Planning for M365 Windows 10 Deployment Flashcards by Cour Why

What Modern Servicing?

Windows Deployment methdod. Includes the following methods of deployment.
• SCCM (ConfigMgr)
○ On-premises device management solution used to fully manange updated deployed
• Windows Update for Business (WUFB)
○ Provide control over upddate deferment and provides centralised management using group policies
• Windows Server Update Server (WSUS)
○ Provides extensive control over updates and is natively available in Windows 10 OS
• MDT (Microsoft Deployment Toolkit)
Free Deployment tool used for Windows 10 Images and in-pace upgrades

How well did you know this?

Not at all

Perfectly

What are the requirement for windows analytics?

• Windows Telemetry 
		○ Set to basic for enrolled devices 
	• Operating system support
		○ Windows 7 SP1 &amp; KB2952664
		○ Windows 8.1 &amp; KB2976978
	• Target Operating system
		○ Specify build number of Windows 10 OS
	• Data Availability
		○  Can take up to 72 hours
Updates every 24 hours

How well did you know this?

Not at all

Perfectly

What are the windows 10 security feature types?

○ Identity and access management
○ Information protection
Threat protection

How well did you know this?

Not at all

Perfectly

What are the windows 10 security component?

○ Windows Hello for Business
○ Bitlocker
○ Windows Information protection
○ Windows Defender

How well did you know this?

Not at all

Perfectly

What are teh windows 10 security feature tools?

• Windows Defender Antivirus
○ Antimalware solution built into Windows 10. Provides security and antimalware.
• Windows Defender Exploit Guard
○ Set of host intrusion prevention capabilities. Works best with Defender ATP.
• Microsoft Defender ATP
○ Only available with M365 E5 plan. Provides security service to detect investigate and respond to threats.

How well did you know this?

Not at all

Perfectly

What is windows defender exploit guard?

Set of host intrusion prevention capabilities. Works best with Defender ATP.

How well did you know this?

Not at all

Perfectly

What is Microsoft Defender ATP?

○ Only available with M365 E5 plan. Provides security service to detect investigate and respond to threats.

How well did you know this?

Not at all

Perfectly

What is Windows Defender Antivirus?

Antimalware solution built into Windows 10. Provides security and antimalware.

How well did you know this?

Not at all

Perfectly

What are the system requirements for Windows 10?

• 1 GHz or faster
	• RAM
		○ Minimum 1GB for 32-bit
		○ Minimum 2GB for 64-bit
		○ Suggested to double this e.g 2GB for 32-bit and 4GB for 64-bit
	• 32GB or more storage
	• Windows Display Driver model 
		○ DirectX 9> WDDM 1.0 Driver
	• 800 x 600 Display/ Monitor 
Internet Connection

How well did you know this?

Not at all

Perfectly

What is an In-place windows grade used for?

For existing machines
	• More reliable than earlier in-place upgrade features
	• Current feature release to new features release 
	• Preserves current configurations
		○ Data 
		○ Settings
		○ Apps 
		○ Drivers
Can rollback to previous OS if issues

How well did you know this?

Not at all

Perfectly

What is a traditional windows upgrade used for?

• Bare Metal
○ Deploy a new device, or wipe an existing device and deploy a fresh image using MDT
• Refresh (wipe and load)
○ Redeploy a device by saving the user state, wiping the disk, then restoring the user state
• Replace
Out with the old in with the new. Completely replace old machine by saving the user state (snapshot) on old device and restoring to new machine.

How well did you know this?

Not at all

Perfectly

What is the most popular windows upgrade method?

Modern servicing.

How well did you know this?

Not at all

Perfectly

What is SCCM (ConfigMgr)?

On-premises device management solution used to fully manage updates deployed

How well did you know this?

Not at all

Perfectly

What is Windows Update for Business (WUFB)?

Provide control over update deferment and provides centralised management using group policies.

How well did you know this?

Not at all

Perfectly

What is windows server update service?

Provides extensive control over updates and is natively available in Windows 10 OS.

How well did you know this?

Not at all

Perfectly

What is MDT (Microsoft Deployment toolkit)?

Free Deployment tool used for Windows 10 Images and in-pace upgrades.

What are the window 10 deployment formats?

This will determine the tool you use to upgrade.
• ESD (Electronic Software Delivery
○ Windows Update for Business (WUFB)
○ Windows Server Updates Service (WSUS)
○ System Center Config Manager (ConfigMgr)
• WIM (Windows Imaging)
○ System Center Config Manager (ConfigMgr)
○ Microsoft Deployment Toolkit (MDT)
Third-party management solutions

What are the in-place upgrade steps?

1) Prepare for the upgrade
2) Perform upgrade of OS
3) Verify upgrade was successful
4) Rollback if necessary
Troubleshot any issues for reason of failures.

What do windows 10 Feature updates provide?

Delivers new functionality to operating system

What do windows 10 Quality update provide?

Delivers security and reliability fixes to operating systems

What are windows 10 deployment rings?

○ Concept of deploying Windows 10 features in stages

If you have 10k employees you wouldn’t want the update to be all at once

What is Windows insider?

○ Recommended for Devs

Provides option to test pre-released features in Windows 10

What is the Fast ring?

Windows Insider program
○ Fast Ring (Weekly) Updates
First group of users to see new features

What is the slow ring?

Windows Insider program
○ Slow Ring (Monthly)
New features arent seen as fast as fast ring

What is the release preview ring?

Windows Insider program | Where released updates are seen before their general availability useful for Pilot users

What is the semi-annual channel?

sas

What is Longer term Channel?

Every 2-3 years) § Specialized Windows 10 Computers (Machinery or Medical would want these updated often) § Requires Windows 10 Enterprise LTSB (Long Term Servicing Branch)

What is Identity protection?

``` Different tools and application you can use. • Access Control • Configure S/MIME • Credential Guard • Digital Certificates • User Account Control • Virtual Smart cards • Smart Cards • Credential theft mitigation • Hello for business ```

What is Information protection?

``` Different tools and application you can use. • Bitlocker • Encrypted hard drive • Kernel DMA (Direct Memory Access) Protection for Thunderbolt 3 • Windows Information Protection (WIP) • Secure Windows 10 boot process • Trusted Platform Module ○ TPM… ```