Course 10242: Securing Windows 7 Desktops

Introduction This two-hour course describes how to configure Windows 7 security management tools. The course covers the following topics:

• Overview of Security Management in Windows 7.
• Securing a Windows 7 Client Computer by Using Local Security Policy Settings.
• Securing data by using EFS and BitLocker.
• Configuring Application Restrictions.
• Configure User Account Control.

This course helps you prepare for the certification exam 70-680: TS: Windows 7, Configuring.

Student Prerequisites:

• Ability to install PC hardware, devices, and applications from media, configure BIOS, map network file shares, and work from the command prompt.
• Knowledge of scripts, batch files, support logs, TCP/IP and networking, applications, security concepts, and principles of using printers.
• Knowledge of Windows and Active Directory, including domain user accounts, domain versus local user accounts, user profiles, and group membership.

Note to Windows XP Users: Labs in this course will support Windows XP SP3 and above versions. Users with Windows XP SP2 or lower version will need to upgrade to Windows XP SP3 to use these labs as Microsoft has discontinued its support for the older versions. Objectives At the end of the course, students will be able to:

• Explain the security management features of the Windows 7 operating system.
• Configure local security policy settings on a client computer running the Windows 7 operating system.
• Secure data by using Encrypting File System (EFS) and Windows BitLocker.
• Configure application restrictions by using Windows AppLocker.
• Configure User Account Control (UAC) settings.

Modules & Lessons Course Overview Module Overview Navigation Overview Navigation Overview Course Information Course Information Securing Windows 7 Desktops Module Overview Overview of Security Management in Windows 7 Overview of Security Management in Windows 7 Key Security Features in Windows 7 What Is an Action Center? Configuring Action Center Settings Self Test Securing a Windows 7 Client Computer by Using Local Security Policy Settings Securing a Windows 7 Client Computer by Using Local Security Policy Settings What Is Group Policy? How Are GPOs Applied? How Multiple Local Group Policies Work Creating Multiple Local Group Policies Configuring Local Security Policy Settings Group Policy vs. Local Group Policy Self Test Securing Data by Using EFS and BitLocker Securing Data by Using EFS and BitLocker What Is EFS? Encrypting and Decrypting Files and Folders by Using EFS What Is BitLocker? BitLocker Requirements BitLocker Modes Group Policy Settings for BitLocker Configuring BitLocker Configuring BitLocker To Go Recovering BitLocker Encrypted Drives Self Test Self Test 2 Configuring Application Restrictions Configuring Application Restrictions What Is AppLocker? AppLocker Rules Configuring AppLocker Rules Enforcing AppLocker Rules What Are Software Restriction Policies? Self Test Configuring User Account Control Configuring UAC What Is UAC? How UAC Works Configuring Group Policy Settings for UAC Configuring UAC Notification Settings Self Test Lab: Configuring UAC, Local Security Policies, EFS, and AppLocker Lab: Configuring UAC, Local Security Policies, EFS, and AppLocker Scenario Exercise Information Launch the Lab Lab Review Module Summary Module Summary Glossary Glossary System Requirements To view this course, you need:

• 1 GHz processor with at least 1 GB of system memory
• Microsoft® Windows® XP SP3 or higher
• Microsoft Internet Explorer 6.0 or higher
• Microsoft Silverlight 4.0 or higher
• Macromedia Flash 7.0 or higher (1MB disk space needed to install)
• Microsoft Windows Media Player 7.0 or higher
• Microsoft XML Core Services 3.0 or higher
• A Super VGA monitor with minimum screen resolution 1024x768, with 16-bit color.
• A sound card, and either speakers or headphones (for multi-media audio)
• Internet bandwidth of 56K or faster. Broadband internet access is recommended
  
  For courses containing labs (courses in the IT Professional and Developer Catalog), you will need:
  
  • Port 443 need to be open on the Client /Firewall/ISP to connect to the lab. By default this port is enabled and there is no action required from the user. For enabling port 443 on Corporate / ISP firewall, please contact your System Administrator.
  • User will be prompted to either Install Microsoft Virtual Server ActiveX control (1MB disk space needed to install) or Enable Microsoft Remote Desktop ActiveX control depending on the Virtualization technology used to deliver the lab.
  • Important note: Click here to test your computer's capabilities to launch a lab.
  
  

For courses containing Virtual Server-based labs (courses in the IT Professional and Developer Catalog), you will need:

• Microsoft Virtual Server ActiveX control (1MB disk space needed to install)

Test your computer's capabilities to see if it supports this course. Accessibility Requirements The following software must be running on your computer in order to access this course with Screen Reader Software:

• Microsoft Internet Explorer 6.0 or higher
• Window-Eyes from GW Micro
• JAWS from Freedom Scientific
• MSAA enabled