Deploy Windows Flashcards
Skill 1.1: Deploy Windows 10/11 Skill 1.2: Perform post-installation configuration
Continuum
Detects hardware in use
Ex: switching from laptop to tablet mode on a Surface Pro
Miracast
Connects wirelessly to external monitor or projector
InstantGo
Allows network connectivity while in standby mode
OneDrive
Cloud storage solution built into Windows OS
BitLocker Drive Encryption
Windows Pro or Enterprise feature
Works with TPM 1.2 or higher
TPM is not required for use
Secure Boot
Protects platform until the Windows kernel is loaded.
When enabled, the OS can only start using a loader that is signed and stored in the UEFI Secure Boot DB
MFA (Multi-Factor Authentication)
Authentication based on at least two factor, e.g. password and fingerprint
Windows Hello
Provides businesses with tools to implement MFA
Virtual Secure Mode
Moves some sensitive elements of the OS to “trustlets” that run is a Hyper-V container to make the OS more secure
Virtual Smart Card
Offers security benefits provided by physical smart cards. Must have TPM 1.2+
Installation Methods
Install from DVD
Install from USB
Install from Windows Deployment Services
Install an image from Windows Preinstallation Environment (Windows PE)
Install over the Network
Windows Enterprise LTSC
Long-Term Servicing Channel. Does not receive feature updates.
Windows S Mode
Locked - Down version that only allows:
Microsoft Edge
Bing
Microsoft Store Apps
True/False: You can perform a direct in-place upgrade from 32-bit to 64-bit version of Windows.
False. In this scenario, you must perform a wipe and load installation
High-touch retail media deployment
Suitable for small organizations with few device to install. All that is need is one or more copies of OS installation media
Low-touch deployment
Suitable for larger organizations with hundreds of devices. Relies on Windows Deployment Services (WDS) and Microsoft Deployment Toolkit (MDT)
Zero-touch deployment
For very large organizations with thousands of devices. Requires Microsoft Deployment Toolkit (MDT) and System Center Configuration Manager
Windows Assessment and Deployment Kit (Windows ADK)
Deployment Image Servicing and Management (DISM)
Command-line tool that enable you to capture, deploy, and manage Windows features, packages, drivers, and international settings in a WIM file or VHD.
Windows Configuration Designer
Allows you to provision features and runtime setting by using provisioning packages (.ppkg)
WDS Deployment
Requires clients use DHCP and support Preboot Execution Environment (PXE)
Windows PE (WinPE)
Used to start a computer that is being deployed. Allows access to Windows file systems and is in essence a small Windows OS
In-Place Upgrade
Manually upgrading existing OS. All users settings and data are retained. Currently, the preferred installation method.
Windows Deployment Services (WDS)
A Windows Server role to deploy Windows 10/11 within an on-premises environment.
Server prerequisites: AD DS, DHCP, DNS
Microsoft Deployment Toolkit (MDT)
Provides end-to-end guidance and best practices guidelines for deployment
At the core of MDT are Task Sequences that allow you to automate each stage
Lite-Touch Installation
Requires someone on the remote computer to boot from a boot image
Zero-Touch Installation
Uses Configuration Manager. Devices with a BIOS and network card that support Wake-on-LAN can be sent a “Magic Packet” to complete installation unattended
Media Creation Tool (MCT)
Generates a ready to use bootable USB flash drive or ISO file
Side-by-side Migration
Source and destination computers are different machines. You install new computer and then migrate the data
Wipe-and-load Migration
Source and destination are the same. You back up user data, perform install and then restore user data from backup
User State Migration Tool (USMT)
Safely migrates user accounts, operating system and application settings.
Does Not migrate applications.
