet Explorer, including kiosk mode, collections, and extensions.

  • Microsoft Edge kiosk mode allows Microsoft Edge to display a specific site in full-screen mode as used in digital/interactive signage or for public browsing.

  • IE mode on Microsoft Edge allows you to specify Microsoft Edge as the default browser and allows selected websites to open in Edge using the Trident MSHTML engine from Internet Explorer 11.

  • You can install both local and network printers and manage them using the Print Management console.

  • You can configure Windows 10 settings using provisioning packages created in the Windows Configuration Designer.

  • The Microsoft Store allows you to download Universal Windows apps and provision a Microsoft Store for Business portal for your staff to download curated apps.

  • Windows 10 provides several ways to manage power settings, including creating custom power policies, thereby extending the battery life of your users’ devices.

  • Desktop computers running Windows 10 Pro for Workstations can use the Ultimate Performance power plan scheme, which enables the device to run at maximum performance.

  • You can import and export power plans by using the Powercfg.exe command-line tool.

  • You can identify the status of services within the Services console and Task Manager and configure their startup behavior.

Thought experiment

In these thought experiments, demonstrate your skills and knowledge of the topics covered in this chapter. You can find the answers to these thought experiments in the next section.

Scenario 1

Adatum has 2,000 workstations running Windows 8.1. The company plans to implement Windows 10. Adatum management wants to minimize the effects of the changes and it intends to roll out the new operating system over a weekend. All computers are less than two years old and must be running Windows 10 Enterprise at the end of the project.

As a consultant for Adatum, answer the following questions:

1. What is the most appropriate method for Adatum to implement Windows 10?

2. How can you reassure management whether devices meet the minimum system requirements?

3. What deployment method could you use to minimize the disruption to Adatum employees?

4. How would you plan to activate the devices once they are running Windows 10?

Scenario 2

Adatum has recently implemented Microsoft 365 Business with all devices using Windows 10 Pro. The company has a head office with 200 people using desktop computers, a branch office where 25 members of the design team work, and a remote salesforce of 50 people. Each member of the sales team uses a Surface Pro device. Adatum is concerned about security, especially on the mobile devices.

Members of the sales and finance teams need to access the Adatum intranet to produce quotes and manage sales orders. The intranet does not display properly using Microsoft Edge.

Answer the following questions to address Adatum concerns:

1. What sign-on method would you recommend for the mobile devices?

2. What encryption technology could you implement on the mobile devices?

3. How would you recommend the sales and finance team access the Adatum intranet website?

4. How would you enable the Ultimate Performance power plan on the design team desktop computers?

Thought experiment answers

This section provides the solutions for the tasks included in the Thought Experiment section.

Scenario 1

1. An in-place upgrade from Windows 8.1 directly to Windows 10 is supported and recommended by Microsoft and could be performed in the specified time window.

2. Because all devices are less than two years old and currently run Windows 8.1, they already meet the minimum system requirements for running Windows 10.

3. Upgrading the devices directly to Windows 10 by using an in-place upgrade ensures that all user and application settings will be preserved. This approach offers the least disruption to the users.

4. All devices would be automatically activated using the digital license present on the device if they were previously running a genuine version of Windows 8.1.

Scenario 2

1. The Surface Pro devices should be configured to use Windows Hello, with users providing either facial recognition or their Microsoft 365 usernames and passwords for sign-in.

2. The Surface Pro devices are running Window 10 Pro and should be configured to use BitLocker Drive Encryption.

3. Adatum could implement Enterprise Mode so that the Adatum intranet website opens automatically in Internet Explorer 11. All other websites would be opened in Microsoft Edge by default.

4. The design team desktop computers would need to be upgraded to Windows 10 Pro for Workstations for them to use the Ultimate Performance power plan.

..................Content has been hidden....................

You can't read the all page of ebook, please click here login for view all page.
Reset