Deploy Manage Windows 10

Deploying and Managing Windows 10 Using Enterprise Services (Exam 70-697)

Course ID: HLT 20697-2

Course Length: 5 days

Course Description:
This 5-day course provides administrators with the knowledge and skills needed to deploy and manage Windows 10 desktops, devices, and applications in an enterprise environment. Students learn how to plan and implement Windows 10 deployments in large organizations. Students also learn how to manage the Windows 10 installations after deployment to provide secure identity and data access using technologies related to Group Policy, Remote Access, and Workplace Join. To support a variety of device and data management solutions, Microsoft Azure Active Directory, Microsoft Intune, and Microsoft Azure Rights Management are introduced. These services are part of the Enterprise Mobility Suite which provide identity and access management, cloud-based device, application, and update management, and secure data access to information stored both in the cloud and on any location within your corporate network.

Target Student:
This course is intended for IT Professionals who are interested in specializing in Windows 10 desktop and application deployments and managing the cloud-based application and data service environments for medium-to-large enterprise organizations. These professionals typically work with networks that are configured as Windows Server domain-based environments with managed access to the Internet and cloud services.

Prerequisites:
Before attending this course, students must have:

  • At least two years of experience in the IT field.
  • Knowledge of networking fundamentals, including Transmission Control Protocol /Internet Protocol (TCP/IP), User Datagram Protocol (UDP), and Domain Name System (DNS).
  • Knowledge of Microsoft Active Directory Domain Services (AD DS) principles.
  • Windows Server 2012 R2 Fundamentals.
  • Microsoft Windows Client essentials; for example, working knowledge of Windows 7 and/or Windows 8.1

Delivery Method:
Instructor led, group-paced, classroom-delivery learning model with structured hands-on activities.

Performance-Based Objectives :
Upon successful completion of this course, students will be able to:

  • Describe the challenges and solutions for desktop and device management in an enterprise environment.
  • Deploy Windows 10 Enterprise desktops.
  • Manage user profiles and user state virtualization.
  • Manage Windows 10 sign-in and identity.
  • Manage desktop and application settings by using Group Policy.
  • Manage data access for Windows-based devices.
  • Manage remote access solutions.
  • Configure and manage client Hyper-V.
  • Manage Windows 10 devices by using enterprise mobility solutions.
  • Manage desktop and mobile clients by using Intune.
  • Manage updates and Endpoint Protection by using Intune.
  • Manage application and resource access by using Intune.

Course Content

Module 1: Managing Desktops and Devices in an Enterprise Environment
This module explains the most current trends and information related to desktop and device management in the enterprise. It also provides an overview on how to extend device management to the cloud.
Topic 1A: Managing Windows 10 in the Enterprise
Topic 1B: Managing a Mobile Workforce
Topic 1C: Supporting Devices in the Enterprise
Topic 1D: Extending IT Management and Services to the Cloud
Lab: Planning for Windows 10 and Device Management in the Enterprise

Module 2: Deploying Windows 10 Enterprise Desktops
This module explains the various deployment scenarios of Windows 10 and the considerations to keep in mind while performing these deployments. This module also explains how to deploy Windows 10 by using the Windows Assessment and Deployment Kit (WADK) and the Microsoft Deployment Toolkit (MDT). This module also explains how to maintain Windows 10 by using DISM and Windows Imaging and Configuration Designer (ICD).
Topic 2A: Overview of Windows 10 Enterprise Deployment
Topic 2B: Customizing Enterprise Desktop Deployments
Topic 2C: Deploying Windows 10 by Using the Microsoft Deployment Toolkit
Topic 2D: Maintaining a Windows 10 Installation
Topic 2E: Managing Volume License Activation for Windows 10
Lab: Building a Reference Image by Using WADK Tools
Lab: Using MDT to Deploy Windows 10 Desktops
Lab: Maintaining a Windows 10 Installation using Windows ICD

Module 3: Managing User Profiles and User State Virtualization
This module explains user states and user state virtualization and explains how to deploy and maintain user experience virtualization (UE-V). This module also explains how to use tools such as ScanState and LoadState to migrate user states.
Topic 3A: Managing User Profile and User State
Topic 3B: Implementing User State Virtualization by Using Group Policy
Topic 3C: Configuring User Experience Virtualization
Topic 3D: Managing User State Migration
Lab: Configuring User Profiles and User State Virtualization
Lab: Migrating User State by Using USMT

Module 4: Managing Windows 10 Sign-In and Identity
This module explains the concept of identity and the methods to enhance identity security. This module also explains cloud identities and the use of Azure Active Directory Premium in enterprise organizations.
Topic 4A: Overview of Enterprise Identity
Topic 4B: Planning for Cloud Identity Integration
Lab: Integrating a Microsoft Account with a Domain Account
Lab: Joining Windows 10 to Azure Active Directory

Module 5: Managing Desktop and Application Settings by Using Group Policy
This module explains how to manage Group Policy inheritance, administrative templates, and common enterprise desktop settings. This module also explains how to apply policies using targeting and filtering.
Topic 5A: Managing Group Policy Objects
Topic 5B: Configuring Enterprise Desktops Using Group Policy
Topic 5C: Overview of Group Policy Preferences
Lab: Configuring Group Policy Objects and Settings•Managing Windows 10 by Using Group Policy
Lab: Using Group Policy Preferences to Manage Desktop Settings•Configuring Group Policy Preferences to Apply Drive and Printer Mapping

Module 6: Managing Data Access for Windows-based Devices
This module explains how to implement Device Registrations and Work Folders. This module also explains how to configure and share data stored in Microsoft OneDrive.
Topic 6A: Overview of Data Access Solutions
Topic 6B: Implementing Device Registration
Topic 6C: Implementing Work Folders
Topic 6D: Managing Online Data Using Cloud-Based Storage Solutions
Lab : Configuring Data Access for Non-Domain Joined Devices
Lab : Managing Data Access Using OneDrive

Module 7: Managing Remote Access Solutions
This module explains how to configure a virtual private network (VPN) and DirectAccess in Windows 10. This module also explains how to publish applications in Microsoft Azure RemoteApp.
Topic 7A: Overview of Remote Access Solutions
Topic 7B: Configuring VPN Access to Remote Networks
Topic 7C: Using DirectAccess with Windows 10
Topic 7D: Supporting RemoteApp Lab : Implementing DirectAccess
Lab : Configuring Azure RemoteApp

Module 8: Configuring and Managing Client Hyper-V
This module explains how to create virtual switches, virtual hard disks, and virtual machines.
Topic 7A:Installing and Configuring Client Hyper-V
Topic 7B:Configuring Virtual Switches
Topic 7C:Creating and Managing Virtual Hard Disks
Topic 7D:Creating and Managing Virtual Machines
Lab : Configuring Virtual Machines by Using Client Hyper-V

Module 9: Managing Windows 10 Devices Using Enterprise Mobility Solutions
This module explains the use of the Enterprise Mobility Suite and its components, Azure Active Directory Premium, Azure Rights Management, and Microsoft Intune.
Topic 9A:Overview of the Enterprise Mobility Suite
Topic 9B:Overview of Azure Active Directory Premium
Topic 9C:Overview of Azure Rights Management
Topic 9D:Overview of Microsoft Intune
Lab: Implementing a Microsoft Intune Subscription

Module 10: Managing Desktop and Mobile Clients Using Microsoft Intune
This module explains how to configure and assign configuration policies. This module also explains how to create Mobile Device Management (MDM) policies and enroll mobile devices to Intune.
Topic 10A:Deploying the Intune Client Software
Topic 10B:Overview of Microsoft Intune Policies
Topic 10C:Mobile Device Management Using Intune
Lab: Installing the Intune Client Software and Configuring Policies
Lab: Managing Mobile Devices Using Microsoft Intune

Module 11: Managing Updates and Endpoint Protection Using Microsoft Intune
This module explains how to configure updates and Endpoint Protection settings and reports.
Topic 11A:Managing Updates Using Microsoft Intune
Topic 11B:Managing Endpoint Protection
Lab : Managing Updates and Endpoint Protection Using Microsoft Intune

Module 12: Application and Resource Access Using Microsoft Intune
This module explains how to use the Microsoft Intune Software Publisher and deploy applications to managed clients. This module also explains the use of certificate profiles, Wi-Fi profiles, and VPN profiles to control access to company resources.
Topic 12A:Overview of Application Management Using Intune
Topic 12B:The Application Deployment Process
Topic 12C:Controlling Access to Company Resources
Lab: Deploying Applications by Using Microsoft Intune
Lab: Managing Resource Access by Using Microsoft Intune