Exam 70-680:

TS: Windows 7, Configuring

www.herotec.net

Windows 7 Editions

AERO Starter Home Basic Home Premium Professional Enterprise Ultimate N/A N/A A A A A

Media center N/A N/A A A A A

App Locker Bit Locker

Remote desktop host N/A N/A N/A A A A

Join the domain N/A N/A N/A A A A

Max No of processor 1 1 2 2 2 2

x86 Ram 512 4 4

x64 Ram N/A 8 16

N/A N/A N/A N/A A A

4 4 4

16 16 16

Upgrading to Windows 7
Windows 7 allows you to upgrade from one edition to another so long as that edition has more features. For example, you can upgrade from Home Premium to Professional, Enterprise, or Ultimate editions, but you cannot upgrade from Ultimate to Home Premium or Professional editions . It is not possible to upgrade between versions of Windows 7. You cannot upgrade an x86 version to an x64 version, and you cannot upgrade an x64 version to an x86 version.

Upgrade types
1. Upgrade using the installation media 2. Windows Anytime Upgrade

www.herotec.net

Upgrading from Windows Vista

You must ensure that Windows Vista has Service Pack 1. You cannot upgrade between processor architectures. An x86 version of Windows Vista cannot be upgraded to an x64 version of Windows 7, and vice versa. You can upgrade only to an equivalent or higher edition of Windows 7. You can upgrade Windows Vista Home Premium to Windows 7 Home Premium, Professional, Enterprise, or Ultimate Ensure that there is at least 10 GB of free disk space on the Windows Vista volume prior to attempting the upgrade.

Migrating from Windows XP

It is not possible to upgrade directly from Windows XP to Windows 7 Side-by-Side Migrations Wipe-and-Load Migrations

Managing user profile using Windows Easy Transfer

Easy Transfer Cable Network External Hard Disk or USB Flash Drive

www.herotec.net

Working with system image

Capturing System Images
Windows Automated Installation Toolkit The Windows AIK consists of a number of tools that enable you to configure various deployment options. Depending upon your requirements, you will use some or all of the resources available in the Windows AIK http://technet.microsoft.com/en-us/library/dd349343.aspx

Building an Answer File

The answer file should Contain all the settings required for an unattended installation so you are not prompted with user interface pages during installation

Building a Reference Installation

To prepare the reference computer for the user, you use the Sysprep utility with the /generalize option to remove hardwarespecific information from the Windows Installation and the /oobe option to configure the computer to boot to Windows Welcome upon the next restart. c:\windows\system32\sysprep\sysprep.exe /oobe /generalize /shutdown

www.herotec.net

Creating a Bootable Windows PE Medium

copype.cmd x86 C:\winpe_x86 Copy ImageX into the Iso subdirectory of your Windows PE build directory

Create an image (.iso) file oscdimg -n -bc:\po\etfsboot.com c:\po\ISO c:\po\peiso.iso

Capturing the refrence computer using the peiso

To capture insert the peiso and boot g:\imagex /capture c: d:mywin7 "drive d"

deploying thw win file to another computer

g:\imagex.exe /apply d:\myimage.wim 1 C:

Managing Virtual Hard Disk Files

VHD files are used by Hyper-V, Virtual Server, and Virtual PC for virtual disks connected to a virtual machine. The VHD file format is used by Microsoft Data Protection Manager, Windows Server Backup, client computer backup (Vista and Windows 7 Enterprise and Ultimate), and other Microsoft and non-Microsoft solutions.

Creating a Native VHD

To create a native VHD, you right-click My Computer and click Manage to open Computer Management. You then select Disk Management, You can then right-click Disk Management and click Create VHD. This opens the Create and Attach Virtual Hard Disk dialog box.

Booting from VHD

The ability to boot from VHD (available in Windows 7 Ultimate and Enterprise editions only) is one of the more significant new features introduced by Windows 7. You can boot the machine as if it were running from the primary hard disk, and your operating system recognizes all the hardware available in your system. http://technet.microsoft.com/enus/library/dd799299%28WS.10%29.aspx

www.herotec.net

Managing Device Drivers and Devices

Viewing Device Information Installing Devices and Managing Device Drivers Installing Device Drivers from Windows Update Installing a Non-PnP Device Checking Digital Signatures with the DirectX Diagnostic Tool

Managing Disks
Disk Maintenance Using Disk Cleanup Defragmenting Disks Checking a Hard Disk for Errors In Local Group Policy Editor, expand Computer Configuration

Setting Disk Policies with Local Group Policy Editor

Expand Administrative Templates. then expand System and click Removable Storage Access

www.herotec.net

Using Basic and Dynamic Disks

Feature Simple A simple volume can consist of a single region on a disk or multiple regions that are on the same disk and linked together. A spanned volume is a dynamic volume consisting of disk space on more than one physical disk. If a simple volume is not a system volume or boot volume, you can extend it across additional disks to create a spanned volume, or you can create a new volume as a spanned volume by using unallocated space on more than one disk. A striped volume, which is also known as RAID 0, is a dynamic volume that stores data in stripes across two or more physical disks a mirrored volume is a faulttolerant volume that provides data redundancy by using two copies, or mirrors, of the same volume. All data written to the mirrored volume is written to both volumes,
A RAID-5 volume is a fault tolerant volume that combines areas of free space from at least three physical hard disks into one logical volume. RAID-5 volumes stripe data along with parity (evenness or oddness) information across a set of disks. When a single disk fails, Windows Server 2008 uses this parity information to re-create the data on the failed disk. RAID-5 volumes can accept the loss of only a single disk in the set

Min No of disks 1

Adv Can work with a single disk Provide more space

Fault torrence no

Spanned volumes

no

Striped volumes

performance

no

Mirrored volumes

yes

Raid-5 volumes

yes

www.herotec.net

Application Compatibility
The Program Compatibility Troubleshooter
The Program Compatibility troubleshooter, is a tool that automatically attempts to configure application compatibility settings based on a set of tests that it performs on an application

Internet Explorer Compatibility Test Tool

To use Internet Explorer Compatibility Test Tool, open the tool from the Developer And Tester Tools menu

www.herotec.net

Windows XP Mode for Windows 7

Windows XP Mode uses the latest version of Microsoft Virtual PC to allow you to run an installation of Windows XP virtually under Windows 7.

Managing AppLocker and Software Restriction Policies Software Restriction Policies

Security Levels and Default Rules The Security Levels node allows you to set the Software Restriction Policies default rule. The three default rules,are: Disallowed When this rule is set, users are unable to execute an application if the application is not allowed by an existing Software Restriction Policy. Basic User When this rule is set, users are able to execute applications so long as those applications do not require administrative access rights. Users are able to access applications that require administrative access rights only if a rule has been created that covers that application. Unrestricted When this rule is set as the default rule, a user is able to execute an application unless an existing Software Restriction Policy blocks that application.

Designated File Types

The Designated File Types policy, shown in Figure 5-14, allows you to determine which file extensions should be recognized as executable files and hence fall under the influence of Software Restriction Policies.

AppLocker Application Control Policies

AppLocker policies are conceptually similar to Software Restriction Policies, though AppLocker policies have several advantages, such as the ability to be applied to specific user or group accounts and the ability to apply to all future versions of a product.

www.herotec.net

Managing Windows Firewall

The Windows 7 firewall uses a feature known as full stealth. Stealth blocks external hosts from performing Operating System (OS) fingerprinting. OS fingerprinting is a technique where an attacker determines what operating system a host is running by sending special traffic to the hosts external network interface. After an attacker knows what operating system a host is using, they can target OS-specific exploits at the host. You cannot disable the stealth feature of Windows 7.

Network Location Awareness

Network Location Awareness (NLA) is a feature through which Windows 7 assigns a network profile based on the properties of a network connection Allowing Programs Through Windows Firewall Windows Firewall with Advanced Security

Windows 7 Remote Management

RDP 6 Configuring Remote Desktop Remote Assistance

Manging Resourses
Shared Folders Libraries Sharing Printers File and Folder Permissions Combined Share and NTFS Permissions Configuring Auditing Encrypting File System

User Account Control (UAC)

Privilege elevation Admin Approval mode Secure Desktop

www.herotec.net

User Account Control Policies in the Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options Node

Bit Locker
BitLocker is a full volume encryption and system protection feature that is available on computers running the Enterprise and Ultimate editions of Windows 7 Although BitLocker does provide some forms of protection, BitLocker does not protect data hosted on the computer once the computer is fully active. If there are multiple users of a computer and BitLocker is enabled, BitLocker cannot stop them from reading each others

Offline Files
The Offline Files feature of Windows 7 allows a client to locally cache files hosted in shared folders so that they are accessible when the computer is unable to connect directly to the network resource. The Offline Files feature is available to users of the Professional, Enterprise, and Ultimate editions of Windows 7.

Windows 7 Power Configuration

A new computer running Windows 7 comes with three power plans named High Performance, Balanced, and Power Saver

Performance Monitor
In Windows 7, you can open Performance Monitor by accessing Control Panel, specifying All Control Panel Items, selecting Performance Information And Tools, clicking Advanced Tools in the Performance Information And Tools window, and clicking Open Performance Monitor. Or typr type perfmon in the search

Backup & Restore

restore system state Backup & restore file and folders Backup & restore system image

www.herotec.net