MCA Modern Desktop Administrator Complete Study Guide Exam MD-100 and Exam MD-101

The ultimate study guide for Microsoft 365 Certified Associate (MCA) Modern Desktop certification—covers the new Exam MD-100 and the new Exam MD-101 in one book!

Referred to as the Modern Desktop, Microsoft 365 is Microsoft’s new suite of modern workplace services comprising Windows 10, Office 365, and Enterprise Mobility & Security. IT administrators tasked with deploying and implementing Modern Desktop are required to configure, secure, manage, and monitor devices and applications in enterprise environments. Success on the MCA Modern Desktop Administrator certification exam is essential for IT professionals seeking to expand their job opportunities and advance their careers.

The MCA Modern Desktop Administrator Complete Study Guide is an indispensable resource for candidates preparing for certification. This guide covers 100% of all exam objectives for the new Exam MD-100: Windows 10 and the new Exam-101: Managing Modern Desktops. All aspects of both new exams are covered, including in-depth information on advanced topics and technologies. Included is access to Sybex's comprehensive online learning environment—offering an assessment test, bonus practice exams, electronic flashcards, a searchable glossary, and videos for many of the chapter exercises (ONLY available for Exam MD-100). This must-have guide enables users to:

• Configure devices, core services, networking, storage, users, updates, and system and data recovery
• Implement, install, maintain, manage, and monitor Windows 10
• Plan desktop deployment and Microsoft Intune device management solutions
• Manage identities, applications, remote access, and data access and protection
• Review real-world scenarios, hands-on exercises, and challenging practice questions 

The MCA Modern Desktop Administrator Complete Study Guide: Exam MD-100 and Exam MD-101 is an essential tool for anyone preparing for the exams and students and IT professionals looking to learn new skills or upgrade their existing skills.

ABOUT THE AUTHOR

WILLIAM PANEK, MCP, MCSE, MCSA, MCTS, MCITP, CCNA, is a Five-Time Microsoft MVP Winner. He has taught at Boston University, Clark University, and the University of Maryland, and presently conducts live online classes for StormWind Studios (www.stormwind.com). Will has been a consultant and trainer for the United States Secret Service, Cisco, the United States Air Force, and the United States Army. He also creates training videos to help students prepare for various Microsoft exams.

Introduction xxvii

Assessment Tests xl

Part I Exam MD-100 1

Chapter 1 Windows 10 Installation 3

Understanding the Basics 4

Windows 10 Features 8

Windows 10 Architecture 10

Preparing to Install Windows 10 11

Windows 10 Home 11

Windows 10 Pro 12

Windows 10 Enterprise 13

Windows 10 Enterprise E3 and E5 14

Windows 10 Requirements 14

New Install or Upgrade? 17

Disk Partitioning 20

Language and Locale 21

Installing Windows 10 22

Performing a Clean Install of Windows 10 22

Performing an Upgrade to Windows 10 31

Troubleshooting Installation Problems 36

Supporting Multiple-Boot Options 38

Using Windows Activation 39

Understanding Automated Deployment Options 40

An Overview of the Microsoft Deployment Toolkit 41

An Overview of Unattended Installation 46

An Overview of Windows Deployment Services 48

An Overview of the System Preparation Tool and Disk Imaging 51

Overview of the Windows Assessment and Deployment Kit 55

Windows Configuration Designer 56

Summary of Windows 10 Deployment Options 56

Deploying Unattended Installations 57

Using the System Preparation Tool to Prepare an Installation for Imaging 59

Using Windows Configuration Designer to Create a Disk Image 61

Using the Deployment Image Servicing and Management Tool 63

Using Windows System Image Manager to Create Answer Files 65

Windows Update 66

The Update Process 66

Using Windows Update 68

Using Command-Line Options 69

Installing Windows Store Updates 70

Summary 71

Exam Essentials 72

Video Resources 73

Review Questions 74

Chapter 2 Configuring Users 77

Understanding User Accounts 78

Account Types 79

Built-In Accounts 80

Local and Domain User Accounts 81

Working with User Accounts 82

Using the Local Users and Groups Utility 82

Using the User Accounts Option in Control Panel 84

Creating New Users 85

Disabling User Accounts 90

Deleting User Accounts 91

Renaming User Accounts 93

Changing a User’s Password 94

Using Windows Hello, Pictures, and Biometrics 94

Using Device Guard 95

Understanding Credential Guard 98

Configuring Device Health Attestation 99

Managing User Properties 101

Managing User Group Membership 101

Setting Up User Profiles, Logon Scripts, and Home Folders 103

Troubleshooting User Account Authentication 109

Managing and Creating Groups 110

Using Built-In Groups 111

Creating Groups 115

Managing Group Membership 116

Deleting Groups 118

Managing Security Using GPOs and LGPOs 118

Understanding the GPO and LGPO Basics 118

Using the Group Policy Result Tool 120

Managing and Applying LGPOs 121

Configuring Local Security Policies 123

Using Account Policies 124

Using Local Policies 130

Configuring User Account Control 138

Privilege Elevation 138

Registry and File Virtualization 140

Understanding Smart Cards 140

Configuring Remote Management 143

Remote Assistance 143

Remote Desktop 148

Enabling PowerShell Remoting 150

Configuring a VPN Connection 151

Transparent Caching 153

Broadband Tethering 153

Using PowerShell 155

Summary 157

Exam Essentials 157

Video Resources 157

Review Questions 158

Chapter 3 Managing Data 161

Managing File and Folder Security 162

Folder Options 163

Understanding Dynamic Access Control 167

Securing Access to Files and Folders 168

Determining and Viewing Effective Permissions for NTFS 172

Determining NTFS Permissions for Copied or Moved Files 174

Managing Network Access 174

Creating and Managing Shared Folders 175

Configuring Share Permissions 176

Configuring OneDrive 178

Understanding Hardware Security 181

Using BitLocker Drive Encryption 182

Features of BitLocker 183

Windows 7 vs. Windows 10 185

Using the BitLocker Administration and Monitoring Utility 187

Understanding Smart Cards 188

Summary 188

Exam Essentials 189

Video Resources 189

Review Questions 190

Chapter 4 Managing the Windows 10 Environment 193

Managing Windows 194

Manipulating the Desktop Environment 195

Configuring Personalization 204

Using Control Panel 209

Using the Microsoft Management Console 218

Using the System Icon 219

Understanding the Settings Window 222

Using PowerShell 224

Configuring Mobility Options 225

Configuring Offline Files and Synchronization 225

Configuring Power Policies 227

Configuring Windows To Go 233

Managing Windows 10 Services 236

Configuring Internet Browsers 238

Cortana 239

Browser Controls 240

Pinning Sites to the Taskbar 240

Searchable Address Bar 240

Security and Privacy Enhancements 240

Using the Browser’s Compatibility View 240

Using Protected Mode for IE11 241

Using InPrivate Browsing 242

Configuring Windows Internet Explorer 11 Options 243

Summary 247

Exam Essentials 247

Video Resources 248

Review Questions 249

Chapter 5 Configuring Security and Devices 253

Understanding Filesystems 254

Filesystem Selection 255

Filesystem Conversion 257

Configuring NTFS 258

Configuring Hardware 259

Understanding Devices 259

Using Device Manager 261

Installing and Updating Device Drivers 265

Driver Signing 275

Managing I/O Devices 275

Configuring Removable Storage Devices 275

Managing Printers 278

Configuring Windows Defender Firewall 291

Understanding the Windows Defender Firewall Basics 292

Windows Defender Firewall with Advanced Security 292

Summary 297

Exam Essentials 297

Video Resources 298

Review Questions 299

Chapter 6 Configuring Network Connectivity 301

Understanding the Basics 302

Peer-to-Peer Networks 302

On-site Active Directory Networks 304

Cloud-Based Azure Active Directory 306

Other Microsoft Networking Terms and Roles 306

Configuring NIC Devices 309

Configuring a Network Adapter 310

Troubleshooting a Network Adapter 316

Configuring Wireless NIC Devices 316

Configuring Wi-Fi Direct 324

Understanding TCP/IP 326

Benefits and Features of TCP/IP 327

Basics of IP Addressing and Configuration 329

Using IPv6 Addresses 334

Configuring TCP/IP on Windows 10 344

Testing Your IP Configuration 346

Configuring Windows 10 on a Network 348

Summary 350

Exam Essentials 350

Video Resources 351

Review Questions 352

Chapter 7 Configuring Recovery 355

Understanding Recovery 357

Knowing the Startup/Boot Options 358

Starting in Safe Mode 359

Enabling Boot Logging 362

Using Other Startup Setting Options 364

Understanding System Restore 365

Using the System Image Recovery 366

Using the Startup Repair Tool 367

Maintaining Windows 10 with Backup and Restore 368

Creating a Backup 369

Restoring Files from a Backup 370

Recovering Files from OneDrive 371

Using the Wbadmin Command Utility 372

Using Advanced Backup Options 373

Using System Protection 375

Creating Restore Points 376

Restoring Restore Points 376

Cleaning Up Old Restore Points 377

Using the Recycle Bin 377

Monitoring Windows 378

Introducing Performance Monitor 379

Using Other Performance-Monitoring Tools 388

Summary 397

Exam Essentials 398

Video Resources 399

Review Questions 400

Part II Exam MD-101 403

Chapter 8 Installing and Updating Windows 10 405

Understanding the Basics 406

Windows 10 Features 411

Understanding the Windows 10 Architecture 412

Preparing to Install Windows 10 413

Windows 10 Pro 414

Windows 10 Enterprise 415

Windows 10 Enterprise E3 and E5 416

New Install or Upgrade? 416

Disk Partitioning 420

Language and Locale 421

Installing Windows 10 421

Performing a Clean Install of Windows 10 422

Performing an Upgrade to Windows 10 430

Troubleshooting Installation Problems 435

Supporting Multiple-Boot Options 437

Using Windows Activation 438

Understanding Automated Deployment Options 439

An Overview of the Microsoft Deployment Toolkit 440

An Overview of Unattended Installation 445

An Overview of Windows Deployment Services 447

An Overview of the System Preparation Tool and Disk Imaging 450

Overview of the Windows Assessment and Deployment Kit 454

Summary of Windows 10 Deployment Options 455

Deploying Unattended Installations 456

Using the System Preparation Tool to Prepare an Installation for Imaging 457

Using the Deployment Image Servicing and Management Tool 459

Using Windows System Image Manager to Create Answer Files 461

Deploying with Windows Autopilot 462

Windows Autopilot Requirements 463

Windows Autopilot Profiles 465

Understanding Windows Updates 466

Windows Update Process 468

Using Windows Update for Business 468

Summary 472

Exam Essentials 472

Review Questions 474

Chapter 9 Managing Authentication 477

Active Directory vs. Azure Active Directory 478

Understanding Active Directory 478

Understanding Azure Active Directory 488

Managing Hybrid Networks 514

Password Hash Synchronization with Azure AD 515

Azure Active Directory Pass-through Authentication 515

Federation with Azure AD 516

Common Identity Scenarios 519

Azure AD Connect 520

Implementing Active Directory Federation Services 527

What is a Claim? 527

AD FS in Windows Server 2016 531

Configuring a Web Application Proxy 533

Active Directory Federation Services Installation 535

Using PowerShell Commands 544

Summary 549

Exam Essentials 550

Review Questions 552

Chapter 10 Managing Devices 555

Understanding File Systems 556

File System Selection 557

File System Conversion 559

Configuring NTFS 561

Configuring Disk Storage 563

Basic Storage 563

Dynamic Storage 564

GUID Partition Table 566

Cloud-Based Storage 567

Using the Disk Management Utility 571

Using the Microsoft Management Console 571

Understanding the Disk Management Utility 575

Managing Storage 589

Managing Dynamic Storage 589

Windows 10 Devices in Azure 591

Compliance Policies 592

Device Configuration Profiles 597

Summary 600

Exam Essentials 601

Review Questions 602

Chapter 11 Planning and Managing Microsoft Intune 605

Managing Devices with Microsoft Intune 606

Understanding Microsoft Intune Benefits 608

Configuring Intune Subscriptions 609

Provisioning User Accounts 611

Supporting Applications 626

Deploying Applications Using Intune 626

Supporting Broadband Connectivity 630

Understanding Data Synchronization 631

Using Mobile Application Management 633

Windows Information Protection 635

Understanding Updates 642

Deploying Software Updates Using Intune 642

Using Intune Compliance Reports 647

Using Intune Reports 647

PowerShell Commands 648

Summary 649

Exam Essentials 649

Review Questions 651

Chapter 12 Managing Security 655

Managing Windows Security 656

Windows Defender Security Center 657

Configuring Windows Firewall 660

Understanding the Windows Defender Firewall Basics 660

Windows Firewall with Advanced Security 661

Managing Security 667

Implementing Azure Windows Defender Advanced Threat Protection 667

Understanding Windows Defender Application Guard 669

Understanding Windows Defender Credential Guard 675

Implementing and Managing Windows Defender Exploit Guard 677

Using Windows Defender Application Control 682

Summary 682

Exam Essentials 683

Review Questions 684

Chapter 13 Configuring Auditing 687

Monitoring Windows 689

Introducing Performance Monitor 689

Using Other Performance-Monitoring Tools 698

Monitor Cloud-Based Tools 706

Monitor Azure Device Security 715

Summary 718

Exam Essentials 719

Review Questions 720

Appendix Answer to Review Questions 725

Chapter 1: Windows 10 Installation 726

Chapter 2: Configuring Users 726

Chapter 3: Managing Data 727

Chapter 4: Managing the Windows 10 Environment 728

Chapter 5: Configuring Security and Devices 729

Chapter 6: Configuring Network Connectivity 730

Chapter 7: Configuring Recovery 731

Chapter 8: Installing and Updating Windows 10 732

Chapter 9: Managing Authentication 732

Chapter 10: Managing Devices 733

Chapter 11: Planning and Managing Microsoft Intune 734

Chapter 12: Managing Security 735

Chapter 13: Configuring Auditing 736

Index 739

The New copy of this book will include any supplemental materials advertised. Please check the title of the book to determine if it should include any access cards, study guides, lab manuals, CDs, etc.

The Used, Rental and eBook copies of this book are not guaranteed to include any supplemental materials. Typically, only the book itself is included. This is true even if the title states it includes any access cards, study guides, lab manuals, CDs, etc.