Device Configuration
& Management

01

The board connects; the processor works

The motherboard provides the connections between major components. A Central Processing Unit (CPU) executes program instructions. Seeing both parts in one photograph does not make them the same part: a large circuit board may contain a socket for a separate processor.

A PCIe Slot provides an expansion connection, such as the connection for an add-in graphics card. Fit is only one check. The system’s documentation must also support the device, its power needs, and its other requirements.

A Heatsink transfers heat away from a hot component. A cooler may hide the CPU beneath it; identifying the visible cooler is different from seeing the processor itself. Leave installed cooling equipment in place unless an approved service task specifically requires removal.

02

Working on a file is different from saving it

RAM is working memory for active programs and data. A Storage Device retains saved data when power is off. The two capacities answer different questions: how much active workspace is available, and how much saved material can be kept.

A Hard Disk Drive (HDD) uses magnetic storage and moving mechanical parts. A Solid-State Drive (SSD) stores data electronically without that moving drive mechanism. Both are storage devices. “SSD” does not, by itself, identify the connector, capacity, condition or compatibility of a particular drive.

1. 1Open

   Saved program and file data are read from storage.

2. 2Work

   The CPU works with instructions and data in active memory.

3. 3Save

   The application writes the saved result to storage.

03

A GPU is not the whole graphics card

A Graphics Processing Unit (GPU) is a processor used for graphics and other parallel workloads. A Graphics Card is an assembly that can include a GPU, memory, cooling and connectors. The GPU itself may be hidden by the cooler in a photograph of the card.

Some systems use integrated graphics instead of a separate add-in card. Accelerated Processing Unit (APU) is AMD’s term for a design combining CPU and GPU capabilities. Therefore, “no graphics card is visible” does not mean that a computer has no graphics-processing capability.

CUDA and ROCm belong to the software side of supported GPU computing. They are not additional physical components to find on a motherboard. A program needs a supported hardware/software combination; a GPU’s appearance does not establish that support.

04

Keep hardware, firmware and architecture separate

BIOS is firmware associated with starting and configuring a computer; modern systems commonly use UEFI firmware. It is not the Windows desktop or an application. Observe only: changing firmware is a separate, authorized task.

Reduced Instruction Set Computing (RISC) describes an approach to processor instruction-set design. It is not a motherboard socket or a guarantee that one computer is faster than another. Identify the exact architecture, processor and workload rather than deciding from a label alone.

05

RAM: capacity is not speed

RAM capacity, measured in GB, describes how much working data can fit. DDR generation, module form factor and the system’s supported capacity must match. Ordinary system memory uses DRAM, which needs refresh while powered; small processor caches commonly use SRAM. Both are volatile, unlike a saved file on a drive.

A DDR transfer rate is commonly stated in MT/s, not interchangeable with clock MHz. CAS latency (CL) counts clock cycles, so a lower CL number alone does not prove a shorter real delay when rates differ. Supported memory channels can increase the data path available to memory; two sticks do not guarantee the right channel arrangement. Follow the board’s slot-population instructions.

Task Manager → Performance → Memory can show installed capacity, current use and reported speed/slots. Sustained memory pressure can lead Windows to move data through its page file on storage. A freeze alone does not diagnose faulty RAM. Compare the workload, observed use and manufacturer specifications before recommending an upgrade.

06

Architecture, cores and clock

x86 originally describes a 32-bit instruction architecture; x64 extends that family to 64 bits. Arm64 is a different 64-bit architecture. Windows 11 requires supported 64-bit hardware. Matching bitness alone does not make an x64 driver work on Arm64 or make two CPUs fit the same socket.

Clock speed in GHz measures cycles per second, not useful work per cycle. Cores can work on multiple instruction streams, and cache keeps frequently needed data near the processor. Architecture, application support, cooling and power limits all affect performance. An APU includes CPU and graphics functions; it is not a separate third kind of compatible socket.

Task Manager’s CPU view helps observe workload, cores and current speed. Overclocking runs supported hardware beyond its normal settings and can raise heat, power demand and instability; it is not required or authorized in this lab. Compare suitable processors using the actual task and validated system support, not the highest GHz alone.

07

Specifications answer different questions

Discrete graphics memory (VRAM) holds graphics data. Capacity describes how much fits; bandwidth describes how quickly data can move. GPU cores, architecture, clocks, cooling and software support also matter. Integrated graphics commonly shares system RAM. CUDA and ROCm are platform-specific computing ecosystems, not proof that any program runs on any GPU.

HDDs store data on rotating magnetic media; SSDs use flash. An SSHD combines an HDD with a flash cache, not a full SSD of the same capacity. RPM describes rotation; MB/s describes transfer rate. SSD write-endurance ratings and sustained/random workload behavior are separate from an advertised peak speed. Capacity and an interface name do not prove health.

Disk Management shows disks, partitions and volumes; Task Manager can show observed disk or GPU activity. Neither view alone proves a drive is healthy or a component is the bottleneck. The motherboard must support the CPU socket, chipset/firmware, memory and expansion connections. Also check case form factor, connectors and power supply capacity before buying a part.

01

An account source is not a privilege level

Active Directory Domain Services stores and organizes directory objects, including user and computer accounts. A domain controller supplies directory and authentication services. It is not the same thing as a user account or every server in an organization.

AD DS means Active Directory Domain Services. A domain is a managed collection of accounts and computers. An object is a directory record; an organizational unit (OU) is a container for organizing those records. These supporting words help you read the diagrams without adding a second certification vocabulary list.

A Domain User Account is managed in the domain. A local account belongs to its individual computer’s account system. Separately, an account may have ordinary or administrative privileges. A domain account does not automatically make its user a Domain Administrator.

Administrative access can affect many systems and should not be granted simply to read a file. Use the access needed for the approved task, and keep the explanation of account source separate from the explanation of privilege.

02

Trace identity, membership and permission

A security group collects identities so permissions can be managed together. A resource must actually grant the relevant permission to that group. A suggestive group name alone is not evidence that access exists.

An organizational unit (OU) organizes directory objects for management and policy scope. Moving a user into an OU is not the same action as adding that user to a security group, and it does not automatically grant a folder permission.

Single Sign-On (SSO) can let a user reach supported resources without repeatedly entering credentials. Each resource still needs to authorize the requested access. Fewer password prompts do not mean that permission checks disappeared.

1. 1Identity

   Which user is making the request?

2. 2Membership

   Which relevant security groups contain that identity?

3. 3Permission

   What does the target resource actually allow?

03

Choose the policy tool by its scope

Group Policy manages settings for users and computers. First identify the intended scope: one device’s local policy, or centrally managed policy in a domain. The same-looking setting is not necessarily being edited in the same place.

The Local Group Policy Editor edits a supported computer’s local policy. Group Policy Management Console (GPMC) manages domain Group Policy objects and links. Editing a named domain GPO opens its policy editor. Read the window title and selected scope before interpreting a screenshot.

A GPO link identifies a scope in which that policy may apply; it is not proof of every final result. In the lesson’s ordinary same-setting conflict examples, applicable configured values are processed local, site, domain, then OU. Filtering, enforcement, inheritance and setting-specific rules can change the analysis. “Not configured” does not mean “force Disabled.”

Read a screenshot’s actual controls, not just an annotation. In the discussion’s Enable dev drive example, a red arrow points to Enabled, but the filled radio button is Not Configured. Enabled and Disabled are explicit choices whose effects depend on the setting’s Help; Not Configured supplies no value from that policy. Dev Drive is only a policy-interface example here, not a new vocabulary requirement.

Results need evidence too. The discussion’s Microsoft report excerpt lists a domain link but also reports “Inaccessible, Empty or Disabled” under Reason Denied. That finding does not establish one specific cause. Inspect the full report, scope, permissions and configuration before diagnosing or proposing an authorized change.

04

Password rules and lockout solve different problems

Password Policy defines rules for passwords. Account Lockout Policy controls the response to failed sign-in attempts, including the conditions for locking an account. One is not a replacement for the other.

Domain-account password policy needs its own scope analysis. Do not apply the simple OU-conflict example above to domain password rules. This introductory lesson does not prescribe a password length, expiration schedule or lockout threshold for your organization.

05

A mailing list is not folder permission

A distribution group is intended for distributing messages; it cannot be used as the security principal in a resource’s permission list. A security group can carry permissions. The group’s type, scope and actual assigned permission matter more than its friendly name.

Groups can contain other groups when their scopes support the relationship. This nesting can simplify access management but requires tracing effective membership, not just the first visible list. Changes may need a new sign-in or refreshed access token before an existing session uses them. An OU remains an organizational and policy container, not a permission group.

06

Sign-in proof is not permission

Kerberos is a common authentication protocol in an Active Directory domain. A domain controller’s key distribution service issues tickets used with supported services. This can support single sign-on without repeatedly sending the user’s password to each application.

Authentication establishes identity; the resource still authorizes the requested operation. DNS, connectivity and appropriate time synchronization are important to a working domain environment. A successful sign-in or ticket is not proof of permission to edit every resource, and not every Windows authentication path uses Kerberos.

07

Delegate the task—not the whole domain

Domain Admins is highly privileged within a domain. Enterprise Admins and Schema Admins have different forest-wide roles; a domain administrator is not automatically a member of every forest administration group. Use separate administrative identities and approved delegation rather than assigning broad privileges for ordinary work.

Central management can target user/computer settings, software deployment, updates and security through suitable domain policies and tools. Local Security Policy (secpol.msc) exposes supported local security settings; Local Group Policy Editor (gpedit.msc) covers broader local policy. GPMC manages domain GPOs and links. Tool availability depends on edition, installed tools and permissions. PowerShell can automate administration, but automation does not change the access boundary.

01

Prepare the computer before installing Windows

Oracle VirtualBox supplies virtual hardware to a guest operating system. The ISO is installation media; the VDI is the disk where the guest stores Windows and its files. Neither the ISO nor a working installation is proof of a valid license. Obtain official media and follow the institution’s licensing instructions.

For this example, use EFI with TPM 2.0 and Secure Boot, 6144 MB memory, two virtual processors and a new 80 GB dynamic virtual disk. EFI supplies modern virtual firmware. Secure Boot checks trusted boot software; a virtual TPM supplies separate security capabilities. These features are not substitutes for updates or an antivirus program.

02

Understand what a clean installation removes

A clean installation builds a fresh Windows system on the selected disk. An in-place upgrade aims to retain supported existing data, apps and settings. The correct choice depends on the requested outcome, backups and compatibility—not on always clicking the same button.

Older installation media labels the fresh-install option Custom. The captured Windows 11 25H2 media instead shows Install Windows 11 and a deletion acknowledgement, then a Keep nothing summary. On a new disk, select the unallocated space; there is nothing to delete. Existing partitions are deleted only when rebuilding the exact disposable lab disk is authorized. Windows creates the required system partitions.

03

Separate edition, account source and domain membership

Pro is a Windows edition; 25H2 is a feature-update version. This lab needs Windows 11 Pro. The account source is a separate choice: a local account is maintained on this PC, a Microsoft account is a consumer cloud identity, and a domain account is managed through an organization’s directory. Administrator describes permission, not where the identity is maintained.

On the intended Windows 11 Pro work-or-school setup path, Sign-in options can offer Domain join instead to create a local account. The wording does not itself join the computer to a domain. Joining an actual domain is a separate task with network, DNS, permission and directory prerequisites. Do not enter personal or classroom-domain credentials just to get through a lab screen.

04

Verify the workstation before handing it over

Review each optional privacy choice and turn the optional settings off for this lab. Required diagnostic data and optional diagnostic data are not the same. A privacy choice can change what a feature can do; for example, turning off location prevents some location-dependent behavior. Never describe a switch as disabling every kind of data transfer.

Set the correct time zone inside the guest; a region or language choice does not guarantee it. Inspect Device Manager for unknown devices or warnings, run Windows Update and review optional updates. Oracle VirtualBox presents virtual devices, so a clean guest Device Manager does not prove every physical device in the host has been checked. Record pending restarts and errors instead of writing “done”.

The captured guest has a working Intel network adapter but also a Base System Device with Code 28. These are different devices. Inspect the affected device’s Hardware Ids, then use the official matching VirtualBox Guest Additions package inside the guest. Restart and recheck the warning before claiming a repair. Guest Additions is not the Extension Pack, and installing drivers does not require enabling host–guest file sharing.

05

Upgrade route or fresh system?

Windows Update can offer an eligible feature upgrade. Installation Assistant is another supported upgrade route for eligible hardware; Media Creation Tool prepares installation media. PC Health Check helps evaluate eligibility. Requirements and licensing still apply regardless of how the media is obtained.

An in-place upgrade launched from the existing system may retain supported apps, settings and files. Booting installation media for a clean/custom installation creates a fresh system and can remove existing contents. Back up before either path. The assigned VM starts with a new disk; deleting partitions is not a routine requirement when it already shows unallocated space.

06

A work account is not a domain join

A traditional AD domain join requires a supported Windows edition, suitable network connectivity, DNS that can locate the domain controller and authorized credentials. The computer account and domain membership are separate from creating a local user during setup. Do not join the practice guest to the classroom domain.

A standalone computer can use local or consumer Microsoft identities. It can also be managed through other approved systems; “not AD domain joined” does not mean “unmanaged.” Traditional AD, Microsoft Entra registration/join and consumer Microsoft sign-in are different arrangements. Check the actual device membership instead of inferring it from the word work.

01

Who maintains the identity?

A Local Account is maintained on one Windows computer. A Microsoft Account is a consumer cloud identity used with Microsoft services. A Domain User Account is maintained in an Active Directory domain. These names describe the source of the identity, not its permission level on every device.

Local accounts suit standalone use but need separate management on each PC. A Microsoft account connects consumer services and optional synchronization, with cloud-account dependencies. Neither label alone determines administrator rights or means that every file is synchronized.

An organization can centrally manage Active Directory or Microsoft Entra identities. Central management helps keep access consistent but requires supporting infrastructure and administration. Microsoft Entra work or school accounts are distinct from consumer Microsoft accounts. These choices are independent of whether a profile roams between devices. The separate lab uses local accounts only.

02

Daily work and administrative work

Standard users normally work in their own workspace and use installed applications without having permission to approve machine-wide administrative changes alone. An Administrator Account has membership that permits administrative work, subject to access controls and elevation. The account name LocalSupport does not grant those privileges by itself.

User Account Control, or UAC, separates ordinary execution from elevated administrative work. With normal UAC behavior, most programs started by an administrator still run with a filtered token until elevation is approved. A standard user may need an administrator’s credentials, or policy may deny elevation. Do not turn off UAC to make a lesson easier.

Maya and Jordan need standard access for reception and dispatch. LocalSupport is a separate local administrator for authorized maintenance. A local administrator is not automatically a domain administrator. Keep support credentials out of the handoff document and do not use the support identity for routine browsing or office work.

03

Lab connection: account creation and verification

Use Local Users and Groups in the assigned Windows 11 Pro guest. Right-click Start > Run, enter lusrmgr.msc and select Users. The console manages accounts on the selected computer, not a domain. This walkthrough requires Pro rather than Home. If the console is unavailable, check the assigned edition with the instructor instead of installing a substitute tool.

Right-click Users > New User to create Maya, Jordan and LocalSupport. Use the private initial passwords supplied by the instructor. Keep User must change password at next logon selected and the other three options unchecked. Each person changes that initial password to an approved replacement at first sign-in. Create leaves the dialog open; Close returns to the account list.

Double-click an account and open Member Of. Maya and Jordan should belong to Users, not Administrators. For LocalSupport, choose Add, check that the location is the guest, enter Administrators, select Check Names, then OK > Apply. The account name is not what grants its privileges; membership matters.

Read-only commands offer another view of these same local accounts. net user lists accounts; net user Maya shows Maya’s details. net localgroup Users and net localgroup Administrators list those groups’ members on English Windows. Do not add /domain or account-changing switches. The lab creates all three users in lusrmgr.msc, not through NET commands.

04

Each user gets a personal Windows workspace

A User Profile contains user-specific settings and folders. The account is the identity; the profile is its Windows workspace. First interactive sign-in normally initializes the profile, so a newly created account can exist before its desktop and personal folders have been prepared.

After signing in as the assigned user, enter %USERPROFILE% in File Explorer’s address bar and record the actual location. Maya and Jordan should have different paths. Create Reception-Practice in Maya’s Documents and Dispatch-Practice in Jordan’s Documents. Do not infer the path only from a display name or request administrator permission to take over another user’s folder.

Separate profiles do not mean every file on the computer is private. Public folders, shared locations, changed permissions and folder redirection can behave differently. Use the observed folder and its intended scope when explaining the result.

05

Profile types: benefits and limitations

A local profile keeps the user’s settings on one computer. It works without a profile server, but those settings do not automatically follow the user to another PC. A traditional roaming profile uses a configured server copy to carry supported profile data between compatible computers. That convenience adds network, synchronization and administration requirements. A domain account alone does not enable roaming, and Microsoft account sync or OneDrive is a different mechanism.

A mandatory profile provides administrator-defined settings and discards user changes to profile settings at sign-out. It can give a shared training environment a consistent starting point, at the cost of lasting personalization. It does not reset every system change or guarantee that every file disappears. Users need an approved location for saved work.

A temporary profile is a fallback when Windows cannot load the normal one. Files and settings kept in that temporary workspace may be lost at sign-out. An unfamiliar desktop alone is not proof: check the sign-in message and actual profile path. Preserve current work safely and seek support before signing out or deleting anything. Profile types describe workspace behavior, not standard or administrator privileges.

06

Lab connection: evidence of the concepts

A useful handoff identifies what changed, why it changed and how you checked it. Record the three account names and types, both employee profile locations, the membership evidence and the standard-user elevation behavior. Describe any failed test honestly. Never include credentials or recovery answers.

The local support account is verified at the VM console. It can provide a local sign-in route when suitable conditions exist, but this standalone test does not prove remote connectivity, domain-outage recovery or access to an encrypted or damaged disk. Real organizations need approved management of device-specific support credentials; the shared classroom password is not a production recommendation.

The VM lab guides one action at a time: read the purpose, follow the numbered directions in your assigned guest, and compare the result with “You should see” before checking the box. Brief & help adds optional detail; essential directions stay visible. Add your name and screenshots of the account memberships and the two profile paths. A short optional note records any unresolved issue. The checklist and images stay only in the current browser session. Download the PDF to save progress, open it to check the screenshots, and submit through the instructor’s external assignment system. The PDF is a static snapshot and cannot be loaded back into the form. Downloading is not submission, and checked boxes are not a grade or independent verification. Retain the lab accounts for review and restore or remove them only when instructed.

07

Account tools follow the identity source

Settings → Accounts → Your info identifies the current sign-in source and can offer a supported switch between local and consumer Microsoft sign-in. Settings → Accounts → Other users manages other accounts on this device. On supported Pro systems, Local Users and Groups provides another local-management route. AD Users and Computers instead manages domain objects. A familiar user name does not establish which account system you are editing.

Standard users can use installed programs and may install some applications confined to their own profile. Machine-wide installation or protected changes commonly require elevation. An administrator can still see a UAC consent prompt; admin membership is not a promise that every program runs elevated. Review the requested change and use approved credentials only for the required task.

01

Find the tool for the job

Start helps find and launch applications. File Explorer manages files and folders. The Settings App and traditional Control Panel expose configuration tools; neither is a substitute for knowing which setting affects the request.

Application Shortcuts are links to targets, not another copy of an installed application. A desktop shortcut and a taskbar pin can open the same app. Removing a shortcut normally leaves the application installed, but deleting an ordinary document removes the document itself. Identify the item before acting.

02

Scale, resolution and usable space

Display resolution is the width and height of the displayed image in pixels. It is not the monitor’s physical size. Display Settings also contains scale, which changes the apparent size of text, apps and controls.

Larger scale can improve readability while leaving less working space. A lower resolution is not the same adjustment and can reduce sharpness on a physical display. Use supported choices, inspect the result and preserve the original values. The pictured 1024 × 768 is a VM example, not a recommended resolution for every computer.

03

Organize windows without confusing identities

Minimize hides a window while leaving it available through the taskbar. Maximize uses more of the available screen; restore returns the window to its previous size. Close ends that window and may prompt to save work. Some applications retain background processes after their windows close.

Snap places windows in a layout for simultaneous comparison. A Virtual Desktop instead groups windows into another workspace in the same Windows session. It is not a new user, a security boundary or a virtual machine. Choose the organization that supports the task.

04

Make repeated actions predictable

The Taskbar combines app launch points, access to running windows and system indicators. A pinned icon can remain when the app is closed; a running indicator conveys a different state.

Alignment changes icon arrangement, not application installation or account permissions. The documentation build separates taskbar position from icon alignment. Older builds can expose different choices. Do not bypass activation or management restrictions to reproduce a screenshot.

05

Separate a synchronized clock from local time

Time Zone Settings determine how the system shows the local hour. Clock synchronization keeps time aligned with a time source. The clock can be synchronized and still show an inappropriate local hour when the zone is wrong.

Choose the appropriate regional zone rather than assuming a single UTC offset applies all year. Daylight-saving rules can change the offset. In the lab, verify or select Eastern Time without deliberately changing the underlying date, clock or privacy permissions.

Calendar invitations, meeting reminders and locally displayed log timestamps can be misleading when the displayed zone is wrong. Automatic time-zone selection can depend on location services and policy; it is not guaranteed by merely having internet access. Verify the selected zone without changing privacy permissions just to reproduce a lab screenshot.

06

Power behavior and an honest handoff

Power Settings can control when the screen switches off and when the system sleeps. Turning off the display alone does not prove the computer is asleep. Available sleep and battery options depend on hardware, drivers and policies; a VM may not expose them.

For practice, record original values, make only approved supported changes and attach evidence while the result is visible. Restore the baseline afterward. The website checklist is self-reported and session-only: download the PDF to save a record, and submit through the instructor’s assignment system. Missing controls and unfinished work belong in the issue note, not a fabricated success claim.

07

Organize access without changing the app

Start supports app search, pinned access, recommendations and configured folder links. Pinning, unpinning and grouping supported items changes launch organization, not installation. Settings → Personalization → Start controls available recommendations and folder choices; labels and layouts vary by Windows build. Windows 10 Live Tiles are not the Windows 11 Start model.

Taskbar pins, search, Task View and the system tray have distinct jobs. Network, sound and battery indicators are not installed-app shortcuts. Taskbar behaviors can include auto-hide and multiple-display choices where supported. Accent color and transparency concern appearance; notifications concern interruptions. Policy or activation can limit options, so record unavailable controls instead of promising every old Windows setting.

08

Same content or more workspace?

Duplicate mirrors the same content on connected displays. Extend provides additional workspace. Display Settings lets supported systems identify and arrange displays, choose a primary display and set per-display scale, resolution and orientation. Arrange the diagram to match the real desk so the pointer crosses the expected edge.

Refresh rate in Hz describes how often the display updates; resolution counts pixels. Supported rates depend on the display, connection and graphics setup. Night light changes color warmth, not refresh rate or scale. Color calibration helps align color appearance for suitable work and is distinct from an accessibility color filter. A VM without a second display cannot prove a multiple-monitor test.

09

A keyboard shortcut performs an action

A desktop shortcut is a link to an app, file or folder; a keyboard shortcut is a key combination. Where supported, a desktop link’s Properties can assign a shortcut key. Verify the target before creating a link and avoid combinations already used by the application or Windows.

Win+D shows or restores the desktop; Alt+Tab switches windows; Win+Tab opens Task View. Win+Left/Right can snap a window, and Win+Ctrl+Left/Right switches virtual desktops when others exist. Ctrl+Shift+Esc opens Task Manager. Ctrl+C/V copies and pastes in supported contexts. Alt+F4 closes the current window—heed save prompts. Minimize and close are not interchangeable.

010

Screen-off, sleep or hibernate?

Screen-off stops displaying the image while the system can remain awake. Sleep uses a lower-power state and generally retains the working session in powered memory. Hibernate saves the session to storage and uses less power, but availability depends on the device. Shut down ends the session. Save important work regardless of the chosen state.

AC and battery timeouts can differ. Energy saver reduces some activity and power use; Power mode trades performance and consumption. Classic power plans and lid/button actions are separate controls whose availability depends on hardware and policy. A manufacturer battery charge limit can reduce wear; it is not the same as screen timeout and is not a claim that ordinary batteries would otherwise endlessly overcharge.

Choose settings for the actual task. A long-running approved job may need the system awake even with the display off. Do not assume a network task continues through sleep, or change the host because a VM lacks battery and lid settings.

01

Contrast and color carry different information

Contrast Themes change interface color combinations to improve separation between elements such as text, backgrounds and selected controls. A dark background alone does not guarantee useful contrast. Ask the user to compare the actual task rather than choosing a theme for them.

Color Filters transform displayed colors. They are not the same as a contrast theme and should be selected for a specific need. Important states still need labels or symbols: an unlabeled red or green dot remains weak communication even when a filter is available.

The captured Windows 11 contrast choices are Aquatic, Desert, Dusk and Night sky. Preview, select and Apply a suitable combination; supported editing can customize colors. Color Filters offers grayscale/inversion and options aimed at red-green or blue-yellow distinctions. These are alternatives to compare with the user, not a rule to assign a preset from an assumed diagnosis.

02

Locate, enlarge or listen

Mouse Settings affect how the pointing device behaves. Accessibility pointer size and style help make its location visible. A text cursor has a different job: it marks where typed text will be inserted. Its indicator and thickness can be adjusted separately.

Magnifier enlarges screen content, which can make small details easier to inspect while reducing the surrounding context in view. Narrator instead provides screen-reader speech and navigation using interface information supplied by applications. An unlabeled control or inaccessible image can remain a barrier; neither tool automatically repairs poor source content.

03

Channels, devices and captions

Audio Settings involve the selected input and output devices as well as sound behavior. A microphone receives input; speakers or earphones provide output. Working host audio does not prove the VM has an available audio or microphone route.

Mono Audio combines left and right channels. Live Captions instead transcribes supported speech audio into text. Caption recognition can make mistakes, especially with unfamiliar technical vocabulary; verify important instructions against accurate written content. Initial language files may require a download, and language or translation support varies by device.

System → Sound selects the input and output devices and their levels. Check the actual selected device, mute/volume, connections and a harmless playback or microphone test. Spatial sound and enhancements depend on the device/driver; they are not the same as Mono audio. Windows Get Help audio diagnostics can assist troubleshooting, but report its observed result rather than assuming it repaired every cause.

04

Change the input route

Sticky Keys allows modifier combinations to be entered one key at a time. Ctrl, Alt and Shift are examples of modifiers. The tool addresses difficulty holding multiple keys simultaneously; it does not enter words by speech.

The On-Screen Keyboard provides selectable keys without requiring the physical keyboard. It is not limited to touchscreens. Choose an input route based on the actual barrier and test a harmless text field before assuming it works for the person’s application.

05

Control, dictation and hardware prerequisites

Speech Recognition is the broader process of recognizing spoken input. Legacy Windows Speech Recognition has been replaced by Voice Access on newer Windows 11 releases. Voice Access supports operating the computer and entering text by voice. After its initial language setup, recognition can work on-device.

Voice typing focuses on dictation into a text field and requires an internet connection and a usable microphone. Narrator has the opposite information direction: it reads interface information aloud. Eye control is another input approach but requires compatible eye-tracking hardware and setup; an ordinary webcam is not automatically sufficient.

Do not bypass microphone permissions or modify the host to force a demonstration. If the guest lacks a required device or approved language setup, identify that prerequisite and distinguish recognition of the tool from a completed practical test.

06

Prove the effect, preserve the preference

The five support tickets apply these distinctions inside an assigned VM. Record original values, test supported changes and attach screenshots while each result is still visible. Add a brief description explaining the effect, not a long essay or private health information.

Restore only your practice changes. Review the five evidence images, download the PDF and inspect the saved file before submitting it through the instructor’s assignment system. Browser entries are session-only; the PDF is a static saved report and cannot restore the form. Checkboxes are self-reports, not grades or proof of mastery.

07

Change the difficult motion

Pointer visibility and mouse behavior solve different barriers. Primary-button selection supports the preferred hand; pointer speed affects movement. Double-click speed changes the interval accepted between clicks. ClickLock can support dragging without continuously holding the button. Wheel settings control scrolling; pointer precision changes acceleration, not the screen’s resolution.

Mouse Keys offers a numeric-keypad route to pointer movement when supported. It is not the same as Sticky Keys or the On-Screen Keyboard. Compare one change at a time in a harmless task and retain the original settings. Some controls appear under Bluetooth & devices → Mouse and additional mouse settings rather than the Accessibility pointer page.

08

Enlarge details without losing your place

Magnifier’s Full screen view enlarges the whole visible workspace. Lens enlarges a region near the pointer. Docked view places a magnified region alongside the normal view. Choose the amount of context the task needs; zoom increments and tracking preferences affect navigation.

Win+Plus starts or increases Magnifier; Win+Minus reduces zoom and Win+Esc exits. Keep a known exit before experimenting. Magnifier can also read supported text aloud, but that does not make its zoomed view identical to Narrator’s full screen-reader navigation.

09

A screen reader needs navigation

Narrator can be toggled with Win+Ctrl+Enter. Voice, speaking rate and verbosity control how spoken information is presented. Verbosity changes the amount of detail, not the underlying permission or content. A supported braille display is an additional output route with its own setup requirements.

Narrator’s modifier key is normally Caps Lock or Insert. Narrator+Space toggles Scan mode, which supports reading and moving through text and controls. In appropriate content, arrow keys move through items and H can navigate headings. Mode, focus and application context matter; an editable field behaves differently from page navigation. Test actual headings, links and labels rather than assuming speech proves the app is accessible.

010

Know the starting point and prerequisite

Sticky Keys can be opened through Accessibility → Keyboard; the optional Shift-five-times shortcut depends on its configured behavior. Modifiers stay available for the next key. Available options include modifier feedback sounds and stopping Sticky Keys when two keys are pressed together. The On-Screen Keyboard opens with Win+Ctrl+O and can provide keys through pointing or supported alternative input, including access from the sign-in accessibility controls. Its Options can change supported input behavior; do not confuse it with a touch-only keyboard.

Voice typing starts with focus in a text field and Win+H, with a microphone and internet connection. Dictated punctuation or the supported automatic-punctuation option can help format text, but technical words still need proofreading. Voice Access adds control commands and initially needs its supported language model; distinguish command mode from dictation and verify what was recognized. Text cursor thickness and its colored indicator help locate the insertion point, not control the pointer.

Live Captions can start with Win+Ctrl+L. Initial language files may need a download; captions are processed on the device. Style and position can be adjusted. Capturing microphone speech is a separate choice from captioning the computer’s audio. Translation requires a supported Copilot+ configuration, not every Windows 11 PC. Eye control additionally needs a supported tracker and calibration; report hardware-dependent practice as unavailable when the device is absent.

01

Windows updates and app patches

Windows Update supplies supported operating-system fixes, security updates and some drivers. A software update can fix bugs or add capabilities. A security patch addresses a vulnerability that could be exploited. Cumulative packages can include earlier fixes, so the package name does not necessarily describe a single change.

Microsoft Store maintains supported Store apps. Other desktop applications may use an internal updater or an official publisher download. A current Windows status does not establish that every application is current. Organizational approval, licensing and compatibility still apply.

Scheduled monthly releases help organizations plan maintenance, but urgent fixes can arrive outside that schedule. Pausing updates leaves changes pending; it is a temporary scheduling decision with security trade-offs. Do not memorize one universal pause limit or promise every build exposes the same switch.

02

Status, active hours and restarts

Read the actual state: an offered update, a download in progress, installation, restart required and completed maintenance mean different things. An up-to-date status can appear beside a separate Windows-version upgrade offer. A feature/version upgrade needs its own compatibility and deployment plan.

Active hours describe when the device is normally in use and help reduce automatic restart interruptions. Automatic adjustment and a manually selected working period serve different needs. Other restart settings or management policy can change behavior, so save work and review restart requirements.

A downloaded package or pending restart is not evidence of a finished maintenance cycle. Use an approved restart after saving work, then recheck status and history. If an error appears, preserve its code and the observed state rather than marking the operation successful.

Advanced options can include receiving supported updates for other Microsoft products. This does not maintain every third-party app. Delivery Optimization manages supported Microsoft update downloads and can use permitted peers or caches, with bandwidth controls. Download delivery and choosing which application to update are different decisions; the lab leaves sharing and management policy unchanged.

03

Optional updates require a reason

Optional updates may include additional fixes or device drivers. Availability depends on the device, build and update source. Optional means selection is conditional, not that the item is useless or that every item must be installed.

Inspect the name, type and relevance before selecting a change. A working device without an identified issue does not automatically need its optional driver replaced. A no-updates list is a valid outcome. Keep unrelated choices unchecked and do not install something only to obtain a screenshot.

04

The driver must match the device

A driver enables communication between Windows and a hardware device. Device Manager exposes device status and driver provider, version and date. Windows Update and Device Manager offer Microsoft-supported update routes; the exact manufacturer may supply a relevant package for the device and operating system.

In the pictured documentation guest, Oracle Corporation is the driver provider and 7.2.20.25154 is its installed version. These fields identify the current driver; they do not establish that it is the best available release.

Check the exact device model or hardware identity, supported OS and architecture through the official source. A newer-looking date or version does not by itself prove a better driver. Automatic search may report that the best available driver is already present.

A VM presents virtual devices. Its virtual display adapter is different from the physical host GPU. Use the supported hypervisor guest software for that virtual hardware when approved, not an unrelated host driver. Roll Back Driver can be unavailable when no suitable previous driver is retained or access is insufficient.

05

History supports investigation

Update history records supported Windows update categories, identifiers and installation dates. Depending on the system, categories can include quality, feature, driver, definition or other updates. Expand the relevant category and read the actual item rather than assuming every category exists.

The documentation screenshot records KB5129195 as installed on October 1, 2026. The KB identifier names the update and the date records its installation; neither alone proves why a later problem occurred.

History is evidence of recorded Windows changes, not a universal log of every application updater. Compare the reported symptom with the update identifier and other recent changes. A symptom that follows an update does not prove the update caused it.

Uninstalling a supported update, rolling back a driver and System Restore are different recovery routes with different prerequisites. Not every update is removable, and removal may undo security fixes. System Restore requires a usable restore point. A restore point is not a virtual-machine snapshot or a personal-file backup. Do not perform recovery solely for a lab screenshot.

06

A truthful maintenance handoff

The lab asks you to inspect the assigned guest, configure the requested working period, check approved Windows and app updates, evaluate optional items and inspect a driver. Attach your own screenshots while the relevant result remains open. Checkboxes describe your self-reported work, not verified mastery.

Use Windows status, the app-update result, driver details and history to explain what happened. Report an outstanding restart, blocked access or no update honestly. Restore only practice settings you changed; do not restore the VM snapshot just to erase real maintenance evidence.

Download the PDF to save the session record and inspect it before submitting to the assignment dropbox. The browser form is session-only. The static PDF cannot reload the form, and downloading is separate from submitting.

01

Application sources and productivity suites

Microsoft Store is a source for supported applications. An organization may also approve publisher installers or its own deployment repository. An available download does not grant permission, a license or the administrative rights needed to install it. Check the actual source rather than trusting a familiar filename or an advertisement.

The Store can also supply updates to installed applications. An app update changes that application, rather than installing a new copy of Windows. Some publishers manage updates inside their own app. Apps can be free, paid once or subscription-based; check their publisher, requirements and license. Store distribution does not guarantee safety, suitability or approval for a school device. This lesson requires no purchase or account signup.

Microsoft Office is a productivity application suite, not the Windows operating system. Product versions, desktop versus web use and licensing differ. Installing Windows does not prove that approved Office desktop applications are available. Choose the tool that supports the work and use the organization’s licensing route.

02

Match the package and its installation scope

An MSI is a genuine Windows Installer package; an EXE may use a different installer. Renaming an EXE to MSI does not convert its contents. Match the package to the operating system and processor architecture. Both x64 and ARM64 are 64-bit, but that does not make their packages interchangeable.

Per-user installation targets a user context; machine-wide installation changes shared computer resources. Package design and selected settings determine what is supported. On 64-bit Windows, Program Files commonly holds native 64-bit desktop apps and Program Files (x86) commonly holds 32-bit apps. Custom and user-specific destinations exist, so a folder name is a clue rather than proof of all installation details.

On historical 32-bit Windows, desktop applications normally use Program Files, and 64-bit Windows applications cannot run. Windows 11 has no 32-bit operating-system edition. Packaged applications can use the protected C:\Program Files\WindowsApps folder. Do not take ownership of that folder or edit its contents to uninstall an app; use the supported management route.

Machine-wide changes may need authorized elevation. An approval request does not prove that a package is trustworthy; Unknown publisher means this prompt does not establish a verified publisher identity. A script is not a permission bypass. Keep UAC and organizational restrictions intact; stop if the approved guest cannot install the package. Do not move the exercise to the physical host.

Check the signed-in account in Settings → Accounts → Your info. An Administrator label identifies the account type; it does not mean every application is already running with elevated permission. A standard account may need an authorized administrator for a machine-wide change. Per-user installation can have different requirements, and organizational policy still applies.

03

Choose the maintenance operation

A shortcut points to an application. Removing its icon normally does not uninstall the application. Conversely, deleting a program folder is not a supported uninstall: services, registration and other components can remain. Use Settings → Apps → Installed apps or the program’s supported maintenance route.

Change or Modify adjusts supported installation choices. Repair aims to fix an application; Reset can remove app data or settings. Uninstall removes the installation through its supported mechanism. These options depend on the product and package. Inspect the actual warning and protect needed information before choosing a destructive action.

For example, if a working application lacks an optional component its installer offers, investigate Modify. If required application files are missing or damaged, investigate Repair. Reset is not simply a stronger repair: it may clear information stored by the app. Uninstall is appropriate when the application itself should be removed; it does not guarantee every user-created document or setting disappears.

Settings → Apps → Installed apps → the app’s three-dot More menu is a common starting point. Some apps offer Modify directly; others expose Advanced options with Repair and Reset. Read the app’s warning before applying an action. For legacy desktop programs, Control Panel → Programs → Programs and Features can offer Change or Repair. The available controls depend on the actual package; there is no universal Repair button.

Supported removal can start from Installed apps → More → Uninstall, Programs and Features → select the program → Uninstall, or Start → right-click a supported app → Uninstall. Follow any confirmation and the program’s own uninstaller; a Store-supplied desktop installer may still need additional steps. Check the actual result rather than treating a disappearing icon as proof of removal.

04

Windows Installer commands and result checks

A command script is a text file Windows runs in order. The required starter has two lines: msiexec.exe /i "C:\Lab\DCM-2.1\LabApp.msi" /qn /norestart, then pause on its own line. /i requests installation; /qn hides the installer interface. C: is the drive, Lab and DCM-2.1 are folders, and LabApp.msi is the file. Keep the quotes; /norestart prevents an automatic restart. Quiet mode does not bypass Windows permissions or license requirements.

The lab first installs and removes 7-Zip through its visible wizard. The script then reinstalls it quietly from the same retained MSI. Save the starter as C:\Lab\DCM-2.1\install-app.cmd, not .txt, using Notepad’s All files choice. pause keeps the command window open; it is not proof of success. Check the app and its event. For removal, change only /i to /x; /qn also hides the MSI removal confirmation. Use the approved guest permission route and verify actual absence in Installed apps.

Event Viewer displays dated Windows event records. Open the guest’s Windows Logs → Application, filter the source to MsiInstaller, and inspect General for the recent 7-Zip event matching your script run. Event 11707 reports installation success and 11708 reports failure. Event 1033 records installation status; status 0 reports success. Read the product, time and result, not just the Information icon. Do not reuse the older GUI-install event, clear logs or change auditing settings. Capture your matching event during the lab; report failures, missing records and restart requirements honestly.

Optional next step: insert echo MSI exit code: %errorlevel% immediately after msiexec and before pause. Code 0 reports success; 3010 reports success with a required restart. Other codes need investigation. An optional /L*v "C:\Lab\DCM-2.1\install.log" addition creates a detailed text file, separate from Event Viewer’s Application log. Keep /qn and /norestart. This file-log extension and variables are not required; the matching Event Viewer screenshot is. Logs can contain private paths; do not submit whole logs.

Even an installer success code does not prove the user’s task is fixed. Check the application that was actually installed: for 7-Zip, open it and check its version. A further task test is to create and reopen an archive of harmless test files; an archive groups files into one file. This is an example verification task, not a claim that its result was captured. If 7-Zip will not open, the application is not ready just because the installer reported success. The lab records your saved starter, working application and supported removal; optional extension screenshots are not required.

1. 1Starter

   Run the supplied installation command using the full path, then pause.

2. 2One edit

   Change /i to /x to request removal.

3. 3Verify

   Check the actual app or its absence—not just a closing window.

05

Add the capability the task requires

Optional Windows capabilities extend a workstation for particular tasks. XPS Viewer reads the XPS document format. It may need a download through Windows servicing and approved permissions. Settings commonly lists Optional features under System on current Windows 11 builds; older builds may use Apps.

The modern optional-capability interface and the classic Turn Windows features on or off dialog are related but not identical. Do not turn on everything because names look familiar. If the download or control is blocked by policy, record the requirement instead of changing security or update policy.

In the classic feature tree, a checked box means enabled and an unchecked box means disabled. A filled parent box can mean some child components are enabled. Expand the named feature to inspect its components, change only the approved selection, and read the result and any restart request. Telnet is a legacy unencrypted client, not the default support choice. Internet Explorer mode in Microsoft Edge is distinct from the retired Internet Explorer desktop application.

AP-201 temporarily adds XPS Viewer, launches it and removes that practice addition. Opening the viewer proves a launch check; opening a suitable sample document supplies stronger task evidence. Do not claim that a switch or empty viewer proves document compatibility.

06

Virtualization and Linux tools have distinct purposes

Hyper-V is an optional Windows virtualization feature: it supplies virtual hardware so a guest can run its own Windows or Linux installation, applications and files. The host is the computer running virtualization; the guest is the operating system inside the VM. For example, a separate Windows guest can be used to test an application without installing it into the host’s working Windows system. A VM is not a guarantee of complete isolation or safety. Hyper-V depends on a supported Windows edition, hardware and approved configuration. This lesson recognizes its purpose as a Windows feature; the class lab continues in VirtualBox, not Hyper-V.

Windows Subsystem for Linux supports Linux distributions and tools on Windows. It is useful for supported Linux development and command-line workflows. WSL versions have different implementation and prerequisite details. Neither WSL nor Hyper-V is a remote-control protocol, and this ticket does not install either capability.

07

Remote Desktop connections and sessions

Remote Desktop Protocol carries a session between a client and a configured remote host. A supported host edition, service configuration, network route and authorized identity are separate prerequisites. Creating a support account does not enable Remote Desktop. Do not enable remote access or alter a firewall for this software-change ticket.

The client displays the remote session and sends input; applications in that session run on the host. Windows Home can act as a client but cannot host built-in Remote Desktop. A supported host edition such as Pro is required. Supported clients also exist for other platforms; the client and host do not need to be the same kind of device.

Open Remote Desktop Connection from Start; its executable is mstsc.exe. The Computer field identifies the approved remote PC by name or IP address. Show Options exposes connection choices: Display adjusts remote-session size, Experience adapts visual effects to connection performance, and Local Resources controls redirection such as clipboard or printers. Redirect only what the task and organization permit. These are client choices, not a guarantee of access or a completed connection.

The remote host must be powered on, have Remote Desktop enabled, and be reachable through the approved firewall/network route. Allowed remote users need not all have administrator rights. Keep Network Level Authentication enabled so authentication occurs before the remote session is established. Use a trusted approved network, VPN or gateway; do not expose a workstation directly to the public internet for this exercise.

Disconnect ends the connection while the user session can remain running on the host. Sign out ends the user session and its applications. Save work before choosing either action. Session policies can end disconnected sessions, so disconnection is not a guarantee that work will remain available indefinitely.

A useful handoff says what changed, what was tested and what remains unresolved. In the lab, attach evidence while each result is visible, restore the practice baseline, then review and download the PDF. Checklist marks are self-reported, not a grade or automatic verification. The site keeps responses only in the current session; downloading saves a static report, and external submission is separate.

Keep the guest visible beside this webpage. On the physical PC, click the webpage → Windows+Shift+S → Rectangle → select only the guest. Click the paste box → Ctrl+V; check preview. If blocked: click the snip notification → Save as PNG/JPG → Add screenshot from device.

01

AI assistance is not the operating system

AI describes a broad range of systems for tasks such as recognizing patterns, predicting or generating content. A conversational assistant generates replies to requests. It can produce a plausible explanation without establishing that the explanation is true.

Microsoft Copilot is an AI-assistant product family, not another name for Windows. Windows manages the computer and its applications; an assistant may help a person understand a task. Product-specific action tools are separate capabilities and must not be assumed from a reply.

02

Drafting, translation, code and information

Content assistance can provide a starting point for an explanation, summary or rewritten message. Translation can help bridge languages, but a fluent sentence can still lose an important restriction. Technical terms, filenames and warnings need careful review.

Code assistance can propose or explain commands. Generated code is not automatically safe, correct or authorized. Information assistance may help locate sources, but the source itself must support the exact claim. Specific file, image and application integrations depend on the product and plan.

03

Give useful context without private information

A prompt is a request to an AI tool. A useful written request identifies the task, relevant system, symptom and desired kind of answer. For example: “Windows 11 text is sharp but small. Explain Scale versus resolution without making changes.” Students can evaluate this request without sending it anywhere.

Passwords, product keys and private learner/client records do not belong in a troubleshooting prompt. Use fictional or sanitized descriptions. Privacy handling differs between products and accounts; an available service is not permission to use school data. Follow organizational rules.

1. 1Describe

   State the symptom and relevant version.

2. 2Request

   Ask for the explanation or comparison you need.

3. 3Restrict

   Leave out secrets and specify that no changes are requested.

04

Check advice against the actual Windows control

Windows troubleshooting assistance may suggest a setting or tool to inspect. Check that the instruction applies to the actual product, version and symptom. A source link is a lead, not proof that its contents were accurately summarized.

For sharp but small text, investigate Scale or text-size controls rather than assuming the resolution is wrong. Scale changes displayed size; a lower-than-native resolution can make text less sharp. The documentation screenshot illustrates separate controls, not a required numeric value for every device. No setting changes are assigned in this lesson.

05

Choose the tool that matches the evidence

Task Manager reports current CPU, memory, disk and network activity. Processes helps identify resource use; Performance shows graphs and totals. A snapshot is a clue, not proof of the cause of a slowdown. Installed RAM, In use, Available and Committed are different quantities.

Device Manager lists devices and their drivers. General reports a selected device’s status; Driver shows its provider, date and version. An old date alone does not establish a required update, and a healthy reported status does not prove every task works. A VM exposes virtual devices that can differ from the physical host.

System > Storage reports drive capacity and usage categories. This is not RAM. Storage Sense can automatically free space by removing selected temporary or Recycle Bin items; cleanup is a separate change that needs scope review and permission. Reading a category does not authorize deleting it.

Network & internet reports the adapter and connection state. A connected virtual Ethernet adapter is compatible with a host using Wi-Fi; it does not prove that a particular website works. Troubleshooters and resets can make changes, so they are not part of this read-only investigation.

06

Installation, connectivity and permissions

The 2025 certification outline describes Copilot as installed with Windows 11 by default. Current Microsoft guidance expects the app on new Windows 11 PCs and documents a Microsoft Store download if it is absent. That is not proof that every existing, managed or older Windows installation has the same app. The older Windows sidebar and its policies are not the same as every current Copilot experience.

Check the exact product, account, subscription, region, build and organizational policy. App deployment, app updates and Windows component updates are distinct; do not assume every Copilot feature arrives only through Windows Update. Current official product guidance is more reliable than an old screenshot or missing taskbar icon.

Cloud-based assistance and current web retrieval require communication with an online service. If that service cannot be reached, local tools such as Task Manager can still provide evidence. This does not mean every AI system is cloud-only, or that every local troubleshooting function works offline.

Guidance such as “Search Start for Notepad” is not evidence that an application opened. Supported action tools and data access vary by product and permissions. A proposed action, an actual operation and a verified result remain separate. The course uses supplied examples, not live prompts, sign-in or a connectivity test.

07

Know when advice is not enough

A chat answer is not a substitute for logs, recovery tools, physical inspection or authorized IT support. For example, a proposed recovery sequence cannot prove that a computer which will not start has been recovered. Event Viewer, System Restore and Windows recovery serve different technician tasks and require appropriate access.

Power Automate and reviewed scripts are examples of separate automation approaches. A written plan is not an executed workflow. Automation needs defined inputs, permissions, testing and result verification. Do not assume that any assistant has unrestricted administration or deep control of every third-party app.

Product-specific features can expand or limit available tools. Microsoft’s PC insights documentation, for example, distinguishes reading approved device information from making repairs. Do not turn a limitation of one named feature into a permanent claim about every AI product.

08

Advice and tested outcomes are different

An assistant can provide ideas or suggested procedures without observing whether they were carried out. Claims such as “fixed,” “installed” or “working” require actual evidence. Clearer wording does not make an unsupported completion claim true.

In the separate VM lab, investigate four fictional tickets. Task Manager shows current CPU and working-memory use. Device Manager reports device status and installed driver details. Storage reports disk-space use, not RAM. Network & internet reports connection state, not proof that a particular website works.

Inspect without ending processes, changing drivers, deleting files or resetting networking. A single busy graph is not a diagnosis; a driver date alone is not an update requirement. Record the actual state, including healthy results or blocked access. Add each screenshot and a short finding during its ticket, then download your named PDF and submit it through the class assignment dropbox. The site does not receive or grade it.

01

Prepare a safe example—not somebody else’s files

The companion lab includes its own Registry-Lab-2.3.zip download. It contains only five harmless TXT/CSV files: the Invoice pair, the Schedule pair and Support-note.txt. Extract them into a fresh guest Documents folder; do not work inside the compressed package or overwrite an older attempt’s backups.

Students mark only Support-note.txt Hidden through its General Properties. This establishes a known example: the file can disappear from view without being deleted. Do not change the original File name extensions or Hidden items preferences during setup; the later trials record those real baseline states.

The lab needs a working Windows 11 practice guest, approved same-account Registry access and a recovery plan. It does not require a particular installed application or an earlier software-installation lab. The final read-only check uses HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion to read ProgramFilesDir and CommonFilesDir: the default program folder and shared app-files folder. A stored default does not prove every app uses it. Installed-app registration remains a conceptual example in the discussion, not a reason to install 7-Zip.

02

A database for configuration

Configuration tells software how to behave or records information about its environment. The Registry stores many user preferences, application settings and Windows settings. A user’s Explorer preferences, a program’s user-specific options and computer-wide hardware/software configuration illustrate different uses.

Not every preference is stored in the Registry. An app can use a configuration file or other storage instead. The presence of a Registry entry also does not prove an application is working. Inspect the actual software and applicable documentation rather than treating the database as a complete inventory of all behavior.

03

Keys organize; values contain typed data

Registry Editor presents a tree of keys on the left and a selected key’s values on the right. A key can contain subkeys as well as values. The backslash-separated path identifies where you are in that hierarchy; the container is not the same thing as a value inside it.

A value has a name, a type and data. For example, HideFileExt is a value name in the current-user Explorer Advanced key. REG_DWORD means a 32-bit numeric data type, not “a setting only for 32-bit Windows.” Read the actual data rather than inferring it from the name. A value can also have a string or another supported type.

04

Current user is not the whole computer

HKEY_CURRENT_USER, often abbreviated HKCU, exposes configuration for the current user. This includes user-specific preferences used by Windows and applications. If another account opens its own current-user branch, it is not automatically the same preference state.

HKEY_LOCAL_MACHINE, or HKLM, contains configuration about the local computer, including installed hardware and software. Scope and permission are different questions: knowing that a setting is computer-wide does not authorize changing it. Other predefined roots provide views for other purposes; you do not need to edit them to explain the Registry’s role.

05

Connect a supported control to stored configuration

Supported Windows controls are usually the normal way to change a preference. Registry Editor helps a technician investigate the corresponding storage when there is a clear, authorized reason. Reading a setting and changing arbitrary numeric data are not equivalent activities.

In the tested Windows 11 guest, turning on File name extensions changes HideFileExt from 1 to 0 and reveals .txt. Turning on ordinary Hidden items changes Hidden from 2 to 1 and reveals the prepared Support-note.txt. These are observed examples, not instructions to type numeric data. Some suffixes, such as .csv in this guest, can remain visible even when known extensions are hidden.

A hidden file can exist while Explorer does not display it. Ordinary Hidden items is not the same as showing protected operating-system files. A read-only MSI product registration inspection separately illustrates application information such as DisplayName and DisplayVersion; not every application uses that registration location.

06

Back up before changing; verify after restoring

A selected-branch export preserves the selected Registry keys and values in a .reg file. Make it before the controlled change, verify its range and saved location, and keep it tied to the same guest, account and session. A filename alone does not prove that the correct branch was exported.

Import copies saved keys and values into the Registry. It is a merge, not a complete rollback of all later changes. It does not restore documents or installed programs and does not necessarily remove entries created after export. A VM snapshot is a separate recovery mechanism. Do not assume Windows has an automatic System Restore point; System Protection configuration matters.

Verify the original stored data and visible behavior. In the documentation guest, refreshing the active File Explorer folder with F5 after import restored the original extension and hidden-item display. Other builds can differ. An import-success message alone is insufficient; if data and behavior disagree, report the mismatch rather than guessing, repeatedly importing or changing security controls.

1. 1Record and export

   Preserve the original state and the exact selected branch.

2. 2Investigate one change

   Use the assigned supported control and compare the data.

3. 3Import and verify

   Use the own trusted backup; compare original data and behavior.

01

HDMI sizes carry a digital interface

HDMI carries digital video and audio. Full-size Type A is common on displays and computers; Mini Type C and Micro Type D appear on some compact devices. Device examples are clues, not proof: inspect the exact socket and manual. Mini HDMI is not Mini-USB, and HDMI Type C is not USB-C.

A compatible size-adapter cable can connect different HDMI sizes without converting to analog video. Required resolution, refresh rate, color format and optional features still depend on both devices and the cable. A smaller plug is not automatically a lower image-quality version. There is no universal cable length at which every HDMI signal fails.

02

DisplayPort forms and supported features

Full-size DisplayPort and Mini DisplayPort carry the same interface family using different physical forms. Full-size DP has one beveled corner, and some plugs have a release latch. Mini does not share that exact outline. Never pull against a locked latch or force a similar-looking plug. DisplayPort can carry audio as well as video.

MST carries multiple display streams through one supported connection. A compatible source, monitor output or hub, OS and sufficient bandwidth are required. A monitor having an input is not proof it can daisy-chain another monitor. Adaptive-Sync coordinates display timing with graphics output to reduce tearing when the hardware and software support it.

Resolution describes the pixel grid; refresh rate describes redraws per second. Both contribute to bandwidth needs, alongside color and compression. Check exact modes rather than treating a version label as a universal maximum or assuming DisplayPort always outperforms every HDMI implementation.

03

DVI variants and VGA: know the signal

DVI-D carries digital video. DVI-A carries analog video. DVI-I includes separate contacts for digital and analog signals; the four analog contacts around the flat blade distinguish it from DVI-D. Single-link and dual-link describe digital contact arrangements and capacity, not the number of monitors. Actual modes depend on the source, display and cable.

VGA is analog video, commonly identified by three rows of five contacts and retaining screws. It is useful to recognize when supporting older projectors and displays. Its performance depends on the equipment, supported timings and signal quality, not a universal 1080p ceiling. Conventional DVI and VGA do not carry audio; plan a separate sound path.

A simple DVI-I-to-VGA adapter relies on the source actually providing analog output. It does not manufacture analog from digital-only DVI-D. That conversion requires appropriate active electronics. Never remove or bend pins to force compatibility.

04

USB shape and data generation are different

Standard-A is the familiar rectangular USB form. Standard-B is often found on peripheral devices such as printers. A-to-B cables can use different shapes at their ends while carrying one USB connection; this is not necessarily protocol conversion. Mini-B and Micro-B are different smaller peripheral forms. Use exact shapes and manuals, not the device’s age alone.

Mini-A and Micro-A are rare legacy OTG forms. OTG means On-The-Go, allowing supported devices to take a host role. They are not synonyms for Mini-B or Micro-B. Mini-A is deprecated; these forms belong in recognition of legacy equipment, not a recommendation to adopt them.

USB 2.0 has a nominal 480 Mbit/s signaling rate. Historical USB 3.0 means 5 Gbit/s signaling, later called USB 3.2 Gen 1. File throughput is lower and depends on the host, device and cable. Blue plastic is a common cue, not sufficient specification evidence. A compatible older device can operate at its supported lower rate.

SuperSpeed Standard-B adds a taller section; SuperSpeed Micro-B adds a wide second section. Some newer sockets accept older plugs at older capabilities, but that does not make every plug interchangeable. Never force the larger form into a narrower socket.

05

USB-C is not a speed, video or power promise

USB-C is reversible. The port and cable may support data, power and an optional video path, but not all implementations support every function. A USB-C connection can be limited to USB 2.0 data. Check advertised data performance and required cable specifications; do not use connector shape as a USB version.

USB Power Delivery negotiates power among compatible devices. Suitable implementations can support up to 240 W, but the charger, cable and device must all support the requested level. A high-power charger does not force every device to consume its full rating.

A monitor adapter may require DisplayPort Alt Mode or an appropriate Thunderbolt connection. A charge/data-only USB-C port cannot supply that missing display signal through a simple adapter. Read the exact port, cable and adapter specifications before promising a working monitor.

06

Thunderbolt has generations and capability requirements

Thunderbolt combines data and display traffic and is useful for compatible docking, storage and other peripherals. Thunderbolt 1 and 2 used Mini DisplayPort-shaped connectors; generations 3, 4 and 5 use USB-C-shaped connectors. A shared shape does not turn an ordinary USB-C cable into a Thunderbolt cable.

Thunderbolt 4 specifies a 40 Gbit/s link, a 32 Gbit/s PCIe data baseline and support for two 4K displays or one 8K display in suitable configurations. These are different measures, not guaranteed file-copy results or a promise that every attached monitor supports those modes. Compatible external graphics hardware, host and OS are still required for an external GPU. A hub can add downstream connections, but a four-port hub can include its upstream computer connection; do not assume four additional device ports. Certification is not unlimited compatibility.

Thunderbolt 5 is newer and increases bidirectional bandwidth to 80 Gbit/s, with a directional bandwidth-boost mode up to 120 Gbit/s for supported uses. Exact features remain device-dependent. Security requirements such as DMA protection restrict peripheral memory access; they do not mean every connected device is trustworthy.

07

Digital optical and analog AUX serve different needs

Optical S/PDIF, commonly called TOSLINK, carries digital audio using light. It does not carry video. The optical path avoids electrical interference pickup along the link, unlike copper coaxial S/PDIF. It is not failure-free: cable damage, tight bends, connector contamination and format mismatches can still prevent sound.

Compatible optical source/receiver combinations commonly support stereo PCM or supported compressed surround formats. Do not promise every lossless surround format. Check the actual output format and receiver capability. Optical audio alone cannot supply a projector’s picture.

A 3.5mm AUX cable commonly carries analog audio, for example from a headphone output to speakers. Stereo TRS has tip, ring and sleeve: three contacts separated by two bands. A compatible headset TRRS connection adds a fourth contact, commonly for a microphone. Jack function and wiring still matter; a matching diameter does not guarantee microphone support.

Analog wired audio avoids wireless pairing, but noise, levels and equipment can affect the result. Digital is not automatically a guarantee of better sound in every use. Distinguish microphone input from headphone output before connecting.

08

Adapters need direction and compatible signals

A passive adapter does not actively translate the signal protocol. It works where the source already supplies a compatible signal. HDMI size adaptation is one example. Some DisplayPort-to-HDMI/DVI passive arrangements require a DP++ source; digital-to-digital is not a rule that all adapters are passive.

An active converter uses electronics to translate a signal, for example digital HDMI output to analog VGA input. Direction matters: a converter specified for HDMI source to VGA display is not automatically reversible. Active electronics can be powered by a port or require a separate supply; consult the exact model. Physical size does not identify the conversion method.

HDMI output to DisplayPort input is another active-conversion example even though both interfaces are digital. A passive DP++-to-HDMI adapter depends on a different source capability and direction; it cannot simply be reversed. Check the specific converter’s power and supported display modes.

HDMI-to-composite conversion is a legacy digital-to-analog example. RCA describes a connector form, not a single video format. Composite combines video into one signal; component separates video into multiple signals and commonly uses multiple RCA connections. A composite converter does not automatically feed a component-only input. Read the actual input labels and exact specifications.

Check supported resolution, refresh, audio handling, power and any content-protection requirements. HDMI-to-conventional-DVI or HDMI-to-VGA paths may need a separate audio route. A compliant protected-content path is required; bypassing protection is not a troubleshooting step.

For No signal, verify both device identities, the source output, display input selection, cable/adapter direction and supported settings before diagnosing a failed graphics card. A photograph supports identification; a working physical result requires an actual authorized connection and test.

01

Resolution: count pixels, not inches

Display Settings groups Windows controls for the displays it detects. Resolution describes image width and height in pixels: 1920 × 1080 means 1,920 columns and 1,080 rows. It does not specify a physical diagonal size. Two different-size screens can have the same resolution and different pixel densities.

A physical panel has a native pixel grid. Windows normally marks a suitable supported output as Recommended. Lowering output resolution may make the image softer, centered, stretched or bordered. In a VM, virtual graphics, guest tools, the viewer and its window size also affect what is available. A guest’s recommendation is not a measurement of the host panel.

02

Scale changes interface size

Scale adjusts how large text, applications and controls appear. A larger scale usually uses more of the available workspace for each element. It is not another name for changing display resolution.

When text is sharp but too small, scale is a relevant control to investigate. If only text needs enlargement, Windows also offers a separate accessibility Text size control. Do not confuse these size options with ClearType, which concerns text rendering. The lab records the current scale and leaves it unchanged.

03

Aspect ratio describes shape

Aspect ratio compares width with height. Dividing both dimensions of 1920 × 1080 by 120 gives 16:9; 1280 × 720 has that same shape. A 4:3 image is relatively narrower. The ratio does not tell you the image’s sharpness or the display’s size in inches.

Content and a display can have different proportions. Fitting the full image without distortion can leave black bars. Stretching to remove those bars can make circles oval or people look unusually wide. Windows commonly offers resolution choices, not a universal separate aspect-ratio switch. Player, projector or monitor controls can also affect fitting.

04

Orientation matches content direction

Landscape is wider than it is tall; portrait is taller than it is wide. Supported flipped variants reverse the corresponding orientation. Portrait can suit long documents or code, while landscape often suits wide content. The relevant choice depends on the actual task and equipment.

Software rotation does not physically turn the screen. A real monitor needs an appropriate stand, safe cabling and permission before rotation. A VM or graphics driver may hide or disable orientation. This lab only reads available choices; it does not rotate the screen. For a separately approved configuration task, preserve the baseline and understand the preview/revert behavior before applying anything.

05

Duplicate, Extend and one-screen output

Duplicate repeats desktop content across connected displays. It suits a shared view for an audience. Extend creates a larger desktop workspace where different windows can occupy different screens. PC screen only and Second screen only use one output instead. Windows + P opens the Project choices on a supported Windows session.

A display mode is not an image-shape or text-size setting. Extending a desktop also does not automatically keep information private: verify what is actually visible on the audience display. The inspection lab reads the available Multiple displays controls without selecting a mode. A single-display guest may not expose a mode list; a second screen is not required for this inspection.

06

Match logical and physical placement

When Windows detects multiple displays, Identify shows which number belongs to each screen. Detect checks for an additional connected display. The layout can then be arranged to match the equipment’s actual positions. This affects where a pointer or moved window crosses between screens.

A single-display VM may have no numbered multi-display arrangement. That is not automatically a fault. A physical second monitor on the host is not automatically another monitor inside its guest. A menu or diagram supports an explanation; only an actual supported multi-display test can establish the observed crossing behavior.

07

Casting needs compatible endpoints

Windows + K opens Cast, used to select a compatible wireless display. Miracast requires compatible sending and receiving support. If the receiver is another Windows PC, receiving setup can include the Wireless Display optional feature and app. That does not mean every sender must install that feature.

Miracast can use a direct wireless link; some implementations also use an existing trusted network. The same Wi-Fi network is not a universal prerequisite for every Miracast connection. A VM with Ethernet/internet does not automatically expose compatible wireless-display capability. Do not pair with an unknown receiver or install a feature to force this inspection lab to work.

08

ClearType tunes text rendering

ClearType concerns how text edges are rendered. The ClearType Text Tuner offers a control and a sequence of sample choices to tune the appearance of text. It does not add physical pixels, change resolution or enlarge every interface element. Start search can find Adjust ClearType text.

The effect depends on the panel, pixel layout, application rendering and virtual/remote display path. It is not a guaranteed cure for all blur or a medical outcome. The inspection task reads the opening screen and closes with Cancel without toggling the option or completing changes. Actual tuning is a different, separately permitted task.

09

Record observations, not assumed repairs

The companion DS-205 lab asks for current guest resolution/scale and an additional inspected tool state. Add screenshots while each state is still open. Choose expanded Multiple displays or the ClearType opening screen for the second image. Report absent or disabled controls honestly. Wireless-display inspection is not a lab step; casting remains a discussion topic.

Use the checkboxes only for actions you performed. Review the two short questions, add your name and download one branded PDF. The report keeps teaching images online rather than copying them into each submission; your own attached evidence remains in the PDF. Submit the saved file through the external assignment dropbox. Browser entries are session-only and downloading is not submission.

01

Remote storage and local availability

Cloud computing delivers computing resources through a network. Cloud storage is the file/data-storage part of that broader idea. A cloud storage service supplies remote storage and may include sharing, synchronization and recovery features, depending on the account and plan. A provider operating the infrastructure does not remove your responsibility for accounts, access and data.

A listed cloud filename may be only a placeholder. Online-only contents need downloading before offline use. A locally available file has downloaded contents; an always-available/pinned choice is intended to keep them on this device. Verify the actual state and local opening before disconnecting. Syncing, pending and error states are not all the same as a completed upload.

Synchronization propagates supported changes between locations. It can propagate a deletion or unwanted edit as well as a useful update. Version history and recycle-bin recovery depend on the service and its policies. Sync by itself is not a guarantee of an independent recoverable backup. After reconnecting, check actual sync status; connectivity, identity, quota and conflicting changes can affect the outcome.

02

Choose the service for its purpose

Azure is a cloud platform for resources such as computing, networking and storage. Microsoft 365 is a collection of productivity and collaboration services. They are not interchangeable names for a shared drive. Windows 365 supplies hosted Cloud PCs through its applicable licensing; it is not included in every Microsoft 365 subscription.

OneDrive commonly holds an individual’s work files. SharePoint libraries support team/organization collaboration. Teams combines communication and collaboration: channel files are backed by SharePoint, while files shared in chats are generally stored in the sender’s OneDrive. Outlook provides email/calendar work rather than replacing a team document library. Ownership, retention and access still depend on the organization’s setup.

03

Separate the audience from the permission

A sharing decision has at least two parts: who may access the item, and what they may do. An available link can be restricted to particular people or another supported audience. View and edit permission are separate choices; a narrowly addressed link can still allow editing if configured that way. Available choices depend on the account and organization.

Review recipients, content and the intended level before sharing. A view-only choice is not a guarantee against saving, photographing or redistributing information. Revoking a link or removing access cannot recall a copy that someone already downloaded. This lesson uses fictional cases; it does not ask you to create a public link or share real school files.

04

Disk, partition and formatted volume

Disk Management shows the disks and volumes Windows recognizes. A partition divides disk space; a usable formatted volume has file-system structures for storing files. A drive letter identifies a mounted volume, not necessarily a separate physical device. Multiple letters can depend on one underlying disk.

Partitioning can organize workloads or support different uses of space. It does not automatically improve performance, protect access or provide an independent backup. Formatting creates a file system and can destroy existing access to files. Unallocated space is not proof that an unknown disk is safe to initialize. Initialize only a new empty disk that has been positively identified.

The lab creates a new VHDX disk-image file inside the Windows guest. Windows attaches that file as a practice disk; this is not the guest’s existing operating-system disk and does not require changing the physical host’s hypervisor configuration. A dynamically expanding file starts smaller but can grow toward its configured maximum, so guest free space must support that growth.

05

GPT and MBR describe partition layout

GPT and MBR are partition styles. They describe how partition information is organized on a disk; neither is a file system such as NTFS or exFAT. GPT is the normal modern choice for this new practice data disk. Windows boot requirements are a separate question from whether it can read a data disk. Do not convert the existing Windows disk for this exercise.

Traditional MBR has four primary table entries, one of which can describe an extended partition containing logical drives. The familiar roughly 2 TiB limit assumes 512-byte logical sectors; sector size and implementation matter. GPT supports larger layouts and more partitions in supported Windows configurations. These comparisons explain choices, not permission to convert or erase a working disk.

06

NTFS, FAT32 and exFAT serve different needs

NTFS supports Windows access-control lists and features such as journaling, compression and supported file encryption. These are capabilities, not a claim that every file has been securely configured. FAT32 is widely supported by many devices but has a maximum single-file size just under 4 GiB. A drive can have plenty of free space and still reject one larger file.

exFAT supports larger individual files and is commonly used for removable/portable storage. Verify support on every intended device. It does not supply NTFS-style access-control lists, EFS or journaling. Choosing a file system means checking file size, device compatibility and required metadata rather than assuming one format is best everywhere.

The lab uses NTFS for LAB-WORK and exFAT for LAB-XFER to expose these differences. Only the new disposable volumes may be formatted. An existing file or volume is not a safe target merely because its label resembles the example. Formatting a real portable drive requires a separate approved backup/target procedure.

On the tested small practice volume, the graphical format menus did not offer exFAT. The lab therefore uses the supported Format-Volume command in guest Windows PowerShell, with exactly one positively identified new RAW drive letter, the exFAT choice, the short label LAB-XFER and explicit confirmation. A different letter can select different data: never guess or use C:, LAB-WORK, a wildcard or the host. Check the resulting file system in Disk Management rather than assuming a completed command proves the intended target.

07

Attributes change behavior, not authorization

Hidden affects ordinary file visibility; File Explorer can be set to show hidden items. Read-only can prevent ordinary modification of a file until the attribute is cleared. Neither is an encryption key or an access grant. A permitted user can still read a hidden file, and changing an attribute is not a substitute for protecting confidential information.

Archive is an attribute some backup tools use when tracking changes; its presence does not prove a backup was made. System marks operating-system-related items. Do not experiment on system directories. The Read-only indicator on a folder does not behave like a universal lock on every file inside it. The lab changes only fresh fictional sample files and does not enable EFS or alter permissions.

08

Transfers depend on operation and destination

With ordinary File Explorer defaults, copying an NTFS file or moving it to a different NTFS volume generally creates a destination object that inherits the destination folder’s permissions. A same-volume NTFS move generally keeps the original permissions. Other tools, explicit permission preservation, policy and options can change behavior; do not generalize a default into a universal law.

A destination file system can only preserve metadata it supports. Copying a file to exFAT does not carry working NTFS access-control lists or EFS along with the contents. Ordinary file attributes can still be present: losing NTFS-specific features does not mean every attribute disappears. Inspect the actual source and copied file rather than assuming their Properties tabs must match.

09

Document the new target, then detach safely

ST-301 uses short actions, visible stop conditions and screenshot evidence collected while each result is open. Record the new practice disk’s actual identity and assigned letters; never copy the demonstration’s disk number. After setup, choose whether to investigate attributes or the transfer first. Both investigations use only disposable files.

Before handoff, inspect the three images and short checks, add your name and download the branded compact PDF. Teaching images stay online; your attached evidence stays in the report. The website does not grade the lab or submit the report. Entries are session-only, so turn the saved PDF in through the external assignment dropbox.

Close files on the practice volumes before detaching the exact VHDX. Verify the backing-file path in the Detach VHD dialog and preserve the file. Detaching removes the attached disk from this session; it does not delete the file or its contents. Do not detach the operating-system disk or remove a hypervisor disk.

01

A remote operation must pass both layers

The share host is the computer holding the folder. The client is the other computer opening it. Server Message Block (SMB) is the Windows network file-sharing protocol. NTFS permissions remain attached to the folder and its files; they apply locally and when those items are reached through a share. Share permissions apply to access through that SMB share.

A remote save requires both layers to permit the operation. For a simple Allow-only example, share Change combined with NTFS Read permits reading but not saving edits. Raising the share layer to Full Control would not fix the NTFS restriction. A local file access does not pass through the SMB share layer.

Read permits viewing. NTFS Modify normally includes reading, writing and deleting content without granting permission-management rights. Share Change permits ordinary changes through the share. Full Control adds security-management rights; it is not the default answer to a request to edit a document.

02

Check the actual identity and all applicable entries

Authentication identifies who is connecting. Authorization determines what that identity may do. In a workgroup lab, FILE-PC\ShareReader means the local ShareReader account on FILE-PC, not an unrelated account with the same name on the client. A blank password, a Windows Hello PIN or a different saved identity can prevent the intended test. Use the private credentials supplied for the host account; never put them in your screenshot or report.

Permissions can apply directly to a user and through group memberships. In an Allow-only case, allowed rights can accumulate. Adding a Read entry does not remove Write granted through another group. Inspect inherited Users or Authenticated Users entries before calling a folder read-only. An inherited entry comes from a parent; an explicit entry is set on this object.

The host folder’s Security → Advanced → Effective Access view evaluates a selected principal and helps investigate permissions. Choose the exact host account and read any evaluation limitations. It is not proof that a separate client can reach the host, authenticate or pass every SMB condition. Test the actual remote operation too.

Do not reduce every access list to “the most restrictive entry wins” or “Deny always wins.” Windows processes applicable entries in an order and checks the requested rights. Explicit and inherited entries have different ordering. This beginner lab uses Allow entries and a tightly scoped new folder, avoiding unnecessary Deny entries.

03

Basic rights are useful bundles; advanced rights refine the scope

The Security tab exposes familiar permission bundles such as Read, Read & execute, Write, Modify and Full Control. Advanced Security Settings shows entries, inheritance and the objects each entry applies to. In a business, group-based access is usually easier to maintain than many individual entries; this small lab uses one specific identity to make the effect visible.

Read permits viewing contents. List folder contents supports seeing the files and subfolders in a directory. Read & execute adds execution for eligible files; it does not grant administrator installation authority or bypass other Windows controls. Write supports writing data or creating items as scoped. Modify includes reading, writing and ordinary deletion. A Write-only entry does not prove deletion is impossible: another applicable entry, or Delete subfolders and files on the parent, can permit it.

Advanced permissions are individual operations and their inheritance scope. Create files / write data names a right whose meaning depends on the object: on a directory it allows adding a file; on a file it allows writing its data. Do not assume that a checkbox creates a universal “upload but never edit” workflow. Delete and Delete subfolders and files also need careful scope review.

Traverse folder / execute file concerns passing through a directory path or executing a file, depending on object type; the Windows bypass-traverse privilege can also affect traversal checks. Delete subfolders and files is a directory right affecting its children, distinct from deleting the directory itself. Change permissions permits editing the access-control rules. Take ownership permits an ownership change under the applicable Windows checks; it is not simply another name for editing a document. Always inspect the object and Applies to scope.

Use the simplest approved bundle that meets the task. Preserve SYSTEM, the guest administrators, the existing owner and the signed-in working host account on the new folder. Before removing broad inherited groups, verify explicit Full control for that working host user as well as the owner. If Administrators owns the folder, its group entry may be filtered from ordinary File Explorer access; ownership or administrator membership alone is not proof the working user can read the contents. Keep ShareReader separate and limited. Never experiment with a system folder’s inherited permissions, broad Deny rules, or recursive changes to a whole profile.

04

Public folders, basic sharing and Advanced Sharing

Public folders are shared local locations under Users\Public. Their name does not guarantee anonymous network access. Network availability depends on sharing settings, authentication, permissions and policy. They are unsuitable for assuming a private audience without checking the configuration.

Basic sharing lets an owner select people and a simple access level through the sharing wizard. Advanced Sharing exposes the SMB share name and share permissions. Neither interface removes the need to understand the NTFS layer. Advanced Sharing does not automatically turn on auditing.

A share name ending in a dollar sign is hidden from ordinary browsing, but the path can still be used by someone who knows it. A hidden name is not access control. Use authenticated, approved sharing and current SMB security instead of trying to hide sensitive content with a name.

05

A drive letter is a convenient name for a network path

A UNC path such as \\FILE-PC\Handover identifies a host and a share. It is different from C:\Lab\DCM-3.2\Handover, the local path on the host. Use the assigned host name or instructor-approved address, not an example copied from a picture. Name resolution and network reachability must work.

In Windows 11 File Explorer, select This PC, then the More (…) menu → Map network drive, or right-click This PC. Select an unused drive letter and enter the verified UNC path. Use the intended host identity when credentials are requested. For a temporary lab, leave Reconnect at sign-in off and do not save credentials.

The mapped drive still depends on the host being available and on the applicable permissions. It does not copy the files locally, grant access, enable offline files or provide an independent backup. Disconnecting the mapping removes that client shortcut; it does not delete the shared folder.

06

Ownership supports authorized recovery, not routine editing

The owner is identified in Security → Advanced. Ownership is different from Read or Modify: an owner normally can change the object’s access rules, but that fact alone is not an ordinary edit permission. Keep the dedicated sharing identity from owning the practice folder when testing limited access.

An authorized administrator might take ownership when recovering business data from a retired account. Ownership change can then allow a deliberate permission repair; it is not the first response to every Access denied message. Confirm the target and authority, preserve evidence and avoid broad recursive changes. In FS-302, inspect the practice folder’s owner without changing it.

01

Match the recovery method to the problem

File recovery restores a document or folder from an existing saved copy. System Restore rolls back Windows system files and settings using a suitable restore point; it can affect recently installed applications or drivers. It does not bring back a deleted personal essay. A system image captures the selected volumes and can support whole-system recovery when the required boot and system volumes are included.

A recovery method is useful only when its source exists and is accessible. An empty Previous Versions tab does not contain a hidden guaranteed recovery. A restore point created after a problem does not reconstruct an earlier document. Identify the affected item, the required recovery date and the actual source before making changes.

02

File History needs a destination and saved versions

File History saves versions of protected personal files to a configured drive or network location. In current Windows11, open Control Panel → System and Security → File History. Do not confuse Accounts → Windows backup with this interface. File History covers supported libraries and personal folders; a file placed in an arbitrary C:\Lab folder is not automatically protected. Use the actual local Documents folder for this exercise, or deliberately include a folder in a protected library.

Select the positively identified practice destination before turning File History on. Advanced settings controls how often copies are saved and how long versions are kept. A shorter interval can capture more changes; longer retention uses more storage. Neither setting recreates versions from before protection was configured. Existing policy, an unavailable drive or a failed backup must be reported rather than marked complete.

Save the first file version and complete its backup before editing. Save a genuinely different second version, then complete another backup. Open the available history and check the dates and contents. Seeing an On label is not proof that both versions exist.

03

Recover an earlier copy without overwriting useful work

For this exercise, select Equipment-note.txt inside Documents → Recovery-Practice. In File Explorer use … → Properties → Previous Versions, or right-click the selected file and choose Properties. Select the earlier file version, then Open → Open in File History. Verify its original contents in the preview. The version arrows let you compare available saved contents; return to the older original before restoring.

In File History, right-click the green Restore button and choose Restore to…. This is a context-menu command, not a Restore dropdown. In the destination dialog open Documents, create a new empty Recovered-3.3 folder, commit its name and double-click it before choosing Select Folder. The recovered file goes directly inside that folder. Direct restoration to the original location can replace current content; cancel any unexpected replacement prompt.

Open both the recovered file and the current original. Compare their contents, not only their names or dates. Keep the useful current work until the requested recovery has been verified. A PDF screenshot records what the learner observed; it does not automatically prove the recovered file is correct.

04

System Restore protects system state, not document history

System Restore uses available restore points to reverse certain Windows system changes. It can help after an unsuitable driver or application change. Review the selected date and Scan for affected programs when available. A restore can remove later applications or drivers even though personal documents are outside its recovery scope.

Open the guest’s Create a restore point search result to inspect System Protection, then inspect System Restore only as directed. Protection Off, a disabled button or no restore points is a valid observation. Do not enable protection, create a restore point, start a restore or change settings during this read-only exploration. Cancel out when finished.

System Restore is different from Reset this PC, a full-disk image restore and any newer point-in-time recovery feature shown on a particular Windows build. Read the exact tool name and its data-loss warning. Do not assume every screen with the word restore has the same scope.

05

A disk image needs complete scope and a usable destination

A full-system image needs the required Windows boot/system volumes as well as the intended applications, settings and personal files. Selecting only a large C: volume is not a universal guarantee that every required partition was captured. Use a supported imaging tool, verify its selected volumes and follow that product’s recovery procedure.

Cloud imaging adds dependencies: approved software and license, a supported cloud destination, authorized account access, enough capacity, upload bandwidth, encryption and key recovery. During recovery, the rescue environment must be able to reach and authenticate to that destination, or an approved local image copy must be available. A filename visible in cloud storage proves neither image integrity nor successful boot recovery.

Windows Backup can synchronize selected personal folders with OneDrive and retain supported settings and app information. It is not a general full-disk cloud-imaging tool. Do not require students to create a personal Microsoft account for this lesson.

The Create a system image link under Backup and Restore (Windows7) is a legacy exploration interface. Microsoft deprecated that imaging solution; inspect its destination choices only, then cancel. This is not a recommendation to deploy the legacy tool as a modern business backup service, and it is not a completed backup.

06

Verify recovery and protect against a shared failure

Before full-disk recovery, verify the source image, required keys, recovery-media compatibility and exact destination disk. Preserve newer needed data separately. Full-disk restoration can overwrite the destination’s current operating system and files. Perform a test only on an explicitly disposable recovery target, never on a classroom host or the working guest used for other lessons.

After an isolated full-system restore, verify startup, required applications, representative files, permissions and settings. Check the actual state and record errors. This lesson explains that sequence; the account-free work ticket performs file recovery and tool exploration, not a destructive system recovery.

A different drive letter is not necessarily a different physical disk. A VHD stored inside the same VM can demonstrate version recovery but is lost along with the VM or underlying host disk. Real protection needs an appropriate independent destination and a tested recovery plan. A VM snapshot is a useful lab recovery aid, not automatically an independent backup.