Windows 11 for Enterprise Administrators Unleash the Power of Windows 11 with Effective Techniques and Strategies
Windows 11 comes with a plethora of new security measures, customizability, and accessibility features that can help your organization run more smoothly. But, without a proper introduction to this new version of Windows, it’s easy to miss the most important improvements, along with configuration opt...
| Other Authors: | |
|---|---|
| Format: | eBook |
| Language: | Inglés |
| Published: |
Birmingham, England :
Packt Publishing Ltd
[2023]
|
| Edition: | Second edition |
| Subjects: | |
| See on Biblioteca Universitat Ramon Llull: | https://discovery.url.edu/permalink/34CSUC_URL/1im36ta/alma991009781239006719 |
Table of Contents:
- Cover
- Title Page
- Copyright and Credits
- Contributors
- Table of Contents
- Preface
- Chapter 1: Windows 11 - Installation and Upgrading
- Selecting the edition and channel version
- General Availability Channel (GAC) and support timeline
- Long-Term Servicing Channel (LTSC) and support timeline
- Recommendations
- Hardware requirements for Windows 11
- Official (minimum) requirements
- CPU limitations
- Hardware requirements for additional features
- Recommendations for a future-oriented hardware choice
- Upgrading to Windows 11
- In-place upgrades
- Limitations and blockers of an in-place upgrade
- Traditional wipe-and-load
- An alternative - provisioning package (PPKG)
- The modern way - Windows Autopilot
- Activation of Windows 11
- Classic activation by Multiple Activation Key (MAK) or Key Management Services (KMS)
- More modern via Active Directory-based activation
- Future-oriented via Windows 10/11 Subscription Activation
- Tips and tricks for a smooth in-place upgrade from Windows 8.1 or 10 to Windows 11
- Looking up SetupDiag data in case of error/rollback
- Integrating cumulative updates into install sources
- Updating drivers
- Looking at Setupact.log and Setupapi.dev.log
- Desktop Analytics and Microsoft Endpoint Manager admin center
- Selecting the deployment tools
- Summary
- Chapter 2: Introduction to PowerShell
- What is PowerShell?
- Windows PowerShell versus PowerShell 7
- Installing PowerShell 7
- Keeping PowerShell up to date
- The three key pillars of PowerShell
- Cmdlets
- Objects
- The pipeline
- PowerShell's scripting language
- PowerShell's formatting features
- Getting help
- Modules and commands
- Commands
- Modules
- Discovery
- PowerShell and security
- Security by default
- PowerShell logging
- PowerShell script block logging
- Module logging.
- Execution policy
- Transcription
- Configuring PowerShell
- Adding modules
- Profiles
- Group Policy
- Using PowerShell
- The PowerShell console
- The Windows PowerShell Integrated Scripting Environment (ISE)
- Windows Terminal
- Microsoft Visual Studio Code
- Desired State Configuration
- Summary
- Chapter 3: Configuration and Customization
- Evolution of WaaS
- Image customization
- Imaging process
- Customizing the image
- Microsoft Autopilot
- BYOD scenarios
- Upgrade expectations
- Security mitigation
- Internet Explorer 11 retired
- Windows Store for Business EOL announced
- Windows 11 Start and taskbar layout
- Audit mode
- Tips
- Virtual Desktop Infrastructure
- SCT
- AppLocker and Windows Defender Application Guard (previously MDAC)
- Microsoft telemetry
- Windows Spotlight
- Mandatory user profiles
- Summary
- Chapter 4: User Account Administration
- Windows account types
- Account privileges
- Local Administrator Password Solution
- Creating policies to control local accounts
- Password policy
- Account lockout policy
- Managing user sign-in options
- Mobile device management security settings
- User Account Control
- Privileged Access Workstation
- Summary
- Chapter 5: Tools to Manage Windows 11
- RSAT
- Installing the RSAT tools
- Updating the RSAT tools
- Using the RSAT tools
- The Sysinternals tools suite
- Downloading the Sysinternals tools suite
- Introducing the Sysinternals BGInfo tool
- Introducing the Sysinternals PsTools suite
- Summary
- Chapter 6: Device Management
- Evolving business needs
- MDM
- Changes to GPOs in Windows 10/11
- Enterprise- and Education-only GPOs
- Known issues when upgrading the central policy store
- Known issues with GPPs/GPMC
- Servicing and patching
- Why CUs?
- Update deployment solutions
- Windows 10/11 servicing
- Summary.
- Chapter 7: Accessing Enterprise Data in BYOD and CYOD Scenarios
- What are the EUC device models?
- The bring your own device model
- The choose your own device model
- Key considerations
- Comparing options
- Protection and governance options
- Identity and access management
- Information protection
- Device configuration
- Application management
- Storage sync options
- OneDrive for Business
- Work Folders
- Alternative EUC delivery options
- Windows 365 Cloud PC and Azure Virtual Desktop
- Enabling virtual private networks
- Publishing applications via proxy
- End user behavior analytics
- Summary
- Chapter 8: Windows 11 Security
- Introducing security posture
- Zero trust
- Defense in depth
- Ensuring hardware security
- TPM
- Microsoft Pluton security processor
- Windows Defender System Guard
- Hypervisor-protected Code Integrity
- Ensuring that we operate system security
- Introducing Secure Boot and Trusted Boot
- Exploring the Windows Security app
- Using BitLocker for encryption
- Security baselines
- Ensuring user identity security
- Windows Hello for Business
- Microsoft Defender Credential Guard
- Summary
- Chapter 9: Advanced Configurations
- Virtual desktops
- On-prem virtual desktop best practices
- VDI configurations
- The Windows Configuration Designer
- Windows 11 Kiosk Mode
- Windows Autopilot
- The Set up School PCs application
- Device lockdown
- Windows Subsystem for Linux
- Group Policy Editor
- Remote Desktop Protocol
- Windows Hello and Windows Hello for Business
- Windows Firewall with Advanced Security
- Hyper-V
- Windows Task Scheduler
- Enabling BitLocker drive encryption
- Storage Spaces Direct
- Windows Defender Application Guard
- Summary
- Chapter 10: Windows 11 21H2 and 22H2 Changes (versus Windows 10)
- New Start menu and taskbar.
- New docking and multi-monitor experiences
- New patch file format
- "New" security options
- Other technical changes in 21H2
- Deprecated and removed features in 21H2
- Windows 11 22H2 (build 22621)
- New security options
- Improved Start menu and taskbar
- New inclusive features
- Windows Studio effects
- Further improvements to the size and speed of updates
- New Windows Subsystem for Android™
- CI aka Moments
- Other technical changes in 22H2
- Deprecated and removed features in 22H2
- Other changes
- Further references for Windows 11 22H2
- Summary
- Index
- Other Books You May Enjoy.
