Book Image

Windows 11 for Enterprise Administrators - Second Edition

By : Manuel Singer, Jeff Stokes, Steve Miles, Thomas Lee, Richard Diver
Book Image

Windows 11 for Enterprise Administrators - Second Edition

By: Manuel Singer, Jeff Stokes, Steve Miles, Thomas Lee, Richard Diver

Overview of this book

Windows 11 comes with a plethora of new security measures, customizability, and accessibility features that can help your organization run more smoothly. But, without a proper introduction to this new version of Windows, it’s easy to miss the most important improvements, along with configuration options that will make migrating to Windows 11 frictionless. Windows 11 for Enterprise Administrators helps you understand the installation process, configuration methods, deployment scenarios, and management strategies. You’ll delve into configuring Remote Server Administration Tools for remote Windows Server and Azure Active Directory management. This edition emphasizes PowerShell's role in automating administrative tasks, and its importance in Windows 11 and Windows Server management. It also provides comprehensive insights into Windows 11 updates, including Version 21H2 and 22H2, contrasting them with Windows 10, ensuring your knowledge stays current with the latest enhancements in the Windows ecosystem. By the end of this book, you'll be well-equipped with Windows 11's vital technologies and potentials, enabling you to adeptly oversee and implement these attributes within your company.
Table of Contents (13 chapters)
9
Chapter 9: Advanced Configurations

Activation of Windows 11

For corporate customers, there are three easy ways to activate Windows 11. The good news is that the same mechanisms can be used with Windows 10. Which of these options is the most suitable depends on whether you are running on-premises, hybrid joined, or AAD only. Let’s take a closer look at the three options.

Classic activation by Multiple Activation Key (MAK) or Key Management Services (KMS)

In the on-premises and hybrid joined scenarios, you can still use the classic Key Management Services (KMS). If you use AAD only, only the Multiple Activation Key (MAK) can be used easily for the classic activation services.

KMS servers have the disadvantage of not offering any extra authentication and are therefore in need of special protection. They originate from an era of corporate LANs. Anyone who knows the IP address and listening port of the KMS server by reading the values of an active client can then use this information to activate any client...