70-697: Configuring Windows Devices Course 7 Managing Apps

Transcription

1 70-697: Configuring Windows Devices Course 7 Managing Apps

2 Slide 1 Installing and Configuring Applications Working with Windows Store Apps Managing Web Browsers

3 Slide 2 Applications are primary tools that users access on a daily basis to perform their work In order for users to be successful applications must be: o Installed and available o Configured properly o Customizable Two types of applications in Windows 10 o Desktop apps o Modern apps

4 Slide 3 Applications are installed in a variety of ways o Manual installation Removable media Network share o Automatic installation Logon scripts Group Policy SCCM Program installations require administrative privileges Program installations may prompt for consent using UAC

5 Slide 4 Windows 10 provides different types of customization for users in relation to applications o Configuring Default Programs in Settings or Control Panel Set a program as the default Choose defaults for a program Associate file types with a new program Change AutoPlay settings Set program access and computer defaults o Customizing Start menu Rearrange Pin items to start menu or taskbar

6 Slide 5 Windows Store o A convenient single location to access and download apps o Access without using Control Panel using Start menu o Requires the use of a Microsoft account Modern Apps o Distinct from desktop apps o Now resizable and visible beside desktop apps o Compatible across multiple platforms o Accessible via Search on the Start menu o Install using a single click o Share with up to 5 different devices

7 Slide 6 Administrators have control over the utilization of the Windows Store o Local GPOs o Domain based GPOs Using these methods administrators can o Disable the Windows Store entirely o Control applications that can be installed o Enable sideloading Mechanism for the distribution of LOB apps without using Windows Store Must be enabled using a GPO setting LOB apps must be digitally signed Uses DISM.exe or PowerShell Add, remove, or list apps for client computers

8 Slide 7 Microsoft Edge is the brand new web browser in Windows 10 providing new and exciting ways to surf the web New features include o Write on web pages o Integrated search with Cortana o Reading view o The hub central location consolidating several items

9 Slide 8 Microsoft Edge streamlines the configuration of various settings using the More Actions link ( ) o Open inprivate window o Zoom o Find on page o Pin to start o Open in Internet Explorer o Settings

10 Slide 9 Windows 10 also provides Internet Explorer 11 for backward compatibility for LOB apps that don t work with Edge o Installed by default o Can be launched from within Microsoft Edge when a page doesn t display properly Various features and settings o Compatibility view o Privacy features o Security features o Managing add-on components

11 Slide 10 Privacy features o InPrivate browsing o Tracking protection o Enhanced Delete Browsing History o Controlling cookies

12 Slide 11 Security Features o SmartScreen filter o ActiveX Controls and Management o Cross-Site Scripting Filter o Enhanced Protected Mode o Data Execution Protection

13 Slide 12 Installing and Configuring Applications Working with Windows Store Apps Managing Web Browsers

14

15 Review Questions: 1. An application used by administrators in your organization is not configured to elevate credentials when running and as a result will not function properly. Which of the following compatibility options should you configure on the application to ensure that administrative privileges are always prompted when running the application? A. Configure the application to run in Windows XP (Service Pack 3) compatibility mode B. Enable the Run in 256 Colors compatibility option C. Enable the Run this Program as an administrator compatibility option D. Enable the Disable Desktop Composition compatibility option 2. Which of the following is not an automatic method for application installation in the Windows 10 operating system? A. Removable media B. System Center Configuration Manager C. Windows InTune D. Group Policy 3. Which of the following automated options for installing applications in Windows 10 is a cloud-based service designed for mobile device management that will work with standard PCs as well as laptops, tablets, and phones? A. SCCM B. SCOM C. InTune D. Azure AD 4. You are trying to explain to a user the difference between a desktop application and a modern application from the Windows Store. Which of the following should you NOT include in your description of the differences? A. Modern apps are always free B. Modern apps are resizable and visible alongside desktop apps C. Modern apps can be shared across devices D. Modern apps are installed using a single click 5. If you plan to provide access to the Windows store for the employees in your company, which of the following is required? A. Windows 10 Professional B. Windows 10 Enterprise C. A Microsoft account connected to their domain account D. A Microsoft account connected to their local account

16 6. Your organization would like to provide modern apps to your users but does not want to enable the Microsoft store. How can the organization provide these apps outside of the store environment? A. This cannot be done B. Group Policy C. Sideloading D. SCCM 7. Which of the following requirements will require a public or internal certificate if you plan to use sideloading to deliver LOB applications in Windows 10? A. Digital signature B. GPO setting C. DISM D. PowerShell 8. Which setting in Microsoft Edge is used to ensure that the web browser doesn t save information such as data entered into forms, passwords, history, etc.? A. inprivate browsing B. Reading List C. SmartScreen D. Protected Mode 9. Which of the following advanced settings in Microsoft Edge should you utilize in order to ensure additional protection from sites that might contain malware? A. Blocking cookies B. SmartScreen filter C. Offer to save passwords D. Always use caret browsing

17 Answer Key: 1. C By configuring this option you will ensure that administrative credentials will be prompted when running the application. The other options are more geared towards display settings and would have no effect on a security related issue. 2. A You can certainly install applications via removable media but it would not be considered an automated method of performing the installation. 3. C You can use Windows InTune in order to configure application deployment for a variety of types of devices along with additional management of those devices. This is a cloud-based service offered by Microsoft. 4. A You should not state that modern apps are always free as this is not the case. Modern apps are sometimes free, but some apps in the Windows store do cost. In addition, an organization can develop private LOB applications that are not available in the store to the public. 5. C In order to access the store you must be using a Microsoft account in Windows 10. In a business environment, Microsoft accounts can be connected to a domain or Azure AD account in order to provide this type of access. 6. C You can use sideloading in order to deliver the applications to your users. 7. A One requirement for sideloading applications is that they must be signed using a digital signature and this would need to come from a trusted CA. 8. A The inprivate browsing option opens a new Edge window and ensures that nothing from the browsing session is saved on the computer. This is an option primarily designed for using Edge on a public computer. 9. B The SmartScreen filter is enabled by default and should be left this way as it provides increased protection from malicious sites and downloads.