Title Details

Darril Gibson, MCT, MCITP: Vista, MCITP: Server 2008, MCITP: Windows 7, is the CEO of Security Consulting and Training, LLC, and an adjunct professor at EPCI College of Technology. He teaches, writes, and consults on a wide variety of security and IT topics to private and government clients. Darril has authored or coauthored numerous books on a number of technologies, including Windows Vista, Windows Server 2008, and SQL Server 2005 and 2008. He holds many IT certifications in addition to those listed above.

Introduction xxiii

Chapter 1 Planning for the Installation of Windows 7 1

Choosing a Windows 7 Edition 2

x86 vs. x64 4

AppLocker 5

BitLocker 5

BranchCache 5

Windows XP Mode 6

Software Assurance 6

Local Installation 7

Designing User State Migration 10

User State Migration Toolkit 11

Performing In-Place Migration 13

Wipe-and-Load Migration vs. Side-by-Side Migration 20

Determining Which User Data and Settings to Preserve 21

Local vs. Remote Storage Considerations 22

Securing Migrated Data 23

Testing Designed Strategy 23

Virtualization Considerations 24

Considering a VDI Environment 24

Windows XP Mode 29

Installing Integration Components 38

Planning and Managing Client Licensing and Activation 42

Licensing Strategy and Compliance 42

Software Manager Licensing Manager Tool 45

Volume Activation Methods 47

Multiple Activation Key 48

Key Management Service and Licensing Infrastructure 50

Virtualization Licensing 54

Summary 54

Chapter Essentials 55

Chapter 2 Automating the Deployment of Windows 7 57

Understanding and Designing Images 58

Understanding Imaging 59

Designing Images 60

Creating Images on Reference Computers 62

Running Sysprep 63

Choosing a Deployment Strategy 65

A Comparison of Installations 66

Deployment Tools Overview 67

Imaging with the Windows Automated Installation Kit 68

ImageX 69

Understanding the Deployment Image Servicing and

Management

Tool 75

Preinstallation Environment 80

System Image Manager 84

Deploying Images with Windows Deployment Services 88

WDS Requirements 88

Deploying Images with WDS 89

Adding and Configuring WDS 91

Capturing Images with WDS 104

Using the Microsoft Deployment Toolkit 2010 107

Installing MDT 2010 109

Creating a MDT 2010 Deployment Share 110

Creating a Task Sequence 113

Summary 119

Chapter Essentials 120

Chapter 3 Using the Command Prompt and PowerShell 121

Using the Windows Command Prompt 122

Launching the Command Prompt 123

Command Prompt Basics 124

System Variables Identify the Environment 127

Commands Use Paths 128

Copy and Paste with the Command Prompt 134

Capturing the Output 135

A Sampling of Commands 136

Advanced Shell Commands 143

Creating a Batch File 145

Scheduling a Batch File 147

Just a Glimpse 150

Using Windows PowerShell and the PowerShell ISE 150

Windows PowerShell ISE 151

PowerShell Commands 152

Verbs and Nouns 153

Sending Output to a Text File 154

PowerShell Syntax 154

Running PowerShell Scripts 157

Using PowerShell Commands 164

Summary 176

Chapter Essentials 176

Chapter 4 Managing the Life Cycle—Keeping Windows 7 Up to Date 179

Keeping Windows Up to Date 180

Deploying Updates 182

Auditing Updates 182

Deploying Service Packs and Rollups 183

Windows Update Client 184

Viewing Windows Update Settings 185

Installing, Hiding, and Restoring Updates 187

Viewing Update History 189

Choosing an Update Tool 190

Using MBSA for Security Audits 192

Picking Computers to Scan 193

Vulnerability Checks 195

Installing MBSA 198

Running the MBSA 198

Running the MBSACLI 199

Using Windows Server Update Services 202

WSUS Updates 204

WSUS Requirements 205

Installing, Configuring, and Using WSUS 205

Summary 221

Chapter Essentials 222

Chapter 5 Maintaining and Troubleshooting Windows 7 223

Identifying and Resolving Performance Issues 224

Analyzing Logs with Event Viewer 225

Using the Action Center 228

Configuring Services 234

Managing Power Settings 242

Using Windows RE 248

Accessing the WinRE 249

Using the WinRE 254

Managing Hardware in Windows 7 263

Managing Memory 263

Managing Disks 267

Managing BIOS 271

Managing Devices 271

Troubleshooting Boot Issues 276

Understanding the Boot Phases 276

Using Advanced Boot Options 280

Using MSConfig 282

Startup and Recovery Options 285

Summary 286

Chapter Essentials 287

Chapter 6 Configuring and Troubleshooting Application Issues 289

Installing and Configuring Software 290

Installation Permissions 291

Licensing Restrictions 292

Digital Signing 292

Enabling and Disabling Features 296

Designing a Delivery Strategy 299

Windows XP Mode 299

Virtual PC 299

Remote Desktop Services 300

Application Virtualization 301

Designing a Deployment Strategy 301

Identifying Deployment Concerns 301

Choosing a Deployment Method 303

Identifying and Resolving Software Failure Issues 305

Checking and Repairing Installations 305

Checking the Logs 307

Problem Steps Recorder 309

Checking Whether an Application Runs in Safe Mode 310

Managing Application Compatibility 310

Summary 314

Chapter Essentials 314

Chapter 7 Networking with Windows 7 317

Understanding Network Connectivity in an Enterprise 318

Unicast, Multicast, and Broadcast 320

Using IPConfig 320

Understanding the DHCP Lease 322

Understanding the IP Addresses 327

Configuring a Network Interface Card 332

Using Proxy Servers 334

Resolving Names to IP Addresses 337

Hostname Resolution Methods 337

NetBIOS Name Resolution Methods 340

Using NSLookup 340

Using the Network and Sharing Center 342

Public vs. Private Networks 344

Changing Advanced Sharing Settings 348

Troubleshooting Network Connectivity Problems 349

Verifying Hardware and Cabling 350

Using Ping 352

Using Ping to Determine Scope of the Problem 353

Troubleshooting and Resolving Name Resolution Issues 354

Summary 355

Chapter Essentials 355

Chapter 8 Accessing Resources on a Network 357

Accessing Network Resources 358

Pointing to Network Resources 359

Creating Shares on Windows 7 360

Working with Printers on Windows 7 364

Installing and Sharing Printers on Windows 7 368

Connecting to a Shared Printer 370

Understanding Permissions 371

SIDs and DACLs 372

NTFS 374

Share Permissions 382

Combining NTFS and Share Permissions 384

Printer Permissions 386

Identifying and Resolving Network Printer Issues 388

Printer Issues 389

Network Issues 391

Server Issues 391

Summary 391

Chapter Essentials 392

Chapter 9 Managing Windows 7 in a Domain 393

Joining a Domain 394

Creating a Test Bed 394

Authentication vs. Authorization 402

Authentication 402

Authorization 402

Built-in Groups 403

Organizing Users with Groups 405

Group Scope and Group Type 406

Identifying and Resolving Logon Issues 410

Hardware vs. Network 410

Using Cached Credentials 411

Password Expiration 412

Determining Logon Context 412

Logon Hours Compliance 414

Time Synchronization 415

Understanding User Profiles 416

Standard Profiles 417

Roaming Profiles 418

Mandatory Profiles 421

Super-Mandatory User Profiles 422

Modifying the Default User Profile 423

Configuring Settings with Scripts 425

Anti-Malware Software 426

Windows Defender 426

Third-Party Anti-malware Software 428

Summary 428

Chapter Essentials 429

Chapter 10 Managing Windows 7 with Group Policy 431

Group Policy and the GPMC 432

Enabling a GPO Setting 434

Applying Multiple GPOs 436

RSAT and the Group Policy Management Console 444

User vs. Computer Settings 447

Forcing Group Policy Updates 449

Advanced Group Policy Settings 450

WMI Filtering 458

Using Group Policy Results 458

Using Group Policy Modeling 460

Group Policy Settings 460

Managing User Profiles with Group Policy 461

Logon and Startup Scripts 462

Deploying an Application via Group Policy 466

AppLocker 467

Searching Group Policy 469

Summary 472

Chapter Essentials 473

Chapter 11 Managing Security in Windows 7 475

User Account Control 476

UAC Settings 479

Configuring UAC via Group Policy 480

Security Policies 482

Local Security Policy vs. Group Policy 483

Account Policies 484

Local Policies 489

System Services 497

Removable Storage Access Policy 498

Designing BitLocker Support 499

BitLocker with a TPM 500

BitLocker without TPM 501

BitLocker and Data Drives 501

BitLocker Recovery Keys 501

Storing BitLocker Recovery Data in AD DS 503

BitLocker Active Directory Recovery Password

Viewer Tool 503

Windows Firewall 505

Checking the Firewall Status 506

Designing Firewall Rules 508

Summary 509

Chapter Essentials 510

Chapter 12 Supporting Mobile Windows 7 Users 511

Configuring and Troubleshooting Wireless Connectivity 512

Using Wireless Security 513

Configuring Wireless on Windows 7 515

Connecting to a Wireless Network 519

Setting Up Connections 522

Troubleshooting Wireless Connections 523

Troubleshooting Remote Access Issues 527

Remote Access Overview 527

Creating a Dial-up Connection 529

Creating a VPN Connection 532

Add a Certificate 534

Troubleshooting a VPN Client 535

A Few Words about Teredo 543

Understanding DirectAccess 544

Using BranchCache 545

BranchCache Modes 546

BranchCache Requirements 546

Summary 547

Chapter Essentials 547

Chapter 13 Administering Internet Explorer 549

Managing Windows Internet Explorer Settings 550

Managing Cache 551

InPrivate Browsing 556

InPrivate Filtering 558

SmartScreen Filter 559

Security Zones 561

Protected Mode 562

Understanding Advanced Settings 563

Certificate Settings 565

Active Content 568

Branding Internet Explorer 568

Group Policy Settings 569

Troubleshooting Internet Explorer Issues 571

Check Network and Proxy Settings 572

Troubleshoot Plug-ins and Add-ons 572

Restore IE Original Settings 574

Disable Add-on Crash Detection 575

Enable Compatibility View 576

Summary 576

Chapter Essentials 577

Appendix A Objective Mapping to Chapter Titles 579

Appendix B About the Companion CD 589

Glossary 593

Index 615