Deploying and Managing Windows 10 Using Enterprise Services (M20697-2)

Duration:

5 Days

Audience:

Employees of federal, state and local governments; and businesses working with the government.

Course Overview

In this course, you will gain the knowledge and skills needed to deploy and manage Windows 10 desktops, devices, and applications in an enterprise environment. You will explore managing Windows 10 installations after deployment to provide secure identity and data access using technologies related to Group Policy, Remote Access, and Device Registration. You will also learn to support a variety of device and data management solutions using services like Microsoft Azure Active Directory, Microsoft Intune, and Microsoft Azure Rights Management that are part of the Enterprise Mobility Suite.

This course incorporates materials from the Official Microsoft Learning Product 20697-2B, and it may assist you in your preparation for Exam 70-697: Configuring Windows Devices.

What You’ll Learn

  • Deploy Windows 10 enterprise desktops
  • Manage user profiles and user state virtualization
  • Manage Windows 10 sign-in and identity
  • Manage desktop and application settings by using Group Policy
  • Implement remote access solutions
  • Manage Windows 10 devices by using enterprise mobility solutions
  • Use Microsoft Intune to manage desktop and mobile clients
  • Manage updates and endpoint protection by using Microsoft Intune

Prerequisites

  • At least two years of experience in IT
  • Basic awareness of Windows deployment tools

Who Needs to Attend

IT professionals who are interested in specializing in Windows 10 desktop and application deployments and managing the cloud-based application and data service environments for medium-to-large enterprise organizations

Course Outline

1. Managing Desktops and Devices in an Enterprise Environment

  • Managing Windows 10 in the Enterprise
  • Managing a Mobile Workforce
  • Supporting Devices in the Enterprise
  • Extending IT Management and Services to the Cloud

2. Deploying Windows 10 Enterprise Desktops

  • Overview of Windows 10 Enterprise Deployment
  • Customizing Enterprise Desktop Deployments
  • Deploying Windows 10 by Using the Microsoft Deployment Toolkit
  • Maintaining a Windows 10 Installation
  • Managing Volume License Activation for Windows 10

3. Managing User Profiles and User State Virtualization

  • Managing User Profile and User State
  • Implementing User State Virtualization by Using Group Policy
  • Configuring User Experience Virtualization
  • Managing User State Migration

4. Managing Windows 10 Sign-In and Identity

  • Enterprise Identity
  • Planning for Cloud Identity Integration

5. Managing Desktop and Application Settings by Using Group Policy

  • Managing Group Policy Objects
  • Configuring Enterprise Desktops Using Group Policy
  • Group Policy Preferences

6. Managing Data Access for Windows-Based Devices

  • Data Access Solutions
  • Implementing Device Registration
  • Implementing Work Folders
  • Managing Online Data Using Cloud-Based Storage Solutions

7. Managing Remote Access Solutions

  • Remote Access Solutions
  • Configuring VPN Access to Remote Networks
  • Using DirectAccess with Windows 10
  • Supporting RemoteApp

8. Configuring and Managing Client Hyper-V

  • Installing and Configuring Client Hyper-V
  • Configuring Virtual Switches
  • Creating and Managing Virtual Hard Disks and Virtual Machines

9. Managing Windows 10 Devices Using Enterprise Mobility Solutions

  • Enterprise Mobility Suite
  • Azure Active Directory Premium
  • Azure Rights Management
  • Microsoft Intune

10. Managing Desktop and Mobile Clients Using Microsoft Intune

  • Deploying the Intune Client Software
  • Microsoft Intune Policies
  • Mobile Device Management Using Intune

11. Managing Updates and Endpoint Protection Using Microsoft Intune

  • Managing Updates Using Microsoft Intune
  • Managing Endpoint Protection

12. Application and Resource Access Using Microsoft Intune

  • Application Management Using Intune
  • The Application Deployment Process
  • Controlling Access to Company Resources

Labs

Lab 1: Planning for Windows 10 and Device Management in the Enterprise

Lab 2: Building a Reference Image by Using Windows Assessment and Deployment Kit (WADK) Tools

  • Configuring Custom Windows PE Boot Media
  • Modifying a Custom Answer File by Using Windows SIM
  • Installing a Reference Computer by Using an Answer File
  • Preparing a Reference Computer by Using Sysprep
  • Capturing a Reference Computer

Lab 3: Using Microsoft Deployment Toolkit (MDT) to Deploy Windows 10 Desktops

  • Creating and Configuring the MDT Deployment Share
  • Creating a Task Sequence
  • Deploying a Windows 10 Image by Using MDT

Lab 4: Maintaining a Windows 10 Installation using Windows Imaging and Configuration Designer (ICD)

  • Creating and Configuring a Windows ICD Provisioning Package

Lab 5: Configuring User Profiles and User State Virtualization

  • Configuring Roaming User Profiles and Folder Redirection
  • Implementing and Configuring User Experience Virtualization (UE-V)

Lab 6: Migrating User State by Using User State Migration Tool (USMT)

  • Creating and Customizing USMT XML Files
  • Capturing and Restoring User State to a Target Computer

Lab 7: Integrating a Microsoft Account with a Domain Account

  • Connecting a Microsoft Account to a Domain Account

Lab 8: Joining Windows 10 to Azure Active Directory

Lab 9: Configuring Group Policy Objects and Settings

  • Managing Windows 10 by Using Group Policy

Lab 10: Using Group Policy Preferences to Manage Desktop Settings

  • Configuring Group Policy Preferences to Apply Drive and Printer Mapping

Lab 11: Configuring Data Access for Non-Domain Joined Devices

  • Implementing Device Registration
  • Configuring Work Folders

Lab 12: Managing Data Access Using OneDrive

  • Configuring OneDrive

Lab 13: Implementing DirectAccess

  • Configuring the DirectAccess Server
  • Configuring the DirectAccess Clients
  • Validating Remote Connectivity

Lab 14: Configuring Azure RemoteApp

  • Creating a RemoteApp Collection
  • Publishing an Application Using Azure RemoteApp
  • Validating Remote Connectivity

Lab 15: Configuring Virtual Machines by Using Client Hyper-V

  • Installing Client Hyper-V
  • Creating a virtual machine

Lab 16: Implementing a Microsoft Intune Subscription

  • Adding Microsoft Intune Users

Lab 17: Installing the Intune Client Software and Configuring Policies

  • Installing the Intune Client Software
  • Creating Intune Policies

Lab 18: Managing Mobile Devices Using Microsoft Intune

  • Configuring and Enrolling Mobile Devices into Microsoft Intune

Lab 19: Managing Updates and Endpoint Protection Using Microsoft Intune

  • Configuring Updates in Microsoft Intune
  • Configuring Endpoint Protection in Microsoft Intune

Lab 20: Deploying Applications by Using Microsoft Intune

  • Uploading an Application to Microsoft Intune
  • Deploying an Application to Managed Clients

Lab 21: Managing Resource Access by Using Microsoft Intune

  • Configuring Profile Deployment
  • Configuring Conditional Access Policies