Restricting Device Drivers
  * - GPME (Group Policy Management Editor 
  * --> Device Installation Restrictions: 
  * ----> device setup classes | device IDs - GUID - Globally Unique IDs

IE highly configurable with GPO \ Edge not so much

Edge UI

Reading List / Reading View

Make annotations to a webpage

-- Notes at around 7:00 of Edge and IE11
www.acm.org


Client Hyper-V requirements
  * - 64-bit Windows 10 -  4GB RAM
  * - HAV - Hardware Assisted Virtualization
  * - SLAT - Second Level Address Translation aka Extended Page Tables 

Mobile Systems >> MBMCTR.EXE



ICD - Windows Imaging and Configuration Designer (13 min video)
- WADK - Creates "provisioning packages" *.PPKG
  * --> Can install against a running OS
  * --> Can install against a existing image


WIM Format
  * - File based
  * - Keeps unknown existing files
  * - Deploy to any size disk
  * - Uses Compression
  * - Fully modifiable with DISM

FFU - Full Flash Update
  * - Sector based
  * - Wipes the drive
  * - Deploy only to same or larger disk
  * - Does not use compression
  * - Only modifiable for adding packages

** Volume Activation**

  * - KMS requires a server configured with a "volume activation key" from Microsoft
  * - Clients discover KMS via DNS (SRV record)
  * - Clients re-activate every 6 months

Active Directory Activation


MAK Multiple Activation Key - Does not require connection
  * - Volume Activation Management Tool -- Comes with WADK
  * - SLMGR.VBS /DLI to check status


--> Can't find script engine for SLMGR.VBS


**Group Policy Architecture LSDO** (Local | Site | Domain | OU levels)

Local Group Policy 
  * -- Overridden by any network GPO
  * -- Edit with GPEDIT.MSC

Network Group Policy
  * -- 3+ Levels - Site | Domain | OU levels 
  * -- Edit with GPME (group policy management editor) manage with GPMC (RSAT - Remote Server Administrative Tools)
  * -- If multiple GPOs at the same level they are processed in the order as they appear in panel 
  * -- Background refresh 90-120 minutes
  * -- Powershell command: Invoke-GPUpdate

Preferences vs. Policies
  * -- Preferences can be changed

User Account Control
  * -- The default in Win 10 is to be notified when non Microsoft apps try to make changes.
  * -- Shield Icon shows needed admin elevation



Which keyboard accessibility feature ignores brief keystrokes?  Filter keys 

Which disk location is indexed by default for quicker content searches? Offline files 

Which PowerShell cmdlet prevents system resources from being allocated to a device driver? Disable-PnPDevice 

From which console can you run the "Add Hardware Wizard"?  Device Manager 

Where is the Windows 10 driver store? Windows\System32\DriverStore 

If you implement the "better performance" cache setting for a flash drive, what should you do to avoid data loss? 
Choose "Safely remove hardware and eject media" before disconnecting

Which Settings tile should a user choose to apply a provisioning package? Accounts 

If you log on as a standard user and try to perform an administrative task, what kind of prompt will you see by default?  Credentials 

Which tool lets us perform security filtering in Group Policy? GPMC 

Where can you customize the Action Center's "quick tiles" arrangement? 
Settings > System > Notification and Actions 

Which of the following features does Client Hyper-V require? Extended Page Tables 

Which of the following device driver properties can form the basis of a Group Policy restriction? Setup class 

What PowerShell cmdlet can save a Start screen layout to XML? Export-StartLayout 

How do you know if the Driver Verifier Manager has detected a problem with a device driver? Windows crashes on restart 
 
Where can you customize the Action Center's "quick tiles" arrangement? 
Settings > System > Notification and Actions 

Which imaging format performs a clean wipe of the target drive? FFU 

Which Settings tile should a user choose to apply a provisioning package?  Accounts 

What tool can export power plans? POWERCFG.EXE