Modern Desktops Part 2

Video Activity
Join over 3 million cybersecurity professionals advancing their career
Sign up with

Already have an account? Sign In »

4 hours 24 minutes
Video Transcription
Hello and welcome back to Part two off this video. Siri's where we're talking about the modern desktop. My name's Chris Tameka. I'm taking you through the whole thing we're going to be carrying on here. We left off in the last video with part way through deployment options, and I thought it was a good time to stop because we're just about to drop into Windows 10 now, specifically
with those deployment options.
So let's get cracking. Let's talk about Windows 10 here, so there's a few options with Windows 10. The 1st 1 is an in place upgrade. Now
this is actually the recommended way. Microsoft tell people to update Windows Now
in the old days, Air quotes In the old days when I was around and I had Windows XP to deal with as Ah, first line, you know his 1st 2nd line engineer, an in place upgrade used to send shivers down my spine because the sheer amount of problems that you would get when trying to upgrade on operating system was tremendous.
So Microsoft used to do
a basically a wipe and load was what they called it, where you would work the machine clean and then load your new operating system on from fresh
that's gone out the window. Now. Microsoft actually recommend that you upgrade a device is operating system without reinstalling. You can migrate APS, user data and settings from one version of Windows to another kind of like going from Windows 8.12 Windows 10. And you can also update from one release of Windows 10 to the next.
So going from Windows 10.
But like we mentioned in previous videos, 1903 to 2004 that works fine as well.
Okay, so that's now the recommended way. This is that. So I'll put it here. This is now the recommended way
off getting the latest version of Windows, and it doesn't matter if you're running Windows 10 788.1 Microsoft recommend using an in place upgrade for any version of Windows 10 that's available today. All right, keep that in mind.
Let's move on to dynamic provisioning. So dynamic provisioning is where you create what's called a provisioning package to quickly configure one or more devices. Even without network connectivity, the package that you might seek
doesn't have to be delivered over a network. It can be put on a USB stick on a DVD disc
and actually sent to the customer to then plug in. And when it does, it will then auto kickoff and update the machine. That's what's known as dynamic provisioning
on. Do you create these provisioning packages with what's called the Windows configuration designer, and you can install them? As I said over a network by a removable media like USB drive. You can even use NFC tags or barcodes so you can get someone to scan something on. Then it will then go off and get the information.
You can have transfer of data using an NFC tag as well
anything along those lines. But that's dynamic provisioning in a nutshell.
Then we have subscription activation. Now this uses a subscription, usually a key to switch from one edition of Windows 10 to another. For example, you can switch from Windows 10 pro toe Windows 10 enterprise when a licensed user signs into a device and they have credentials that are associated with
the correct licence that they're upgrading to.
The operating system will automatically change from Windows 10 pro toe Windows 10 Enterprise and all the appropriate Windows 10 enterprise features become unlocked effectively. If the subscription expires or you transfer it to another user, let's say over the Microsoft 365 Network,
then the device will revert almost seamlessly. In fact, I think it is seamlessly
to Windows 10 Pro, which was the original version that was on the machine. Andi believe it gives you a great period of about 90 days. So if it can't find a connection to still, check that your license is valid. You have three months basically to get it back online so that it can check. So even if you're out on the road, it's not just going to suddenly switch back.
Just make sure that you plug it into a network at least once every three months.
All right, let's have a quick chat about the marks off. 365 laps.
This one's nice and simple. Basically, for deployment options. Here, you're looking at the office. 365 portal They do still use while I say the office. 365 Portal. This is the official name here.
This is what it used to be called.
So keep that in mind, but basically you would go to the address office stopped calm,
which I believe is still valid. They haven't changed it yet, anyway, but you would go there, sign in with your Microsoft 365 credentials. And if you have a license for the Microsoft 365 applications, you will be able to install them with a one button press effectively. It'll be a big orange button in the top right corner that says, Install
you click it
and then you wait patiently. And that's effectively a good deployment option for people who are either out on the road or you don't have a lot of machines in the office environment. But if you do, then you should. Let's go back to the left hand side of the screen here. You should be looking at this. The office deployment. All
this is a massively strong piece of kit.
When it comes to pushing out those Microsoft 365 APS, I'm sure they'll rename it at some point to call it the APP deployment tool or something on those lines.
All right, let's move on to how updates work, then. All right, so
let's discuss Windows 11th off. So
Windows 10 It's usually about 2 to 3 years between operating systems, and everyone knows that method. So Windows XP and Windows Me and Windows Vista and God. I remember all of those versions for friend those that don't really want to remember than to march Windows 2000 as well. Then we got Windows seven. That was good when No. Seven was good.
Let's not talk about eight so much. That was Metro interface. If any of you ever used it was not nice, 8.1 Got better? 10. I actually believe personally, certainly is the best operating system I've used in a long, long time, Certainly since way, way back
on dso In the old versions of Windows, they used to have what were called service packs.
So you used to get, like Windows XP service pack one so it's packed to then they would. Maybe in three years they were to get the latest operating system, and then we roll it out against it was packed 12
What they're now doing is Windows 10 is, effectively what's known as Windows as a service, so it's W. A s. You may also see operating system as a service. Oh, sas.
All right, so keep that in mind when you're working with things now Microsoft of pushing for the as a service environments or what they're doing is they're effectively trying to service
service size everything. That's a word. Yeah, let's go with that. That's fine. They're trying to turn everything into as a service.
Obviously, there was a lot of pushback and resistance on this because people just want to pay a one or fear whatever. Personally, I don't have a problem with this. I'd rather pay a subscription and know that I've got the latest at all times on. Do I have the ability to control a certain amount of that as well? So things like the feature updates and things like that,
which moves us nicely onto the feature updates now
feature updates. These updates provide new functionality, and I usually released twice a year. As I mentioned in the previous video, you should deploy these updates using your existing tools. You shouldn't have to change what you're doing to make them work,
and because these new features come out more often, the individual updates themselves are actually smaller, and it makes it easier to deploy them across an organization. It also introduces less change per update, which means less for your users to get used to with each update, which is actually a good way of training your users.
You don't want to have to go every three years
on retrain your users on a brand new operating system. If you say to them. Look, there's two new features that have come out this in the last six months. These are the two features you can probably bring them up to speed in about 15 minutes. So much easier to train your staff when they're when they're working with feature updates.
Then we get quality updates now quality updates provide security updates and fixes, and they usually released once a month. And we've mentioned this before. This is what's known as Patch Tuesday.
All right, so we're going to a bit more detail with this one. So patch Tuesday Basically what we're looking at here,
micro. It's the second Tuesday of the month known as Patch Tuesday, and Microsoft release what's known as a cumulative update, and this uses if you remember in the last video we discussed the binary delta compression it uses that to put all of the
past quality updates in tow one pack so your computer basically gets
only what it needs. It doesn't get any redundant files on this helps. Make sure your device stays up to date on Also makes testing more effective on is more closely aligned to the devices that we use for testing,
you know, around the network effectively. Eso it just means that it's easier to patch. It's quicker to patch, uses less bandwidth. Andi, You're not looking at massive, huge numbers of patches because it's one patch, and it constantly evolves and changes itself based on what you need.
It's quicker, and it's easier to handle as a system administrator.
All right, let's look at the update channels. So how to get your updates? The 1st 1 the fastest one is Windows Insider. So the windows inside a program you get early access to pre release Windows 10 bills on. They update frequently. Like really frequently. I'm talking sometimes weekly.
Now you would use these types of bills these insider bills to explore and test
new and modified features before you deploy them on. You can also provide direct feedback to Microsoft on these updates and help improve the experience for other people, All right. After that, we have the semi annual channel. Now the semiannual channel, as it sounds, is updated twice a year with new features. This is the most common version
devices in the semi annual channel get updates as soon as Microsoft released them.
And you can them further control the timing off when specific devices get updated by using the deferral feature, which you can either use directly on the machine. Or you can use things like Windows Update for business or conflict Manager Windows Server Update Services, also known as W sauce. If you ever use that in previous rolls,
and you can actually delay the installation until it's convenient for your organization, so that's that's the most common one. So I put a little star next to it, but that's the one you should be usually using. Then we have what's called the LTs See long term servicing channel.
Now with this one, this is designed to be used only with specialized devices
that can't be regularly updated or that don't need to be updated. So things like a T M's or a standalone PC that sits on a trolley in hospital uses, you know, very specialised medical equipment.
The long term service in channel is released every 2 to 3 years. I would say on this channel is updated with security fixes as lead ID so your devices will still be secure.
One thing to note.
Microsoft 365 APS e office
does not support this channel. Keep that in mind. You cannot use LTs see to keep your office environment updated. It's just not an option.
All right, Come to the office environments shortly. All right, Now, I'm gonna pull up a quick layout. Here, let me wipe off these marks that I got on the screen.
There we go. That's get rid of those. Perfect. Let's bring this up. All right, So
this is a quick table that I designed that shows the different ring names. Now, the update channels are known as rings. Okay, so when you put that there just to make it nice and easy to understand
rings. So here we've got preview
and the Microsoft Channel for this is the windows inside a program. So this is the number one here, so we'll put a number one next toe. There's a preview. You can't defer feature updates. All right, so it's put an X on that one, and you can't defer quality updates.
So this is basically when you want to design it for a small group of devices that you can then test and see how the update occurs, right? Nice and easy.
Then we talk about the test channel. So the test ring is the semiannual channel here
again. Can't defer feature updates, but you can't also can't defer quality updates. And this is basically I would say, this is you're looking at a pilot group. That's effectively what we're talking about here. This is our put pilot there in brackets.
All right, Next we've got on organizational level. So number three again. This is the semiannual channel, so we'll put this next to semiannual again. This one, however, is an organization. You can defer updates for up to 120 days, so if you don't want to roll out patches until you're sure this is where you should be using you
on again with quality updates,
you can look to defer them for 7 to 14 days, so up to two weeks basically is what we're looking at there. Okay, this is the majority off your users. You know, updates can be paused if you run into issues. A zit says there. But generally you should be using this for,
um, your
the majority of your machines on your network. Okay,
that's something to keep in mind There. These air the rings that you should be setting up effectively to look after your business
number four line of business. So this one rolls under semiannual again. We're running out of space on that side. I'm gonna put it on this side here just right next to it
We can differ. This time we can differ even further. Weaken Got to 180 days with differing feature updates on for quality updates. You can go upto one month. So we're now talking long amounts of time where we don't need to run those updates. We can really make sure they work.
The devices you would put in here are the ones that are mission critical to your business. So
they should only be updated when everything else is working. And you know it's not caused any other issues. Then you start to roll it out to things that are mission critical and should not be put through any testing phases. All right,
okay, and then the final one. Number five is LTs see, And that's our long term servicing channel. This basically you don't have feature updates. They get deferred upto thinks about 2 to 3 years. If I remember correctly,
based on my training on quality updates, you would get them as and when. So you, whenever you can get it connected, basically for those, so that's really a no no applicable. You would do it when you feel that you need to. But these are isolated devices that can't use a semiannual channel.
The term for this you may have heard it before,
is also known as air gapping,
So this is an egg up.
They call it an air gap because effectively there's no cable connecting it to anything else. There's a gap of air away around the machine on air. Gapped computer is less of a security risk in the modern age because you have to physically go onto the machine to cause a vulnerability to it.
That's effectively the the decent thing with air gapping machines and running. LTs sees if you're running LTs see on a networked machine, you're probably asking for trouble. Keep that in mind. Heart, Right? Okay, what we're gonna do, I'm gonna stop there. We're gonna come back. We're gonna finish up. How? Updates work.
And we'll do a part three because there is a little bit more to cover.
I don't want a boy. You too long with each separate video. But join me for part three. I'll see you soon.
Up Next
Microsoft 365 Fundamentals [MS-900]

Microsoft 365 Fundamentals is a course designed to help both those looking for more information at a foundational level on the Microsoft 365 platform and service, as well as those looking to take the exam itself.

Instructed By