Copyright © 2020 by John Wiley & Sons, Inc., Indianapolis, Indiana
Published simultaneously in Canada
ISBN: 978-1-119-60594-2
ISBN: 978-1-119-60596-6 (ebk.)
ISBN: 978-1-119-60595-9 (ebk.)
Manufactured in the United States of America
No part of this publication may be reproduced, stored in a retrieval system or transmitted in any form or by any means, electronic, mechanical, photocopying, recording, scanning or otherwise, except as permitted under Sections 107 or 108 of the 1976 United States Copyright Act, without either the prior written permission of the Publisher, or authorization through payment of the appropriate per-copy fee to the Copyright Clearance Center, 222 Rosewood Drive, Danvers, MA 01923, (978) 750-8400, fax (978) 646-8600. Requests to the Publisher for permission should be addressed to the Permissions Department, John Wiley & Sons, Inc., 111 River Street, Hoboken, NJ 07030, (201) 748-6011, fax (201) 748-6008, or online at http://www.wiley.com/go/permissions.
Limit of Liability/Disclaimer of Warranty: The publisher and the author make no representations or warranties with respect to the accuracy or completeness of the contents of this work and specifically disclaim all warranties, including without limitation warranties of fitness for a particular purpose. No warranty may be created or extended by sales or promotional materials. The advice and strategies contained herein may not be suitable for every situation. This work is sold with the understanding that the publisher is not engaged in rendering legal, accounting, or other professional services. If professional assistance is required, the services of a competent professional person should be sought. Neither the publisher nor the author shall be liable for damages arising herefrom. The fact that an organization or Web site is referred to in this work as a citation and/or a potential source of further information does not mean that the author or the publisher endorses the information the organization or Web site may provide or recommendations it may make. Further, readers should be aware that Internet Web sites listed in this work may have changed or disappeared between when this work was written and when it is read.
For general information on our other products and services or to obtain technical support, please contact our Customer Care Department within the U.S. at (877) 762-2974, outside the U.S. at (317) 572-3993 or fax (317) 572-4002.
Wiley publishes in a variety of print and electronic formats and by print-on-demand. Some material included with standard print versions of this book may not be included in e-books or in print-on-demand. If this book refers to media such as a CD or DVD that is not included in the version you purchased, you may download this material at http://booksupport.wiley.com. For more information about Wiley products, visit www.wiley.com.
Library of Congress Control Number: 2020932036
TRADEMARKS: Wiley, the Wiley logo, and the Sybex logo are trademarks or registered trademarks of John Wiley & Sons, Inc. and/or its affiliates, in the United States and other countries, and may not be used without written permission. All other trademarks are the property of their respective owners. John Wiley & Sons, Inc. is not associated with any product or vendor mentioned in this book.
This book is dedicated to the three ladies of my life: Crystal, Alexandria, and Paige.
I would like to thank my wife and best friend, Crystal. She is always the light at the end of my tunnel. I want to thank my two daughters, Alexandria and Paige, for all of their love and support during the writing of all my books. The three of them are my support system and I couldn't do any of this without them.
I want to thank my family, and especially my brothers, Rick, Gary, and Rob. They have always been there for me. I want to thank my father, Richard, who helped me become the man I am today, and my mother, Maggie, for all of her love and support.
I would like to thank all of my friends and co-workers at StormWind Studios (www.stormwindstudios.com). Thanks to all of you for everything that you do. I would not have been able to complete this book without all of your help and support.
I want to thank everyone on my Sybex team, especially my development editor, Kim Wimpsett who helped me make this the best book possible, and Jon Buhagiar, who is the technical editor of this book and an outstanding resource on this book. It's always good to have the very best technical guy backing you up. I want to thank Katie Wisor, who was my production editor, and Judy Flynn for being the copyeditor.
Special thanks to my acquisitions editor, Kenyon Brown, who was the lead for the entire book. Finally, I want to thank everyone else behind the scenes that helped make this book possible. It's truly an amazing thing to have so many people work on my books to help make them the very best. I can't thank you all enough for your hard work.
William Panek holds the following certifications: MCP, MCP+I, MCSA, MCSA+ Security and Messaging, MCSE-NT (3.51 and 4.0), MCSE (2000, 2003, 2012/2012 R2), MCSE+Security and Messaging, MCDBA, MCT, MCTS, MCITP, CCNA, CCDA, and CHFI. Will is also a four-time and current Microsoft MVP winner.
After many successful years in the computer industry, Will decided that he could better use his talents and his personality as an instructor. He began teaching for schools such as Boston University and the University of Maryland, just to name a few. He has done consulting and training for some of the biggest government and corporate companies in the world, including the United States Secret Service, Cisco, United States Air Force, and United States Army.
In 2015, Will became a Sr. Microsoft Instructor for StormWind Studios (www.stormwindstudios.com). He currently lives in New Hampshire with his wife and two daughters. Will was also a Representative in the New Hampshire House of Representatives from 2010 to 2012. In his spare time, he likes to do blacksmithing, shooting (trap and skeet), snowmobiling, playing racquetball, and riding his Harley. Will is also a commercially rated helicopter pilot.
Exercise 1.1 Performing a Clean Install of Windows 10
Exercise 1.2 Upgrading Windows 8.1 to Windows 10
Exercise 1.3 Configuring Locales
Exercise 1.4 Troubleshooting Failed Installations with Setup Logs
Exercise 1.5 Downloading and Installing MDT
Exercise 1.6 Configuring MDT
Exercise 1.7 Prepare a System for Imaging by Using the System Preparation Tool
Exercise 2.1 Setting Up an On-Site Domain Controller
Exercise 2.2 Creating an Azure AD User Account
Exercise 2.3 Creating an Azure AD Group Account
Exercise 2.4 Setting Up Self-Service Password Reset
Exercise 2.5 Testing the Self-Service Password Reset
Exercise 2.6 Adding Azure AD Identity Protection
Exercise 2.7 Installing Azure AD Connect
Exercise 2.8 Creating the Site-to-Site VPN Connection
Exercise 2.9 Creating the Local Network Gateway
Exercise 2.10 Installing the AD FS Role on a Computer Using Server Manager
Exercise 2.11 Configuring the AD FS Role on the Computer Using Server Manager
Exercise 2.12 Configuring Multi-factor Authentication
Exercise 3.1 Converting a FAT32 Partition to NTFS
Exercise 3.2 Configuring Disk Quotas
Exercise 3.3 Configuring OneDrive
Exercise 3.4 Adding an MMC Snap-In
Exercise 3.5 Creating a New Volume
Exercise 3.6 Converting a Basic Disk to a GPT Disk
Exercise 3.7 Converting a Basic Disk to a Dynamic Disk
Exercise 3.8 Editing a Drive Letter
Exercise 3.9 Deleting a Partition
Exercise 3.10 Creating an Extended Volume
Exercise 4.1 Setting Up a Microsoft Intune Account
Exercise 4.2 Adding Users into Microsoft Intune
Exercise 4.3 Create a New Group
Exercise 4.4 Creating an Intune Policy
Exercise 4.5 Confirm the Version of Windows
Exercise 4.6 Enroll Windows 10 Desktop Version 1607 or Higher
Exercise 5.1 Running an Advanced Scan
Exercise 5.2 Creating a New Inbound Rule
Exercise 5.3 Installing Windows Defender Application Guard
Exercise 5.4 Using Windows Defender Application Guard
Exercise 5.5 Windows Defender Application Guard Enterprise
Exercise 5.6 Windows Defender Credential Guard
Exercise 5.7 Windows Defender Exploit Guard
This book was written from over 25 years of IT experience. I have taken that experience and translated it into a Windows 10 book that will help you not only prepare for the Microsoft 365 Certified: Modern Desktop Administrator Associate exams but also to develop a clear understanding of how to install and configure Windows 10 while avoiding all the possible configuration pitfalls.
Many Microsoft books just explain the Windows operating system, but with this book, I will go a step further, providing many in-depth, step-by-step procedures to support my explanations of how the operating system performs at its best.
Microsoft Windows 10 is the newest version of Microsoft's client operating system software. Microsoft has taken the best of Windows 7 and Windows 8 and combined them into the latest creation, Windows 10.
Windows 10 eliminates many of the problems that plagued the previous versions of Windows clients and it includes a much faster boot time and shutdown. It is also easier to install and configure, and it barely stops to ask the user any questions during installation. In this book, I will show you what features are installed during the automated installation and where you can make changes if you need to be more in charge of your operating system and its features.
This book takes you through all the ins and outs of Windows 10, including installation, configuration, online Microsoft subscriptions, auditing, backups, and so much more.
Windows 10 has improved on Microsoft's desktop environment, made networking easier, working with Microsoft Azure, enhanced search ability, improved performance—and that's only scratching the surface.
When all is said and done, this is a technical book for IT professionals who want to take Windows 10 to the next step and get certified. With this book, you will not only learn Windows 10 and hopefully pass the exams, you will also become a Windows 10 expert.
Since the inception of its certification program, Microsoft has certified more than two million people. As the computer network industry continues to increase in both size and complexity, this number is sure to grow—and the need for proven ability will also increase. Certifications can help companies verify the skills of prospective employees and contractors.
The Microsoft certification tracks for Windows include just some of the following certifications:
Microsoft 365 Certified: Modern Desktop Administrator Associate: Windows 10 The Microsoft 365 Certified: Modern Desktop Administrator Associate is now the highest-level certification you can achieve with Microsoft in relation to Windows 10. It requires passing exams MD-100 and MD-101. This book assists in your preparation for exam MD-101.
Microsoft Certified Technology Associate (MTA) This is Microsoft's newest certification program. This certification targets those new to the IT field and tests candidates on the core competencies necessary to become an IT professional.
Attaining Microsoft certification has always been a challenge. In the past, students have been able to acquire detailed exam information—even most of the exam questions—from online “brain dumps” and third-party “cram” books or software products. For the new generation of exams, this is simply not the case.
Microsoft has taken strong steps to protect the security and integrity of its new certification tracks. Now prospective candidates must complete a course of study that develops detailed knowledge about a wide range of topics. It supplies them with the true skills needed, derived from working with the technology being tested.
The new generations of Microsoft certification programs are heavily weighted toward hands-on skills and experience. It is recommended that candidates have troubleshooting skills acquired through hands-on experience and working knowledge.
Fortunately, if you are willing to dedicate the time and effort to learn Windows 10, you can prepare yourself well for the exam by using the proper tools. By working through this book, you can successfully meet the requirements to pass the Windows 10 exams.
Candidates for MCSA certification on Windows 10 must pass two Windows 10 MCSA tests:
Microsoft provides exam objectives to give you a general overview of possible areas of coverage on the Microsoft exams. Keep in mind, however, that exam objectives are subject to change at any time without prior notice and at Microsoft's sole discretion. Please visit the Microsoft Learning website (www.microsoft.com/learning) for the most current listing of exam objectives.
For a more detailed description of the Microsoft certification programs, including a list of all the exams, visit the Microsoft Learning website at www.microsoft.com/learning.
In an effort to both refine the testing process and protect the quality of its certifications, Microsoft has focused its latest certification exams on real experience and hands-on proficiency. There is a greater emphasis on your past working environments and responsibilities and less emphasis on how well you can memorize. In fact, Microsoft says that certification candidates should have hands-on experience before attempting to pass any certification exams.
Microsoft will accomplish its goal of protecting the exams’ integrity by regularly adding and removing exam questions, limiting the number of questions that any individual sees in a beta exam, limiting the number of questions delivered to an individual by using adaptive testing, and adding new exam elements.
Exam questions may be in a variety of formats: Depending on which exam you take, you'll see multiple-choice questions as well as select-and-place and prioritize-a-list questions. Simulations and case study–based formats are included as well. Let's take a look at the types of exam questions, so you'll be prepared for all of the possibilities.
Multiple-choice questions come in two main forms. One is a straightforward question followed by several possible answers of which one or more is correct. The other type of multiple-choice question is more complex and based on a specific scenario. The scenario may focus on several areas or objectives.
Select-and-place exam questions involve graphical elements that you must manipulate to successfully answer the question. For example, you might see a diagram of a computer network. A typical diagram will show computers and other components next to boxes that contain the text “Place here.” The labels for the boxes represent various computer roles on a network, such as a print server and a file server. Based on information given for each computer, you are asked to select each label and place it in the correct box. You need to place all of the labels correctly. No credit is given for the question if you correctly label only some of the boxes.
In another select-and-place problem, you might be asked to put a series of steps in order by dragging items from boxes on the left to boxes on the right and placing them in the correct order. One other type requires that you drag an item from the left and place it under an item in a column on the right.
For more information on the various exam question types, go to www.microsoft.com/learning/mcpexams/policies/innovations.asp.
Simulations are the kinds of questions that most closely represent actual situations and test the skills you use while working with Microsoft software interfaces. These exam questions include a mock interface on which you are asked to perform certain actions according to a given scenario. The simulated interfaces look nearly identical to what you see in the actual product.
Because of the number of possible errors that can be made on simulations, be sure to consider the following recommendations from Microsoft:
The best way to prepare for simulation questions is to spend time working with the graphical interface of the product on which you will be tested.
Case study–based questions first appeared in the MCSD program. These questions present a scenario with a range of requirements. Based on the information provided, you answer a series of multiple-choice and select-and-place questions. The interface for case study–based questions has a number of tabs, each of which contains information about the scenario. At present, this type of question appears only in most of the Design exams.
Here are some general tips for achieving success on your certification exam:
At the time this book was released, Microsoft exams are given using more than 1,000 Authorized VUE Testing Centers around the world. For the location of a testing center near you, go to VUE's website at www.vue.com. If you are outside the United States and Canada, contact your local VUE registration center.
Find out the number of the exam you want to take, and then register with the VUE registration center nearest to you. At this point, you will be asked for advance payment for the exam. The exams are $165 each and you must take them within one year of payment. You can schedule exams up to six weeks in advance or as late as one working day prior to the date of the exam. You can cancel or reschedule your exam if you contact the center at least two working days prior to the exam. Same-day registration is available in some locations, subject to space availability. Where same-day registration is available, you must register a minimum of two hours before test time.
When you schedule the exam, you will be provided with instructions regarding appointment and cancellation procedures, ID requirements, and information about the testing center location. In addition, you will receive a registration and payment confirmation letter from VUE.
Microsoft requires certification candidates to accept the terms of a nondisclosure agreement before taking certification exams.
This book is intended for individuals who want to earn their Microsoft 365 Certified: Modern Desktop Administrator Associate: Windows 10 certification.
This book will not only help anyone who is looking to pass the Microsoft exams, it will also help anyone who wants to learn the real ins and outs of the Windows 10 operating system.
Here is a glance at what's in each chapter:
Chapter 1: Installing and Updating Windows 10 In the first chapter, I explain the requirements and steps to install and configure Windows 10. I will also show you the different versions of Windows 10. This chapter also shows you how to configure automated installation of Windows 10.
Chapter 2: Managing Authentication This chapter shows you how to configure user authorization and authentication. Understanding how users authenticate onto your network and Azure is one of the most important tasks that administrators must perform. I will also teach you how to manage user profiles.
Chapter 3: Managing Devices I show you how to implement conditional access and compliance policies for devices. I will show you how to configure device profiles and also how to plan and implement co-management between your on-site network with your Azure based network.
Chapter 4: Planning and Managing Microsoft Intune This chapter takes you through the different ways to manage Intune device enrollment and inventory. I will also show you how to deploy and update your applications. Finally, I will talk about implanting Mobile Application Management.
Chapter 5: Managing Security This chapter teaches you how to configure and manage Windows Defender. I will show you how to use Windows Defender Credential Guard, Windows Defender Exploit Guard, Windows Defender Advanced Threat Protection, Windows Defender Application Guard, and Windows Defender Antivirus.
Chapter 6: Configuring Auditing This chapter will show you how to monitor your different devices. I will also talk about how to monitor the health of your devices using Windows Analytics and cloud-based tools.
There are many helpful items intended to prepare you for the Microsoft 365 Certified: Modern Desktop Administrator Associate certification included in this book:
Assessment Test There is an Assessment Test at the conclusion of the introduction that can be used to quickly evaluate where you are with Windows 10. This test should be taken prior to beginning your work in this book and should help you identify areas in which you are either strong or weak. Note that these questions are purposely more simple than the types of questions you may see on the exams.
Opening List of Objectives Each chapter includes a list of the exam objectives that are covered in that chapter.
Helpful Exercises Throughout the book, I have included step-by-step exercises of some of the more important tasks you should be able to perform. Some of these exercises have corresponding videos that can be downloaded from the book's website. Also, later in this introduction you'll find a recommended home lab setup that will be helpful in completing these tasks.
Video Resources After each chapter summary, if the chapter includes exercises with corresponding videos, a list or description of the exercises with video resources will be provided. The videos can be accessed at www.wiley.com/go/Sybextestprep.
Exam Essentials The end of each chapter also includes a listing of exam essentials. These are essentially repeats of the objectives, but remember that any objective on the exam blueprint could show up on the exam.
Chapter Review Questions Each chapter includes review questions. These are used to assess your understanding of the chapter and are taken directly from the chapter. These questions are based on of the exam objectives and are similar in difficulty to items you might actually receive on the MCSA: Windows 10 exams.
The Sybex Interactive Online Test Bank, flashcards, videos, and glossary can be accessed at www.wiley.com/go/Sybextestprep.
The interactive online learning environment that accompanies the MCA Modern Desktop Administrator Study Guide, Exam MD-101 study guide provides a test bank with study tools to help you prepare for the certification exams and increase your chances of passing the exam the very first time! The test bank includes the following elements:
Sample Tests All of the questions in this book are provided, including the assessment test, which you'll find at the end of this introduction, and the chapter tests that include the review questions at the end of each chapter. In addition, there are two practice exams. Use these questions to test your knowledge of the study guide material. The online test bank runs on multiple devices.
Electronic Flashcards The flashcards are included for quick reference and are great tools for learning quick facts. You can even consider these as additional simple practice questions, which is essentially what they are.
Videos Some of the exercises include corresponding videos. These videos show you how the author does the exercises. There is also a video that shows you how to set up virtualization so that you can complete the exercises within a virtualized environment. I also have videos to help you on the Microsoft exams at www.youtube.com/c/williampanek.
PDF of Glossary of Terms There is a glossary included that covers the key terms used in this book.
To get the most out of this book, you will want to make sure that you complete the exercises throughout the chapters. To complete the exercises, you will need one of two setups. First, you can set up a machine with Windows 10 and complete the labs using a regular Windows 10 machine.
The second way to set up Windows 10 is by using virtualization. I set up Windows 10 as a virtual hard disk (VHD) and I did all the labs this way. The advantages of using virtualization are that you can always just wipe out the system and start over without losing a real server. Plus, you can set up multiple virtual servers and create a full lab environment on one machine.
I created a video for this book showing you how to set up a virtual machine and how to install Windows 10 onto that virtual machine. This video can be seen at www.youtube .com/c/williampanek.
Sybex strives to keep you supplied with the latest tools and information you need for your work. Please check the website at www.wiley.com/go/Sybextestprep, where I'll post additional content and updates that supplement this book should the need arise.
You can contact Will Panek by going to his website at www.willpanek.com. Will Panek also has videos and test prep information located at www.youtube.com/c/williampanek. Will also has a Windows 10 Facebook page and a Twitter account @AuthorWillPanek.
Table I.1 contains an objective map to show you at-a-glance where you can find each objective covered.
Table I.1 MD-101 Objective Map
| Objective | Chapter |
| Deploy and update operating systems (35-40%) | |
| Plan and implement Windows 10 by using dynamic deployment | Chapter 1 |
|
Chapter 1 |
| Plan and implement Windows 10 by using Windows Autopilot | Chapter 1 |
|
Chapter 1 |
| Upgrade devices to Windows 10 | Chapter 1 |
|
Chapter 1 |
| Manage updates | Chapter 1 |
|
Chapter 1 |
| Manage device authentication | Chapter 2 |
|
Chapter 2 |
| Manage policies and profiles (25-30%) | |
| Plan and implement co-management | Chapter 3 |
|
Chapter 3 |
| Implement conditional access and compliance policies for devices | Chapter 3 |
|
Chapter 3 |
| Configure device profiles | Chapter 3 |
|
Chapter 3 |
| Manage user profiles | Chapter 2 |
|
Chapter 2 |
| Manage and protect devices (20-25%) | |
| Manage Windows Defender | Chapter 5 |
|
Chapter 5 |
| Manage Intune device enrollment and inventory | Chapter 4 |
|
Chapter 4 |
| Monitor devices | Chapter 6 |
|
Chapter 6 |
| Manage apps and data (10-15%) | |
| Deploy and update applications | Chapter 4 |
|
Chapter 4 |
| Implement Mobile Application Management (MAM) | Chapter 4 |
|
Chapter 4 |