Introduction xxiii
Chapter 1 Planning for the Installation of Windows 7 1
Choosing a Windows 7 Edition 2
x86 vs. x64 4
AppLocker 5
BitLocker 5
BranchCache 5
Windows XP Mode 6
Software Assurance 6
Local Installation 7
Designing User State Migration 10
User State Migration Toolkit 11
Performing In-Place Migration 13
Wipe-and-Load Migration vs. Side-by-Side Migration 20
Determining Which User Data and Settings to Preserve 21
Local vs. Remote Storage Considerations 22
Securing Migrated Data 23
Testing Designed Strategy 23
Virtualization Considerations 24
Considering a VDI Environment 24
Windows XP Mode 29
Installing Integration Components 38
Planning and Managing Client Licensing and Activation 42
Licensing Strategy and Compliance 42
Software Manager Licensing Manager Tool 45
Volume Activation Methods 47
Multiple Activation Key 48
Key Management Service and Licensing Infrastructure 50
Virtualization Licensing 54
Summary 54
Chapter Essentials 55
Chapter 2 Automating the Deployment of Windows 7 57
Understanding and Designing Images 58
Understanding Imaging 59
Designing Images 60
Creating Images on Reference Computers 62
Running Sysprep 63
Choosing a Deployment Strategy 65
A Comparison of Installations 66
Deployment Tools Overview 67
Imaging with the Windows Automated Installation Kit 68
ImageX 69
Understanding the Deployment Image Servicing and
Management
Tool 75
Preinstallation Environment 80
System Image Manager 84
Deploying Images with Windows Deployment Services 88
WDS Requirements 88
Deploying Images with WDS 89
Adding and Configuring WDS 91
Capturing Images with WDS 104
Using the Microsoft Deployment Toolkit 2010 107
Installing MDT 2010 109
Creating a MDT 2010 Deployment Share 110
Creating a Task Sequence 113
Summary 119
Chapter Essentials 120
Chapter 3 Using the Command Prompt and PowerShell 121
Using the Windows Command Prompt 122
Launching the Command Prompt 123
Command Prompt Basics 124
System Variables Identify the Environment 127
Commands Use Paths 128
Copy and Paste with the Command Prompt 134
Capturing the Output 135
A Sampling of Commands 136
Advanced Shell Commands 143
Creating a Batch File 145
Scheduling a Batch File 147
Just a Glimpse 150
Using Windows PowerShell and the PowerShell ISE 150
Windows PowerShell ISE 151
PowerShell Commands 152
Verbs and Nouns 153
Sending Output to a Text File 154
PowerShell Syntax 154
Running PowerShell Scripts 157
Using PowerShell Commands 164
Summary 176
Chapter Essentials 176
Chapter 4 Managing the Life Cycle-Keeping Windows 7 Up to Date 179
Keeping Windows Up to Date 180
Deploying Updates 182
Auditing Updates 182
Deploying Service Packs and Rollups 183
Windows Update Client 184
Viewing Windows Update Settings 185
Installing, Hiding, and Restoring Updates 187
Viewing Update History 189
Choosing an Update Tool 190
Using MBSA for Security Audits 192
Picking Computers to Scan 193
Vulnerability Checks 195
Installing MBSA 198
Running the MBSA 198
Running the MBSACLI 199
Using Windows Server Update Services 202
WSUS Updates 204
WSUS Requirements 205
Installing, Configuring, and Using WSUS 205
Summary 221
Chapter Essentials 222
Chapter 5 Maintaining and Troubleshooting Windows 7 223
Identifying and Resolving Performance Issues 224
Analyzing Logs with Event Viewer 225
Using the Action Center 228
Configuring Services 234
Managing Power Settings 242
Using Windows RE 248
Accessing the WinRE 249
Using the WinRE 254
Managing Hardware in Windows 7 263
Managing Memory 263
Managing Disks 267
Managing BIOS 271
Managing Devices 271
Troubleshooting Boot Issues 276
Understanding the Boot Phases 276
Using Advanced Boot Options 280
Using MSConfig 282
Startup and Recovery Options 285
Summary 286
Chapter Essentials 287
Chapter 6 Configuring and Troubleshooting Application Issues 289
Installing and Configuring Software 290
Installation Permissions 291
Licensing Restrictions 292
Digital Signing 292
Enabling and Disabling Features 296
Designing a Delivery Strategy 299
Windows XP Mode 299
Virtual PC 299
Remote Desktop Services 300
Application Virtualization 301
Designing a Deployment Strategy 301
Identifying Deployment Concerns 301
Choosing a Deployment Method 303
Identifying and Resolving Software Failure Issues 305
Checking and Repairing Installations 305
Checking the Logs 307
Problem Steps Recorder 309
Checking Whether an Application Runs in Safe Mode 310
Managing Application Compatibility 310
Summary 314
Chapter Essentials 314
Chapter 7 Networking with Windows 7 317
Understanding Network Connectivity in an Enterprise 318
Unicast, Multicast, and Broadcast 320
Using IPConfig 320
Understanding the DHCP Lease 322
Understanding the IP Addresses 327
Configuring a Network Interface Card 332
Using Proxy Servers 334
Resolving Names to IP Addresses 337
Hostname Resolution Methods 337
NetBIOS Name Resolution Methods 340
Using NSLookup 340
Using the Network and Sharing Center 342
Public vs. Private Networks 344
Changing Advanced Sharing Settings 348
Troubleshooting Network Connectivity Problems 349
Verifying Hardware and Cabling 350
Using Ping 352
Using Ping to Determine Scope of the Problem 353
Troubleshooting and Resolving Name Resolution Issues 354
Summary 355
Chapter Essentials 355
Chapter 8 Accessing Resources on a Network 357
Accessing Network Resources 358
Pointing to Network Resources 359
Creating Shares on Windows 7 360
Working with Printers on Windows 7 364
Installing and Sharing Printers on Windows 7 368
Connecting to a Shared Printer 370
Understanding Permissions 371
SIDs and DACLs 372
NTFS 374
Share Permissions 382
Combining NTFS and Share Permissions 384
Printer Permissions 386
Identifying and Resolving Network Printer Issues 388
Printer Issues 389
Network Issues 391
Server Issues 391
Summary 391
Chapter Essentials 392
Chapter 9 Managing Windows 7 in a Domain 393
Joining a Domain 394
Creating a Test Bed 394
Authentication vs. Authorization 402
Authentication 402
Authorization 402
Built-in Groups 403
Organizing Users with Groups 405
Group Scope and Group Type 406
Identifying and Resolving Logon Issues 410
Hardware vs. Network 410
Using Cached Credentials 411
Password Expiration 412
Determining Logon Context 412
Logon Hours Compliance 414
Time Synchronization 415
Understanding User Profiles 416
Standard Profiles 417
Roaming Profiles 418
Mandatory Profiles 421
Super-Mandatory User Profiles 422
Modifying the Default User Profile 423
Configuring Settings with Scripts 425
Anti-Malware Software 426
Windows Defender 426
Third-Party Anti-malware Software 428
Summary 428
Chapter Essentials 429
Chapter 10 Managing Windows 7 with Group Policy 431
Group Policy and the GPMC 432
Enabling a GPO Setting 434
Applying Multiple GPOs 436
RSAT and the Group Policy Management Console 444
User vs. Computer Settings 447
Forcing Group Policy Updates 449
Advanced Group Policy Settings 450
WMI Filtering 458
Using Group Policy Results 458
Using Group Policy Modeling 460
Group Policy Settings 460
Managing User Profiles with Group Policy 461
Logon and Startup Scripts 462
Deploying an Application via Group Policy 466
AppLocker 467
Searching Group Policy 469
Summary 472
Chapter Essentials 473
Chapter 11 Managing Security in Windows 7 475
User Account Control 476
UAC Settings 479
Configuring UAC via Group Policy 480
Security Policies 482
Local Security Policy vs. Group Policy 483
Account Policies 484
Local Policies 489
System Services 497
Removable Storage Access Policy 498
Designing BitLocker Support 499
BitLocker with a TPM 500
BitLocker without TPM 501
BitLocker and Data Drives 501
BitLocker Recovery Keys 501
Storing BitLocker Recovery Data in AD DS 503
BitLocker Active Directory Recovery Password
Viewer Tool 503
Windows Firewall 505
Checking the Firewall Status 506
Designing Firewall Rules 508
Summary 509
Chapter Essentials 510
Chapter 12 Supporting Mobile Windows 7 Users 511
Configuring and Troubleshooting Wireless Connectivity 512
Using Wireless Security 513
Configuring Wireless on Windows 7 515
Connecting to a Wireless Network 519
Setting Up Connections 522
Troubleshooting Wireless Connections 523
Troubleshooting Remote Access Issues 527
Remote Access Overview 527
Creating a Dial-up Connection 529
Creating a VPN Connection 532
Add a Certificate 534
Troubleshooting a VPN Client 535
A Few Words about Teredo 543
Understanding DirectAccess 544
Using BranchCache 545
BranchCache Modes 546
BranchCache Requirements 546
Summary 547
Chapter Essentials 547
Chapter 13 Administering Internet Explorer 549
Managing Windows Internet Explorer Settings 550
Managing Cache 551
InPrivate Browsing 556
InPrivate Filtering 558
SmartScreen Filter 559
Security Zones 561
Protected Mode 562
Understanding Advanced Settings 563
Certificate Settings 565
Active Content 568
Branding Internet Explorer 568
Group Policy Settings 569
Troubleshooting Internet Explorer Issues 571
Check Network and Proxy Settings 572
Troubleshoot Plug-ins and Add-ons 572
Restore IE Original Settings 574
Disable Add-on Crash Detection 575
Enable Compatibility View 576
Summary 576
Chapter Essentials 577
Appendix A Objective Mapping to Chapter Titles 579
Appendix B About the Companion CD 589
Glossary 593
Index 615
