Index

A

access. See also remote access

authentication and authorization 250–256

Dynamic Access Control 217

Effective Access 244–245, 245

Effective Access tool 182

file access auditing 247–250

file and folder 232–256

mobile devices 81–82

removable storage 187–188

troubleshooting 184

access-based enumeration (ABE) 217–218

Access Control Entry (ACE) 215, 238

Access Control List (ACL) 215, 238, 240

account lockout policies 27–28

Accounts: Block Microsoft Accounts 4–5

Active Directory Certificate Services (AD CS) 19

Active Directory Domain Services (AD DS) 26, 39

synchronizing user accounts with 95–97

Active Directory Domain Services (AD DS) database 2

Active Directory Federation Services (AD FS) 30, 96

Add-AppxPackage cmdlet 12

Add-PhysicalDisk cmdlet 174

administrative users 253

Advanced Security Settings dialog box 245

alerts

Cloud App Security 125

notification rules 108

using 108–109

Allow permissions 244

Always Offline Mode 53, 54, 283–284

Android

RemoteApp apps 317–318

Android devices

Remote Desktop on 274

Any folder sharing 215–216

APIPA. See Automatic Private IP Addressing

Application Compatibility Tools 319, 320–324

application settings 78

application virualization 327–330

apps

Cloud App Security 123–127

compatibility modes for 323

deep linking 17–18

desktop 9

installation 5–8

choosing users for 16

from Company Store 17

using Microsoft Office 365 5–7

using Microsoft Store 8–10

line-of-business (LOB) 10

management 307–336

desktop 319–333

RemoteApp 307–319

sequencing 328–329

sideloading 11–17

System Restore and 342–343

updating 382–385

virtualization 327–330

App-V 327–330

MDOP and 327–328

requirements 327–328

sequencing apps 328–329

App-V Sequencer 328–329

AppX Windows PowerShell module 12–13

assigned groups 105

Attach Task To This Event option 250

auditing

file access 247–250

authentication 18–33

account policies to protect 27–28

Azure AD 30–33

biometrics 22–23, 33

BitLocker 65–66, 189

computer accounts 26

configuration 250–256

Credential Manager 28

digital certificates for 19

domains 26

exceptions, configuring 156–157

Kerberos 265

Kerberos v5 26

multifactor 19, 33, 189

picture passwords 22

remote 262–268

Secure Channel 27

user accounts 26

virtual smart cards 20–22

authorization

administrative users 253

Azure AD 30–33

configuration 250–256

personal devices 30

standard users 251–253

User Account Control 250–256

workgroups 25

Automatic Private IP Addressing (APIPA) 134

Azure Active Directory (AAD) 95

Azure Active Directory (AD) Connect tool 96–97

Azure Active Directory (Azure AD)

joining devices in 30–33

Azure Information Protection 120–123

activation of 121

client installation 122–123

configuration 120

labels 120

policies 121–122

Azure portal

Intune policies configuration in 111–112

Azure Rights Management (Azure RMS) 120

B

Backup And Restore (Windows 7) tool 353–357, 361, 362

backups

creating 354–355

of EFS-protected files 235–237

scheduling 354

battery settings 57

biometrics 22–23, 33

BitLocker 63–68, 117–118, 185, 188, 233

authentication methods 189

configuration 64–67, 190–191, 194–196

data recovery 197–200

Microsoft BitLocker Administration and Monitoring 200–203

moving encrypted drive to another computer 193

recovery keys 65

startup key storage 67–68, 197–198

support for 188–193

suuspending 193

termninology 197–198

upgrading 192–193

using 189–192

without TPM 65

BitLocker Network Unlock 198

BitLocker Recovery Password Viewer 200

BitLocker To Go

configuration 196–197

data recovery 198–200

support for 188–193

Bluetooth 223

boot troubleshooting 345–346

bring your own device (BYOD) 74

Bring Your Own Device (BYOD) 294

broadband connectivity

mobile devices 82–84

broadband tethering

configuration 269–272

C

Certificate Authority (CA) 19

certificate compliance reports 107

certificates

digital 19

EFS 236, 237

Remote Desktop Session Host 316

certmgr.msc 19–20

Challenge-Handshake Authentication Protocol (CHAP) 264, 266

Checkpoint-Computer cmdlet 341

checkpoints

creating 48

restoring 49

choose your own device (CYOD) 74

Cipher.exe 236

Clear-DnsClientCache cmdlet 140

click-to-run installation 8

client certificates 19

Cloud App Security (CAS) 123–127

accessing and exploring 124–125

alerts 125

General Dashboard 125

layers of 123–124

Office 365 126–127

Cloud Discovery 123, 124

cloud settings 78

cloud storage 29

command-line tools

BitLocker configuration using 194–196

for connectivity issues 139

for sharing folders 216

comma separated value (CSV) files 96

Company Store

installing apps from 17

Compatibility Administrator 320, 321–324

Component Store 380–381

computer accounts

authentication 26

computer groups

management of 104–106

computer inventory reports 106

Computer Management Intune Policies 76–77

Computer Management MMC snap-in 215–216

configuration

authentication and authorization 250–256

authentication exceptions 156–157

Azure Information Protection 120

BitLocker 64–67, 190–191, 194–196

BitLocker To Go 196–197

broadband tethering 269–272

connection security rules 155–156

DAC 184

disk quotas 245–247

file and folder access 232–256

file recovery 357–365

folder location 40–41

folder permissions 213–218

HomeGroup 208–210

Hyper-V 43–52

information protection 113–127

libraries 210–213

local accounts 29

location-aware printing 146–147

Microsoft account 29

using Group Policy 4–5

Microsoft Intune subscriptions 102–103

Microsoft Office 365 6

Mobile Device Management 86–87

mobile devices 73–88

mobility options 52–63, 281–302

Network Discovery 157–158

networking 133–162

IP settings 133–143

name resolution 139–141

network adapters 145–146

network locations 141–143

network settings 143–148

network security 147–158

NTFS permissions 238

offline file policies 282–285

OneDrive 224–229

picture passwords 22

power plans 57–58

power policies 285–290

printers 219–224

RemoteApp apps 313–316

remote connections 261–281

Remote Desktop 272–279

restore points 353–357

security

for mobile devices 63–68

startup key storage 67–68

storage 163–206

Sync Center 81–82

synchronization settings 3–4

sync options 55–56, 294–300

system recovery 337–357

System Restore 340–347

user data 37–41

user profiles 38–40

virtual machines 46–48

virtual smart cards 21

Wi-Fi Direct 63

WiFi Direct 300–302

Windows Firewall 149–154

Windows Hello 33

Windows To Go 290–294

Windows Update 366–370, 373–377

Work Folders 80–81

Workplace Join 30

connection security rules 153, 155–156

connectivity issues 138–139, 153

Control Panel

BitLocker configuration in 65–66

Work Folders configuration in 80

Cost-Aware Synchronization 53

Credential Locker 28

Credential Manager 28–29, 237

credential roaming 237

D

data

user

configuration 37–41

migration 41–43

data access. See access

data encryption

BitLocker 64–68, 118–119, 185, 188–202, 233

Encrypting File System 185–187, 233–237

File History support for 361

Data Encryption Standard (DES) 264

data loss prevention (DLP) policy 114–116

data recovery

BitLocker 197–200

Data Recovery Agent (DRA) 185–186, 233, 234, 235

data security 179–203. See information protection; See security

BitLocker 188–202

Dynamic Access Control 184–185

Encrypting File System 185–187

permissions management 179–185

removable storage 187–188

data storage

cloud-based 29

configuration 163–206

Distributed File System 164–167

OneDrive 174–178, 224–232

removable 187–188

Storage Spaces 167–174

support for 163–178

user data 6

data synchronization 79–82

sync options 294–300

default gateway 134

defensive layering 247–248

Deny permissions 244

Deny Write Access To Drives Not Protected By BitLocker 188

Deployment Image Servicing and Management (DISM) 294, 381

Deployment Image Servicing and Management (DISM) cmdlets 12–13

desktop apps 9, 319–333

App-V and 327–330

co-existence support 324–330

compatibility issues 319, 320–324

compatibility modes for 323

deployment using Microsoft Intune 331–333

Hyper-V and 324–326

RemoteApp and 326–327

User Experience Virtualization and 330–331

Desktop Connections fee 317

detected software reports 106

device capabilities settings 78

device deployment 37–72

mobility options 52–63

security configuration 63–68

user data 37–43

virtual machines 43–52

device drivers

resolving problem 378–379

rollback of 351–353

signed 351

uninstalling 378

Device Enrollment Manager (DEM) 99–100

device history reports 107

device management 94–113. See also remote access

Microsoft 365 Business enrollment 97–99

Microsoft 365 Enterprise enrollment 99–100

Microsoft Intune subscriptions 102–103

Microsoft Service Connection Point role 103–104

monitoring and alerts 106–109

policy management 110–112

remote computers 112–113

troubleshooting Microsoft Intune 109

user account provisioning 95–97

user and computer groups 104–106

view and manage devices 100–102

device registration

in Azure AD 30–33

Device Registration Service (DRS) 30

DFS. See Distributed File System

DFS Namespaces (DFSN or DFS-N) 165

DFS Namespace service (Dfssvc.exe) 166

DFS Replication (DFSR or DFS-R) 164–167

Dfsutil.exe 166

DHCP. See Dynamic Host Configuration Protocol

DHCP scope 134

dial-up 262, 263

differencing disks 49

digital certificates 19

DirectAccess 53

DirSync 96

Disable-ComputerRestore cmdlet 341

discretionary access control list (DACL) 238

Disk Cleanup 381

disk drives

kepping together 171

disk quotas 232

configuration 245–247

policies 246–247

disk space 172

disk usage 172

Dism.exe 380

Distributed File System (DFS) 163, 164–167

DNS. See Domain Name Service

document version history 365

domain accounts 2

associating Microsoft account with 2–3

domain controllers 26

Domain Name Service (DNS) 135

domain networks 141

domains 23, 26

DRA. See Data Recovery Agent

driver rollback 351–353

Driver Roll Back feature 352–353

Driver Store 351

DVDs 187

Dynamic Access Control (DAC) 184–185, 217

dynamic groups 105

Dynamic Host Configuration Protocol (DHCP) 134

E

EAP-MS-CHAPv2 265

Echo Request messages 139

Effective Access 244–245, 245

Effective Access tool 182

EFS. See Encrypting File System (EFS)

electronic point of sale (EPOS) 262

Electronic Software Distribution (ESD) 329

elevation prompts, UAC 253–256

Enable-ComputerRestore cmdlet 341

Encrypting File System (EFS) 185–187, 232, 233–237, 361

backup and recovery 235–237

credential roaming 237

Windows Public Key Infrastructure and 234

encryption

BitLocker 64–68, 118–119, 185, 188–202, 233

Encrypting File System 185–187, 233–237

File History support for 361

Perfect Forward Secrecy 174

settings 78

Endpoint Protection 76–77, 108

enhanced PINs 197

environmental variables 39

Extensible Authentication Protocol (EAP) 265

Extensible Authentication Protocol-Transport Layer Security (EAP-TLS) 264

F

FAT volume 243

federation

Azure AD Connect and 96

File Explorer

accessing OneDrive from 225

History 213

Quick Access feature 212–213

sharing indicator 218

File History

configuration 358–361

encryption support 361

file recovery 360–361

Previous Versions and 361–363

restore points 360

turning off 361

file recovery

configuration 357–365

File History 358–361

OneDrive 363–365

Previous Versions 361–363

files

access

auditing 247–250

configuring 232–256

copying 243

deleting from library 212

encrypting 233–237

fetching, using OneDrive 230–231

moving 243

Offline Files 53–54, 81, 282–285, 296–298

OneDrive 226

permissions. See permissions management

recovery of 177–178

restoring previous versions of 361–363

synchronization 282–284, 296–298

System Restore and 342–343

File Server Resource Manager (FSRM) 232, 247

file systems 179–180

filtering 149

firewalls

rules 156

Windows Firewall 149–154

Windows Firewall Settings template 77

flash drives 187–188

folder location

configuration 40–41

folders

access, configuring 232–256

Any folder sharing 215–216

copying 243

deleting from library 212

encrypting 233–237

moving 243

OneDrive 226

permissions 213–218

Public 214

renamed 216

restoring previous versions of 361–363

shared 213–218, 241–242

sharing from command line 216

sharing using Windows PowerShell 216–217

Work Folders 298–300

folder structure 181

Fresh Start 349–350

G

Get-AppxLastError cmdlet 12

Get-AppxLog cmdlet 12

Get-AppxPackage cmdlet 12

Get-AppxPackageManifest cmdlet 12

Get-ComputerRestorePoint cmdlet 341

Get-DnsClientCache cmdlet 141

Get-NetIPAddress cmdlet 140

Get-NetIPv4Protocol cmdlet 140

Get-SmbShare cmdlet 217

Get-StoragePool cmdlet 174

Get-VirtualDisk cmdlet 174

Global Catalog 26

Global Policy 121–122

/grant switch 241

graphical user interface (GUI) 283

Graphical User Interface (GUI) 173

group memberships 104–105

Group Policy 74

accessing 4

biometrics settings 22–23

disabling Microsoft Store access with 10

enabling sideloading using 11–12

for BitLocker 190, 199

for Windows to Go 61

Microsoft account configuration using 4–5

offline file policies 54

power policies 59–60

power policy configuration using 287, 289

removable media management using 187–188

Work Folders configuration using 81, 299–300

Group Policy Objects 184

Group Policy Objects (GPOs) 27

auditing 248, 250

disk quota 246

for Microsoft Store functionality 384

for signed packages 316–317

for Windows Update 373–377

groups

adding, to Microsoft Intune 14

assigned 105

dynamic 105

homegroups 23–24

HomeGroups 208–210

managing 104–106

workgroups 23, 24–25

guest networks 141

H

Health Insurance Portability and Accountability Act (HIPAA) 114

Hibernate 61

HKEY_CURRENT_USER registry 38

homegroups 23–24

HomeGroups

configuration 208–210

creating 208–209

file and folder sharing 210

joining 209

troubleshooting 209

Hotspot 2.0 networks 271–272

hotspots 83, 269–272

Hyper-V 324–326

checkpoints 48–49

configuration 43–52

configuring virtual machines in 46–48

creating virtual machines in 45–46

enabling 44

installation 325

moving virtual machines 51–52

requirements 325

virtual switches 49–50

I

ICACLS.exe 241

identity management 1–36

authentication and authorization 18–33

support and install apps 1–18

inbound rules 152, 153, 156

information protection

Azure 120–123

BitLocker 117–118

Cloud App Security 123–127

configuration 113–127

data loss prevention (DLP) policy 114–116

key pillars of 117–118

Windows Information Protection (WIP) 117–119

inheritance

permissions 242–243

installation

apps

from Company Strore 17

with Microsoft Office 365 5–8

with Microsoft Store 8–10

click-to-run 8

Microsoft Office 365 7

Internet Control Message Protocol (ICMP) 139

Internet Key Exchange, Version 2 (IKEv2) 264

Internet Service Providers (ISPs) 82

Intune. See Microsoft Intune

Intune App Protection 98

iOS

RemoteApp apps 317–318

Remote Desktop on 275

IP addresses 133

conflicts 138

filtering 149

name resolution 139–141

requirements for 134

Ipconfig 139

Ipconfig /all 139

IPsec 155–156

IP settings

configuration 133–143

IPv4 addresses 135, 137

IPv6 addresses 135, 137

K

Kerberos 265

Kerberos Key Distribution Center (KDC) 26

Kerberos v5 authentication protocol 26

L

Last Known Good Configuration 347

Layer 2 Tunneling Protocol (L2TP) 264

libraries

adding locations 211

configuration 210–213

creating 211

deleting files from 212

license installation reports 106

license purchase reports 106

licenses

Microsoft 365 99, 103

user 95

line-of-business (LOB) apps 10

Link Layer Topology Discovery (LLTD) protocol 214

LLTD Mapper (LLTDIO) 214

local accounts 2

associating Microsoft account with 2–3

configuration 29

local cache 53

local profiles 38

Local Security Policy 27

location-aware printing 146–147

LockDown VPN profile 268

lockout policies 27–28

Logical Unit Number (LUN) 168

Long Term Servicing Channel (LTSC) 372

M

Mac computers

Remote Desktop on 275

malware 108, 251, 256

malware settings 78

Manage-bde.exe 65, 66–67, 194

Manage Storage Spaces console 171

mandatory profiles 40

MDM. See Mobile Device Management

metered networks 83–85

Microsoft 365

about 73

Admin Center 95

device management 94–113

information protection 113–127

licenses 103

mobile device support in 73–88

software deployment 88–94

user licenses 95

Microsoft 365 Business

device enrollment in 97–99

view and manage devices 100–101

Microsoft 365 Enterprise

device enrollment in 99–100

view and manage devices 101–102

Microsoft account

associating with local or domain account 2–3

configuration 29

synchronization settings 3–4

using Group Policy 4–5

disabling 4–5

integration of 2–5

personalization settings 2–5

Microsoft BitLocker Administration and Monitoring (MBAM) 119, 200–203

Microsoft Desktop Optimization Pack (MDOP) 201, 327–328

Microsoft Intune

adding users and groups 14

Administrator Console 332

Connection Point role 103–104

deep link apps using 17–18

desktop app deployment with 331–333

Device Enrollment Manager 99–100

group management 104–106

Mobile Device Management and 84–88

monitoring and alerts 106–109

policies

classic 110–111

computer management 76–77

configuring in Azure portal 111–112

deployment 111–112

managing 110–112

mobile devices 74–79

policy templates 75–76

remote computer management 112–113

sideloading apps using 13–16

software deployment using 88–94

subcriptions configuration 102–103

troubleshooting 109–110

updates information in 89–90

WIP policy in 118–119

Microsoft Intune Agent Settings template 76–77

Microsoft Intune Center Settings template 77

Microsoft Intune Policy page 110

Microsoft Office 365

about 5–6

Admin Center 6–7

app installation with 5–7

configuration 6

deployment 7–8

features 8

installation 7

updates 5

Microsoft Online Services 175–176

Microsoft Remote Desktop Assistant 274

Microsoft Service Connection Point role 103–104

Microsoft Services Agreement 175

Microsoft Store

about 9

apps installation using 8–10

disabling access to 10

Microsoft Store apps

updating 382–385

Microsoft Store for Business 10

Microsoft Store for Education 10

migration

user data 41–43

Miracast over Infrastructure 300

mobile device inventory reports 106

Mobile Device Management (MDM) 74, 84–88

annual certificate renewal 88

configuration 86–87

enrolling devices 87–88

mobile devices 261–306. See also remote access

access 81–82

broadband connectivity 82–84

broadband tethering 269–272

data synchronization 79–81

managing remote 84–88

mobility options for 52–63

offline file policies 53–54

policies 74–79

power policies 285–290

power settings 56–60

remote connectivity 53

security for 63–68

security policies 78–79

sync options 55–56

Wi-Fi Direct 63

Windows To Go 60–63

Mobile Device Security Policy template 78–79

mobile hotspots 83

Mobility and Multi-homing (MOBIKE) protocol 264

mobility options 52–63

configuration 281–302

offline file policies 282–285

power policies 285–290

sync options 294–300

WiFi Direct 300–302

Windows To Go 290–294

Modify permission 244

monitoring

managed devices 106–109

MS-CHAP v2 266

Mstsc.exe 275

multifactor authentication 19, 33, 189

N

name resolution

configuration 139–141

namespaces

DFS 166

near field communication (NFC) 219, 223–224

Netsh 63

Net Share 216

Netsh tool 139, 145

Netstat tool 139

network adapters

configuration 145–146

Network And Sharing Center 138, 209, 214

network discovery 214

Network Discovery 157–158

Network Discovery settings 214

networking

configuration 133–162

IP settings 133–143

name resolution 139–141

network settings 143–148

connectivity issues 138–139

IP addresses 134

virtual private 262–268

network locations 141–143

for folders 40–41

networks 23

broadband connectivity 82–84

connecting to 133–139

connection status, viewing 138

domain 141

domains 26

guest 141

Hotspot 2.0 271–272

metered 83–85

private 141

public 137, 141

terminology 134–135

wireless

connecting to 143–144

managing preferred 144–145

network security

configuration 147–158

network sharing 23–26

New-StoragePool cmdlet 174

New Technology File System (NTFS) 179–184, 213, 362

auditing 247–250

disk quotas 245–247

permissions 238–245

shared folders and 241–242

New-VirtualDisk cmdlet 174

noncompliant apps reports 107

Non-Volatile Memory Express (NVMe) 245

notification rules 108

Nslookup tool 139

NTUSER.DAT 38

O

Office 365. See Microsoft Office 365

Cloud App Security 126–127

data loss prevention (DLP) policy 114–116

Office 365 Security & Compliance Center 114–116

offline file policies 53–54, 81, 282–285

Offline Files 282–285

syncing 296–298

OneDrive 29

configuration 224–229

deleting personal settings from 296

document version history 365

fetching files using 230–231

file recovery from 363–365

files and folders 226

help for 174–175

limitations of 226

mapping drive to 227

OneDrive for Business and 229–232

options 227–228

pricing plans 225

recovering files from 177–178

Recycle Bin 177–178, 226, 363–365

service availability 175–176

support for 174–178

synchronization 226

sync settings 228–229

usage policy 226

using on other devices 232

OneDrive for Business 178, 229–232

operating system

rolling back 381–382

Optimize-StoragePool cmdlet 174

outbound rules 152, 153

out-of-box experience (OOBE) 229

P

page description language (PDL) 219

parity 168

parity volume mirroring 169

Password Authentication Protocol (PAP) 264, 266

passwords 19

Credential Manager for 28

picture 22

policies 27

recovery 67, 189, 197

recovery key 67

saving 28

weak 27

Patch Tuesday 366

Perfect Forward Secrecy (PFS) 174

permissions management 179–185

combining NTFS and Share 183–184

NTFS permissions 179–182, 213, 238

permissions inheritance 242–243

shared folders 213–218

Share permissions 183–184, 213, 215

troubleshooting 183, 184

Personal certificate store 19

personal devices

configuring access for 30

personalization settings 2–5

personally identifiable information (PII) 114–115

picture passwords 22

Ping tool 139

PINs 68, 197

PKI. See public key infrastructure

Pnputil.exe 219, 351–352

Point-to-Point Tunneling Protocol (PPTP) 263–264

port numbers 149

port rules 153

powercfg.exe 58–59, 288–290

power plans 57–58

power policies 59–60, 285–290

power settings 56–60

powercfg.exe 58–59

power plans 57–58

Settings app 56–57

PowerShell. See Windows PowerShell

Power & Sleep Settings option 285–286

Premium OneDrive 225

Previous Versions 361–363

printer drivers 219

printer ports 219

printers

key terms 219

near field communication 223–224

print management 220–222

print server properties 222–223

shared, configuring 219–224

Type 4 printer drivers 219–220

printing

location-aware printing 146–147

Print Management console 222

private networks 141

program rules 153

protocols 149

Public folders 214

public key infrastructure (PKI) 19

public networks 137, 141

Q

Quick Access 212–213

R

radio frequency identification (RFID) 223

RD Session Host role service 308–310

Read permission 244

recovery

file 357–365

of EFS-protected files 235–237

system 337–357

recovery drives 338–340

Recovery Environment (RE) 338

recovery keys 65, 67, 189, 191, 197, 199

recovery passwords 67, 189, 197

Recycle Bin 177–178, 226, 363–365

redundancy 168

referral cache 165

remote access 261–306

broadband tethering 269–272

mobility options 281–302

remote connections 261–281

RemoteApp And Desktop Connections 313–316, 317

RemoteApp apps 307–319, 326–327

advantages of 307

configuration 313–316

distribution 318–319

GPOs for signed packages 316–317

installation 310–313

iOS and Android support 317–318

prerequisites 308–313

remote computers

managing 112–113

remote connections 261–281

broadband tethering 269–272

configuring PC for 273–274

remote authentication 262–268

Remote Desktop 272–281

VPN 262–268

WiFi Direct 300–302

Remote Desktop

configuration 272–279

deployment of 309–310

on Android 274

on iOS and Mac 275

on Windows 10 274

pen support 280–281

Resistricted Admin mode 277–279

settings 275–277

troubleshooting 279

Zoom support 280

Remote Desktop Connection Manager (RDCMan) 281

Remote Desktop Protocol 261–281

Remote Desktop Services (RDS) 326–327

Remote Desktop Session Host 310, 316

Remote Desktop Web Access (RD Web Access) 318–319

Remote Differential Compression (RDC) 165

Remote Server Administration Tools (RSAT) 166, 200

removable storage 179, 196–197

controlling access to 187–188

Remove-AppxPackage cmdlet 12

Remove-PhysicalDisk cmdlet 174

Remove-StoragePool cmdlet 174

Repair-VirtualDisk cmdlet 174

reports

creating 107

on software updates 89–90

types of 106–107

using 106–107

reset 347–349

Reset This PC option 347–349

Resilient File System (ReFS) 168, 172, 247

Resistricted Admin mode

Remote Desktop 277–279

Resolve-dnsname cmdlet 140

resources ownership 245–246

Responder (RSPNDR) 214

restore points 353–357, 360, 362

roaming profiles 39–40

Robocopy 164

Robust File Copy for Windows (Robocopy) 164

root certificates 19

S

SaaS. See software as a service

safe mode 343, 345, 353

Sarbanes-Oxley Act 247

Schannel 27

scheduling

backups 354

synchronization 82

Secure Channel 27

Secure Desktop 256

Secure Digital High-Capacity (SDHC) memory cards 339

Secure Sockets Layer (SSL) protocol 264

Secure Socket Tunneling Protocol (SSTP) 264

security. See also authentication

account policies 27–28

alerts 108–109

authentication exceptions 156–157

BitLocker 188–202

Cloud App Security 123–127

connection security rules 155–156

connectivity and 153

data 179–203

Dynamic Access Control 184–185

Encrypting File System 185–187

for mobile devices 63–68

information protection 113–127

mobile device policies 78–79

network 147–158

Network Discovery 157–158

permissions management 179–185

personal devices 30

removable storage 187–188

TLS/SSL 27

Windows Defender Security Center 148–149

Windows Firewall 149–154

Security Account Manager (SAM) 2, 25

Security & Compliance Center 114–116

Security log 249

Security Support Provider (SSP) 27

Semi-Annual Channel 371

Server Message Block (SMB) 213

service set identifier (SSID) 145

Set-PhysicalDisk cmdlet 174

Set-StoragePool cmdlet 174

Settings app 3–4, 11, 29, 56–57

Network Setting 145

shared resources 207–232

access-based enumeration 217–218

folder permissions 213–218, 241–242

HomeGroup 208–210

libraries 210–213

OneDrive 224–232

printers 219–224

Public folders 214

Share permissions 183–184, 213, 215

Shim Infrastructure 320–321

shims 320–321

sideloading

apps 11–17

enabling 11–12

using Microsoft Intune 13–16

single sign-on (SSO) 30

Slow-link Mode 285

smart cards

virtual 20–22

SmbShare module 217–218

software

installation 5–16

software as a service (SaaS) 6

Software Assurance (SA) 328

software deployment

using Microsoft Intune 88–94

software updates

approving or declining 91–92

automatic approval settings 92–93

deadlines for installations 93

identifying required 89–90

third-party 93–94

Solid State Drive (SSD) 245

SSO. See single sign-on

Standard User Analyzer 320

standard users 251–253

StartComponentCleanup task 380

startup keys 197–198

startup key storage 67–68

Startup Settings 345–346

storage

cloud 29

cmdlets 174

configuration 163–206

Distributed File System 164–167

OneDrive 174–178, 224–232

removable 179, 187–188, 196–197

startup keys 197–198

startup key storage 67–68

viewing usage 172–173

Storage Area Network (SAN) 167, 245

storage pools 167–168, 169–171

Storage Spaces 163

configuration 168–173

Manage Storage Spaces console 171

managing 173–174

redundancy types 168

size of 171

support for 167–173

subnet masks 134, 135

Sync Center 55, 81–82, 296–298

synchronization

background file 282–284, 283

OneDrive 226, 228–229

options configuration 294–300

scheduling options 297–298

UE-V and 330–331

Work Folders 298–300

synchronization settings 3–4

sync options 55–56

sync shares 298–300

system access control list (SACL) 239

System Center Configuration Manager 103–104, 198

System Center Configuration Manager (SCCM) 373

system crash 337–338

system image

creating 354–355

System Image Recovery 355–356

System Properties dialog box 24

system recovery

configuration 337–357

driver rollback 351–353

Fresh Start 349–350

recovery drives 338–340

reset 347–349

restore points 353–357

System Image Recovery 355–356

system repair disks 356–357

System Restore 340–347

troubleshooting 344–346

system repair disks

creating 356–357

System Restore 340–347

identifying affected apps and files 342–343

task schedule modification 343

Windows RE and 343–347

within Windows RE 343

System Restore Wizard 342

system settings 78

T

Task Scheduler 343, 354, 380

templates

computer management 76–77

DLP policy 115–117

Intune policies 75–76

terms and conditions reports 106

tethering

broadband 83, 269–272

third-party software

updates of 93–94

three-way mirroring 168

Time to Live (TTL) 165

TPM Lockout 198

Tpmvscmgr.exe 21

Tracert tool 139

Transport Layer Security (TLS)/Secure Sockets Layer (SSL) security 27

Triple DES (3DES) algorithm 264

troubleshooting

access 184

boot 345–346

connectivity issues 138–139

Encrypting File System 186–187

HomeGroups 209

Microsoft Intune 109–110

name resolution 140–141

permissions 184

Remote Desktop 279

system recovery 344–346

updates 378–379

Trusted Platform Module (TPM) 61, 64, 188, 191, 290

BitLocker and 119

Trusted Platform Module (TPM) chip 20

Trusted Root Certification Authorities store 19

two-way mirroring 168

Type 3 print drivers 219

Type 4 print drivers 219, 219–220

U

Undo feature 177

unified extensible firmware interface (UEFI) 344

Unified Extensible Firmware Interface (UEFI) 191

Universal Naming Convention (UNC) 166

Universal Naming Convention (UNC) address 217

update reports 106

updates 365–385

Component Store 380–381

deferring 371

delivery optimization for 368–370, 376–377

disabling automatic 367–368

for enterprise customers 371–373

history management 377–378

Microsoft Store apps 382–385

pausing 367

policy configuration 373–377

release of 366

resolving problem 378–379

rolling back 378–382

settings configuration 366–370

Updates page 89–90

Update-StoragePool cmdlet 174

USB 2.0 ports 291

USB 3.0 ports 291

USB flash drives 187–188

User Account Control (UAC) 233

administrative users 253

configuration 250–251

elevation prompts 253–256

Secure Desktop 256

settings 254–255

standard users 251–253

user accounts

authentication 26

creating from CSV file 96–97

manual creation of 95

provisioning 95–97

roaming profiles 39–40

synchronizing with AD DS 95–97

user credentials

saving 28

user data

configuration 37–41

migration 41–43

user-effective permissions 181

User Experience Virtualization (UE-V) 330–331

user groups

management of 104–106

user licenses 95

user names

saving 28

user profiles

configuration 38–40

local 38

mandatory 40

migration 41–43

roaming 39–40

users

adding, to Microsoft Intune 14

administrative 253

authentication 18–33

remote, authentication of 265–266

standard 251–253

User State Migration Tool (USMT) 41–43

ut-of-box experience (OOBE) 348–349

V

variables

environmental 39

Verisign 19

VHDX format 50–51

virtual hard disks (VHDs) 50–51, 168

virtual hard drives (VHDs) 49

virtual machines (VMs) 43

checkpoints 48–49

creating and configuring 44–48

Hyper-V and 324–326

importing 52

moving 51–52

virtual disks 50–51

virtual switches 49–50

virtual private networking (VPN) 262

authentication and 262–268

creating connection 265, 266–268

features 267–268

protocols 263–264

security properties 267

VPN Reconnect 268–269

virtual private networks (VPNs) 53

virtual smart cards 20–22

virtual switches 49–50

creating 49–50

types of 49

Virtual Switch Manager 50

volume-level resiliency 168

Volume Shadow Copy Service (VSS) 341, 355, 362

VPN Reconnect 268–269

W

Wake-on-LAN (WoL) 198

Wbadmin.exe 355

WBF. See Windows Biometric Framework

WiFi Alliance 302

Wi-Fi Direct 63

WiFi Direct

configuration 300–302

WiFi hotspots 269–272

Wi-Fi networks 82–84

WiFi Services 270–271

Windows 8 283

Windows 10

Advanced Troubleshooting Mode 344–346

authentication 18–33

authentication and authorization 250–256

device deployment 37–72

device setup 97–98

enabling sideloading in 11–12

GUI changes 283

integration of Microsoft Account with 2–5

mobile device support in 73–88

mobility options 281–302

OneDrive synchronization 226

printing capabilities 219–224

Remote Desktop app on 274

rolling back 381–382

shared resources in 207–232

Startup Settings 345–346

sync options 294–300

system recovery 337–357

upgrades, deferring 371

Windows 10 Anniversary Update 117

Windows 10 Enterprise 99

Windows 10 Pro 97

Windows ADK 42

Windows Assessment and Deployment Toolkit (Windows ADK) 320

Windows Biometric Framework (WBF) 22, 224

Windows Credential Manager 237

Windows Defender Credential Guard 237

Windows Defender Remote Credential Guard 276–277

Windows Defender Security Center 148–149, 150

Windows Deployment Services (WDS) 164

Windows Deployment Services (Windows DS) 347

Windows Firewall

allowing app through 151

configuration 149–154

monitoring 150–151

security settings 214

Windows Firewall Settings template 77

Windows Firewall With Advanced Security 152–154

Windows Health Attestation Service 117

Windows Hello 33

Windows Information Protection (WIP) 117–119

Windows Insider Program 372

Windows Intune 373

Windows Mobility Center 286–287

Windows PowerShell

AppX module 12–13

BitLoker cmdlets 194–195

managing Officer 365 with 8

managing Storage Spaces using 173–174

modifying domain users with 40

sharing folders using 216–217

System Restore configuration using 341

virtual machine configuration in 47–48

Windows to Go workspace creation with 62

Windows To Go workspace creation with 293–294

Windows PowerShell Direct 48

Windows Preinstallation Environment (Windows PE) 42–43

Windows Public Key Infrastructure (PKI) 234

Windows Recovery Environment 61

Windows Recovery Environment (Windows RE) 343

launching 343–347

Windows Server 2012 283

Windows Server Update Services (WSUS) 373

Windows Software Update Services (WSUS) 220

Windows Store. See Microsoft Store

Windows To Go 60–63

certified drives 292

configuration 290–294

features 61, 290–291

hardware considerations 291

limitations and requirements 60–61

roaming with 291

workspace creation 62–63, 292–294

Windows To Go Workspace Wizard 292–293

Windows Update

Advanced Options 366–367

delivery optimization for 368–370, 376–377

for enterprise customers 371–373

history management 377–378

policy configuration 373–377

rolling back 378–382

settings configuration 366–370

Windows Vault 237

wireless networks

connecting to 143–144

managing preferred 144–145

Work Folders 79–81, 298–300

workgroups 23, 24–25

Work Offline button 53

Workplace Join 30

workspaces

Windows To Go 292–294

Write-DfsrHealthReport cmdlet 165

Y

Your Info tab 2

Z

Zero-Day updates 366