Book Image

Windows 10 for Enterprise Administrators

By : Richard Diver, Manuel Singer, Jeff Stokes

Book Image

Windows 10 for Enterprise Administrators

By: Richard Diver, Manuel Singer, Jeff Stokes

Overview of this book

Microsoft's launch of Windows 10 is a step toward satisfying enterprise administrators' needs for management and user experience customization. This book provides enterprise administrators with the knowledge needed to fully utilize the advanced feature set of Windows 10 Enterprise. This practical guide shows Windows 10 from an administrator's point of view. You'll focus on areas such as installation and configuration techniques based on your enterprise requirements, various deployment scenarios and management strategies, and setting up and managing admin and other user accounts. You'll see how to configure Remote Server Administration Tools to remotely manage Windows Server and Azure Active Directory. Lastly, you will learn modern mobile device management for effective BYOD and how to enable enhanced data protection, system hardening, and enterprise-level security with the new Windows 10 in order to prevent data breaches and to impede attacks. By the end of this book, you will know the key technologies and capabilities in Windows 10 and will confidently be able to manage and deploy these features in your organization.

Preface

What this book covers

What you need for this book

Who this book is for

Reader feedback

Customer support

Free Chapter

Installation and Upgrading

Installation and Upgrading

Which branch to select?

New deployment methods

Improvements in deployment since Windows 10 1511

Tips and tricks for smooth in-place upgrade from 7, 8.1, or 10 to 10

Selecting the deployment tools

Configuration and Customization

Configuration and Customization

Introducing Windows as a service

Security mitigation

Image customization

Upgrade expectations

Security Compliance Manager

Microsoft Windows Store for Business, also known as Private Store

Microsoft telemetry

User Account Administration

User Account Administration

Windows account types

Account privileges

Local Admin Password Solution

Create policies to control local accounts

Manage user sign in options

Mobile device management security settings

User Account Control

Windows Hello for Business

Credential Guard

Privileged Access Workstation

Remote Administration Tools

Remote Administration Tools

Remote Server Administration Tools

Windows Sysinternals tools suite

Device Management

Device Management

Evolving business needs

Mobile device management

Changes to GPOs in Windows 10

Servicing and patching

Protecting Enterprise Data in BYOD Scenarios

Protecting Enterprise Data in BYOD Scenarios

Bring Your Own Device

Protection options

Alternative options

Windows 10 Security

Windows 10 Security

Today's security challenges

Windows Hello/Windows Hello for Business

Virtualization-based security

Credential Guard

Windows Defender Application Guard for Microsoft Edge

Windows Defender Exploit Guard

Device Health Attestation

Windows Defender Security Center

New BitLocker options

Local Administrator Password Solution

Windows Defender Advanced Threat Protection

Windows Defender Advanced Threat Protection

Windows Defender

Plan - environment analysis

Deploy - service activation

Onboard endpoints

Detect - using the ATP portal

Protect Post-breach response

Advanced Configurations

Advanced Configurations

Virtual desktops

The Windows ICD

Windows 10 Kiosk Mode

Device lockdown

RedStone 3 Changes

RedStone 3 Changes

OneDrive – file on demand

Task Manager shows GPU usage graph

Ubuntu, openSUSE and SUSE LSE available as Linux subsystem

New features of Microsoft Edge

New Google Chrome to Microsoft Edge migration feature

Hyper-V improvements

Change of network profiles in GUI

Improved storage sense feature

Microsoft Fluent Design

Controlled folder access

Customer Reviews

5 star

0

4 star

0

3 star

0

2 star

0

1 star

0

Windows Defender Exploit Guard

Since a long time ago, you could enable extra security on your OS using the free Enhanced Mitigation Experience Toolkit (EMET). Development of EMET was stopped last year, and support for it will end in July 2018. Also, the latest version of EMET 5.5.2 is no longer supported on Windows 10 1709 and will be uninstalled with an in-place upgrade, and installation of EMET will be actively blocked.

But no worries; all the functionality of EMET and even more features are now built in to Windows 10 1709. This new security feature is named Windows Defender Exploit Guard and is located inside the Windows Defender Security Center under App & browser control | Exploit protection:

By accessing the Exploit protection settings, you can control system-wide settings and program-specific overrides. Be carefully with system-wide settings. Per-program settings are...