You are employed as an administrator at contoso.com.
The network consists of a single Active Directory Domain Services (AD DS) domain, named contoso.com.
All workstations on the contoso.com network have Windows 8.1 installed. You need to configure files history on a client system.
You notice that the free storage space on the selected drive is low, but you do not have a spare drive to replace it.
Configure the save copies of files setting to back up files once a day.
A company has client computers that run Windows 8.1. You implement an AppLocker file hash rule that allows an application to run. You then apply a service pack to the application.
When users attempt to run the application, the application is blocked by Group Policy. You need to ensure that the application runs.
Enable the Reschedule Automatic Updates scheduled installations Group Policy setting.
Set the wired network connection to non-metered.
Set the wired network connection to metered.
Configure the Automatic Maintenance setting.
You are employed as an administrator at contoso.com. The contoso.com network is made up of an Active Directory Domain Services (AD DS) domain, named ABC.com.
All workstations on the contoso.com network, including laptops, have Windows 8.1 installed.
Your users have just been issued new laptops for use outside the office.
These users currently log in to their desktop workstations using a Windows domain account.
They would like their laptops to be set up exactly like their desktop workstations. Which of the following would easily allow them to achieve this?
Link the Windows domain accounts to a Windows Live ID.
Associate the most commonly used Windows settings with your user account. Saved settings are available when you sign in to your account on any Windows 8.1 PC. Your PC will be set up just the way you are used to!
Easily reacquire your Metro style apps on multiple Windows 8.1 PCs. The app’s settings and last-used state Persist across all your Windows 8.1 PCs.
You can connect your Microsoft account to your domain account and sync your settings and preferences between them. For example, if you use a domain account in the workplace, you can connect your Microsoft account to it and see the same desktop background, app settings, browser history and favorites, and other Microsoft account settings that you see on your home PC. You#39;ll also be able to use Microsoft account services from your domain PC without signing in to them individually.
A company has client computers that run Windows 8.1. Users store data on company- issued USB flash drives.
Run Device Manager as an administrator.
In the local Group Policy, modify the device installation restrictions.
In the system properties for hardware, modify the device installation settings.
You could prevent installation of mass storage devices but use the quot;Allow administrators to overridequot; setting to ensure an administrator could get the flash drive installed.
To enable control over device installation, Windows Vista and Windows Server 2008 introduce several policy settings. You can configure these policy settings individually on a single computer, or you can apply them to a large number of computers through the use of Group Policy in an Active Directory domain.
Whether you want to apply the settings to a stand-alone computer or to many computers in an Active Directory domain, you use the Group Policy Object Editor to configure and apply the policy settings.
The following is a brief description of the DMI policy settings that are used in this guide. Prevent installation of devices not described by other policy settings.
This policy setting controls the installation of devices that are not specifically described by any other policy setting. If you enable this policy setting, users cannot install or update the driver for devices unless they are described by either the Allow installation of devices that match these device IDs policy setting or the Allow installation of devices for these device classes policy setting. If you disable or do not configure this policy setting, users can install and update the driver for any device that is not described by the Prevent installation of devices that match these device IDs policy setting, the Prevent installation of devices for these device classes policy setting, or the Prevent installation of removable devices policy setting.
Allow installation of devices that match any of these device IDs. This policy setting specifies a list of Plug and Play hardware IDs and compatible IDs that describe devices that users can install. This setting is intended to be used only when the Prevent installation of devices not described by other policy settings policy setting is enabled and does not take precedence over any policy setting that would prevent users from installing a device. If you enable this policy setting, users can install and update any device with a hardware ID or compatible ID that matches an ID in this list if that installation has not been specifically prevented by the Prevent installation of devices that match these device IDs policy setting, the Prevent installation of devices for these device classes policy setting, or the Prevent installation of removable devices policy setting. If another policy setting prevents users from installing a device, users cannot install it even if the device is also described by a value in this policy setting. If you disable or do not configure this policy setting and no other policy describes the device, the Prevent installation of devices not described by other policy settings policy setting determines whether users can install the device.
A company has an Active Directory Domain Services (AD DS) domain. Client computers in the Test department run Windows 8.1 and are connected to the domain.
You need to ensure that Windows updates are not automatically applied and cannot be enabled by users.
Create a Group Policy object (GPO) to enable the Turn on recommended updates via Automatic Updates policy setting.
Create a Group Policy object (GPO) to configure the Remove access to use all Windows Update features policy setting.
Create a Group Policy object (GPO) to configure the Configure Automatic Updates policy setting.
This Group Policy setting is located in User Configuration\Administrative Templates\Windows Components\Windows Update.
When you enable this setting, the operating system cannot be updated through Windows Update, and Automatic Updates is disabled. Users or administrators can still perform actions such as clicking the Windows Update option on the Start menu, and the Windows Update Web site will appear in the browser. However, it will not be possible to update the operating system through Windows Update, regardless of the type of account being used to log on.
You need to create a baseline performance report that includes disk status by using the least amount of administrative effort.
Start the System Diagnostics Data Collector Set.
Create and start a custom Data Collector Set.
Add counters to Performance Monitor, and then print the Performance Monitor output.
System Diagnostics and Performance Data Collector Set both deliver the same, 17 performance counters for disk.
The System Diagnostics Report includes Basic System Checks (see below), where Disk status is listed.
This item does not appear in the System Performance Report.
A client laptop runs Windows 7 Professional and a custom application. The custom application is compatible with Windows 8.1.
You plan to migrate user settings and data from the client laptop to a new tablet PC that runs Windows 8.1 Pro. You install the User State Migration Toolkit (USMT) on a USB flash drive.
You need to ensure that the custom application settings are applied to the tablet PC after the migration is complete.
ScanState scans the source computer, collects the files and settings and creates a store. ScanState does not modify the source computer. By default, ScanState compresses the files and stores them as an image file (USMT3.MIG).
LoadState migrates the files and settings from the store to the destination computer. LoadState migrates each file (one by one) from the store to a temporary location on the destination computer – the files are decompressed (and decrypted if necessary) during this process. Next, LoadState transfers the file to the correct location, deletes the temporary copy, and begins migrating the next file.
Compression improves performance by reducing network bandwidth usage as well as the required space in the store. However, for testing purposes, you can choose to turn off compression with /nocompress.
A company has client computers that run Windows 8.1. Finance department employees store files in the C:\Finance directory. File History on.
Versions tab located in the folder properties.
File History only backs up data in libraries, favorites, desktop, and contacts and must use a non-system drive for backup.
Since File History is already on we can assume the drive doesn#39;t need to be changed. So we should review the log and move the file to a library.
Volume shadow copy has been replaced with File History: http://msdn.microsoft.com/en- us/library/windows/desktop/hh848072(v=vs.85).
You are configuring a computer that will be used in a kiosk in a public area. You install a new internal hard drive.
You need to protect the computer from starting an unauthorized operating system. What should you do?
Ensure that the computer BIOS supports Unified Extensible Firmware Interface (UEFI) and is enabled.
Install Windows 8.1 Pro 64-bit on the internal hard drive. Enable BitLocker on the internal hard disk.
Partition the internal hard drive as MBR disk. Install Windows 8.1 Enterprise 64-bit.
Partition the internal hard drive as GPT disk. Install Windows 8.1 Pro 64-bit.
UEFI (Unified Extensible Firmware Interface) is a specification that defines an interface between a PC’s firmware and an operating system. It replaces or can work in concert with the Basic Input/Output System (BIOS) firmware that PCs have traditionally used. For Windows 8, a key part of this specification is Secure Boot, which protects the PC from malware by allowing only authorized boot loaders to run when the computer starts.
How does Windows 8 prevent attackers from replacing boot components?
All systems with the Windows 8 certification use Secure Boot (part of the UEFI specification) to protect hardware-related firmware and the operating-system loader from tampering. Secure Boot can prevent the system from booting if unauthorized changes have been made or possibly even refresh the some boot components, such as the UEFI firmware, to a known good state.
Trusted Boot is a Windows 8 feature that secures the entire Windows boot process. It prevents malware from hiding and taking up permanent residence within the PC by ensuring none of the Windows components loaded during boot have been tampered with. Trusted Boot also ensures that anti-malware software is loaded before any third-party drivers and applications using its Early Launch Anti-Malware (ELAM) capability. This prevents malware from inserting itself in front of the anti-malware engine so that it can compromise the anti-malware engine’s ability to protect the system. In the event that malware was able to successfully compromise the any of the Windows boot process, Trusted Boot will attempt to automatically remediate the issue.
What editions of Windows 8 will include Trusted Boot? All editions of Windows 8 include Trusted Boot.
A local printer is shared from a client computer. The client computer user is a member of the Sales AD security group.
The Security tab lets you assign printer-management permissions for users, groups, and the creator of each print job.