Planning Windows 11
- Comparing editions: Home, Pro, Enterprise, Education; activation via volume licensing, Active Directory-based activation and subscription activation
- Hardware requirements: TPM 2.0, UEFI with Secure Boot, supported processors; checking the compatibility of existing devices
- Lifecycle: annual feature updates, servicing periods for Pro and Enterprise, LTSC variants
- Moving on from Windows 10 after end of support: in-place upgrade, clean install or device replacement, transferring settings with Windows Backup for Organizations
- Understanding Windows on Arm and Copilot+ PCs
Installing and Deploying
- Creating installation media, installing Windows 11 and controlling the Out-of-Box Experience
- Creating answer files with Windows System Image Manager from the Windows ADK
- Provisioning packages with Windows Configuration Designer
- Performing an in-place upgrade and analysing upgrade failures with SetupDiag
- Deployment methods at a glance: Windows Autopilot, Configuration Manager; implications of the retirement of the Microsoft Deployment Toolkit (MDT)
- Removing pre-installed Store apps via policy
Accounts, Policies and Management
- Local accounts, Microsoft account, domain join, Microsoft Entra Join and Microsoft Entra Hybrid Join
- Group Policy for Windows 11: administrative templates, security options, Start menu and taskbar
- Microsoft Intune overview: enrolment, configuration profiles, compliance (covered in depth in course MD-102)
- Managing local administrator passwords with Windows LAPS
- Language packs and regional settings
Networking and Remote Access
- Configuring IPv4 and IPv6, name resolution, network profiles
- Distributing Wi-Fi profiles and 802.1X
- VPN and Always On VPN; DirectAccess has been discontinued
- Remote Desktop, PowerShell remoting and OpenSSH
- Windows Firewall with Advanced Security
Storage and Files
- Disks, partitions, Storage Spaces and Dev Drive
- Shares and NTFS permissions, SMB signing and encryption
- OneDrive and Known Folder Move
- File History and file recovery
Applications
- Win32 applications, MSIX and Microsoft Store; installing packages with WinGet
- Setting default apps and file associations via policy
- Installing Microsoft 365 Apps with the Office Deployment Tool, choosing update channels
- Managing Microsoft Edge, Internet Explorer mode for older web applications
Security
- Virtualization-based security, memory integrity, Credential Guard and LSA protection
- BitLocker and device encryption, backing up recovery keys, Personal Data Encryption
- Windows Hello for Business and passkeys
- Microsoft Defender Antivirus, attack surface reduction and SmartScreen
- Controlling applications with App Control for Business, AppLocker and Smart App Control
Updates and Maintenance
- Windows Update client policies, update rings and WSUS; overview of Windows Autopatch and hotpatch for Windows 11 Enterprise
- Planning monthly, optional and feature updates, enablement packages
- Monitoring performance and reliability: Task Manager, Performance Monitor, Event Viewer
- Preparing recovery options: Windows RE, System Restore, Quick Machine Recovery
