Client Chap 11

Your organization is considering upgrading the whole company to Windows 10 in the next six to nine months. You need to be able to recommend which version of Windows 10 the company requires as well as keep up to date with the continual development of the operating system. Your organization specializes in the health care industry and has approximately 2,000 members of office and mobile staff. The Research and Development team use a specialist LOB application that does not need access to the Internet or require any operating software updates. Your team needs to understand the new Universal Windows Platform Store apps to see whether some current applications can use this format. Until this research is complete, you need to restrict the use of Store apps. Answer the following questions for your manager. 1. How will you keep abreast of the latest development in Windows 10 and access the preview builds? 2. Which branch of Windows 10 will you recommend for the office and mobile staff and the Research and Development team? 3. How could you prevent users from installing apps from the Windows Store?

1. You should sign up to be a Windows Insider at https://insider.windows.com/, build a virtual machine, and install an evaluation version of Windows 10 on it. Configure Windows 10 to be on the Fast ring of Insider builds. You will also receive a regular Insider newsletter. 2. As an enterprise customer, you would recommend the Current Branch of Windows 10 Enterprise for all staff users and the Long-Term Servicing Branch version for the devices that are required to run the Research and Development LOB application. 3. You could configure the Group Policy setting, Disable All Apps From Windows Store, which is found in the Computer Configuration/Administrative Templates/Windows Components/Store node. This prevents the launching of all apps from the Windows Store on all devices. The Windows Store will also be disabled. The Group Policy should be applied to all Windows 10-based devices.

On the Advanced Options page, choose one of the following options to configure howupdates are installed

Automatic (Recommended) Windows 10 downloads and applies updates and, if necessary, your computer restarts automatically when it is not in use Notify To Schedule Restart Windows 10 downloads and applies updates and, if it needs to restart, you can schedule a restart time to apply the updates

Sometimes you need to remove a single Windows update. You can perform this task in the following ways

Control Panel Settings app Command prompt

For the majority of business customers, two branch choices are available to choose from

Current Branch (CB) Current Branch for Business (CBB) All versions of Windows 10 are on Current Branch unless they have been configured to defer upgrades, which moves them to CBB Windows 10 Home edition does not have a defer upgrades option and therefore will always be on CB and upgrade through Windows Update automatically

Configure Windows Update options

Enterprise editions of Windows 10 are configured for immediate installation of feature upgrades by default But you can configure the device to defer the installation in the Settings app Typically, this defers the upgrades four to six months Through Group Policy, you can defer upgrades for up to one year New build called the Long Term Servicing Branch (LTSB) won't force feature upgrades

Three stages to consider when deploying Windows 10 in an enterprise

Evaluate Use the Windows Insider Preview for this stage Pilot Deploy the Current Branch Deploy Use the Current Branch for Business for the main deployment

Base operating system to host line-of-business (LOB) or critical applications. These scenarios include:

Factory production, factory floor machinery Manufacturing control systems Hospital emergency room computers Retail point-of-sale (POS) systems Automated teller machines (ATM) Kiosk devices

Revert to a previous build of Windows

If you upgraded from a previous version of Windows within the past 30 days, and things are not working out, you can roll back to your previous operating system installation, and your settings, apps, and any files you've added during the past 30 days will be retained Windows creates a Windows.old folder to retain a copy of your previous version of Windows Folder is automatically deleted after 30 days. On newer builds, it is 10 days!

Configure Updates

Keeping computers safe and protected from external threats such as malware and hackers is a big challenge To enhance the security protection delivered in Windows 10, the consumer can no longer turn off security updates or upgrades Enterprise users can still choose to test updates and deliver them internally, using Windows Server Update Service (WSUS)

Following features and apps are not included in the LTSB:

Microsoft Edge web browser Windows Store Client Cortana Microsoft Outlook Mail/Calendar, Microsoft OneNote

Hide or show Windows Updates in Windows 10

Microsoft has made available a utility for Windows 10 that you can download and install The Show or Hide Updates troubleshooter enables you to view updates and mark individual drivers or updates to prevent it from being reinstalled

manage update history

Microsoft releases important updates every second Tuesday each month, known as "Patch Tuesday." Security and definition updates can be released at any time

Uninstall a Windows update by using the command prompt (cont)

Next, use the Windows Update Stand-Alone Installer (Wusa.exe) command-line tool to uninstall updates by providing the package number wusa.exe /uninstall /kb:<KB Number>

Configure Windows Update settings

Security updates will continue to be distributed on the second Tuesday of each month by Windows Update You can choose how updates are applied to your computers This can be through the Settings app or by Group Policy

It is important to distinguish the different types of Windows 10 updates

Servicing updates Regular security updates and software updates Feature upgrades New features and functionality

Long-Term Servicing Branch

Specialized edition of Windows 10 Enterprise that only enterprise customers can obtain and install Aimed at businesses that have computers that need to run in a known (and fixed) environment that does not change Receives security and other updates as they are released, but no upgrades Maximum period an organization will use a particular build of LTSB is 5 - 10 years

View Your Update History

The View Your Update History page shows you the updates that have been applied You remove any update by selecting it and clicking Uninstall on the menu bar

Data Collection And Preview Builds

Toggle User Control Over Insider Builds enables users to download and install Windows preview software Allow Telemetry setting determines the amount of diagnostic and usage data related to Microsoft software that is reported to Microsoft Disable Pre-release Features Or Settings configures the level to which Microsoft can experiment with Windows 10 to study your preferences or device behavior

Uninstall a Windows update by using the command prompt

Use the Windows Management Instrumentation command-line utility to generate a list of installed Windows Update packages wmic qfe list brief /format:table

If you have recently upgraded to a newer build of Windows 10 and want to revert to theprevious version, you can do so by

Using Recovery in the Settings app Go Back To Previous Windows From Windows 10 in the Advanced Startup options

Feature upgrades are mandatory for the following versions of Windows 10

Windows 10 Home Windows 10 Pro Windows 10 Enterprise Windows 10 Education

Update Windows Store apps

Windows 10 automatically checks the Windows Store for updates to installed apps on a daily basis and displays a counter for how many apps you can update