In this video, learn about some of the management and deployment features in Windows 10, including Azure Active Directory domain join, App-V, and shared PC configuration to name a few.
- [Instructor] Let's examine some of the management and deployment features of Windows 10. And we'll start off with Windows as a service. Since this was all anyone talked about when Windows 10 was released, basically it means that updates and tweaks are processed in the background automatically. Feature updates will be applied twice a year and quality updates will be applied monthly. Windows 10 also supports in-place upgrades you can upgrade from Windows 7 or Windows 8 without having to perform a clean install.
Azure active directory domain join enables IT to join a Windows 10 device to Azure active directory which is the backbone of Office 365, Azure and other Microsoft Cloud services. This removes requirement for server active directory and is optimized for cloud users, those users whose applications and work is mostly in the cloud. Once we have our devices joined, we can manage those devices using a mobile device management solution, or MDM.
Using an MDM, we can manage the mobile device whether it be corporate or personal manage the data on that device and manage the apps. You can use Intune, which is part of Microsoft 365 System Center Configuration Manager or a third-party solution. We will be reviewing Intune in the next chapter. Next we have AppLocker. When we enable AppLocker we are able to control the apps and data our users can access on a PC and it prevents our users from running unapproved apps and in turn, can reduce calls to help desk.
App-V is also included in Windows 10. App-V enables us to deliver Win32 applications to our users but as a virtual application that is hosted on a server. The user would launch the app just as they would if that app was installed on their local system. This type of deployment provides centralized management of the application. The next, very descriptive, UE-V is for User Experience Virtualization.
UE-V allows users to customize their Windows 10 settings. For example, they can change the language, font size, and set a picture of a child or pet as their background image. These customizations are then saved to the network. That means, when the user logs into another Windows 10 PC those customizations will be applied to that user's work session. Next we have the long-term servicing branch. This can be enabled on specialized systems that need to be stable, for example, medical equipment point of sale, or POS systems, et cetera.
Any type of equipment that can not tolerate a change. Once enabled, feature updates are disabled and will not be applied to that system. And finally, we have shared PC configuration which has been designed for multiple users using the same PC for example, kiosks, hoteling, or customer access terminals. A user would log in to a guest account and each guest account has a separate profile which not only limits the guest accounts from seeing the other guest accounts, but you can also limit the access to the apps and data on that system as well.
Therefore protecting that entire system. These are just a few of the deployment management features of Windows 10. There are several in-depth courses in the library that you can review to learn more about Windows 10.