Group Policy • Leverages existing AD infrastructure • Requires domain-joined
• Low Complexity • Must be MSI • Very limited reporting (event log) • No pre-req verification MDT • Light-touch solution • Strictly for deployment, not a full management solution • Minimal infrastructure requirements SCCM • Comprehensive Management • More complex to deploy and manage • Zero-touch solution (when combined • Devices must be managed by organization with MDT) • Doesn’t support mobile OSes Intune • Comprehensive Management • Cannot deploy OS (uses Autopilot) • Low Complexity • Limited Win32 app deployment capabilities • Supports BYOD and mobile OSes • Not as robust as SCCM
Lesson 2: Managing Universal Windows Apps • Microsoft Store and Microsoft Store for Business • Managing Access to the Microsoft Store • Configuring Assigned Access to a Single Microsoft Store App • Sideloading UWP Apps
Microsoft Store and Microsoft Store for Business • Microsoft Store for Business is a portal that provides users access to corporate apps • Organizations must have an Azure AD tenant • Apps can be purchased from the store for individuals or in volume for the organization • Apps are only supported on Windows 10 devices • Organizations can house their LOB apps in a private store • Developers can be allowed to upload custom apps for your organization
to download apps • Preventing access to the Windows Store requires: • Editing the registry OR • Blocking Microsoft accounts • AppLocker can control installation and execution of certain apps from the Microsoft Store • App updates are installed automatically by default
Lesson 3: Web Browsers in Windows 10 • Internet Explorer 11 and Microsoft Edge • Microsoft Edge Browser • Managing Extensions • Microsoft Edge Productivity Features • Internet Explorer 11 • Privacy Features in Internet Explorer 11 • Security Features in Internet Explorer 11 • Internet Explorer Security Zones and Add-ons • Internet Explorer Compatibility View • Internet Explorer Enterprise Mode
Microsoft Edge Productivity Features • Tab management • Paste and go • Improved battery life • Windows Hello authentication • Website notifications • OneDrive synchronization of favorites • Reading view • Full screen browsing • Cross-device browsing • PDF annotation • ePub reader
of security features such as: • The SmartScreen Filter • ActiveX Controls and Management • Cross-Site Scripting Filter • Data Execution Prevention • Enhanced Protected Mode
• Internet Explorer 11 is built to function without add-ons
• Internet Explorer for the desktop supports HTML5 and Adobe Flash by default • The Manage Add-ons feature allows users to: ‒ Enable and disable add-ons ‒ Add and remove add-ons