lehmann.systems Wiki - Benutzerbeiträge [de]

Kategorie:MD-101

2019-11-08T06:54:33Z

Rladmin:

https://www.examtopics.com/exams/microsoft/md-101/view

MD-101 Topic 2 answers

2019-11-08T06:44:06Z

Rladmin:

Requirement: Block users from browsing to suspicious websites and scan all scripts loaded into Microsoft Edge for computers are joined to Microsoft Azure Active Directory (Azure AD) and enrolled in Microsoft Intune. Device restiction settings:
* Windows Defender SmartScreen
* Windows Defender Antivirus
 
You need to configure the policy to prevent access to Exchange Online unless is connecting from a device that is hybrid Azure AD-joined.
* Device state
 
Windows 8.1, Windows 10, or macOS devices; Intune profile for Hello for Business
* Platform type: win 10 +
* Profile type: Endpoint protection
 
taget Intune policies to devices based on their version of Android or iOS
* Device settings in Microsoft Azure Active Directory (Azure AD)
 
Windows 10 Pro to Enterprise. Config in Intune?
* device config profile
 
profile type for device configuration profile in Microsoft Intune with ADMX-backed policy?
* custom
 
configure the computers to use Delivery Optimization
* create an device config profile in intune
 
included in known folder redirection
* desktop
* documents

[[Category:MD-101]]

MD-101 Topic 2 answers

2019-11-08T06:12:45Z

Rladmin:

MD-101 Topic 2 answers

2019-11-08T05:50:42Z

Rladmin: Die Seite wurde neu angelegt: „ Category:MD-101“

[[Category:MD-101]]

MD-101 Topic 1 answers

2019-11-08T05:49:51Z

Rladmin: Rladmin verschob die Seite MD-101 answers nach MD-101 Topic 1 answers, ohne dabei eine Weiterleitung anzulegen

review the serivicng status of computers which servicing channel is manged by intune:
* software updates -> Per update ring deployment state
 
User should be promted to set the system language and to accept the license aggreement for windows.
* - Autopilot remote reset
* X Autopilot user-driven deployment profile
* - AutoPilot self-deploying deployment profile
 
feature and quality updates have to be installed automatically during a maintenance window
* X From the Maintenance Scheduler settings, you configure Automatic Maintenance Random Delay
* - Windows Update settings, you enable Configure Automatic Updates, select 4-Auto download and schedule the install, and then enter a time.
* - From the Maintenance Scheduler settings, you configure Automatic Maintenance Activation Boundary.
 
redeploy previously used computer with autopilot
# generate csv with computer infos
# upload with store for business
# reset the computer
 
Secure Boot requirements
* GPT disk (not MBR disk)
* UEFI
 
implement hybrid Microsoft Azure Active Directory (Azure AD) and Microsoft Intune in AD doain with many computers
* use Windows AutoPilot deployment profile
 
Windows AutoPilot Reset effects on seting done by the user
* wifi connections and passphrases ratained
* Apps from the windows store and vpn connection removed
 
Intune action options to reset computers to the latest windows 10 enterprise
* fresh start action for windows 10 enterprise (latest feature update not a prerequisite)
* wipe action for windows 10 and 8.1 enterprise
 
enable self-service password reset in intune device config
 
prevent the video drivers from being updated automatically by using Windows Update for business
* - Device Installation and Restrictions settings in a Group Policy object (GPO), enable Prevent installation of devices using drivers that match these device setup classes, and then you enter the device GUID
* - settings app - clear Give me updates for other Microsoft products when I update Windows check box
* X From the Device Installation settings in a Group Policy object (GPO), you enable Specify search order for device driver source locations, and then you select Do not search Windows Update.
 
20 computers run Windows 10, are joined to Microsoft Azure Active Directory (Azure AD) and should be replaced. desktop background, the favorites, and the browsing history have to be migrated
* X Enterprise State Roaming
* - roaming user profiles
 
new computer named Computer1 that runs Windows 10 and is in a workgroup has to monitored by Log Analytics in an Azure Log Analytics workspace
* Install the Microsoft Monitoring Agent
 
deploy computers by MDT and WDS. ensure correct product key?
* an MDT task sequence
 
run a post script after a Windows 10 feature upgrade
* modify SetupConfig.ini on computer
 
filter Upgrade Readiness solution in Microsoft Azure for applications that can run in win 10
* filter column: UpgradeDecision
* filter value: Ready to Upgrade
 
Your company standardizes on Windows 10 Enterprise for all users.
Some users purchase their own computer from a retail store. The computers run Windows 10 Pro.
You need to recommend a solution to upgrade the computers to Windows 10 Enterprise, join the computers to Microsoft Azure Active Directory (Azure AD), and install several Microsoft Store apps. The solution must meet the following requirements:
* Ensure that any applications installed by the users are retained.
* Minimize user intervention.
You use Windows Configuration Designer to create a provisioning package (.ppkg) that contains customization settings. You can apply the provisioning package to a device running Windows 10.
 
Incorrect Answers:
 
A: Microsoft Deployment Toolkit (MDT) allows you to automate the deployment of Windows operating systems in your organization. It is not used to upgrade to
Windows 10 Enterprise.
 
B: Windows Deployment Services (WDS) is the revised version of Remote Installation Services (RIS). WDS enables the deployment of Windows operating systems. You can use it to set up new computers using network-based installations. It is not used to upgrade to Windows 10 Enterprise.
 
D: Windows Autopilot is a user-driven mode designed to minimize intervention of the IT administrator.
References:
 
How many days do you have to roll back the update in Windows 10?
* 10 since 1607
* before 30
[[Category:MD-101]]

MD-101 Topic 1 answers

2019-11-08T05:42:30Z

Rladmin:

MD-101 Topic 1 answers

2019-11-08T05:42:06Z

Rladmin:

review the serivicng status of computers which servicing channel is manged by intune:
* software updates -> Per update ring deployment state
 
User should be promted to set the system language and to accept the license aggreement for windows.
* - Autopilot remote reset
* X Autopilot user-driven deployment profile
* - AutoPilot self-deploying deployment profile
 
feature and quality updates have to be installed automatically during a maintenance window
* X From the Maintenance Scheduler settings, you configure Automatic Maintenance Random Delay
* - Windows Update settings, you enable Configure Automatic Updates, select 4-Auto download and schedule the install, and then enter a time.
* - From the Maintenance Scheduler settings, you configure Automatic Maintenance Activation Boundary.
 
redeploy previously used computer with autopilot
# generate csv with computer infos
# upload with store for business
# reset the computer
 
Secure Boot requirements
* GPT disk (not MBR disk)
* UEFI
 
implement hybrid Microsoft Azure Active Directory (Azure AD) and Microsoft Intune in AD doain with many computers
* use Windows AutoPilot deployment profile
 
Windows AutoPilot Reset effects on seting done by the user
* wifi connections and passphrases ratained
* Apps from the windows store and vpn connection removed
 
Intune action options to reset computers to the latest windows 10 enterprise
* fresh start action for windows 10 enterprise (latest feature update not a prerequisite)
* wipe action for windows 10 and 8.1 enterprise
 
enable self-service password reset in intune device config
 
prevent the video drivers from being updated automatically by using Windows Update for business
* - Device Installation and Restrictions settings in a Group Policy object (GPO), enable Prevent installation of devices using drivers that match these device setup classes, and then you enter the device GUID
* - settings app - clear Give me updates for other Microsoft products when I update Windows check box
* X From the Device Installation settings in a Group Policy object (GPO), you enable Specify search order for device driver source locations, and then you select Do not search Windows Update.
 
20 computers run Windows 10, are joined to Microsoft Azure Active Directory (Azure AD) and should be replaced. desktop background, the favorites, and the browsing history have to be migrated
* X Enterprise State Roaming
* - roaming user profiles
 
new computer named Computer1 that runs Windows 10 and is in a workgroup has to monitored by Log Analytics in an Azure Log Analytics workspace
* Install the Microsoft Monitoring Agent
 
deploy computers by MDT and WDS. ensure correct product key?
* an MDT task sequence
 
run a post script after a Windows 10 feature upgrade
* modify SetupConfig.ini on computer
 
filter Upgrade Readiness solution in Microsoft Azure for applications that can run in win 10
* filter column: UpgradeDecision
* filter value: Ready to Upgrade
 
Your company standardizes on Windows 10 Enterprise for all users.
Some users purchase their own computer from a retail store. The computers run Windows 10 Pro.
You need to recommend a solution to upgrade the computers to Windows 10 Enterprise, join the computers to Microsoft Azure Active Directory (Azure AD), and install several Microsoft Store apps. The solution must meet the following requirements:
* Ensure that any applications installed by the users are retained.
* Minimize user intervention.
You use Windows Configuration Designer to create a provisioning package (.ppkg) that contains customization settings. You can apply the provisioning package to a device running Windows 10.
 
Incorrect Answers:
 
A: Microsoft Deployment Toolkit (MDT) allows you to automate the deployment of Windows operating systems in your organization. It is not used to upgrade to
Windows 10 Enterprise.
 
B: Windows Deployment Services (WDS) is the revised version of Remote Installation Services (RIS). WDS enables the deployment of Windows operating systems. You can use it to set up new computers using network-based installations. It is not used to upgrade to Windows 10 Enterprise.
 
D: Windows Autopilot is a user-driven mode designed to minimize intervention of the IT administrator.
References:
 
How many days do you have to roll back the update in Windows 10?
* 10 since 1607
* before 30
[[Category:MD-101]]

MD-101 Topic 1 answers

2019-11-08T05:40:04Z

Rladmin:

MD-101 Topic 1 answers

2019-11-08T05:31:18Z

Rladmin:

MD-101 Topic 1 answers

2019-11-08T05:14:40Z

Rladmin:

MD-101 Topic 1 answers

2019-11-08T05:10:32Z

Rladmin:

MD-101 Topic 1 answers

2019-11-08T05:01:19Z

Rladmin:

MD-101 Topic 1 answers

2019-11-08T04:44:08Z

Rladmin:

MD-101 Topic 1 answers

2019-11-08T04:34:25Z

Rladmin:

MD-101 Topic 1 answers

2019-11-08T04:24:14Z

Rladmin:

MD-101 Topic 1 answers

2019-11-08T04:17:03Z

Rladmin:

MD-101 Topic 1 answers

2019-11-08T04:15:01Z

Rladmin:

review the serivicng status of computers which servicing channel is manged by intune:
* software updates -> Per update ring deployment state

Autopilot remote reset will not have the effect that the user is promted set the system language or to accept the license aggreement for windows afterward.

[[Category:MD-101]]

MD-101 Topic 1 answers

2019-11-08T04:07:45Z

Rladmin:

review the serivicng status of computers which servicing channel is manged by intune:
* software updates -> Per update ring deployment state

[[Category:MD-101]]

MD-101 Topic 1 answers

2019-11-08T04:05:45Z

Rladmin: Die Seite wurde neu angelegt: „ Category:MD-101“

[[Category:MD-101]]

MD-101-Manage Apps and Data Summary

2019-11-08T04:00:13Z

Rladmin:

* Intune
** Deploy different app types
*** Store apps
*** Office 365 Suite apps
*** Web link apps
*** Built-in apps
*** Line-of-Business apps
*** Win32 apps
** Apps configured for deployment have to be assigned to the relevant device or user groups to take effect.
 
* Microsoft Store for Business
** role assignments to configure which permissions the user should get
** enable Private Store before it can be seen and used
** Intune can be enabled to distribute the apps from here, if it is set up as a store management tool and the sync is active.
** Offline Licensing lets apps be distributed by the network infrastructure or Intune instead of the storefront.
 
* By creating a custom Office 365 Suite app it is possible to determine, which office apps will be avialble for the users.
* Sideload for apps possible with provisioning packages or by integration into windows-installation-image with dism
* Internet Explorer Enterprise Mode -> determine which browser for which website
* App protection policies to contol data in protected apps
* DLP policies to prevent data leakage

[[Category:MD-101]]

MD-101-Manage Apps and Data Summary

2019-11-08T03:38:17Z

Rladmin: Die Seite wurde neu angelegt: „ Category:MD-101“

[[Category:MD-101]]

MD-101-Manage and protect devices Summary

2019-11-08T03:28:54Z

Rladmin:

* Windows Defender features are managed through pwershell, gpos or intune
** Windows Defender Credential Guard requires Windows 10 Enterprise or Education and TPM and virtualization has to be enabled
** Windows Defender Exploit Guard
*** Exploit Protection
*** Attack Surface Reduction Rules
*** Network Protection
*** Controlled Folder Access
** Windows Defender Application Guard
*** requirements like Credential Guard
*** new browser windows in virtualized sandboxes
** Windows Defender Application Control to determine which apps are safe to run in the organization
** Threat Agent Status for monitoring Defender on enrolled devices
 
* Ways to enroll Windows devices
** Add a work or school account
** Enroll in MDM only (user-driven)
*** Android and iOS devices can be enrolled by downloading the Company Portal app from the app store and signing in with the organsation account
** Enroll in MDM only (Device Enrollment Manager)
** Azure AD Join during OOBE
** Azure AD Join using Windows Autopilot
*** Autopilot can be configured to be user-driven or self-deploying
** Azure AD Join using bulk enrollment
 
* Windows Analytics and Log Analytics require an Azure subscription

[[Category:MD-101]]

MD-101-Manage and protect devices Summary

2019-11-08T03:28:12Z

Rladmin:

* Windows Defender features are managed through pwershell, gpos or intune
** Windows Defender Credential Guard requires Windows 10 Enterprise or Education and TPM and virtualization has to be enabled
** Windows Defender Exploit Guard
*** Exploit Protection
*** Attack Surface Reduction Rules
*** Network Protection
*** Controlled Folder Access
** Windows Defender Application Guard
*** requirements like Credential Guard
*** new browser windows in virtualized sandboxes
** Windows Defender Application Control to determine which apps are safe to run in the organization
** Threat Agent Status for monitoring Defender on enrolled devices
* Ways to enroll Windows devices
** Add a work or school account
** Enroll in MDM only (user-driven)
*** Android and iOS devices can be enrolled by downloading the Company Portal app from the app store and signing in with the organsation account
** Enroll in MDM only (Device Enrollment Manager)
** Azure AD Join during OOBE
** Azure AD Join using Windows Autopilot
*** Autopilot can be configured to be user-driven or self-deploying
** Azure AD Join using bulk enrollment
* Windows Analytics and Log Analytics require an Azure subscription

[[Category:MD-101]]

MD-101-Manage and protect devices Summary

2019-11-08T03:09:39Z

Rladmin: Die Seite wurde neu angelegt: „ Category:MD-101“

[[Category:MD-101]]

MD-101-Manage Policies and Profiles Summary

2019-11-08T03:07:03Z

Rladmin:

* devices can be managed joinedly in both System Center COnfiguration Manger and Microft Intune. That is called co-management.
* Intune can take precedence over GPOs starting 1803.
* MDM Migration Analysis Tools checks for GPOs that can be implemented with the MDM.
* Conditional access policies check conditions before access to corporate resources is granted.
** Conditions can be:
*** controlled apps
*** controll of device requirements like encryption of the drives, jail brake etc.
*** etc.
** Azure AD evaluates them.
** A test plan should be created when they are implemented.
* Devices will check their compliance status periodically with Intune.
** Intune device configuration policies -> device settings in the MDM
** Intune can deploy powershell scripts to windows devices.
*** This allows for the deployment of win32 applications for instance.
** scope tags -> filter intune policies to Azure AD groups
** custom policies with OMA-URI policies (Open Mobile Alliance Uniform Resource Identifier) possible
* User profiles types:
** Local
** Roaming - profile copy stored on the network (server share)
** Mandatory - fixed user profile, only admin can change them
*** set up by renaming NTuser.dat to NTuser.man for roaming profiles
** Super-Mandatory - mandatory profile stored on the network
*** set up by renaming profile folder \\server\profiles\user1.v6 -> \\server\profiles\user1.man.v6 for mandatory
** Temporary

[[Category:MD-101]]

MD-101-Manage Policies and Profiles Summary

2019-11-07T18:48:33Z

Rladmin:

MD-101-Manage Policies and Profiles Summary

2019-11-07T18:41:49Z

Rladmin: Die Seite wurde neu angelegt: „* devices can be managed joinedly in both System Center COnfiguration Manger and Microft Intune. That is called co-management. * Intune can take precedence ove…“

MD-101-Dynamic Deployment Summary

2019-11-07T18:26:58Z

Rladmin:

* Dynamic provisioning aims to transform windows 10 installations. The following methods can be used to accomplish this:
** Azure AD
** Mobile Device Management
** provisioning packages
*** Provisioning packages are created using the Windows Configuration Designer.
** subscribtion activation
** Windows Autopilot
*** Windows Autopilot can enroll devices into MDM and customize the OOBE.
*** All Windows 10 editions from 1703 are licensed for Autopilot.
*** Autopilot requires Azure AD and an MDM.
*** The Windows Autopilot Enrollment Status Page allows users to see the progress during the device setup.
*** The registration for the Autopilot service can be done by device vendors or manually by extractiting the the hardware-id with Get-WindowsAutoPilotInfo.ps1.
 
* The following is included in '''Windows Analytics''', which is a free cloud based tool:
** Device Health
** Update Compliance
*** Updates in enterprises can be monitored with the settings app or Update Compliance.
** Upgrade Readiness
*** Manage the upgrade process end to end.
** The commercial ID has to be added to devices, so they can send telemetry data to the Windows Analytics Environment.
** After the requirements for the devices for Windows Ananlytics is met, it can take 48 to 72 hours before the first data and solutions will be shown.
 
* Windows or Azure AD authentication options
** Dynamic Lock on smartphones will lock windows pcs, when the user steps away from the device.
** Multifactor authentication
** biometrics through Windows Hello (for Business)
** set up to 1000 banned passwords with Azure AD Password Protection
 
* You can not downgrade from Windows 10 to Windows 8.1, 8 or 7.
* Windows S Mode allows users to switch the edition of Windows 10 at any time using the Windows Store.
* User profiles should be migrated, whenever possible.
* Windows Known Folder Move for One Drive automatically redirects users folders to OneDrive for Business.
* Enterprise State Roaming allows cloud based accounts to be synced.
* Delivery Optimization seems to use peer to peer for updates to reduce external bandwidth.
* Windows Update for Business allows the management of Non-Deferrable Updates, Quality Updates (deferrable up to 30 days) and Feature Updates (deferrable up to 365 days).
* Servicing channels can be implemented by GPO or Intune.

[[Category:MD-101]]
[[Category:MD-101-Deploy_and_Update_OS]]
[[Category:MD-101-Dynamic Deployment]]

MD-101-Dynamic Deployment Summary

2019-11-07T18:25:31Z

Rladmin:

* Dynamic provisioning aims to transform windows 10 installations. The following methods can be used to accomplish this:
** Azure AD
** Mobile Device Management
** provisioning packages
*** Provisioning packages are created using the Windows Configuration Designer.
** subscribtion activation
** Windows Autopilot
*** Windows Autopilot can enroll devices into MDM and customize the OOBE.
*** All Windows 10 editions from 1703 are licensed for Autopilot.
*** Autopilot requires Azure AD and an MDM.
*** The Windows Autopilot Enrollment Status Page allows users to see the progress during the device setup.
*** The registration for the Autopilot service can be done by device vendors or manually by extractiting the the hardware-id with Get-WindowsAutoPilotInfo.ps1.
 
* The following is included in '''Windows Analytics''', which is a free cloud based tool:
** Device Health
** Update Compliance
*** Updates in enterprises can be monitored with the settings app or Update Compliance.
** Upgrade Readiness
*** Manage the upgrade process end to end.
** The commercial ID has to be added to devices, so they can send telemetry data to the Windows Analytics Environment.
** After the requirements for the devices for Windows Ananlytics is met, it can take 48 to 72 hours before the first data and solutions will be shown.
 
* Windows or Azure AD authentication options
** Dynamic Lock on smartphones will lock windows pcs, when the user steps away from the device.
** Multifactor authentication
** biometrics through Windows Hello (for Business)
** set up to 1000 banned passwords with Azure AD Password Protection
 
* You can not downgrade from Windows 10 to Windows 8.1, 8 or 7.
* '''Windows S Mode''' allows users to switch the edition of Windows 10 at any time using the Windows Store.
* User profiles should be migrated, whenever possible.
* Windows Known Folder Move for One Drive automatically redirects users folders to OneDrive for Business.
* Enterprise State Roaming allows cloud based accounts to be synced.
* Delivery Optimization seems to use peer to peer for updates to reduce external bandwidth.
* Windows Update for Business allows the management of Non-Deferrable Updates, Quality Updates (deferrable up to 30 days) and Feature Updates (deferrable up to 365 days).
* Servicing channels can be implemented by GPO or Intune.
** Updates in enterprises can be monitored with the settings app or Update Compliance.

[[Category:MD-101]]
[[Category:MD-101-Deploy_and_Update_OS]]
[[Category:MD-101-Dynamic Deployment]]

MD-101-Dynamic Deployment Summary

2019-11-07T18:14:53Z

Rladmin:

* Dynamic provisioniing aims to transform windows 10 installations. The following methods can be used to accomplish this:
** Azure AD
** Mobile Device Management
** provisioning packages
*** Provisioning packages are created using the Windows Configuration Designer.
** subscribtion activation
** Windows Autopilot
*** Windows Autopilot can enroll devices into MDM and customize the OOBE.
*** All Windows 10 editions from 1703 are licensed for Autopilot.
*** Autopilot requires Azure AD and an MDM.
*** The Windows Autopilot Enrollment Status Page allows users to see the progress during the device setup.
*** The registration for the Autopilot service can be done by device vendors or manually by extractiting the the hardware-id with Get-WindowsAutoPilotInfo.ps1.
 
* The following is included in '''Windows Analytics''', which is a free cloud based tool:
** Device Health
** Update Compliance
** Upgrade Readiness
*** Manage the upgrade process end to end.
** The commercial ID has to be added to devices, so they can send telemetry data to the Windows Analytics Environment.
** After the requirements for the devices for Windows Ananlytics is met, it can take 48 to 72 hours before the first data and solutions will be shown.
 
* You can not downgrade from Windows 10 to Windows 8.1, 8 or 7.
* '''Windows S Mode''' allows users to switch the edition of Windows 10 at any time using the Windows Store.
* User profiles should be migrated, whenever possible.
* Windows Known Folder Move for One Drive automatically redirects users folders to OneDrive for Business.
* Enterprise State Roaming allows cloud based accounts to be synced.
* Delivery Optimization seems to use peer to peer for updates to reduce external bandwidth.
* Windows Update for Business allows the management of Non-Deferrable Updates, Quality Updates (deferrable up to 30 days) and Feature Updates (deferrable up to 365 days).
* Servicing channels can be implemented by GPO or Intune.

[[Category:MD-101]]
[[Category:MD-101-Deploy_and_Update_OS]]
[[Category:MD-101-Dynamic Deployment]]

MD-101-Dynamic Deployment Summary

2019-11-07T18:01:52Z

Rladmin:

* Dynamic provisioniing aims to transform windows 10 installations. The following methods can be used to accomplish this:
** Azure AD
** Mobile Device Management
** provisioning packages
*** Provisioning packages are created using the Windows Configuration Designer.
** subscribtion activation
** Windows Autopilot
*** Windows Autopilot can enroll devices into MDM and customize the OOBE.
*** All Windows 10 editions from 1703 are licensed for Autopilot.
*** Autopilot requires Azure AD and an MDM.
*** The Windows Autopilot Enrollment Status Page allows users to see the progress during the device setup.
*** The registration for the Autopilot service can be done by device vendors or manually by extractiting the the hardware-id with Get-WindowsAutoPilotInfo.ps1.
 
* The following is included in '''Windows Analytics''', which is a free cloud based tool:
** Device Health
** Update Compliance
** Upgrade Readiness
*** Manage the upgrade process end to end.
** The commercial ID has to be added to devices, so they can send telemetry data to the Windows Analytics Environment.
** After the requirements for the devices for Windows Ananlytics is met, it can take 48 to 72 hours before the first data and solutions will be shown.
 
* You can not downgrade from Windows 10 to Windows 8.1, 8 or 7.
* '''Windows S Mode''' allows users to switch the edition of Windows 10 at any time using the Windows Store.
* User profiles should be migrated, whenever possible.

[[Category:MD-101]]
[[Category:MD-101-Deploy_and_Update_OS]]
[[Category:MD-101-Dynamic Deployment]]

MD-101-Dynamic Deployment Summary

2019-11-07T18:01:20Z

Rladmin:

* Dynamic provisioniing aims to transform windows 10 installations. The following methods can be used to accomplish this:
** Azure AD
** Mobile Device Management
** provisioning packages
*** Provisioning packages are created using the Windows Configuration Designer.
** subscribtion activation
** Windows Autopilot
*** Windows Autopilot can enroll devices into MDM and customize the OOBE.
*** All Windows 10 editions from 1703 are licensed for Autopilot.
*** Autopilot requires Azure AD and an MDM.
*** The Windows Autopilot Enrollment Status Page allows users to see the progress during the device setup.
*** The registration for the Autopilot service can be done by device vendors or manually by extractiting the the hardware-id with Get-WindowsAutoPilotInfo.ps1.
* The following is included in '''Windows Analytics''', which is a free cloud based tool:
** Device Health
** Update Compliance
** Upgrade Readiness
*** Manage the upgrade process end to end.
** The commercial ID has to be added to devices, so they can send telemetry data to the Windows Analytics Environment.
** After the requirements for the devices for Windows Ananlytics is met, it can take 48 to 72 hours before the first data and solutions will be shown.
* You can not downgrade from Windows 10 to Windows 8.1, 8 or 7.
* '''Windows S Mode''' allows users to switch the edition of Windows 10 at any time using the Windows Store.
* User profiles should be migrated, whenever possible.

[[Category:MD-101]]
[[Category:MD-101-Deploy_and_Update_OS]]
[[Category:MD-101-Dynamic Deployment]]

MD-101-Dynamic Deployment Summary

2019-11-07T17:39:59Z

Rladmin: Die Seite wurde neu angelegt: „* Dynamic provisioniing aims to transform windows 10 installations. The following methods can be used to accomplish this: ** Azure AD ** Mobile Device Manageme…“

Provisioning Packages

2019-09-23T11:19:10Z

Rladmin:

... created using the Windows Configuration Designer. Can be used to send one or more config to apps and settings on a device. 
 
There are some similarities between Provisioning Packages and GPOs in their handling. 
 
Amongst other things, PPs can perform the following functions:
* Configure the computer name and user accounts.
* Add the computer to a domain.
* Upgrade the Windows 10 version. (i.e. Home to Enterprise)
* Configure the user interface.
* Add additional files or install apps.
* Remove installed software.
* Configure network connectivity settings.
* Install certificates.
* Implement security settings.
* Reset Windows 10.
* Run Powershell scripts. 
 
Further infos: https://docs.microsoft.com/en-us/windows/configuration/provisioning-packages/provisioning-packages
[[Category:MD-101]]
[[Category:MD-101-Deploy_and_Update_OS]]
[[Category:MD-101-Dynamic Deployment]]

Provisioning Packages

2019-09-23T11:17:39Z

Rladmin:

... created using the Windows Configuration Designer. Can be used to send one or more config to apps and settings on a device. 
 
There are some similarities between Provisioning Packages and GPOs in their handling. 
 
Amognst other things, PPs can perform the following functions:
* Configure the computer name and user accounts.
* Add the computer to a domain.
* Upgrade the Windows 10 version. (i.e. Home to Enterprise)
* Configure the user interface.
* Add additional files or install apps.
* Remove installed software.
* Configure network connectivity settings.
* Install certificates.
* Implement security settings.
* Reset Windows 10.
* Run Powershell scripts. 
 
Further infos: https://docs.microsoft.com/en-us/windows/configuration/provisioning-packages/provisioning-packages
[[Category:MD-101]]
[[Category:MD-101-Deploy_and_Update_OS]]
[[Category:MD-101-Dynamic Deployment]]

Provisioning Packages

2019-09-23T11:11:07Z

Rladmin:

... created using the Windows Configuration Designer. Can be used to send one or more config to apps and settings on a device. 
 
There are some similarities between Provisioning Packages and GPOs in their handling. 
 
Amognst other things, PPs can perform the following functions:
* Configure the computer name and user accounts.
* Add the computer to a domain.
* Upgrade the Windows 10 version. (i.e. Home to Enterprise)
* Configure the user interface.
* Add additional files or install apps.
* Remove installed software.
* Configure network connectivity settings.
* Install certificates.
* Implement security settings.
* Reset Windows 10.
* Run Powershell scripts.

[[Category:MD-101]]
[[Category:MD-101-Deploy_and_Update_OS]]
[[Category:MD-101-Dynamic Deployment]]

Provisioning Packages

2019-09-23T10:50:09Z

Rladmin: Die Seite wurde neu angelegt: „... created using the Windows Configuration Designer. Can be used to send one or more config to apps and settings on a device. Category:MD-101 Catego…“

... created using the Windows Configuration Designer. Can be used to send one or more config to apps and settings on a device. 
[[Category:MD-101]]
[[Category:MD-101-Deploy_and_Update_OS]]
[[Category:MD-101-Dynamic Deployment]]

Kategorie:MD-101-Dynamic Deployment

2019-09-23T10:46:32Z

Rladmin: Die Seite wurde neu angelegt: „ Category:MD-101 Category:MD-101-Deploy_and_Update_OS“

[[Category:MD-101]]
[[Category:MD-101-Deploy_and_Update_OS]]

Kategorie:MD-101-Deploy and Update OS

2019-09-23T10:43:20Z

Rladmin: Die Seite wurde neu angelegt: „Category:MD-101“

[[Category:MD-101]]

Hauptseite

2019-09-23T10:40:25Z

Rladmin:

= Installieren und Konfigurieren von Windows 10 =
Dieses Wiki ist für mich als Gedankenstütze und Notizblock für die Vorbereitung auf meine Microsoft-Zertifizierung 70-698 gedacht. 
Es ist wenn überhaupt nur bedingt für den Gebrauch anderer geeignet. 
 
Da 70-698 von MD-100 abgelöst wurde, ist das Ziel also jetzt MD-100. 
 
In [[:Kategorie:70-698]] sammel ich die für mich interessanten Infos. 
 
Mit der bestandenen Prüfung MD-100 ist das neue Ziel [[:Kategorie:MD-101|MD-101]].

Hauptseite

2019-09-23T10:40:00Z

Rladmin:

Hauptseite

2019-09-23T10:39:20Z

Rladmin:

Hauptseite

2019-09-23T10:39:06Z

Rladmin:

Kategorie:MD-101

2019-09-23T10:37:40Z

Rladmin: Leere Seite erstellt

Hauptseite

2019-04-25T06:18:37Z

Rladmin:

Hauptseite

2019-04-25T06:18:05Z

Rladmin:

= Installieren und Konfigurieren von Windows 10 =
Dieses Wiki ist für mich als Gedankenstütze und Notizblock für die Vorbereitung auf meine Microsoft-Zertifizierung 70-698 gedacht. 
Da 70-698 von MD-100 abgelöst wurde, ist das Ziel also jetzt MD-100. 
Es ist wenn überhaupt nur bedingt für den Gebrauch anderer geeignet. 
 
In [[:Kategorie:70-698]] sammel ich die für mich interessanten Infos.

Tools zur Treiberüberprüfung

2019-03-03T10:53:00Z

Rladmin:

'''sigverif.exe''' 
... überprüft ob die installierten Treiber signiert sind. Das Tool kann mit Standard-Benutzer-Berechtigungen ausgeführt werden. Die Ergebnisse werden in der Datei SIGVERIF.TXT gespeichert. Der Speicherort sollte %System-Root% sein, war aber in meinem Test C:\Users\Public\Documents. 

'''verifier.exe''' 
Der Treiberüberprüfungs-Manager bietet mehr Möglichkeiten, muss aber mit Administrator-Berechtigung ausgeführt werden. Die Verwendung erfolgt in zwei Schritten:
# Zuerst führt man das Tool aus und legt in den Einstellungen fest welche Treiber überprüft werden sollen.
# Anschließend kann man nach einem Neustart mit der Option ''Informationen über verifizierte Treiber anzeigen'' die gesammelten Informationen.
[https://www.youtube.com/watch?v=vrrfsjhGMn4 Youtube Tutorial verifier.exe]

[[Kategorie:70-698]]
[[Kategorie:Windows Implementierung]]
[[Kategorie:Windows Geräte und Treiber]]

Tools zur Treiberüberprüfung

2019-03-03T10:03:56Z

Rladmin: Die Seite wurde neu angelegt: „ Kategorie:70-698 Kategorie:Windows Implementierung Kategorie:Windows Geräte und Treiber“

[[Kategorie:70-698]]
[[Kategorie:Windows Implementierung]]
[[Kategorie:Windows Geräte und Treiber]]

Allgemeines zu Geräten und Treibern

2019-03-03T09:56:33Z

Rladmin:

Treiber werden bei Windows 10 durch ausgeprägte Plug-And-Play-Funktionen hauptsächlich aus dem lokalen Speicher oder Windows Update bezogen. Falls dort kein passender Treiber gefunden wird oder es zu Problemen mit dem Gerät kommt, kann man einen Treiber via Gerätemanager manuell installieren. Falls ein über Windows Update installierter Treiber Probleme macht, muss man diesen ggf. via ''Update und Sicherheit > Windows Update > Updateverlauf > Updates deinstallieren'' entfernen. 
Standardmäßig werden Trieber von Windows Update nicht über getaktete Verbindungen heruntergeladen. Das kann man aber auch via ''Geräte > Drucker & Scanner > Download über getaktete Verbindungen'' aktivieren. 
Falls es bei der Deinstallation von Treibern Probleme gibt, kann man zur Not die Treiber manuell mit PnPUtil.exe löschen: 
<code>pnputil.exe -a -d <Pfad_zum_Treiber>\<Treibername>.inf</code> 
Die automatische Installation von Treibern auf einem System kann man verhindern via ''Systemsteuerung > Geräte und Drucker > [ Computername ] > Geräteinstallationseinstellungen''. 
Falls nur ein Treiber oder Windows-Update deaktiviert werden soll geht das mit dem Problembehandlungstool "''Show or hide updates''": https://support.microsoft.com/kb/3073930
[[Kategorie:70-698]]
[[Kategorie:Windows Implementierung]]
[[Kategorie:Windows Geräte und Treiber]]

Erweiterter Start

2019-03-03T09:51:11Z

Rladmin: Die Seite wurde neu angelegt: „Über den erweiterten Start kann man bspw. den abgesicherten Modus starten oder das Erzwingen der Treibersignatur deaktivieren. Es gibt zwei Möglichkeiten…“

Über den erweiterten Start kann man bspw. den abgesicherten Modus starten oder das Erzwingen der Treibersignatur deaktivieren. 
Es gibt zwei Möglichkeiten diesen aufzurufen:
* Einstellungen > Update und Sicherheit > Wiederherstellung > Erweiterter Start > Jetzt neu starten
* Start > (Umschalttaste) + Click auf Neustarten

[[Kategorie:70-698]]
[[Kategorie:Windows Implementierung]]
[[Kategorie:Windows Geräte und Treiber]]