Category Archives: Microsoft Windows Client

Exam MD-100: Windows Editions

Let’s review the latest editions of Windows, as we will most certainly require this skill in the new Windows 10 certification exams.

Windows 10 Editions

Here they are:

First, we have the baseline editions. Baseline editions are the only editions available as standalone purchases in the retail outlets.

Baseline Editions

  • Home – Windows 10 Home edition is designed for use in PCs, tablets and 2-in-1 PCs. It includes all consumer-directed features.
  • Pro – Windows 10 Pro includes all features of Windows 10 Home, with additional capabilities that are oriented towards business environments, such as Active Directory, Remote Desktop, BitLocker, Hyper-V, and Windows Defender Device Guard.
  • Pro for Workstations – Windows 10 Pro for Workstations is designed for high-end hardware for intensive computing tasks and supports Intel Xeon, AMD Opteron and the latest AMD Epyc processors; up to four CPUs; up to 6 TB RAM; the ReFS file system; Non-Volatile Dual In-line Memory Module (NVDIMM); and remote direct memory access (RDMA).

Next, we have the organizational editions. These editions add features to facilitate centralized control of many installations of the OS within an organization. The main avenue of acquiring them is a volume licensing contract with Microsoft.

Organizational Editions

  • Enterprise – Windows 10 Enterprise provides all the features of Windows 10 Pro, with additional features to assist with IT-based organizations. Windows 10 Enterprise is configurable on three branches, Semi-Annual Channel, Semi-Annual Channel (Targeted), and Windows Insider.
  • Education – Windows 10 Education is distributed through Academic Volume Licensing. Initially, it was reported to have the same feature set as Windows 10 Enterprise. As of version 1709, however, this edition has fewer features.
  • Pro Education – This edition was introduced in July 2016 for hardware partners on new devices purchased with the discounted K–12 academic licenses. It features a “Set Up School PCs” app that allows provisioning of settings using a USB flash drive and does not include Cortana, Microsoft Store suggestions or Windows Spotlight.
  • Enterprise LTSC – Enterprise LTSC (Long-Term Servicing Channel) is a long-term support version of Windows 10 Enterprise released every 2 to 3 years. Each release is supported with security updates for 10 years after its release and intentionally receive no feature updates. Some features, including the Microsoft Store and bundled apps, are not included in this edition. This edition was first released as Windows 10 Enterprise LTSB (Long-Term Servicing Branch). There are currently 4 releases of LTSC: two in 2015, one in 2016 and one in 2018/2019.

Finally, there are the device-specific editions. These editions are licensed to device manufacturers only. The main avenue of purchasing these editions is through buying specific devices (e.g. smartphones) that have them pre-installed.

Device-Specific Editions

  • IoT – Designed specifically for use in the small footprint, low-cost devices, and IoT scenarios. It is a rebranded version of Microsoft’s earlier embedded operating systems, Windows Embedded. Three editions are already announced: IoT Core, IoT Enterprise, and IoT Mobile Enterprise.
  • Team – Windows 10 Team is a device-specific version of Windows 10 loaded onto the Surface Hub.

Finally! New Windows 10 Exams in Beta!

Windows 10 has evolved (a lot) since those early releases. For example, the HomeGroup feature has bit the IT dust. Microsoft has responded (finally) by releasing two new certification exams in Beta in December 2018.

Windows 10 Certification

This means we will get new versions of the certification and the exams soon. Of course, I am also excited about the new, upcoming courses at CBT Nuggets. Once again, we will focus on Hands-On Labs to ensure that you get sandboxes for Windows 10 to experiment with all the new features and technologies. This time, we will also be offering checkpoint labs where you will be challenged to demonstrate your abilities with Windows 10 support.

Exam MD-100: Windows 10 (beta)

Deploy Windows (15-20%)

  • Deploy Windows 10
    • Configure language packs; migrate user data; perform a clean installation; perform an in-place upgrade (using tools such as MDT, WDS, ADK, etc.); select the appropriate Windows edition; troubleshoot activation issues
  • Perform post-installation configuration
    • Configure Edge and Internet Explorer; configure mobility settings; configure sign-in options; customize the Windows desktop

Manage Devices and Data (35-40%)

  • Manage local users, local groups, and devices
    • Manage devices in directories; manage local groups; manage local users
  • Configure data access and protection
    • Configure NTFS permissions; configure shared permissions
  • Configure devices by using local policies
    • Configure local registry; implement local policy; troubleshoot group policies on devices
  • Manage Windows security
    • Configure user account control (UAC); configure Windows Defender Firewall; implement encryption

Configure Connectivity (15-20%)

  • Configure networking
    • Configure client IP settings; configure mobile networking; configure VPN client; troubleshoot networking; configure Wi-Fi profiles
  • Configure remote connectivity
    • Configure remote management; enable PowerShell Remoting; configure remote desktop access

Maintain Windows (25-30%)

  • Configure system and data recovery
    • Perform file recovery (including OneDrive); recover Windows 10; troubleshoot startup/boot process
  • Manage updates
    • Check for updates; troubleshoot updates; validate and test updates; select the appropriate servicing channel; configure Windows update options
  • Monitor and manage Windows
    • Configure and analyze event logs; manage performance; manage Windows 10 environment

MD-101 Managing Modern Desktops (beta)

Deploy and Update Operating Systems (15-20%)

  • Plan and implement Windows 10 by using dynamic deployment
    • Evaluate and select appropriate deployment options; pilot deployment; manage and troubleshoot provisioning packages
  • Plan and implement Windows 10 by using Windows Autopilot
    • Evaluate and select appropriate deployment options; pilot deployment; create, validate, and assign deployment profile; extract device HW information to CSV file; import device HW information to cloud service; troubleshoot deployment
  • Upgrade devices to Windows 10
    • Identify upgrade and downgrade paths; manage in-place upgrades; configure a Windows analytics environment; perform Upgrade Readiness assessment; migrate user profiles
  • Manage updates
    • Configure Windows 10 delivery optimization; configure Windows Update for Business; deploy Windows updates; implement feature updates; monitor Windows 10 updates
  • Manage device authentication
    • Manage authentication policies; manage sign-on options; perform Azure AD join

Manage Policies and Profiles (35-40%)

  • Plan and implement co-management
    • Implement co-management precedence; migrate group policy to MDM policies; recommend a co-management strategy
  • Implement conditional access and compliance policies for devices
    • Implement conditional access policies; manage conditional access policies; plan conditional access policies; implement device compliance policies; manage device compliance policies; plan device compliance policies
  • Configure device profiles
    • Implement device profiles; manage device profiles; plan device profiles
  • Manage user profiles
    • Configure user profiles; configure Enterprise State Roaming in Azure AD; configure sync settings; implement Folder Redirection (including OneDrive)

Manage and Protect Devices (15-20%)

  • Manage Windows Defender
    • Implement and manage Windows Defender Application Guard; implement and manage Windows Defender Credential Guard; implement and manage Windows Defender Exploit Guard; implement Windows Defender Advanced Threat Protection; integrate Windows Defender Application Control; manage Windows Defender Antivirus
  • Manage Intune device enrollment and inventory
    • Configure enrollment settings; configure Intune automatic enrollment; enable device enrollment; enroll non-Windows devices; enroll Windows devices; generate custom device inventory reports; review device inventory
  • Monitor devices
    • Monitor device health (e.g., log analytics, Windows Analytics, or other cloud-based tools); monitor device security

Manage Apps and Data (25-30%)

  • Deploy and update applications
    • Assign apps to groups; Deploy apps by using Intune; deploy apps by using Microsoft Store for Business; deploy O365 ProPlus; enable sideloading of apps into images; gather Office readiness data; configure IE Enterprise mode; configure and implement assigned access or public devices
  • Implement Mobile Application Management (MAM)
    • Implement MAM policies; manage MAM policies; plan MAM; configure Windows Information Protection; implement Azure Information Protection templates; securing data by using Intune