Index

Symbols

6to4 protocol 162

16-bit applications 18

32-bit Windows 10 version 17

64-bit Windows 10 version 17

802.11 wireless standards 173

A

access. See also data access; See also remote management

administrative 401–403

Task Manager 335–337

to removable devices 207–211

access control entry (ACE) 235

access control list (ACL) 235

accessibility options

configuration 96–97

ACE. See access control entry

ACL. See access control list

Action Center

configuration 89–94

notifications 92–94

Quick Action tiles 90–92

activation

implementing 116–121

selecting method of 117–118

status, viewing 117

volume 118–120

Windows 10 121–122

Active Directory

activation using 119–120

configuration 125–129

files and logs 128–129

Group Policy 131–135

installing on Windows Server 2016 127

organization of 126–127

physical components of 126–127

Active Directory Administrative Center (ADAC) 129–131

Active Directory Domain Services (AD DS) 157, 220, 249

active stylus support 19

Add Hardware Wizard 69–70

Add-PhysicalDisk cmdlet 204

Add-Printer cmdlet 351

Add-PrinterDriver cmdlet 351

Add-PrinterPort cmdlet 351

AD DS. See Active Directory Domain Services

AD DS domain settings 417–419

Add Work or School Account 419

ADKsetup.exe 267

Admin Approval Mode 402

administrative accounts 122–123, 401

administrative privileges 122–123, 401–403

Administrator account 394

administrator privileges 250

advanced management tools 424–439

Device Manager 430–431

MDM Migration Analysis Tool 438–440

Microsoft Management Console 432–434

services 424–429

System Configuration 428–429

Taskpad Views 433–434

Task Scheduler 434–436

Windows PowerShell 436–438

advanced permissions 236–238

Advanced TCP/IP Settings dialog box 149

Airplane mode 90

Allow Telemetry policy 307

answer files 24

anycast addresses 151

App History tab 338–339

application compatibility

for Windows 10 7–9

Application Compatibility tools 7–9

application program interfaces (APIs) 326

applications

allowing through Windows Firewall 167–168

desktop apps 249–254

implementing 248–270

installing 40

Microsoft Store Apps 248–249, 260–266

migrating 38–39

provisioning packages 266–270

startup options 254–258

uninstalling 82

uninstalling or changing 254

updating 326–328

Windows Store apps 326–328

apps. See applications

App-Triggered VPN 161

assigned apps 251

authentication 171

biometric 404–407

configuration 392–423

defined 392

Extensible Authentication Protocol 159

Microsoft accounts 399–401

Microsoft Passport 406–407

multifactor 404–409

picture passwords 407–408

traditonal 404

two-factor 20

user accounts 393–399

Windows Hello 404–406

Windows Hello for Business 404–406

authorization

configuration 392–423

defined 392

Dynamic Lock 409–410

User Account Control 401–403

user credentials 409–412

Automatic Private IP Addressing (APIPA) address 148

Azure Active Directory (Azure AD)

domain join 422–423

Azure subscription 25–26

B

Backup And Restore 378–381

restoring previous versions 388–389

backups

Backup And Restore tool 378–381

File History 385–386

scheduling 379–380

time for 379

WBAdmin 381–383

baseline performance 347–348

basic permissions 236–238

Battery tab 112–113

BCDboot tool 46

BCD Editor (Bcdedit.exe) 34–35

biometric authentication 404–407

biometric devices 21

BitLocker 20

BitLocker Drive Encryption 205–207

recovering encrypted drives 248

BitLocker To Go 206, 207

bloatware 29

bootable USB 47–48

Boot Configuration Data (BCD) Store 34–35

booting

from VHD 44–46

boot partitions 33–35

built-in Windows logs 331

C

Checkpoint-Computer cmdlet 366

checkpoints

virtual machine 111

classless addressing 146

Classless Interdomain Routing (CIDR) 146

clean installation 9, 29–31

Clear-Disk cmdlet 189, 195

Clear-DnsClientCache cmdlet 179

Client Hyper-V 18–19

configuration 107–111

installing role 108

prerequisites 107–108

virtual machines 109–111

client resolver 153

cloud technology 181–182

CMAK. See Connection Manager Administration Kit

collector-initiated subscriptions 333, 334

command-line tools 427–428

command prompt

sharing folders from 225–226

uninstalling updates using 322–323

compatibility

application 7–9

hardware 3–6

Compatibility Administrator 7, 8, 9

computer-aided design (CAD) 181

Computer Configuration 132

Computer Management

user account management with 395–396

computer worms 355

configuration

accessibility options 96–97

Action Center 89–94

Active Directory 125–129

AD DS domain settings 417–419

app startup options 254–258

authentication 392–423

authorization 392–423

convertible devices 80–81

Cortana 98–101

Credential Manager 409–410

data access and usage 214–248

data recovery 362–392

Desktop 86–88

desktop apps 249–254

Device Health Attestation 414–415

Device Manager 430–431

Device Registration 419–422

devices and device drivers 52–77

DirectAccess connections 161–162

disks 182

DNS settings 154–156

domain controllers 127–128

event subscriptions 332–335

Event Viewer logs 329–332

File History 384–386

file sharing 214–217

file system permissions 233–241

file systems 184–187

Group Policy 125–129, 131–135

HomeGroup 220–223

Hyper-V 107–111

Indexing Options 353–354

Internet Explorer 104–107

IPsec 171

IPv4 connections 147–150

IPv6 connections 151–153

local accounts 393–394

Microsoft accounts 399–401

Microsoft Edge 100–104

Microsoft Management Console 432–434

Microsoft Store Apps 262–264

multiple desktops 88–89

name resolution 153–156

network discovery 172

networking 143–180

network locations 162–165

notifications 92–94

OneDrive 228–233, 241–244

picture passwords 407–408

post-installation 77–115

power plans 113–114

power settings 111–114

Powershell 284–286

Quick Action tiles 90–92

recovery drives 363–364

Remote Assistance 276–280

Remote Desktop 281–284

remote management 270–289

removable devices 205–211

requirements 18–21

restore points 374–378

services 424–429

shared folders 223–227

Start 78–80

storage 180–214

Storage Spaces 201–204

system recovery 362–392

System Restore 365–368

taskbar 93–95

Task Scheduler 434–436

tiles 82–83

updates 299–328

User Account Control 121–124, 401–403

user accounts 393–399

user interface 77–96

virtual machines 109–110

volumes 182–184

VPN connections 158–161

Wi-Fi Direct 172–177

Wi-Fi settings 172–177

Windows Defender Credential Guard 410–412

Windows features 258–259

Windows Firewall 165–172

Windows Hello 404–406

wireless networking 174–177

with Group Policy Objects 84–87

workgroups 416–417

Configuration Designer 22

Configuration Manager

for app deployment 253

VPN profiles in 161

configuration service provider (CSP) 415

Connection Manager Administration Kit (CMAK) 160

connection security rules 169, 171

Connect To A Workplace Wizard 158

Continuum 19

Control Panel

Devices And Printers app 55–56

UAC configuration in 123–124

UAC configuration with 402–403

uninstalling updates using 322

user account management in 397

convertible devices

configuration 80–81

Convert-VHD cmdlet 195

core services

apps implementation 248–270

data access and usage 214–248

networking 143–180

remote management 270–289

storage 180–214

Cortana 19

configuration 98–101

enabling 98

requirements 100

Create A HomeGroup Wizard 221

Create A Shared Folder Wizard 224

Credential Manager 409–410

Current Branch (CB) 312–315

Current Branch for Business (CBB) 312–315

custom rules 169

D

DAC. See dynamic access control

DACL. See discretionary access control list

data

migration of 14–15

data access

configuration 214–248

dynamic access control 247

file sharing 214–217

file system permissions 233–241

HomeGroup 220–223

OneDrive 228–233, 241–244

public folders 227–228

shared folders 223–227

troubleshooting 244–248

Data Collection And Preview Builds node 306–307

data collector sets 342–346

data files

backing up 12

data recovery

Backup And Restore 378–381

configuration 362–392

File History 384–387

OneDrive 390–392

previous versions 387–390, 392

troubleshooting 247–248

WBAdmin 381–384

data types

accessible by USMT 40

Default Account 394

default gateway address 144

Defer Windows Updates 306

Delivery Optimization node 307–308

Deployment Image Servicing and Management (DISM) tool 22, 46, 74–76

to add/remove Windows features 49–50

Desktop

customization 86–88

multiple desktops 88–89

desktop apps

configuration 249–254

installation 249–253

uninstalling or changing 254

desktop PCs 181

Details tab 339–340

device drivers

adding packages 74–76

automatic installation 60–61

backward compatibility 69

configuration of 52–77

disabling updates 59, 63–64

download packages 73–74

installation 53–55

package management 71–73, 75–76

pre-installing 71

preventing updates over metered connections 58–59

printers 218–219

resolving issues with 62–66

rollback of 61–62

settings configuration 66–69

signing 69–70

Universal Windows driver 69

unsigned 70

updating 57–59

verification tools 64–66

Device Health Attestation 414–415

Device Installation Settings 60–61

Device Manager 54–55, 64, 66–69, 430–431

Device Properties 55

Device Registration

configuration 419–422

enabling 420–421

requirements 419–420

devices

configuration of 52–77

convertible 80–81

health attestation 20

installation 53–55

inventory and assess 4–5

managing 55–56

provisioning with WIndows Configuration Designer 114–116

selecting Windows 10 edition for 15–18

support for older 68–69

viewing installed 56

viewing settings of 67

Devices And Printers app 55–56

Devices By Connection 67

Devices By Type 67

device security 412–415

Device Health Attestation 414–415

Windows Defender Device Guard 413–414

differencing disks 198–199

DirectAccess clients 162

DirectAccess connections 161–162

DirectAccess server 162

Disable Automatic Restart On System Failure 373

Disable-ComputerRestore cmdlet 366

Disable Driver Signature Enforcement 373

Disable Early-Launch Anti-Malware Protection 373

Disable-NetFirewallRule cmdlet 170

Disable-PnpDevice cmdlet 73

discretionary access control list (DACL) 225, 235

Disk Cleanup tool 75–76

Disk Cleanup utility 360, 377

Disk Management 43, 45, 187–188, 211

creating VHDs with 193–194

disk management tools 187–190

DiskPart 190

disks. See also virtual hard disks

configuration 182

dynamic 183, 211

importing foreign 211

initializing basic 211

replacing failed 213–214

volumes 182–184

disk space 375–376

Dism.exe 259

DNS settings

advanced 155–156

configuration 154–156

document version control 210

domain controllers 125

configuration of 127–128

operations masters 126

read-only 126

domain joins

AD DS 417–419

Azure AD 422–423

offline 418–419

Domain Name System (DNS) server address 145

domain networks 163

domain user accounts 418

drive partitioning 182

driver packages

adding 74–76

downloading 73–74

managing 71–73, 75–76

Driver Store 71

Driver Verifier Manager 65–66

drives

recovery 363–364

DVD installation 22

dynamic access control (DAC)

troubleshooting 247

dynamic disks 183, 211

Dynamic Host Configuration Protocol (DHCP) 23, 148

Dynamic Lock 409–410

E

EAP. See Extensible Authentication Protocol

Ease Of Access settings 96–97

Easy Connect 278

Edb.chk 128

Edb.log 128

Enable Boot Logging Mode 373

Enable-ComputerRestore cmdlet 366

Enable Debugging Mode 373

Enable Low-Resolution Video Mode 372, 373

Enable-NetFirewallRule cmdlet 170

Enable-PnpDevice cmdlet 73

Enable Safe Mode 372, 373

Enable Safe Mode With Command Prompt 373

Enable Safe Mode With Networking 373

encryption 171

BitLocker 205–207, 248

enterprise environment

File History in 387

implementing Windows 10 in 114, 315

activation 116–121

Active Directory configuration 125–129

User Account Control 121–124

Windows Configuration Designer tool 114–116

Recovery options in 370

Enterprise Mode 103–104

Event Properties dialog box 332

event subscriptions

configuration 332–335

creating 334

viewing 333

Event Viewer 178, 426–427

Event Viewer logs 329–332

accessing remotely 335

custom views 331–332

understanding 330–331

exFat file system 185

Exit-PSSession cmdlet 289

Extensible Authentication Protocol (EAP) 159

F

Fast Startup 255–256

FAT32 file system 185

FAT file system 185, 186

feature upgrades 300–301

File Explorer

managing files and folders with 233–234

OneDrive in 229–230

Quick Access 234

sharing folders using 225

File History

backup options 385

configuration 384–386

enterprise considerations 387

recovering files with 386–387

restoring previous versions 388–389

file permissions 234–239

files

backing up and restoring 378–392

fetching with OneDrive 232–233

managing with File Exporer 233–234

previous versions of 387–390, 392

recovering from OneDrive 242–243

file sharing 214–217

HomeGroup 220–223

with OneDrive 241–242

file-sharing networks 156–157

File Sharing Wizard 216–217

file systems

configuration 184–187

exFat 185

FAT 185, 186

FAT32 185

NTFS 185, 186, 205, 380

permissions configuration 233–241

RAW 205

ReFS 185, 186–187, 203, 236

types of 185

firewalls

Windows Firewall 165–172, 215

firmware upgrade 30

fixed provisioning 201

folders

backing up and restoring 378–392

managing with File Exporer 233–234

permissions 234–239

previous versions of 387–390, 392

public 227–228

shared 223–227

foreign disks

importing 211

Format-Volume cmdlet 189

Fresh Start 370–371

Full Control permissions 234

fully qualified domain name (FQDN) 153

G

Get-ComputerRestorePoint cmdlet 366

Get-Disk cmdlet 189, 195

Get-DnsClientCache cmdlet 179

Get-NetFirewallRule cmdlet 170

Get-NetIPAddress cmdlet 150, 152

Get-NetIPv4Protocol cmdlet 150

Get-NetIPv6Protocol cmdlet 152

Get-Partition cmdlet 189

Get-PnpDevice cmdlet 73

Get-PnpDeviceProperty cmdlet 73

Get-PrintConfiguration cmdlet 351

Get-Printer cmdlet 351

Get-PrinterDriver cmdlet 351

Get-PrinterPort cmdlet 351

Get-PrinterProperty cmdlet 351

Get-service cmdlet 428

Get-SmbShareAccess cmdlet 226

Get-SmbShare cmdlet 226

Get-StoragePool cmdlet 204

Get-VHDSet cmdlet 196

Get-VirtualDisk cmdlet 204

Get-Volume cmdlet 189, 196

Get-Volume -FileSystemLabel “System” cmdlet 34

global catalog servers 126–127

globally unique identifiers (GUIDs) 35

Grant-SmbShareAccess cmdlet 226

Group Policy

configuration 125–129, 131–135

settings 133–134

Group Policy Management Console (GPMC) 131

Group Policy Objects (GPOs)

about 132

configuration with 84–87

configuring Remote Assistance with 280

configuring Remote Desktop with 283–284

converting to MDM policies 438–440

creating and applying 134

File History 387

for app deployment 251–252

for DirectAccess connections 161

for securing removable devices 208

for UAC settings 124

for Windows Update 305–308

sections 132

to disable notifications 93

UAC settings 403–404

Windows Hello for Business 407

Windows Store 328

Guest account 394

guest networks 164

GUID Partition Table (GPT) 44, 182

H

hard disk

erasing 368

hard disks. See disks

hard drives 180, 181

failure 212–213

monitoring software 212

replacing failed 213–214

solid state 213

hardware. See also devices

compatibility for Windows 10 3–6

device and device drivers 52–77

installation of new 53–55

requirements for Windows 10 2–6, 18–21

support for older 68–69

high-touch retail media deployment 22

HKEY_CURRENT_USER 14

home folders 396

HomeGroup 416

configuring connections 220–223

connecting to 156–157

creation 221–222

joining 222–223

media streaming with 222

host names 153

Hotspot 2.0 networks 175

Hyper-V

configuration 107–111

installing role 108

prerequisites 107–108

virtual machines 109–111

Hyper-V Manager 192–193

I

ICACLS parameters 239

image-based installation 23

inbound rules 169

incremental build process 308–312

Indexing Options 353–354

inherited permissions 240–241

Initialize-Disk cmdlet 189, 195

in-place upgrades 10, 11

Insider Preview 308–312, 323, 324

installation log file 32

installation media 22–24

Internet Assigned Numbers Authority (IANA) 147

Internet Explorer

configuration 104–107

features 104

Internet Explorer SmartScreen Filter 354

Internet Protocol version 4 (IPv4)

address 144

complex networks 146–147

connection configuration 147–150

default gateway address 144

overview of 144–145

public and private addressing 147

subnet masks 144, 145–147

Internet Protocol version 6 (IPv6)

addressing 151

connection configuration 151–153

overview of 150

Intra-Site Automatic Tunnel Addressing Protocol (ISATAP) 161

IP addressing 153

IPConfig 178

IP-HTTPS protocol 162

IPsec

configuration 171

ISO disc image 33

K

KMS role 118, 119

L

language support 50–52

Laplink 39

Last Known Good Configuration 373

line-of-business (LOB) applications 316

Link Layer Topology Discovery (LLTD) 216

Link-Local Multicast Name Resolution 154

lite-touch installation (LTI) 252

LoadState command 42

local accounts 395–399

configuration 393–394

Local Security Authority 411

LockDown 161

Lock screen 86–87

logical unit number (LUN) 199

Long-Term Servicing Branch (LTSB) 315–317

Long-Term Servicing Channel (LTSC) 16, 316

low-touch deployment 22

Lpksetup command 51–52

LTI. See lite-touch installation

M

malware 209–210

monitoring for 356–357

types of 355–356

understanding 354–355

master boot record (MBR) 182

MDM Migration Analysis Tool (MMAT) 438–440

MDT. See Microsoft Deployment Toolkit

mean time between failures (MTBF) 212

Media Creation Tool (MCT) 32, 47

media streaming 222

memory 346

memory cards 205

metered connections

preventing device driver updated on 58–59

Microsoft accounts

configuration 399–401

connecting to your device 400–401

signing up for 400

Microsoft Active Protection Service (MAPS) 358

Microsoft Assessment And Planning Toolkit (MAP) 3–6

Microsoft Deployment Toolkit (MDT) 249, 252–253, 370

Microsoft Edge

configuration 100–104

Enterpise Mode 103–104

features 100–101

Microsoft Intune

app deployment in 254

VPN connections in 161

Microsoft Management Console (MMC) 187, 271, 342

configuration 432–434

remote management with 286–288

Microsoft Office Online 231

Microsoft Passport 406–407

Microsoft Store 260

update settings 327

Microsoft Store Apps 248–249

blocking 263–264

distributing 265–266

implementing 260–266

installation 261

managing 260–262

settings configuration 262–264

sideloading 264–265

storage location for 262–263

updating 261–262

Microsoft Store for Business 265–266

Microsoft Store for Education 265–266

Microsoft Surface Pro 80

Microsoft Volume Licensing Service Center 317

migration

applications 38–39

for user data and settings 14–15

from previous Windows version 38–42

side-by-side 13

to Windows 10 10–15

user state 39–42

wipe-and-load 13–14

Miracast 19

mirrored volumes 183, 213

MMC. See Microsoft Management Console

mobile device management (MDM) 314, 406, 438–440

mobile devices

locking 409–410

updates 314

monitoring. See also performance monitoring

printers 348–352

real-time 347

system resources 346–348

system stability 358–360

with Windows Defender 354–358

mSATA form factor drive 180

Msconfig.exe 428–429

Msiexec.exe 251

multibooting 36–37

multifactor authentication 404–409

Multiple Activation Key (MAK) 119

multiple desktops 88–89

N

name resolution

configuration 153–156

overview of 153–154

troubleshooting 179–180

native boot 42–43

configuration 33–37

NetBIOS names 153

Net Share 226

Netsh.exe 150, 167, 176

network address translation (NAT) 147

Network And Sharing Center 163, 166, 172, 215

network connections 156–162

DirectAccess connections 161–162

HomeGroup 156–157

VPN connections 158–161

wireless 174–177

network discovery 216

configuration 172

networking

configuration 143–180

connecting to network 156–162

DNS settings 154–156

IPsec 171

IPv4 144–150

IPv6 150–153

name resolution 153–156

network discovery 172

network locations 162–165

troubleshooting 177–180

Wi-Fi Direct 172–177

Wi-Fi settings 172–177

Windows Firewall 165–172

wireless 172–177

network locations

changing profile 164–165

configuration 162–165

overview of 163–164

types 163–164

Network Location Server (NLS) 162

networks

analyzing devices on 4–5

New-NetFirewallRule cmdlet 170

New-PSWorkflowSession cmdlet 289

New-SmbShare cmdlet 226

New-StoragePool cmdlet 204

New-VHD cmdlet 195, 196, 197

New-VirtualDisk cmdlet 204

Notification area 95

notifications 92–94

NSLookup 178

Ntds.nit 128

NTFS file system 185, 186, 205, 380

NTFS inheritance 240–241

NTFS permissions 234–239, 246–247

O

OneDrive 19

blocking access to 243–244

configuration 228–233

desktop app 229–230

fetching files from PC 232–233

file recovery from 390–392

file sharing with 241–242

Previous Versions feature 392

recovering files from 242–243

Recycle Bin 243, 390–391

Search Everything feature 392

synchronization 244

usage configuration 241–244

web portal 231–232

OneDrive Files On Demand 230–231

OneDrive For Business 228–229

Operations Management Suite (OMS) 24–28

operations masters 126

Optimize-StoragePool cmdlet 204

Optimize-VHD cmdlet 195

Optimze-VHDSet cmdlet 196

original equipment manufacturers (OEMs) 29

outbound rules 169

out-of-box experience (OOBE) 370, 422

P

parity spaces 200

passwords

picture 407–408

patches. See updates

Patch Tuesday 318

Pathping 178

PCmover Express 39

performance baseline 347–348

performance bottlenecks 361

performance counters 344

performance issues

troubleshooting 360–362

Performance Monitor

data collector sets 342–346

using 344–346

performance monitoring 329–362

event subscriptions 332–335

Event Viewer logs 329–332

using Resource Monitor 340–346

using Task Manager 335–340

performance object instances 344

performance objects 344, 345

Performance tab 338

personalization 38

Personalization settings 86

picture passwords 407–408

Ping 178, 179

PIN gesture 407

Plug And Play 68

PnPUtil.exe 72–73

port rules 169

post-installation configuration 77–115

accessibility options 96–97

Cortana 98–101

Hyper-V 107–111

Internet Explorer 104–107

Microsoft Edge 100–104

power settings 111–114

user interface 77–96

power plans 113–114

power settings

basic power options 111–112

Battery tab 112–113

configuration 111–114

power plans 113–114

PowerShell 188–190. See also PowerShell cmdlets

creating VHDs with 195–197

for remote management 288–289

management task automation with 436–438

managing services with 428

printer management using 350–351

remote management with 271, 284–286

sharing folders using 226

user account management in 398–399

PowerShell cmdlets

creating simple 437

disk-related 189

enabling 437

file and folder permissions 239

IPv4 networking 150

IPv6 networking 152

print management 350–351

remote management 288–289

Storage Spaces 204

System Restore 366

troubleshooting 178

VHDs 195–197

Windows Firewall 168, 170

PowerShell ISE 196–197

PowerShell Share cmdlets

folder sharing 226

Power & Sleep tab 111–112

Pre-Boot Execution Environment (PXE) 23

predefined rules 169

Previous Versions feature 247, 387–390, 392

principle of least administration 238

printers

adding 56, 219

default behavior 351–352

managing 55–56, 348–352

monitoring 348–352

remote 350

security permissions 219–220

sharing 218–220

viewing installed 56

Printers & Scanners screen 352

Print Management 349–350

Print Management tool 218

Print Spooler 220

private networks 163–164

Processes tab 337

product keys 117

profile folders 396

program rules 169

Programs And Features 258–259

provisioning packages 266–270

applying 269–270

benefits of 267

creating 267–269

management tasks with 267

public folders 227–228

public key infrastructure (PKI) 162

Public network location profile 285

public networks 164

published apps 251

Q

quality of service (QoS) 216

quality updates 300

Quests 311–312

Quick Action tiles 90–92

R

RacTask 359

RAID-5 184

ransomware 355

RAW file system 205

RDP. See Remote Desktop Protocol

read-only domain controllers (RODC) 126

real-time monitoring 347

recovery. See data recovery; See system recovery

recovery drives 363–364

recycle 368–370

Recycle Bin 243, 390–391

redundant storage 213

refresh 368–370

ReFS file system 185

regional support 50–52

Registry Editor (Regedit.exe) 257

registry keys 257

Reliability Monitor 358–360

Remote Assistance 271

configuration 276–280

using GPOs 280

enabling 274–275

offering 278–280

remote management with 280

Request Assistance feature of 276–278

unsolicited 278–280

Remote Desktop 271

configuration 281–284

user 276

with GPOs 283–284

connections 281–283

enabling 275–276

Remote Desktop Protocol (RDP) 271

remote management

configuration 270–289

Remote Assistance 276–280

Remote Desktop 281–284

settings configuration 272–276

tools for 271–272

Windows Powershell 284–286

with MMC 286–288

with Windows PowerShell 288–289

remote printers 350

Remote Server Administration Tools (RSAT) 132

removable devices

configuration 205–211

data loss and theft 207–209

document version control 210–211

formatting 205

malware and 209–210

restricting access to 207–211

securing 205–211

troubleshooting 211–214

Remove Everything 368

RemovePhysicalDisk cmdlet 204

Remove-Printer cmdlet 351

Remove-PrinterDriver cmdlet 351

Remove-PrintJob cmdlet 351

Remove-SmbShare cmdlet 226

Remove-StoragePool cmdlet 204

Rename-Printer cmdlet 351

Repair-VirtualDisk cmdlet 204

Res1.log 128

Res2.log 128

reset 369

Resilient File System (ReFS) 181, 186–187, 203, 236

Resolve-dnsname lon-DC1.adatum.com. cmdlet 179

Resource Monitor

components 341–342

opening 340

Oviewview tab 340

performance monitoring using 340–346

Resources By Connection 67

Resources By Type 67

resource-sharing networks 156–157

Restart-PrintJob cmdlet 351

Restart-service cmdlet 428

restore points 388

configuration 374–378

creating or deleting 376–378

Resume-PrintJob cmdlet 351

roaming profiles 15

rotation lock 90

rules

advanced security 169

creating 170

S

SACL. See system access control list

Safe Mode 376, 428–429

ScanState tool 42

scripts

creating simple 437

enabling 437

Search Everything feature 392

second-level address translation (SLAT) 17

Secure Boot 20

Secure Digital High-Capacity Memory Cards 363

Secure Digital High-Capacity (SDHC) memory cards 205

security

connection security rules 171

credentials 409–412

device 412–415

IPsec 171

permissions 234–239, 245–247

printers 219–220

removable devices 205–211

rules 169

Windows Defender 354–358

Windows Defender Security Center 168

Windows Firewall 143, 144, 163, 165, 165–172, 166, 167, 168, 169, 170, 171, 172, 215, 272, 273, 276, 285, 286, 288, 292, 295, 297

wireless networking 173–174

security features 20–21

security updates 301

Server Manager Tools menu 129

Server Message Block (SMB) 215–216

services

configurable options for 426

configuration 424–429

in Event Viewer 426–427

managing 424–428

Services management console snap-in 424–426

Services tab 340

servicing 300

Set-Disk cmdlet 189, 195

Set-ExecutionPolicy cmdlet 437

Set-NetFirewallRule cmdlet 170

Set-NetIPAddress cmdlet 150, 152

Set-NetIPv4Protocol cmdlet 150

Set-NetIPv6Protocol cmdlet 152

Set-PhysicalDisk cmdlet 204

Set-PrintConfiguration cmdlet 351

Set-Printer cmdlet 351

Set-PrinterProperty cmdlet 351

Set-service cmdlet 428

Set-SmbShare cmdlet 226

Set-StoragePool cmdlet 204

Settings app 322

for VPN connections 160

user account management in 397–398

Setuperr.log errors 32

Setup.exe 14, 32, 250

shadow copies 387–390

shared folders 223–227

creating 224–225

multiple shares 227

permissions 227

public 227–228

Shared Folders snap-in 224–225

shared network folder installation 23

share permissions 223, 225, 227, 246–247

Show Hidden Devices 67

Show Or Hide Updates troubleshooter 63

side-by-side migration 10, 13

sideloading apps 264–265

Sigverif.exe 64–65

single sign-on (SSO) 419

smart cards

virtual 21

SMART monitors 212

software requirements

for Windows 10 18–21

solid-state drives (SSDs) 180, 213

Solutions Gallery 26–27

source-computer initiated subscriptions 333

spanned volumes 183

spyware 355

SRV resource records 126

Standard User Analyzer 7

Start menu

configuration

with Group Policy Objects 84–87

customization 78–80

layout 85

tiles 82–83

Start-service cmdlet 428

startup options 254–258

Startup Settings 62, 373–374

Startup tab 339

state migration 39–42

Stop-service cmdlet 428

storage

configuration 180–214

disk management tools 187–190

disks 182

file systems 184–187

redundant 213

removable devices 205–211

Storage Spaces 199–204

troubleshooting 211–214

virtual hard disks 191–199

volumes 182–184

storage pools 199–201, 201–204

Storage Spaces 186, 199–204

and drive failure 213–214

configuration 201–204

managing with PowerShell 204

optimization 203

storage layouts 200

using 199–201

streaming media 222

striping 184

stylus support 19

subnet masks 144, 145–147

system access control list (SACL) 235

system bottlenecks 361

System Center 2012 R2 Configuration Manager 249

System Center Configuration Manager 370

System Configuration tool 428–429

System Diagnostics 342

System Information tool 184

system partitions 33–35

System Performance 342, 343–344

System Protection

clean up 377

current usage 376

turning off 377

System Protection tab 375

system recovery

Backup And Restore 378–381

configuration 362–392

Fresh Start 370–371

recovery drives 363–364

refresh or recycle 368–370

restore points 374–378

System Restore 365–368

Windows Recovery 371–374

system resources

monitoring 346–348

System Restore 247–248, 365–368

Advanced startup options 367

restore points 374–378

Systems Properties

enabling remote management through 274–276

system stability monitoring 358–360

T

Tablet mode 80–81, 90

taskbar 87

configuration 93–95

Task Manager

App History tab 338–339

Details tab 339–340

performance monitoring with 335–340

Performance tab 338

Performance view 341

Processes tab 337

Services tab 340

Startup tab 257, 339

tabs 336

Users tab 339

Taskpad Views 433–434

Task Scheduler 366

configuration 434–436

Task Scheduler library 359

Temp.edb 128

Teredo protocol 162

theme settings 87

thin provisioning 201

tiles

configuration 82–83

grouping 83

touch-centric operating system 19

Tracert 178

traffic filters 161

trial software versions 29

Trojan horses 355

troubleshooting

data access and usage 244–248

data recovery 247–248

dynamic access control 247

name resolution 179–180

networking 177–180

performance issues 342, 360–362

permissions 245–247

removable devices 211–214

storage 211–214

tools 178

Windows Update 308

Trusted Platform Module (TPM) 20, 407

tunneling technology 161

two-factor authentication 20

Type 4 Print Class Drivers 218–219

U

UEFI Firmware Settings 372

unicast addresses 151

Unified Extensible Firmware Interface (UEFI) 20

Universal Windows driver 69

Universal Windows Platform (UWP) 326

Update Driver Software Wizard 57

Update History page 303

updates

configuration 299–328

settings 301–304

continuous servicing 314–315

Current Branch and Current Branch for Business 312–315

delivery options 303–304

feature upgrades 300–301

history

managing 318–321

viewing 318–319

Insider Preview 308–312

Long-Term Servicing Branch 315–317

mobile devices 314

quality 300

roll back 321–326

security 301

Show or Hide Updates troubleshooter 320–321

uninstalling

in Settings 322

using Control Panel 322

with command prompy 322–323

Windows Store apps 326–328

Update-StoragePool cmdlet 204

upgrade installation 9–15

advantages of 33

disk space for 32

errors 32

from Windows 7 Home 11

in-place 10, 11

migrations 12–15, 38–42

preparing for 10–12

reverting to previous build 323–326

supported paths 10–11

using installation media 31–33

valid upgrade paths 38

Upgrade Readiness 24–28

USB drives

bootable 47–48

USB flash drives 205, 209–210. See also removable devices

USB installation 23

User Account Control (UAC) 401–404

configuration 121–124

user accounts

configuration 393–399

connecting Microsoft account to 400–401

creating 130

default accounts 394

domain 418

local accounts 393–394, 395–399

managing 395–399

User Configuration settings 132

user credentials 407, 409–412

validation of 125

user data

migration of 14–15

User Experience Virtualization (UE-V) 38–39

user interface

Action Center 89–94

configuration 77–96

Desktop customization 86–88

multiple desktops 88–89

Start customization 78–80

taskbar 93–95

user personalization 38

user registry 14

user rights assignments 244–246

user settings

migration of 14–15

syncing 19

Users tab 339

User State Migration Tool (USMT) 15, 39–42, 268

UsmtUtils 41

V

VHDs. See virtual hard disks

VHD Set (VHDS) 192

VHDX 192

virtual desktops 89

virtual hard disks (VHDs)

applying Windows image to 45–46

booting Windows 10 from 44–46

boot options 46

configuration 109

create and configure native boot 43

creating 192–197

differencing disks 198–199

Disk Management to attach 43

formats 192

install Windows 10 to 42–44

MBR-partitioned 45

with Storage Spaces 199–200

working with 191–192

virtual machines

checkpoints 111

configuration 109–110

core components 109

creating 109

Hyper-V 107–111

running 111

vs. multibooting 36

Virtual Secure Mode 21

virtual smart cards 21

viruses 355

volume activation 118–120

Volume Activation Management Tool (VAMT) 119–120

Volume Activation Services 119

Volume Licensing Center (VLC) 31

volumes

configuration 182–184

mirrored 183, 213

simple 183

spanned 183

striping 184

Volume Shadow Copy Service (VSS) 366, 380, 387–390

VPN connections 158–161

VPN profiles 160–161

vssadmin command-line tool 375–376, 389

W

WBAdmin

backup using 381–383

command line reference 382

restoring data using 383–384

WBAmin.exe 382

WDS deployment 23

web browsers

Internet Explorer 104–107

Microsoft Edge 100–104

Web Credentials 409

WEP. See Wired Equivalent Privacy

Wi-Fi Direct

configuration 172–177

Wi-Fi Protected Access (WPA) 174

Wi-Fi settings

configuration 172–177

Windows 7 Home

upgrading from 11

Windows 8.1 33

Windows 10

activation 116–121

advanced management tools 424–439

application compatibility 7–9

booting from VHD 44–46

configuration

for regional and language support 50–52

devices and device drivers 52–77

Fast Startup 255–256

feature configuration 258–259

hardware compatibility 3–6

hardware requirements 2–6, 18–21

implementation of 1

implementing in enterprise environment 114–134, 315

activation 116–121

Active Directory configuration 125–129

User Account Control 121–124

Windows Configuration Designer tool 114–116

incremental build process 308–312

installation 29–52

additional features 48–50

choosing strategy for 21–22

choosing upgrade or clean 9–15

clean 29–31

media 22–24, 31–33

methods 30

migrating from previous Windows version 38–42

native boot scenario configuration 33–37

on bootable USB 47–48

preparing for 1–28

to VHD 42–44

Upgrade Readiness configuration 24–28

upgrades 31–33, 38

Long-term Servicing Branch 315–317

migration strategy 10–15

monitoring 329–362

multibooting 36–37

notifications 92–94

post-installation configuration 77–115

remote management tools in 271–272

requirements for

general features 18–19

reverting to previous build of 323–326

security features 20–21

selecting edition of 1, 15–18

SMB version 215–216

software requirements 18–21

updates

configuration 299–328

user interface customization 77–96

Windows 10 Business Edition 17

Windows 10 Education 16

Windows 10 Enterprise 16

Windows 10 Enterprise LTSC 16

Windows 10 Home 16, 313

Windows 10 Internet of Things (IoT) editions 17

Windows 10 Mobile 17

Windows 10 Mobile Enterprise 17

Windows 10 Pro 16

Windows Assessment and Deployment Kit (ADK) 7, 22, 39, 267

Windows Biometric Framework 21

Windows Configuration Designer tool 114–116

Windows Configuration Designer (WCD) 370

Windows Credentials 409

Windows Defender Credential Guard 410–412

Windows Defender Device Guard 413–414

Windows Defender Security Center 168, 354–358

advanced threat detection 357–358

Fresh Start 370

History screen 357

Home screen 356

scan options 355

Windows Easy Transfer 39

Windows features

installing additional 48–50

using DISM to add/remove 49–50

Windows Features app 48–49

Windows Firewall 215

advanced security 168–171

allowing apps through 167–168

configuration 165–172

enabling remote management in 272–274

Windows Firewall With Advanced Security 168–171

Windows Hardware Developer Center Dashboard portal 69, 71

Windows Hardware Quality Labs (WHQL) 73

Windows Hello 20, 404–406

Windows Hello for Business 21, 404–406

Windows Insider 309–312

Windows logs 331

Windows Management Instrumentation (WMI) 251, 322

Windows Memory Diagnostic tool 361–362

Windows Network Diagnostics 178

Windows PowerShell History 131

Windows PowerShell ISE 438

Windows Preinstallation Environment (Windows PE) 23

Windows Recovery Environment (Windows RE) 371–374

Windows Server 2016

installing Active Directory on 127

Windows Server Update Services (WSUS) 218, 320

Windows Store apps

updating 326–328

Windows System Image Manager (Windows SIM) 23–24

Windows Update 57, 59

GPOs for 305–308

settings 301–304

troubleshooting 308

viewing list of installed packages 323

Windows Update Stand-Alone Installer (Wusa.exe) 323

WinSxS directory 77

wipe-and-load migration 10, 13–14

Wired Equivalent Privacy (WEP) 174

wireless networking 172–177

configuration 174–177

modes 173

security 173–174

standards 173–174

Workplace Join 419

WPA. See Wi-Fi Protected Access

WPA2 174

Z

zero-touch deployment 22

zero-touch installation (ZTI) 252