spine = 1.63” Windows® 7 About the Author William R. Stanek is a Microsoft® ADMINISTRATOR’S POCKET CONSULTANT Most Valuable Professional with 20+ years of experience in systems The practical, portable guide to Windows 7! management and advanced Windows 7 programming. He is an award- Consultant Pocket Administrator’s Portable and precise, this pocket-sized guide delivers ® winning author who’s written more ready answers for administering computers running than 100 books, including Windows Windows 7. Zero in on core commands and techniques Server® 2008 Inside Out. He is the using quick-reference tables, instructions, and lists. series editor for the Administrator’s You’ll get the focused information you need to save Pocket Consultant line of books. Windows 7 time and get the job done—whether at your desk or in the fi eld. Get fast facts to: • Manage system confi guration, startup, and boot • Deploy and customize the operating system • Confi gure Group Policy settings and preferences • Install hardware devices and drivers • Administer disks, fi le systems, and storage MORE RESOURCES FOR IT PROFESSIONALS • Set up and troubleshoot TCP/IP networking • Confi gure RAS, mobile, and wireless connectivity Windows Server 2008 Inside Out • Manage access, security, and availability for shared William R. Stanek resources ISBN 9780735624382 • Use remote management and remote assistance • Defi nitive, in-depth reference ® capabilities • Hundreds of timesaving solutions • Scripts, job aids, eBook on CD • Manage TPM and BitLocker ® Drive Encryption • Troubleshoot and resolve system issues See inside cover William R. Stanek Author and Series Editor microsoft.com/mspress Stanek ISBN: 978-0-7356-2699-7 90000 U.S.A. $34.99 [Recommended] Administrator’s Operating Systems/ 9 780735 626997 Part No. X15-74131 Part Windows Pocket Consultant Cyan Magenta Yellow Black Windows® 7 Administrator’s Pocket Consultant William R. Stanek A01T_626997.indd 1 07/20/09 3:40:31 PM PUBLISHED BY Microsoft Press A Division of Microsoft Corporation One Microsoft Way Redmond, Washington 98052-6399 Copyright © 2010 by William Stanek All rights reserved. No part of the contents of this book may be reproduced or transmitted in any form or by any means without the written permission of the publisher. Library of Congress Control Number: 2009932696 Printed and bound in the United States of America. 1 2 3 4 5 6 7 8 9 QWE 4 3 2 1 0 9 Distributed in Canada by H.B. Fenn and Company Ltd. A CIP catalogue record for this book is available from the British Library. Microsoft Press books are available through booksellers and distributors worldwide. For further infor­mation­about­international­editions,­contact­your­local­Microsoft­Corporation­office­or­contact­ Microsoft Press International directly at fax (425) 936-7329. Visit our Web site at www.microsoft. com/mspress. Send comments to [email protected]. Microsoft, Microsoft Press, Active Desktop, Active Directory, ActiveX, Aero, Authenticode, BitLocker, DirectX, Excel, Internet Explorer, MS, MS-DOS, MSN, Outlook, PowerPoint, ReadyBoost, ReadyDrive, SuperFetch, Visual Basic, Visual Studio, Win32, Windows, Windows Media, Windows NT, Windows PowerShell, Windows Server, and Windows Vista are either registered trademarks or trademarks of Microsoft Corporation in the United States and/or other countries. Other product and company names mentioned herein may be the trademarks of their respective owners. The example companies, organizations, products, domain names, e-mail addresses, logos, people,­places,­and­events­depicted­herein­are­fictitious.­No­association­with­any­real­company,­ organization, product, domain name, e-mail address, logo, person, place, or event is intended or should be inferred. This book expresses the author’s views and opinions. The information contained in this book is provided without any express, statutory, or implied warranties. Neither the authors, Microsoft Corporation, nor its resellers, or distributors will be held liable for any damages caused or alleged to be caused either directly or indirectly by this book. Acquisitions Editor: Juliana Aldous Developmental Editor: Karen Szall Project Editor: Carol Vu Editorial Production: Publishing.com Technical Reviewer: Jim Johnson; Technical Review services provided by Content Master, a member of CM Group, Ltd. Cover: Tom Draper Design Body Part No. X15-74130 A02L_626997.indd 2 07/20/09 3:43:24 PM Contents Introduction xix Chapter 1 Introduction to Windows 7 Administration 1 Getting Started with Windows 7 . 2 Understanding 64-Bit Computing . 8 Installing Windows 7 . 10 Preparing for Windows 7 Installation 10 Performing a Windows 7 Installation 12 Running Windows 7 . 15 Using Action Center and Activating Windows 17 Running Windows 7 in Groups and Domains 20 Power Plans, Sleep Modes, and Shutdown 25 Windows 7 Architecture . 27 Chapter 2 Deploying Windows 7 37 Working with Windows PE . 37 Understanding Windows PE 38 Configuring Windows PE 40 Preparing a Build Environment 41 Creating a Build: The Essentials 47 Creating a Bootable USB Flash Drive 55 Booting to an Image from a Hard Disk 56 Adding Windows PE Images to Windows Deployment Services 57 Working with Windows RE . 58 Creating a Customized Windows RE Image 58 Creating Windows RE Recovery Media 59 What do you think of this book? We want to hear from you! Microsoft is interested in hearing your feedback so we can continually improve our books and learning resources for you. To participate in a brief online survey, please visit: microsoft.com/learning/booksurvey iii A03C_626997.indd 3 07/24/09 5:06:24 PM Adding Windows RE Images to Windows Deployment Services 60 Deploying Windows with a Customized Windows RE 61 Creating Windows Images for Deployment . 65 Understanding Windows Imaging 65 Creating a Windows Install Image 67 Configuring and Using Windows Deployment Services . 71 Setting Up Windows Deployment Services 71 Importing Images 73 Installing Windows from an Image 74 Capturing Images 75 Managing Access and Prestaging Computers 76 Customizing Windows Images 78 Chapter 3 Configuring User and Computer Policies 83 Group Policy Essentials . 83 Accessing and Using Local Group Policies 85 Accessing and Using Site, Domain, and Organizational Unit Policies 88 Configuring Policies . 90 Viewing Policies and Templates 90 Enabling, Disabling, and Configuring Policies 91 Adding or Removing Templates 92 Working with File and Data Management Policies . 92 Configuring Disk Quota Policies 92 Configuring System Restore Policies 95 Configuring Offline File Policies 95 Working with Access and Connectivity Policies . 102 Configuring Network Policies 102 Configuring Remote Assistance Policies 104 Working with Computer and User Script Policies . 106 Controlling Script Behavior Through Policy 106 Assigning Computer Startup and Shutdown Scripts 108 Assigning User Logon and Logoff Scripts 109 iv Contents A03C_626997.indd 4 07/24/09 5:06:24 PM Working with Logon and Startup Policies . 109 Using Classic Logon vs . Simple Logon 110 Setting Policy-Based Startup Programs 111 Disabling Run Lists Through Policy 111 Chapter 4 Automating Windows 7 Configuration 113 Understanding Group Policy Preferences . 113 Configuring Group Policy Preferences . 115 Working with Management Actions 115 Working with Editing States 117 Working with Alternative Actions and States 119 Managing Preference Items . 120 Creating and Managing a Preference Item 120 Setting Common Tab Options 121 Chapter 5 Managing User Access and Security 125 Understanding User and Group Accounts . 125 Local User Account Essentials 126 Group Account Essentials 128 Domain vs . Local Logon 130 Managing User Account Control and Elevation Prompts . 131 Redefining Standard User and Administrator User Accounts 131 Optimizing User Account Control and Admin Approval Mode 133 Managing Local Logon . 137 Creating Local User Accounts in a Homegroup or Workgroup 137 Granting Access to an Existing Domain Account to Allow Local Logon 138 Changing Local User Account Types 139 Creating Passwords for Local User Accounts 140 Recovering Local User Account Passwords 141 Controlling Logon: Welcome Screens and Classic Logons 142 Contents v A03C_626997.indd 5 07/24/09 5:06:24 PM Removing Accounts and Denying Local Access to Workstations 144 Managing Stored Credentials . 144 Adding Windows or Generic Credentials 145 Adding Certificate-Based Credentials 147 Editing Windows Vault Entries 147 Backing Up and Restoring the Windows Vault 148 Removing Windows Vault Entries 149 Managing Local User Accounts and Groups . 149 Creating Local User Accounts 150 Creating Local Groups for Workstations 152 Adding and Removing Local Group Members 154 Enabling or Disabling Local User Accounts 155 Creating a Secure Guest Account 156 Renaming Local User Accounts and Groups 157 Deleting Local User Accounts and Groups 158 Managing Remote Access to Workstations . 159 Configuring Remote Assistance 160 Configuring Remote Desktop Access 162 Making Remote Desktop Connections 165 Chapter 6 Configuring Windows 7 Computers 167 Supporting Computers Running Windows 7 . 168 Working with the Computer Management Console 168 Getting Basic System and Performance Information 170 Getting Advanced System Information 175 Working with WMI Control 176 Using System Support Tools . 179 Working with Disk Cleanup 180 Verifying System Files with File Signature Verification 182 Managing System Configuration, Startup, and Boot 184 Managing System Properties . 190 The Computer Name Tab 190 The Hardware Tab 192 The Advanced Tab 192 vi Contents A03C_626997.indd 6