MCSA Windows 10

Manage Identity

• Support Windows Store and cloud apps
  • Install and manage software by using Microsoft Office 365 and Windows Store apps, sideload apps by using Microsoft Intune, sideload apps into online and offline images, deeplink apps by using Microsoft Intune, integrate Microsoft account including personalization settings
• Support authentication and authorization
  • Identifying and resolving issues related to the following: Multi-factor authentication including certificates, Microsoft Passport, virtual smart cards, picture passwords, and biometrics; workgroup vs. domain, Homegroup, computer and user authentication including secure channel, account policies, credential caching, and Credential Manager; local account vs. Microsoft account; Workplace Join; Configuring Windows Hello

Plan desktop and device deployment

• Migrate and configure user data
  • Migrate user profiles; configure folder location; configure profiles including profile version, local, roaming, and mandatory
• Configure Hyper-V
  • Create and configure virtual machines including integration services, create and manage checkpoints, create and configure virtual switches, create and configure virtual disks, move a virtual machine’s storage
• Configure mobility options
  • Configure offline file policies, configure power policies, configure Windows To Go, configure sync options, configure Wi-Fi direct, files, powercfg, Sync Center
• Configure security for mobile devices
  • Configure BitLocker, configure startup key storage

Plan and implement a Microsoft Intune device management solution

• Support mobile devices
  • Support mobile device policies including security policies, remote access, and remote wipe; support mobile access and data synchronization including Work Folders and Sync Center; support broadband connectivity including broadband tethering and metered networks; support Mobile Device Management by using Microsoft Intune, including Windows Phone, iOS, and Android
• Deploy software updates by using Microsoft Intune
  • Use reports and In-Console Monitoring to identify required updates, approve or decline updates, configure automatic approval settings, configure deadlines for update installations, deploy third-party updates
• Manage devices with Microsoft Intune
  • Provision user accounts, enroll devices, view and manage all managed devices, configure the Microsoft Intune subscriptions, configure the Microsoft Intune connector site system role, manage user and computer groups, configure monitoring and alerts, manage policies, manage remote computers

Configure Networking

• Configure IP settings
  • Configure name resolution, connect to a network, configure network locations
• Configure networking settings
  • Connect to a wireless network, manage preferred wireless networks, configure network adapters, configure location-aware printing
• Configure and maintain network security
  • Configure Windows Firewall, configure Windows Firewall with Advanced Security, configure connection security rules (IPsec), configure authenticated exceptions, configure network discovery

Configure Storage

• Support data storage
  • Identifying and resolving issues related to the following: DFS client including caching settings, storage spaces including capacity and fault tolerance, OneDrive
• Support data security
  • Identifying and resolving issues related to the following: Permissions including share, NTFS, and Dynamic Access Control (DAC); Encrypting File System (EFS) including Data Recovery Agent; access to removable media; BitLocker and BitLocker To Go including Data Recovery Agent and Microsoft BitLocker Administration and Monitoring (MBAM)

Manage data access and protection

• Configure shared resources
  • Configure shared folder permissions, configure HomeGroup settings, configure libraries, configure shared printers, configure OneDrive
• Configure file and folder access
  • Encrypt files and folders by using EFS, configure NTFS permissions, configure disk quotas, configure file access auditing Configure authentication and authorization

Manage remote access

• Configure remote connections
  • Configure remote authentication, configure Remote Desktop settings, configure VPN connections and authentication, enable VPN reconnect, configure broadband tethering
• Configure mobility options
  • Configure offline file policies, configure power policies, configure Windows To Go, configure sync options, configure Wi-Fi direct

Manage apps

• Deploy and manage Azure RemoteApp
  • Configure RemoteApp and Desktop Connections settings, configure Group Policy Objects (GPOs) for signed packages, subscribe to the Azure RemoteApp and Desktop Connections feeds, export and import Azure RemoteApp configurations, support iOS and Android, configure remote desktop web access for Azure RemoteApp distribution
• Support desktop apps
  • The following support considerations including: Desktop app compatibility using Application Compatibility Toolkit (ACT) including shims and compatibility database; desktop application co-existence using Hyper-V, Azure RemoteApp, and App-V; installation and configuration of User Experience Virtualization (UE-V); deploy desktop apps by using Microsoft Intune

Manage updates and recovery

• Configure system recovery
  • Configure a recovery drive, configure system restore, perform a refresh or recycle, perform a driver rollback, configure restore points
• Configure file recovery
  • Restore previous versions of files and folders, configure File History, recover files from OneDrive
• Configure and manage updates
  • Configure update settings, configure Windows Update policies, manage update history, roll back updates, update Windows Store apps

Implement Windows

• Prepare for installation requirements
  • Determine hardware requirements and compatibility; choose between an upgrade and a clean installation; determine appropriate editions according to device type; determine requirements for particular features, such as Hyper-V, Cortana, Miracast, Virtual Smart Cards, and Secure Boot; determine and create appropriate installation media
• Install Windows
  • Perform clean installations, upgrade using Windows Update, upgrade using installation media, configure native boot scenarios, migrate from previous versions of Windows, install to virtual hard disk (VHD), boot from VHD, install on bootable USB, install additional Windows features, configure Windows for additional regional and language support
• Configure devices and device drivers
  • Install, update, disable, and roll back drivers; resolve driver issues; configure driver settings, including signed and unsigned drivers; manage driver packages; download and import driver packages; use the Deployment Image Servicing and Management (DISM) tool to add packages
• Perform post-installation configuration
  • Configure and customize start menu, desktop, taskbar, and notification settings, according to device type; configure accessibility options; configure Cortana; configure Microsoft Edge; configure Internet Explorer; configure Hyper-V; configure power settings
• Implement Windows in an enterprise environment
  • Provision with the Windows Imaging and Configuration Designer (ICD) tool; implement Active Directory–based activation; implement volume activation using a Key Management Service (KMS); query and configure activation states using the command line; configure Active Directory, including Group Policies; configure and optimize user account control (UAC)

Configure and support core services

• Configure networking
  • Configure and support IPv4 and IPv6 network settings; configure name resolution; connect to a network; configure network locations; configure Windows Firewall; configure Windows Firewall with Advanced Security; configure network discovery; configure Wi-Fi settings; configure Wi-Fi Direct; troubleshoot network issues; configure VPN, such as app-triggered VPN, traffic filters, and lockdown VPN; configure IPsec; configure Direct Access
• Configure storage
  • Configure disks, volumes, and file system options using Disk Management and Windows PowerShell; create and configure VHDs; configure removable devices; create and configure storage spaces; troubleshoot storage and removable devices issues
• Configure data access and usage
  • Configure file and printer sharing and HomeGroup connections; configure folder shares, public folders, and OneDrive; configure file system permissions; configure OneDrive usage; troubleshoot data access and usage
• Implement apps
  • Configure desktop apps, configure startup options, configure Windows features, configure Windows Store, implement Windows Store apps, implement Windows Store for Business, provision packages, create packages, use deployment tools, use the Windows Assessment and Deployment Kit (ADK)
• Configure remote management
  • Choose the appropriate remote management tools; configure remote management settings; modify settings remotely by using the Microsoft Management Console (MMC) or Windows PowerShell; configure Remote Assistance, including Easy Connect; configure Remote Desktop; configure remote PowerShell

Manage and maintain windows

• Configure updates
  • Configure Windows Update options; implement Insider Preview, Current Branch (CB), Current Branch for Business (CBB), and Long Term Servicing Branch (LTSB) scenarios; manage update history; roll back updates; update Windows Store apps
• Monitor Windows
  • Configure and analyze Event Viewer logs, configure event subscriptions, monitor performance using Task Manager, monitor performance using Resource Monitor, monitor performance using Performance Monitor and Data Collector Sets, monitor system resources, monitor and manage printers, configure indexing options, manage client security by using Windows Defender, evaluate system stability using Reliability Monitor, troubleshoot performance issues
• Configure system and data recovery
  • Configure a recovery drive, configure a system restore, perform a refresh or recycle, perform a driver rollback, configure restore points, resolve hardware and device issues, interpret data from Device Manager, restore previous versions of files and folders, configure File History, recover files from OneDrive, use Windows Backup and Restore, perform a backup and restore with WBAdmin, perform recovery operations using Windows Recovery
• Configure authorization and authentication
  • Configure Microsoft Passport, configure picture passwords and biometrics, configure workgroups, configure domain settings, configure HomeGroup settings, configure Credential Manager, configure local accounts, configure Microsoft accounts, configure Device Registration, configure Windows Hello, configure Device Guard, configure Credential Guard, configure Device Health Attestation, configure UAC behavior
• Configure advanced management tools
  • Configure services, configure Device Manager, configure and use the MMC, configure Task Scheduler, configure automation of management tasks using Windows PowerShell