MCA Microsoft 365 Certified Associate Modern Deskt op Administrator Complete Study Guide with 900 Practice Questions: Exam MD–100 and Exam MD–101 2e: Sybex Study Guide

ABOUT THE AUTHOR WILLIAM PANEK is a Five-Time Microsoft MVP Winner. He has taught at Boston University, Clark University, and the University of Maryland, and presently conducts live online classes for StormWind Studios (www.stormwindstudios.com). Will has been a consultant and trainer for the United States Secret Service, Cisco, the United States Air Force, and the United States Army. He also creates training videos to help students prepare for various Microsoft exams.

Introduction xxix Assessment Test - MD- 100 xliii Assessment Test - MD- 101 xlix Answers to Assessment Test - MD- 100 lv Answers to Assessment Test - MD- 101 lviii Part I Exam MD-100 1 Chapter 1 Windows Client Installation 3 Understanding the Basics 4 Windows 10/11 Features 9 Windows 10 vs. Windows 11 11 What Has Been Changed in Windows 11? 12 Windows 10 and 11 Architecture 13 Preparing to Install Windows 14 Windows Home 15 Windows Pro 15 Windows Enterprise 16 Windows 10 Enterprise E3 and E 5 17 Windows Client Requirements 18 New Installation or Upgrade? 20 Disk Partitioning 24 Language and Region Pack 25 Installing Windows 10 25 Performing a Clean Installation of Windows 10 26 Performing an Upgrade to Windows 10 from Windows 8.1 36 Installing Windows 11 41 Performing a Clean Installation of Windows 11 42 Performing an Upgrade to Windows 11 from Windows 10 43 Troubleshooting Installation Problems 43 Supporting Multiple- Boot Options 45 Using Windows Activation 47 Understanding Automated Deployment Options 48 An Overview of the Microsoft Deployment Toolkit 48 An Overview of Unattended Installation 54 An Overview of Windows Deployment Services 56 An Overview of the System Preparation Tool and Disk Imaging 59 Overview of the Windows Assessment and Deployment Kit 63 Windows Configuration Designer 64 Summary of Windows Client Deployment Options 64 Deploying Unattended Installations 66 Using the System Preparation Tool to Prepare an Installation for Imaging 67 Using Windows Configuration Designer to Create a Disk Image 69 Using the Deployment Image Servicing and Management Tool 71 Using Windows System Image Manager to Create Answer Files 73 Windows Update 74 The Update Process 75 Using Windows Update 76 Using Windows Update for Business 78 Delivery Optimization 81 Using Command- Line Options 83 Installing Microsoft Store Updates 83 Summary 85 Exam Essentials 86 Video Resources 87 Review Questions 88 Chapter 2 Configuring Users 93 Understanding User Accounts 94 Account Types 95 Built- In Accounts 96 Local and Domain User Accounts 97 Working with User Accounts 98 Using the Local Users and Groups Utility 98 Using the User Accounts Option in Control Panel 101 Creating New Users 102 Disabling User Accounts 107 Deleting User Accounts 108 Renaming User Accounts 109 Changing a User's Password 110 Using Windows Hello, Pictures, and Biometrics 111 Using Device Guard 112 Understanding Windows Defender Credential Guard 114 Configuring Device Health Attestation 116 Managing User Properties 117 Managing User Group Membership 117 Setting Up User Profiles, Logon Scripts, and Home Folders 119 Troubleshooting User Account Authentication 126 Managing and Creating Groups 127 Using Built- In Groups 127 Creating Groups 131 Managing Group Membership 133 Deleting Groups 135 Managing Security Using GPOs and LGPOs 135 Understanding the GPO and LGPO Basics 135 Using the Group Policy Result Tool 137 Managing and Applying LGPOs 138 Configuring Local Security Policies 140 Using Account Policies 141 Using Local Policies 147 Configuring User Account Control 155 Privilege Elevation 156 Managing Credentials by Using Credential Manager 157 Local Administrator Password Solutions (LAPS) 159 Registry and File Virtualization 165 Understanding Smart Cards 165 Configuring Remote Management 167 Remote Assistance 168 Easy Connect 168 Remote Desktop 173 Quick Assist 176 Windows Admin Center 180 Enabling PowerShell Remoting 182 Configuring a VPN Connection 182 Transparent Caching 185 Broadband Tethering 185 Using PowerShell 186 Summary 189 Exam Essentials 189 Video Resources 190 Review Questions 191 Chapter 3 Managing Data 197 Managing File and Folder Security 198 Folder Options/File Explorer Options 199 Understanding Dynamic Access Control 203 Securing Access to Files and Folders 204 Determining and Viewing Effective Permissions for NTFS 208 Determining NTFS Permissions for Copied or Moved Files 211 Managing Network Access 211 Creating and Managing Shared Folders 211 Configuring Share Permissions 213 Cloud- Based Storage 214 Configuring OneDrive 215 Understanding Hardware Security 220 Using BitLocker Drive Encryption 221 Features of BitLocker 222 Windows 7 vs. Windows 10/11 224 Using the BitLocker Administration and Monitoring Utility 227 Use Configuration Manager to Manage BitLocker Drive Encryption (BDE) 228 Understanding Smart Cards 229 Summary 230 Exam Essentials 231 Video Resources 231 Review Questions 232 Chapter 4 Managing the Windows Client Environment 239 Managing Windows 240 Manipulating the Desktop Environment 241 Configuring Personalization 251 Using Control Panel 259 Using the Microsoft Management Console 270 Using the System Settings 272 Understanding the Settings Window 273 Using PowerShell 277 Configuring Mobility Options 279 Configuring Offline Files and Synchronization 279 Configuring Power Policies 281 Managing Windows 10/11 Services 288 Configuring Internet Browsers 291 Cortana 291 Browser Controls 293 Pinning Sites to the Taskbar 293 Searchable Address Bar 293 Security and Privacy Enhancements 293 Using the Browser's Compatibility Mode 294 Using Enhanced Security Mode in Edge 295 Using InPrivate Browsing 297 Configuring Internet Options 297 Manage and Use Hyper- V on Windows Client 303 Hyper- V System Requirements 304 Enabling the Hyper- V Role 304 Opening the Hyper- V Manager 305 Changing Configuration on an Existing Virtual Machine 311 Deleting Virtual Machines 313 Manage Virtual Switches 314 Managing Virtual Hard Disks 316 PowerShell Commands 322 Windows Sandbox 325 Summary 328 Exam Essentials 329 Video Resources 329 Review Questions 330 Chapter 5 Configuring Security and Devices 335 Configuring Disk Storage 336 Basic Storage 337 Dynamic Storage 337 GUID Partition Table 339 Using the Disk Management Utility 340 Understanding the Disk Management Utility 340 Managing Storage 355 Managing Dynamic Storage 355 Understanding Filesystems 358 Filesystem Selection 358 Filesystem Conversion 361 Configuring NTFS 361 Configuring Hardware 365 Understanding Devices 365 Using Device Manager 366 Installing and Updating Device Drivers 370 Driver Signing 379 Managing I/O Devices 381 Configuring Removable Storage Devices 381 Managing Printers 385 Configuring Windows Defender Firewall 401 Understanding the Windows Defender Firewall Basics 401 Windows Defender Firewall with Advanced Security 403 Managing Windows Security 408 Windows Security Center 408 Summary 411 Exam Essentials 412 Video Resources 412 Review Questions 413 Chapter 6 Configuring Network Connectivity 419 Understanding the Basics 420 Peer- to- Peer Networks 420 On- Site Active Directory Networks 422 Cloud- Based Azure Active Directory 424 Other Microsoft Networking Terms and Roles 424 Configuring NIC Devices 427 Configuring a Network Adapter 428 Troubleshooting a Network Adapter 434 Configuring Wireless NIC Devices 434 Configuring Wi- Fi Direct 442 Understanding TCP/IP 445 Benefits and Features of TCP/IP 446 Basics of IP Addressing and Configuration 448 Using IPv6 Addresses 452 Configuring TCP/IP on Windows 10 463 Testing Your IP Configuration 467 Configuring Windows Client on a Network 468 Configure VPN Clients 470 Create a VPN Profile 471 Configure and Manage Certificates on Client Devices 475 Summary 478 Exam Essentials 479 Video Resources 479 Review Questions 480 Chapter 7 Configuring Recovery 485 Understanding Recovery 487 Knowing the Startup/Boot Options 488 Starting in Safe Mode 489 Enabling Boot Logging 492 Using Other Startup Setting Options 494 Understanding System Restore 495 Using the System Image Recovery 497 Using the Startup Repair Tool 498 Maintaining Windows 10/11 with Backup and Restore 498 Creating a Backup 499 Restoring Files from a Backup 500 Recovering Files from OneDrive 501 Using the WBAdmin Command Utility 502 Using Advanced Backup Options 503 Using System Protection 505 Creating Restore Points 506 Restoring Restore Points 507 Cleaning Up Old Restore Points 507 Storage Sense 508 Using the Recycle Bin 510 Monitoring Windows 511 Introducing Performance Monitor 511 Using Other Performance- Monitoring Tools 521 Manage the Registry 531 Summary 532 Exam Essentials 533 Video Resources 533 Review Questions 534 Part II Exam MD- 101 539 Chapter 8 Deploy Windows Client 541 Plan a Windows Client Deployment 542 Microsoft Endpoint Manager (MEM) Overview 542 Endpoint Analytics 544 Deploying with Windows Autopilot 551 Windows Autopilot Requirements 552 Configure Device Registration for Autopilot 557 Windows Autopilot Profiles 559 Provision Windows Devices by Using Autopilot 563 Troubleshoot an Autopilot Deployment 564 Using Microsoft Deployment Toolkit (MDT) 567 Planning MDT Deployments 567 MDT Configuration Options 568 Plan and Implement PXE Boot by Using Windows Deployment Services (WDS) 569 Summary 576 Exam Essentials 576 Video Resources 577 Review Questions 578 Chapter 9 Managing Identity and Access 585 Active Directory vs. Azure Active Directory 586 Understanding Active Directory 586 Understanding Azure Active Directory 597 Managing Hybrid Networks 625 Password Hash Synchronization with Azure AD 625 Azure Active Directory Pass-Through Authentication 626 Federation with Azure AD 627 Common Identity Scenarios 630 Azure AD Connect 631 Configure Enterprise State Roaming in Azure AD 638 Requirements of Enterprise State Roaming 638 Enable Enterprise State Roaming 639 Plan and Implement Conditional Access Policies 639 Create a Conditional Access Policy 642 Troubleshooting Conditional Access 643 Using PowerShell Commands 645 Summary 647 Exam Essentials 648 Video Resources 649 Review Questions 650 Chapter 10 Planning and Managing Microsoft Intune 655 Managing Devices with Microsoft Intune 656 Understanding Microsoft Intune Benefits 658 Configuring Intune Subscriptions 658 Provisioning User Accounts 665 Setting Administrator Accounts 665 Supporting Applications 687 Deploying Applications Using Intune 687 Supporting Broadband Connectivity 694 Understanding Data Synchronization 695 Using Mobile Application Management 697 Understanding Updates 699 Deploying Software Updates Using Intune 699 Using Intune Compliance Reports 705 Using Intune Reports 705 Implement App Protection and App Configuration Policies 706 PowerShell Commands 710 Summary 711 Exam Essentials 711 Video Resources 712 Review Questions 713 Chapter 11 Managing Devices 719 Compliance Policies 721 Conditional Access 721 Plan Device Compliance Policies 723 Device Configuration Profiles 728 Summary 740 Exam Essentials 741 Video Resources 741 Review Questions 742 Chapter 12 Managing Security 747 Windows Security 748 Planning and Implementing Endpoint Protection 749 Endpoint Security 751 Managing Endpoint Security in Microsoft Intune 752 Implementing Microsoft Defender for Endpoint 759 Understanding Microsoft Defender Application Guard 771 Understanding Microsoft Defender Credential Guard 780 Implementing and Managing Microsoft Defender Exploit Guard 783 Using Windows Defender Application Control 787 Summary 788 Exam Essentials 789 Video Resources 790 Review Questions 791 Chapter 13 Monitoring Devices 797 Monitoring Windows 799 Monitor Cloud- Based Tools 799 Monitor Azure Device Security 809 Monitor Devices by Using Endpoint Manager Admin Center 813 Monitoring Devices by Using Endpoint Analytics 818 Summary 820 Exam Essentials 820 Video Resources 820 Review Questions 821 Appendix Answers to Review Questions 827 Chapter 1: Windows Client Installation 828 Chapter 2: Configuring Users 830 Chapter 3: Managing Data 833 Chapter 4: Managing the Windows Client Environment 836 Chapter 5: Configuring Security and Devices 840 Chapter 6: Configuring Network Connectivity 843 Chapter 7: Configuring Recovery 846 Chapter 8: Deploy Windows Client 850 Chapter 9: Managing Identity and Access 855 Chapter 10: Planning and Managing Microsoft Intune 858 Chapter 11: Managing Devices 862 Chapter 12: Managing Security 865 Chapter 13: Monitoring Devices 869 Index 873