Windows 11 for Enterprise Administrators : Unleash the Power of Windows 11 with Effective Techniques and Strategies / Manuel Singer [and four others].

Format:

Book

Author/Creator:

Singer, Manuel, author.

Language:

English

Subjects (All):

Microsoft Windows (Computer file).

Operating systems (Computers).

Physical Description:

1 online resource (286 pages)

Edition:

Second edition.

Place of Publication:

Birmingham, England : Packt Publishing Ltd., [2023]

Summary:

Windows 11 comes with a plethora of new security measures, customizability, and accessibility features that can help your organization run more smoothly. But, without a proper introduction to this new version of Windows, it’s easy to miss the most important improvements, along with configuration options that will make migrating to Windows 11 frictionless. Windows 11 for Enterprise Administrators helps you understand the installation process, configuration methods, deployment scenarios, and management strategies. You’ll delve into configuring Remote Server Administration Tools for remote Windows Server and Azure Active Directory management. This edition emphasizes PowerShell's role in automating administrative tasks, and its importance in Windows 11 and Windows Server management. It also provides comprehensive insights into Windows 11 updates, including Version 21H2 and 22H2, contrasting them with Windows 10, ensuring your knowledge stays current with the latest enhancements in the Windows ecosystem. By the end of this book, you'll be well-equipped with Windows 11's vital technologies and potentials, enabling you to adeptly oversee and implement these attributes within your company.

Contents:

Cover

Title Page

Copyright and Credits

Contributors

Table of Contents

Preface

Chapter 1: Windows 11 - Installation and Upgrading

Selecting the edition and channel version

General Availability Channel (GAC) and support timeline

Long-Term Servicing Channel (LTSC) and support timeline

Recommendations

Hardware requirements for Windows 11

Official (minimum) requirements

CPU limitations

Hardware requirements for additional features

Recommendations for a future-oriented hardware choice

Upgrading to Windows 11

In-place upgrades

Limitations and blockers of an in-place upgrade

Traditional wipe-and-load

An alternative - provisioning package (PPKG)

The modern way - Windows Autopilot

Activation of Windows 11

Classic activation by Multiple Activation Key (MAK) or Key Management Services (KMS)

More modern via Active Directory-based activation

Future-oriented via Windows 10/11 Subscription Activation

Tips and tricks for a smooth in-place upgrade from Windows 8.1 or 10 to Windows 11

Looking up SetupDiag data in case of error/rollback

Integrating cumulative updates into install sources

Updating drivers

Looking at Setupact.log and Setupapi.dev.log

Desktop Analytics and Microsoft Endpoint Manager admin center

Selecting the deployment tools

Summary

Chapter 2: Introduction to PowerShell

What is PowerShell?

Windows PowerShell versus PowerShell 7

Installing PowerShell 7

Keeping PowerShell up to date

The three key pillars of PowerShell

Cmdlets

Objects

The pipeline

PowerShell's scripting language

PowerShell's formatting features

Getting help

Modules and commands

Commands

Modules

Discovery

PowerShell and security

Security by default

PowerShell logging

PowerShell script block logging

Module logging.

Execution policy

Transcription

Configuring PowerShell

Adding modules

Profiles

Group Policy

Using PowerShell

The PowerShell console

The Windows PowerShell Integrated Scripting Environment (ISE)

Windows Terminal

Microsoft Visual Studio Code

Desired State Configuration

Chapter 3: Configuration and Customization

Evolution of WaaS

Image customization

Imaging process

Customizing the image

Microsoft Autopilot

BYOD scenarios

Upgrade expectations

Security mitigation

Internet Explorer 11 retired

Windows Store for Business EOL announced

Windows 11 Start and taskbar layout

Audit mode

Tips

Virtual Desktop Infrastructure

SCT

AppLocker and Windows Defender Application Guard (previously MDAC)

Microsoft telemetry

Windows Spotlight

Mandatory user profiles

Chapter 4: User Account Administration

Windows account types

Account privileges

Local Administrator Password Solution

Creating policies to control local accounts

Password policy

Account lockout policy

Managing user sign-in options

Mobile device management security settings

User Account Control

Privileged Access Workstation

Chapter 5: Tools to Manage Windows 11

RSAT

Installing the RSAT tools

Updating the RSAT tools

Using the RSAT tools

The Sysinternals tools suite

Downloading the Sysinternals tools suite

Introducing the Sysinternals BGInfo tool

Introducing the Sysinternals PsTools suite

Chapter 6: Device Management

Evolving business needs

MDM

Changes to GPOs in Windows 10/11

Enterprise- and Education-only GPOs

Known issues when upgrading the central policy store

Known issues with GPPs/GPMC

Servicing and patching

Why CUs?

Update deployment solutions

Windows 10/11 servicing

Summary.

Chapter 7: Accessing Enterprise Data in BYOD and CYOD Scenarios

What are the EUC device models?

The bring your own device model

The choose your own device model

Key considerations

Comparing options

Protection and governance options

Identity and access management

Information protection

Device configuration

Application management

Storage sync options

OneDrive for Business

Work Folders

Alternative EUC delivery options

Windows 365 Cloud PC and Azure Virtual Desktop

Enabling virtual private networks

Publishing applications via proxy

End user behavior analytics

Chapter 8: Windows 11 Security

Introducing security posture

Zero trust

Defense in depth

Ensuring hardware security

TPM

Microsoft Pluton security processor

Windows Defender System Guard

Hypervisor-protected Code Integrity

Ensuring that we operate system security

Introducing Secure Boot and Trusted Boot

Exploring the Windows Security app

Using BitLocker for encryption

Security baselines

Ensuring user identity security

Windows Hello for Business

Microsoft Defender Credential Guard

Chapter 9: Advanced Configurations

Virtual desktops

On-prem virtual desktop best practices

VDI configurations

The Windows Configuration Designer

Windows 11 Kiosk Mode

Windows Autopilot

The Set up School PCs application

Device lockdown

Windows Subsystem for Linux

Group Policy Editor

Remote Desktop Protocol

Windows Hello and Windows Hello for Business

Windows Firewall with Advanced Security

Hyper-V

Windows Task Scheduler

Enabling BitLocker drive encryption

Storage Spaces Direct

Windows Defender Application Guard

Chapter 10: Windows 11 21H2 and 22H2 Changes (versus Windows 10)

New Start menu and taskbar.

New docking and multi-monitor experiences

New patch file format

"New" security options

Other technical changes in 21H2

Deprecated and removed features in 21H2

Windows 11 22H2 (build 22621)

New security options

Improved Start menu and taskbar

New inclusive features

Windows Studio effects

Further improvements to the size and speed of updates

New Windows Subsystem for Android™

CI aka Moments

Other technical changes in 22H2

Deprecated and removed features in 22H2

Other changes

Further references for Windows 11 22H2

Index

Other Books You May Enjoy.

Notes:

Includes index.

Description based on print version record.

ISBN:

9781804617793

1804617792

OCLC:

1407573480