MD-100 Windows 10
Module 08:
Managing Apps in Windows 10
© Copyright Microsoft Corporation. All rights reserved.
Providing Apps to Users
Module Managing Universal Windows Apps
agenda
Web Browsers in Windows 10
© Copyright Microsoft Corporation. All rights reserved.
Lesson01: Providing Apps to Users
© Copyright Microsoft Corporation. All rights reserved.
Lesson 1: Providing Apps to Users
• Types of Windows 10 Apps
• Methods for Deploying Desktop Apps
• Installing Desktop Apps Manually
• Installing Desktop Apps Automatically
• What Is Office 365
© Copyright Microsoft Corporation. All rights reserved.
Types of Windows 10 Apps
• Desktop app installation:
‒ Is performed by using .exe or .msi installer files
‒ Can be automated
‒ Can be replaced by distributed app installation and execution methods in larger environments
• Windows Store apps:
‒ Run on Windows 8 or newer
‒ Can be installed from the Windows Store or sideloaded
• Universal Windows Apps
‒ Can install on multiple hardware platforms
‒ Desktop Bridge can convert desktop apps to universal app
• RemoteApp apps:
‒ Enable apps to run remotely but display locally
‒ Enable apps to run on clients that do not meet app hardware requirements
• App-V apps
‒ Apps stream to the desktop
‒ Enable multiple versions of apps to run without conflict
© Copyright Microsoft Corporation. All rights reserved.
Methods for Deploying Apps
• Manual installation
• Group policy
• Microsoft Endpoint Configuration Manager
• Microsoft Intune
• Virtualized applications
• Remote applications
• Included in image
© Copyright Microsoft Corporation. All rights reserved.
Installing Desktop Apps Manually
© Copyright Microsoft Corporation. All rights reserved.
Installing Desktop Apps Automatically
Group Policy • Leverages existing AD infrastructure • Requires domain-joined
• Low Complexity • Must be MSI
• Very limited reporting (event log)
• No pre-req verification
MDT • Light-touch solution • Strictly for deployment, not a full management solution
• Minimal infrastructure requirements
SCCM • Comprehensive Management • More complex to deploy and manage
• Zero-touch solution (when combined • Devices must be managed by organization
with MDT) • Doesn’t support mobile OSes
Intune • Comprehensive Management • Cannot deploy OS (uses Autopilot)
• Low Complexity • Limited Win32 app deployment capabilities
• Supports BYOD and mobile OSes • Not as robust as SCCM
© Copyright Microsoft Corporation. All rights reserved.
Office 365
• Deployment Options
‒ Click-to-run
‒ Group Policy
‒ Configuration Manager
‒ App-V
‒ Remote Desktop Service (RDS)
© Copyright Microsoft Corporation. All rights reserved.
Lesson02: Managing Universal Windows
Apps
© Copyright Microsoft Corporation. All rights reserved.
Lesson 2: Managing Universal Windows Apps
• Microsoft Store and Microsoft Store for Business
• Managing Access to the Microsoft Store
• Configuring Assigned Access to a Single Microsoft Store App
• Sideloading UWP Apps
© Copyright Microsoft Corporation. All rights reserved.
Microsoft Store and Microsoft Store for Business
• Microsoft Store for Business is a portal that
provides users access to corporate apps
• Organizations must have an Azure AD tenant
• Apps can be purchased from the store for
individuals or in volume for the organization
• Apps are only supported on Windows 10
devices
• Organizations can house their LOB apps in a
private store
• Developers can be allowed to upload custom
apps for your organization
© Copyright Microsoft Corporation. All rights reserved.
Managing access to the Microsoft Store
• Users must sign in with a Microsoft account
to download apps
• Preventing access to the Windows Store
requires:
• Editing the registry OR
• Blocking Microsoft accounts
• AppLocker can control installation and
execution of certain apps from the Microsoft
Store
• App updates are installed automatically by
default
© Copyright Microsoft Corporation. All rights reserved.
Configuring Assigned Access to a Single Store App
© Copyright Microsoft Corporation. All rights reserved.
Lesson03: Web Browsers in Windows 10
© Copyright Microsoft Corporation. All rights reserved.
Lesson 3: Web Browsers in Windows 10
• Internet Explorer 11 and Microsoft Edge
• Microsoft Edge Browser
• Managing Extensions
• Microsoft Edge Productivity Features
• Internet Explorer 11
• Privacy Features in Internet Explorer 11
• Security Features in Internet Explorer 11
• Internet Explorer Security Zones and Add-ons
• Internet Explorer Compatibility View
• Internet Explorer Enterprise Mode
© Copyright Microsoft Corporation. All rights reserved.
Internet Explorer and Microsoft Edge
© Copyright Microsoft Corporation. All rights reserved.
The Microsoft Edge Browser
© Copyright Microsoft Corporation. All rights reserved.
Managing Extensions
© Copyright Microsoft Corporation. All rights reserved.
Microsoft Edge Productivity Features
• Tab management
• Paste and go
• Improved battery life
• Windows Hello authentication
• Website notifications
• OneDrive synchronization of favorites
• Reading view
• Full screen browsing
• Cross-device browsing
• PDF annotation
• ePub reader
© Copyright Microsoft Corporation. All rights reserved.
Internet Explorer 11
© Copyright Microsoft Corporation. All rights reserved.
Privacy Features in Internet Explorer 11
© Copyright Microsoft Corporation. All rights reserved.
Security Features in Internet Explorer 11
Internet Explorer includes a number
of security features such as:
• The SmartScreen Filter
• ActiveX Controls and Management
• Cross-Site Scripting Filter
• Data Execution Prevention
• Enhanced Protected Mode
© Copyright Microsoft Corporation. All rights reserved.
Internet Explorer Security Zones and Add-ons
• Internet Explorer 11 is built to function without add-ons
• Internet Explorer for the desktop supports HTML5 and Adobe
Flash by default
• The Manage Add-ons feature allows users to:
‒ Enable and disable add-ons
‒ Add and remove add-ons
© Copyright Microsoft Corporation. All rights reserved.
Security Features in Internet Explorer 11
Compatibility View helps
display a webpage as it is
meant to be viewed
© Copyright Microsoft Corporation. All rights reserved.
Internet Explorer Enterprise Mode
• Designed for sites specifically written for IE7 or IE8
• Enterprise Mode Site List Manager maintains list of websites
• Configured through Group Policy
© Copyright Microsoft Corporation. All rights reserved.
Practice Labs
Installing Apps in Windows Configuring Microsoft Edge
10 to support Internet Explorer
Enterprise Mode
© Copyright Microsoft Corporation. All rights reserved.
Module Review
© Copyright Microsoft Corporation. All rights reserved.
© Copyright Microsoft Corporation. All rights reserved.