nexus/knowledgebase/course-notes/IT-Support-Service-Desk-Crash-Course-Notes.md

IT Support and Service Desk Jobs — Crash Course for Beginners

Course Notes (structured from transcripts)

Source: /Users/weishen/mnt/volume2/knowledgebase/course/IT Support and Service Desk Jobs - Crash Course for Beginners Generated: 2026-09-19 Note: Chapter 10 (Final Quiz - Top 30 Technical Interview Questions) is an online Udemy quiz link only, no transcript content. 37 video transcripts across 10 chapters.

---

Chapter 1 — 1. Introduction

Core Insights

• Instructor Marius (20+ years in IT: web developer, networking, Microsoft and Cisco exams, manager with degrees in HR and IT, consultant) built the course over ~4 months as a real-world journey into support/service desk engineering.
• Part 1 covers roughly 70–80% of what a support engineer needs to know — enough to start a job. Part 2 suits people with 5–6 months on the job: monitoring, virtualization, deeper troubleshooting, procedures, career advancement, web applications, interview questions, challenges and quizzes.
• The course simulates a real service desk with the industry-standard Jira Service Desk instead of theory/videos — you receive real tickets from a manager and an end user and click through resolving them.
• SLA is taught by watching a live ticket, not just a definition: e.g., 4 hours to reply, 8 hours to sort it out; you see the ticket status change as you work.

Detailed Notes

• Approach: "not just talk" — real service desk application, simulated environment; hundreds/thousands of similar tools exist, but seeing everything in action transfers to your own device.
• Part 1 topic map: general skills, hardware, operating systems, networking, basic procedures, service desk tools.
• Viewer expectations: you have to memorize facts, read documentation, and play with the solutions yourself — the course shows the starting point, no boring lectures or long definitions.

Action Items

• Practice inside a real service desk application alongside the lectures rather than just watching.
• After a few months in a support job, evaluate whether Part 2 (monitoring, virtualization, career path) is needed.

Key Terms/Concepts

• SLA (Service Level Agreement): the time window you must act within on a ticket — e.g., answer in 4 hours, resolve in 8.
• Support/Service Desk Engineer: entry-level IT role the course trains for.

Chapter 1 — 2. IT Support Roles

Core Insights

• A service desk provides IT services under a contract between your company and the customer; your job is to sort out the problem, answer the question, or recommend a solution.
• First-line support is the first point of contact: phone, email, chat, ticket, or discussion board — supporting either internal users or external companies.
• Core workflow: figure out the problem → log it in a specialist (ticketing) system → give a quick fix, or escalate to second-line support (more knowledge, more tools); second line owns backends, application deployment, big upgrades and projects.
• It is possible to start knowing almost nothing (some adverts only require working English and the company trains you), but knowing basics makes it far less stressful.
• Soft skills are ~90% of hiring decisions — technical skills can be taught, attitude cannot.

Detailed Notes

• Knowledge baseline: IT infrastructure (laptops, workstations, printers, phones), two operating systems (Windows, Linux), basic networking, web solutions, procedures and frameworks — the most popular framework is ITIL (which includes SLA).
• Prioritization: systems usually carry a priority value; P1 is the highest (everything down), e.g., a website down that sells online outweighs "John can't print but needs it next week."
• Certificates are not crucial at agent level — CompTIA, Microsoft MTA, Cisco CCNA for tech; PRINCE2/PMP to prove project knowledge; the company will train you.
• Interview tip: showing eagerness to learn and willingness to take extra steps gets you the job.

Action Items

• Practice the log → quick-fix → escalate flow and judging ticket priority.
• Build basics: one Windows + one Linux OS, basic networking, ITIL/SLA concepts, web solutions.
• Prepare to demonstrate soft skills (politeness, helpfulness, punctuality, communication) since they dominate hiring decisions.

Key Terms/Concepts

• First-line support: initial contact, triage, logging, quick fixes, escalation.
• Second-line support: backend infrastructure, deployments, upgrades, complex cases.
• ITIL: the most popular IT service-management framework/best practices.
• P1: highest-priority ticket (service totally down).

Chapter 1 — 3. Tools you Will Need Jira Service Desk, Support Tools, and Password Managers

Core Insights

• Real support work uses four tool types: communication (email + messenger), a ticketing system, a remote-support tool, and a password manager.
• Ticketing system = Jira Service Desk (Atlassian): free for up to 3 agents in the cloud, nothing to install.
• End users raise tickets; agents work from a queue: assign the ticket, then drive status (To Do → In Progress → resolved).
• Remote support (TeamViewer as the example): a viewer on the agent's PC and an agent ("server") installed on every customer device — connect by picking the device.
• KeePass, an offline password manager: one master password, one entry per application/server, built-in password generator, and clipboard auto-clear (~12 s) for safety.

Detailed Notes

• Communication: Microsoft Exchange (on-prem email server) or Exchange Online (cloud-hosted email); Outlook via web or Microsoft Office; Skype-style messengers.
• Getting Jira Service Desk: atlassian.com → Products → Jira Service Desk → "Try it free"; the Pricing page shows a free cloud option up to 3 agents — no install.
• Demo layout: General Service Desk (tickets from end users), Tasks (assignments from the manager), plus demo/old tickets.
• Example ticket: Kate Brown — "Cannot open doc1.docx"; the reporter immediately gets an email that someone will look at it.
• Agent view: the queue is a list of tasks; the case shows the reporter but is not yet assigned → assign it to an engineer or yourself; status "To Do" means nobody started.
• Remote support pattern: open the tool → see all connectable laptops/computers → select one → authenticate with username/password.
• KeePass usage: right-click to add entries in groups (e.g., Exchange mailbox username); generate passwords — 9 characters (uppercase, lowercase, digits) is acceptable for a local network, but internet-facing systems need stronger (e.g., 12 characters + special); copying a password clears the clipboard after 12 seconds so it can't be pasted elsewhere by accident.

Action Items

• Create a free Jira Service Desk cloud account and click through queues, assignment, and status changes.
• Install and explore a password manager (e.g., KeePass): create entries, generate and copy passwords.
• Try a remote-support tool (TeamViewer) between two devices to learn the connect flow.

Key Terms/Concepts

• Queue: the list of tickets/tasks awaiting an agent.
• To Do: ticket status meaning nobody has started work.
• KeePass: offline password manager with a single master password.
• TeamViewer: remote desktop/support tool (viewer + device agents).

Chapter 1 — 4. Let's Simulate Your First Days at Service Desk

Core Insights

• Day 2 scenario: manager John emails three tickets; each names a device (e.g., T01) plus the task (check the Windows 10 edition on T01).
• Golden rule: the first thing after opening a ticket is to change its status (To Do → In Progress) before touching anything else — otherwise nobody knows you started working.
• SLA is tracked live: "time to first response" was green — 4 hours to assign the ticket to yourself; sometimes a status change alone counts as the first response, sometimes you must reply or add a note.
• Full resolution loop: acknowledge → connect remotely using credentials from the password manager → inspect → answer the ticket → set status Completed/Closed.

Detailed Notes

• Ticket anatomy: device name (T01, a laptop) + action ("check the edition of Windows 10" — editions: Home, Professional, Enterprise).
• Two support apps: one keeps usernames/passwords (KeePass example), one connects remotely — support tool with a desktop shortcut listing all connectable machines (TeamViewer as example).
• Communication: internal "note" (only for you/team) vs "reply to customer"; being proactive ("Hi John, I am working on it") is good practice.
• Remote session: double-click T01 → username/password from KeePass → connected → right-click This PC → Properties → shows "Windows 10 Pro".
• Close the remote session, return to the ticketing system, reply "T01 has Windows 10 Pro installed" — put the key fact in bold so the manager spots it — then set status Completed, then Closed.

Action Items

• Practice the golden loop: update ticket status immediately upon starting, then work — never leave a ticket in a stale state.
• Drill the flow on a lab machine: connect remotely, read OS/edition info, log the finding, close the ticket.
• Learn Windows editions (Home/Professional/Enterprise) and where to find them (System Properties).

Key Terms/Concepts

• In Progress / Completed / Closed: ticket lifecycle states that drive SLA tracking.
• Time to first response: SLA metric — e.g., 4 hours to first action/assignment.
• Assignment: attaching the ticket to yourself or another engineer before work starts.

---

Chapter 2 — 1. Overview of Hardware

Core Insights

• POST (Power On Self Test) runs on every device at boot to verify hardware is ready before the OS loads.
• BIOS is the low-level firmware that controls startup and displays key hardware info: product name, BIOS version, CPU, RAM, disks, and the OEM Windows product key.
• Knowing hardware details (CPU generation, RAM size, disk type) lets you estimate a device's age and capabilities.
• Hands-on practice on cheap test hardware is the recommended way to learn hardware.

Detailed Notes

• POST: a set of startup procedures on laptops, desktops, and phones; checks the fan and power supply; if a critical issue is found, the boot process stops to protect the device.
• BIOS = Basic Input Output System — low-level software that controls basic functions and starts Windows, macOS, or Android.
• Accessing BIOS setup: no standard key — check the manual; commonly F1, F2, F10, F11 pressed at power-up; some devices (e.g. Lenovo Yoga) have a dedicated physical button.
• Lenovo Yoga example: BIOS screen shows product name and BIOS version; BIOS can be updated (e.g. for compatibility with a new hard disk or new CPU) but it is a dangerous low-level procedure — a failed update is very hard to recover from.
• CPU: Intel model numbers indicate generation (e.g. i3-4xxx = 4th Gen, ~7-8 years old at recording; 8th/9th Gen were current then).
• RAM: 8 GB (8192 MB) is enough for almost all applications and the standard today, except for gaming.
• Storage: two drives — a standard HDD plus an SSD (solid state, flash-based, fast).
• Licensing: Windows OEM license is coded into the BIOS/system board; after replacing a failed hard disk you can reinstall Windows with no product key.
• Learning hardware: read reviews and magazines (graphics cards, power supplies, phones); download the system-board manual (screenshots + definitions); buy an old desktop PC (~$20) as a test device.

Action Items

• Get any device, enter its BIOS, and identify product name, BIOS version, CPU, RAM, and disks.
• Download the manual for your system board and study the BIOS settings.
• Acquire a cheap old desktop (~$20), open it, and inspect the hardware and ports.

Key Terms/Concepts

• POST: Power On Self Test, boot-time hardware self-check.
• BIOS: Basic Input Output System, low-level firmware controlling device startup.
• SSD: Solid State Drive, fast flash-based storage.
• OEM product key: Windows license embedded in the BIOS/system board.

Chapter 2 — 2. Overview of Hardware - Part 2

Core Insights

• Port identification is a core general skill; story: a web-support job applicant failed an interview by not knowing which port connects a laptop to a projector (HDMI).
• USB color/size indicates speed: gray USB 2.0 vs colored USB 3.x vs small USB-C.
• Video connectors differ: HDMI carries video + audio; DVI and VGA are video-only; DVI (digital) is better than VGA (analog).

Detailed Notes

• Interview example: applicant for web support engineer at a hosting company was asked to connect a laptop to a projector and had no idea which port to use; the company refused to let him work with customers if he did not know HDMI.
• Back panel overview: USB ports, Wi-Fi antenna connectors, USB 3.1 ports. Gray USB ports are usually USB 2.0 (old standard); yellow/red/blue USB ports are much faster (USB 3.x); USB-C is a small port, even faster and better.
• Network Interface Card (NIC) port: connect a network cable for LAN/Internet access.
• Audio ports: microphone, line in/out, speakers; an optical connection gives the highest quality audio.
• Connector quick reference: USB → printers, mice, keyboards; HDMI/DVI/VGA → screens and graphics cards; HDMI → video AND audio; DVI and VGA → video only; DVI is better than VGA because it is digital while VGA is analog.
• The lecture closes by introducing one more port type (Ethernet) as a preview.

Action Items

• Identify every port on a real PC back panel and state its purpose.
• Memorize which connectors carry audio (HDMI) vs video only (DVI, VGA).
• Practice connecting a laptop to a projector or monitor.

Key Terms/Concepts

• USB 2.0 vs 3.x: older vs faster USB standards, often told apart by color (gray vs blue/red/yellow).
• HDMI: one cable carrying high-definition video and audio.
• DVI/VGA: video-only display connectors; DVI digital, VGA analog.
• NIC: Network Interface Card — the wired Ethernet (RJ-45) port.

Chapter 2 — 3. Basic IT Procedures

Core Insights

• Support work means following documented procedures step by step, not inventing unique solutions.
• Customer authorization comes first: verify the caller is entitled to open a ticket (PIN, serial number, prepaid contract).
• Requests are classified (incident, request for change, task) and each type has its own procedure.
• Do not memorize procedures — read them from the book/checklist so you never skip a step (pilot checklist analogy).

Detailed Notes

• Templates: every ticket to a support company receives the same greeting template; templates are standard for external customers (informal greetings only OK for internal users in small companies).
• Basic call procedure: receive client call → authorize the customer (PIN number, serial number, or proof of advanced payment) → verify they can open a ticket.
• Wrong/invalid PIN: follow the separate document describing that case; be extremely polite, never dismissive.
• Then classify: incident = something broken (cannot print, cannot send email, cannot open a website); request for change = planned modification (update the system, add memory); task = e.g. recommend a solution; many other options exist.
• In practice you receive a book of procedures and just follow it; agents put callers on hold — 'May I put you on hold for a minute? I have to check something.'
• Pilots are not allowed to run a checklist without a piece of paper or computer listing all steps, because you don't want to miss a step — same logic applies to support.
• Even if a company asks you to memorize, you should know where to start.

Action Items

• Practice classifying sample tickets as incident vs change vs task.
• Always verify entitlement (PIN/serial) before working a ticket, politely.
• When stuck, open the procedure document and follow it literally.

Key Terms/Concepts

• Incident: an unplanned breakage ('I cannot print').
• Request for Change: planned modification (update system, add memory).
• Task: non-breakage work such as recommending a solution.
• Authorization: proving a caller is entitled to support (PIN/serial).

Chapter 2 — 4. A User Needs Your Help!

Core Insights

• First action on every ticket: change its status (to In progress), then acknowledge the user.
• Answer the real question (which ports for a screen) with a clearly labeled screenshot, not bare text.
• Annotate images and paste them directly into the ticketing system (Snipping Tool → Edit → Copy, no file save needed).
• Close the loop: update status to resolved so everything is green and the customer is happy.

Detailed Notes

• Scenario: Kate opens a ticket — she wants to buy a new system board and asks which port she can use to connect her screens.
• Step 1: change ticket status to In progress; reply 'Hi Kate, I'm working on it'.
• Open the board picture and analyze the ports: on the left two ports for mouse and keyboard (PS/2-style); VGA and DVI for a screen; USB; network card port; audio ports.
• Prepare the answer: label all ports clearly so a non-expert understands, and keep the note neat.
• Capture the annotated board with the Windows Snipping Tool; no need to save the image — Edit → Copy, then paste it straight into the ticket.
• Send the final reply with the image and your signature; then change the status again to done — everything green, happy customer.
• Expect follow-up questions: difference between VGA and DVI, whether both can be used at the same time, whether two screens can be connected.

Action Items

• Practice the full ticket loop: status → acknowledge → investigate → annotated answer → resolve.
• Learn to annotate screenshots and paste clipboard images into ticketing tools.
• Prepare answers for common follow-ups (VGA vs DVI, dual monitors).

Key Terms/Concepts

• Ticket status: lifecycle state (In progress → resolved), shown green when closed.
• Snipping Tool: Windows screenshot utility; images can be copied to clipboard without saving.
• PS/2 port: round connector for mouse/keyboard found on the board photo.

Chapter 2 — 5. Commands you Need to Know

Core Insights

• Three core Windows commands for support: ipconfig, ping, shutdown — all run from cmd (Command Prompt).
• ipconfig shows the device's IP address; an IP address identifies a device on a network, like an ID, and is used to send data between two points.
• ping verifies a remote device is alive before starting a session; 8.8.8.8 (Google) is the classic test target.
• shutdown can reboot, log off, or power off, with a time delay and a force flag — and can be aborted.

Detailed Notes

• cmd: type cmd in Start to open Command Prompt; Properties lets you adjust font, layout, and colors (e.g. white background for readability).
• ipconfig: display/verify IP configuration; IP address = device identifier on a network, like an ID; devices use IP addresses to communicate and exchange data.
• ping : asks 'are you alive?' — check a device is up before starting a session to avoid failed transfers. Most popular target: 8.8.8.8 (Google, ~99.99% uptime); no reply → your internet is down. Windows sends 4 echo messages and reports 4 replies.
• shutdown usage: shutdown /r /t 60 /f — /r = reboot, /t = delay in seconds (60), /f = force all applications to close; the system warns 'your PC will be rebooted in one minute'. Cancel the schedule with shutdown /a (restart cancelled).
• shutdown supports reboot, logoff, or shutdown of a device from cmd; shutdown /? lists all available options.

Action Items

• Open Command Prompt and run ipconfig to identify your IP address.
• Ping 8.8.8.8 and an internal device to verify connectivity.
• Try shutdown /r /t 60 /f and cancel it with shutdown /a; read shutdown /? for the full option list.
• Customize cmd properties (font/layout/colors) for readability.

Key Terms/Concepts

• cmd: Windows Command Prompt, the shell for executing commands.
• IP address: unique identifier of a device on a network, used for routing data between endpoints.
• ping: ICMP-based reachability test; replies confirm the host is alive.
• 8.8.8.8: Google's public DNS server, 99.99% uptime, standard ping target.

---

Chapter 3 — 1. Task 1 - Benchmarking an SSD

Core Insights

• The manager originally sent three tasks; only one was completed before, so two remained open — service desk work means you do not ignore your manager's tickets.
• Task: connect to the remote machine T-01 and benchmark its SSD (solid state disk) with a dedicated disk-testing application — no option changes needed, just run the test.
• The Knowledge Base (KB) is the primary self-service resource: a KB article explained what to do, which software to use, and provided the link to it.
• Evidence is sent back through safe channels: a company network drive, or your own cloud (e.g., Microsoft OneDrive, iDrive) — never a customer's account.
• Final verdict: not the fastest SSD out there, but a decent budget SSD — then the ticket is closed.

Detailed Notes

• Setup: the laptop already has an SSD installed; the job is to measure how fast it reads and writes.
• Workflow: ticket was pre-assigned → change its status → connect to T-01 → paste the KB link → open the application.
• The benchmark app is simple: open it, run a test, do not change any options, press Start; it performs file/read-write operations to verify how fast the disk is.
• First-time tool use is expected — someone will show you how; in most cases it is really simple.
• Uploading the screenshot: use a dedicated network drive if available; otherwise your own cloud (OneDrive, iDrive) or whatever the company provides — do not use a customer's OneDrive or account.
• Sharing the result: create a share link restricted to yourself, then copy/paste or drag-and-drop the screenshot into the chat message to the manager (John), save, done.
• Close-out: answer the question (is it a fast SSD? — decent budget SSD, not the fastest) and close the ticket.

Action Items

• Practice the full ticket lifecycle: KB lookup → remote connect → run tool → capture screenshot → share evidence properly → report to manager → close ticket.
• Learn to interpret SSD benchmark results (read/write speeds) to judge whether a drive is budget or high-end.
• Set up a personal cloud share (OneDrive/iDrive) as an alternative when no network drive exists.

Key Terms/Concepts

• SSD (Solid State Drive): fast storage with no moving parts; its read/write speed is measured by benchmark tools.
• Knowledge Base (KB): internal documentation agents consult for steps, tools, and links on common tasks.
• Ticket: a recorded, assignable service request with status (in progress → resolved); closes after the work is done and verified.
• Network drive / cloud share: sanctioned storage for evidence screenshots; customer accounts must never be used.

Chapter 3 — 2. Task 2 - Installing an Agent

Core Insights

• Big-company service desks support hundreds or thousands of users/devices, so physically visiting every machine is impractical.
• Centralized management solves this: install one small agent per endpoint, then push any application (Microsoft Office, PDF viewer, daily-work apps) remotely with one click.
• The demo platform (transcribed in the captions as 9-9 / 9-9 pro) is usable both in corporate environments and on your own PC.
• The KB again drove the task: a short note said the agent installer would be waiting in the Downloads folder of T-01.
• Verification is dashboard-driven: an installed agent reports back to a central server, and seeing the device discovered confirms it is up and running.

Detailed Notes

• This is the final ticket of the chapter — task 3 of 3: an agent to be installed.
• Why agents: users constantly request software (Microsoft Office, viewers, etc.); installing per-device on hundreds of machines is not viable.
• Deployment model: install the lightweight agent on every device, then push any application you want from the console.
• Steps: consult KB (agent found in Downloads) → set ticket status to In Progress → connect to T-01 → open Downloads → see the agent installer → provide the password → install completes.
• Verification: open the platform dashboard (9-9 pro) — it shows one device has been discovered, meaning the agent is reporting to the server; the dashboard also exposes OS, domain name, users, IP addresses, and more for the laptop.
• Business value: e.g., push a PDF viewer to 500 devices with one click instead of touching each machine.
• Close-out: message the manager that the agent has been installed, mark the ticket completed — all three manager tasks are now done.

Action Items

• Practice the agent install flow: KB → connect → locate installer → authenticate → install → confirm the device appears in the dashboard.
• Explore an RMM/software-deployment tool (agent-based consoles like the one in this course, plus PDQ, Intune-style MDM, etc.) and push a test app to a lab machine.
• Learn to read managed-device inventory (OS, domain, users, IP) from the dashboard for remote troubleshooting.

Key Terms/Concepts

• Agent: small software installed on each endpoint that reports to a central server and enables remote software deployment/monitoring.
• RMM dashboard / management console: central view of discovered devices with inventory details (OS, domain, user, IP).
• Software push (remote deployment): installing an application to many endpoints at once from a central console via installed agents.
• Knowledge Base (KB): internal documentation telling agents where installers live and how to perform tasks.

---

Chapter 4 — 1. Our User Needs Your Help Again!

Core Insights

• The "Do I know this already?" question: on Windows 10, enable BitLocker for a user and check if the NIC has the latest drivers.
• You don't need to understand a feature in depth to fix/enable it — knowing what a tool is for and where to find it is enough for first-line work; errors get escalated.
• BitLocker is a full-disk encryption solution built into Windows, available on Windows Pro and above (not Windows 8/10 Home).
• BitLocker encrypts the whole drive, not individual files; without the key/TPM, a stolen disk drive is unreadable.

Detailed Notes

• Topic: operating systems — Windows, macOS, Linux, plus servers; the lecture series ends with a real ticket.
• BitLocker normally requires a TPM (Trusted Platform Module) chip, which stores the encryption keys.
• Enabling BitLocker without TPM is possible but not recommended and often against company policy — check policy first.
• Scenario: user Kate needs BitLocker enabled on a test laptop; ticket flow — open case queue → assign ticket to yourself → reply to Kate ("I'm going to work on it now") → mark ticket in progress.

Action Items

• Practice the ticket workflow: assign, reply to user, set status.
• Locate and review BitLocker options in Windows Pro before attempting enablement.

Key Terms/Concepts

• BitLocker: Windows full-disk encryption tool (Pro/Enterprise editions).
• TPM (Trusted Platform Module): hardware chip that stores BitLocker encryption keys.
• Ticket: tracked support request assigned to a technician, worked through statuses (open → in progress → closed).

Chapter 4 — 2. An Easy Job

Core Insights

• BitLocker enablement, part 2: connect to test laptop TI-01 via RAdmin and turn on BitLocker; admin passwords live in KeePass.
• If a laptop is about to sleep/go to sleep, do not attempt advanced operations (can break Windows) — call the user to plug in the power supply first.
• BitLocker failed because the laptop has no TPM module; the error message asked to "allow BitLocker without a compatible TPM" — Windows requires enabling one extra feature.
• When stuck: inform the customer of the delay, then escalate to manager/senior/2nd-3rd line, or re-assign the ticket — don't just Google.

Detailed Notes

• Start menu → type "BitLocker" → "Turn on BitLocker". Kate is not a local administrator, so provide your own admin credentials (from KeePass).
• Fix (senior-level, not first-line): run gpedit.msc (Local Group Policy Editor) as local admin → Computer Configuration → find "Allow BitLocker without a compatible TPM" → Enable → Apply/OK.
• Push the policy to the device: gpupdate /force.
• Reconnect and enable BitLocker: without TPM, a strong startup password is required (recommended ~20 characters; Windows rejects short ones).
• Critical step: back up the Recovery Key (save to file or print to PDF) — if you lose both password and recovery key, there is no backdoor and the disk is unrecoverable; store the file in a secure place (it can recover the password).
• Encryption options: encrypt used space only (device already in use); skip system check to avoid reboot.
• Recovery file contains a BitLocker Recovery Key plus an identifier used to recover the disk.
• Full encryption on an in-use laptop can take a few hours — can run in background, but better to leave it on and verify.

Action Items

• Practice gpupdate /force and gpedit.msc policy navigation.
• Always back up the recovery key and store it securely.

Key Terms/Concepts

• gpedit.msc: Local Group Policy Editor — tweaks local OS policies.
• gpupdate /force: refreshes/forces policy settings immediately.
• Recovery Key: 48-digit key (with identifier) to unlock an encrypted disk when the password is lost.
• Escalation: passing a ticket to a higher support line or senior technician.

Chapter 4 — 3. Overview of Microsoft Operating Systems - Windows 10

Core Insights

• Legacy Windows (XP, Vista, 7) are end-of-life and should not exist in corporate environments; most companies standardized on Windows 10 (free upgrade years ago).
• Windows 10 editions: Home, Pro, Enterprise; corporate environments run Pro and Enterprise, rarely Home.
• For hundreds/thousands of devices, administration is centralized via Windows Server with Active Directory — e.g. one policy can enable BitLocker on all machines instead of configuring each.
• Service-desk work: password resets, driver troubleshooting, using remote support tools.

Detailed Notes

• Remote support tools: RAdmin (Radmin) and RealVNC require licenses (free trials); TightVNC is free but lacks features (e.g. no encryption/RealVNC extras). These tools require being on the same local network (and firewall rule changes, not recommended).
• TeamViewer is a client-server solution: works across the internet (user in another country), no router/firewall changes; good for supporting dispersed users. Others: LogMeIn.
• DHCP leases IP addresses automatically (no manual assignment for 500+ laptops); DNS translates names into IP addresses (e.g. facebook.com → IP).
• Demo: ping facebook.com resolves via DNS; ipconfig (Windows) / ifconfig (Linux) shows your DNS server.
• Admins don't create accounts via Settings → Accounts; instead right-click This PC → Manage → Local Users and Groups → Users → New User.
• Device Manager shows all hardware; right-click device → Properties → Update Driver / Driver Details / Uninstall Driver. New hardware or misbehaving devices usually need a driver update; Windows can auto-search for the best driver.

Action Items

• Try ipconfig and ping in CMD; open Device Manager and inspect drivers.
• Compare a remote tool like TightVNC vs TeamViewer.

Key Terms/Concepts

• Active Directory: central management of devices, users, permissions, and policies.
• DHCP: automatically assigns IP addresses to devices.
• DNS: translates hostnames (facebook.com) into IP addresses.
• Device Manager: hardware inventory and driver management console.

Chapter 4 — 4. Let's Connect to MacBook Pro!

Core Insights

• TeamViewer connects remotely to a MacBook Pro across the internet without touching routers/firewalls — unlike RAdmin, which works only on the local network.
• TeamViewer is free for home users but requires a license for commercial/support use.
• macOS security blocks remote control by default: the app must be allowed under System Preferences → Security & Privacy → Accessibility, or TeamViewer can't control mouse/keyboard.

Detailed Notes

• The customer runs TeamViewer as a single file (no install); it shows an ID and a one-time password, or "unattended access" with a fixed password — provide both to connect.
• Basic admin tasks: Users & Groups (unlock the padlock to make changes), account creation, wallpapers.
• Bluetooth problems: usually fixed by turning Bluetooth off/on or disconnecting and reconnecting the device.
• Printers can be added in Settings; backups use Time Machine (can exclude items).
• Finder: Favorites, Locations, Tags (similar to Windows). End-user apps to know: Maps, Messages, Contacts, Calendars, Notes.
• Networking: wireless settings, DHCP for IP assignment (don't assign static IPs to end users), view/connect/disconnect networks, change passwords.
• Remote-session pitfall: never disconnect the wireless network while connected remotely — the session drops; keep a backup path (wired connection or second NIC) when testing wireless.
• Activity Monitor ≈ Windows Task Manager; Terminal: ifconfig (like ipconfig), ping.
• Recommendation: spend 30–45 minutes clicking around a MacBook Pro to learn it.

Action Items

• Practice a TeamViewer remote session and the Accessibility permission setup.
• Explore System Preferences and Time Machine.

Key Terms/Concepts

• TeamViewer: internet-based remote support tool (ID + password).
• Accessibility permission: macOS gate that lets apps control the desktop.
• Time Machine: macOS built-in backup tool.
• Activity Monitor: macOS task/process manager.

Chapter 4 — 5. What to Expect From a Linux Device

Core Insights

• Multiple OSes can run on one machine via virtualization — e.g. VirtualBox; the course's extra lecture (from the ethical hacking course) covers VirtualBox + Linux install step by step.
• Demo uses Kali Linux, a security-focused Linux distribution with many pre-configured tools; with VirtualBox you can open one file and have Linux running within minutes.
• Linux has a GUI for many tasks, but the terminal and commands are central; 80–90% of support jobs are Windows, so Linux support is niche but real.

Detailed Notes

• GUI basics: change wireless/wired settings, view IP address, DHCP or static IP, turn the network card off/on; file manager shows Documents, Downloads, Desktop, Home, Other locations, Network.
• Terminal commands: ifconfig — show IP address and network settings; ping — continues pinging until stopped with Ctrl+C; clear — clear the screen; ls — list folders and files; cd — change directory (e.g. cd Documents then ls); mkdir — create a directory.
• Use Up/Down arrow keys to recall/reuse recent commands; list previously used commands (history).
• Run man <command> to learn what a command does and see all its switches.

Action Items

• Install VirtualBox + Kali Linux and click around the GUI.
• Practice ls, cd, mkdir, ifconfig, ping, man in a terminal.

Key Terms/Concepts

• Virtualization: running multiple operating systems on one device (VirtualBox).
• Kali Linux: Linux distribution designed for security testing.
• ifconfig / ls / cd / mkdir / man: core Linux terminal commands.

Chapter 4 — 6. Windows Server 2016

Core Insights

• Only Windows Pro/Enterprise can be joined to a domain and managed by Windows Server — a key difference vs Home.
• As a service desk agent you rarely connect to servers directly; when you do, it's via RDP (Remote Desktop Protocol), built into Windows, not RAdmin/TeamViewer.
• RDP takes over the session: the logged-in user sees "someone else is using your computer" and can't watch — bad for user support, great for managing servers in a data center.
• Active Directory Domain Services (AD DS) centralizes users, groups, permissions; the main service-desk tool is Active Directory Users and Computers.

Detailed Notes

• Servers can be cloud-based, dedicated hardware, or a VirtualBox VM.
• AD structure: a domain (e.g. test.local) is the logical container that devices join; folder-like items are Organizational Units (OUs), not folders.
• Create user: right-click OU → New → User; naming follows company procedure/KB (e.g. M.Smith, MikeSmith, Mike.Smith) — check the knowledge base/manager, especially for external companies.
• Password: set initial password; "user must change password at next logon" option enforces self-chosen passwords.
• User properties → Account: Disable account when an employee leaves (don't delete immediately — they may have files/access); Reset Password (hand temp password, user changes it on login); Unlock account; Logon Hours — restrict when a user can log in (e.g. Tuesday until 3:30 PM).

Action Items

• In AD Users and Computers, practice creating a user and toggling logon hours.
• Learn your company's AD naming convention.

Key Terms/Concepts

• RDP: Microsoft Remote Desktop Protocol for remote server/PC connection.
• Domain: logical group of devices managed by Active Directory.
• OU (Organizational Unit): AD container for users/computers/groups.
• Logon Hours: time restrictions for user sign-in.

Chapter 4 — 7. Yet Another Ticket - Troubleshooting

Core Insights

• When asked to verify whether a machine crashed recently, start with Event Viewer: Windows Logs → Application, Security, Setup, System — not all errors are critical.
• Reliability History gives a graphical timeline; red entries mark critical problems (system crashes, RAM issues) and can be saved as a report.
• The Microsoft Management Console (mmc) bundles all admin tools — Device Manager, Event Viewer, Disk Management, Services — in one console via snap-ins.
• Services are small background applications; when a print job fails, restart the print server/spooler service.

Detailed Notes

• Event Viewer: investigate specific events (e.g. event 99) — here it explained why the manager asked to check TI-01 (machine cannot talk to a server?).
• Reliability History: filter/save as a report; used to answer "did this PC crash in the last couple of weeks?" — save the report and reply to the manager.
• Open mmc via Win+R → type mmc (Microsoft Management Console) → File → Add/Remove Snap-ins → pick Device Manager, Event Viewer, Disk Management, Services — all in one place.
• To manipulate services with admin rights: right-click CMD → Run as administrator, then run mmc so the whole console inherits admin rights, open Services, right-click the service → Restart.
• Typical request flow: verify crash history → filter for critical errors → save a report → update/close ticket.

Action Items

• Practice building an mmc console with Device Manager, Event Viewer, Services snap-ins.
• Restart a service (e.g. print spooler) and check Event Viewer after.

Key Terms/Concepts

• Event Viewer: Windows log viewer (Application/Security/Setup/System).
• Reliability History: graphical crash/problem report tool.
• mmc: Microsoft Management Console — hosts administrative snap-ins.
• Service: background application managed via the Services console.

Chapter 4 — 8. Installing Malwarebytes using Ninite Pro

Core Insights

• This task is a change (not an incident/issue): push Malwarebytes to TI-01 — the manager assumes you already know the toolchain (Ninite Pro, RAdmin, KeePass), so the ticket gives only the goal, not steps.
• Ninite Pro silently deploys applications in the background — the user sees no prompts; a desktop icon simply appears after a few minutes.
• Malwarebytes complements antivirus (works alongside Kaspersky, Bitdefender, etc.); it isn't sufficient as the only protection.

Detailed Notes

• Workflow: open the request → assign to yourself → set status "implementing" → open Ninite Pro (laptop TI-01 listed) → Apps/Ops → select Malwarebytes → deploy/install to TI-01.
• Connect to TI-01 via RAdmin to verify — no pop-ups or messages appear on the user's screen during silent install.
• Ninite Pro also updates installed applications when new versions are released.
• Malwarebytes licensing: 14-day trial; the free version does not run in the background — you can scan on demand but get no real-time protection.
• Close the change: note the installed version (e.g. 4.0.4.49), describe everything in detail in the ticket, save — change complete.

Action Items

• Practice a Ninite Pro silent install and verify via remote session.
• Try Malwarebytes trial/free scan to see on-demand vs real-time modes.

Key Terms/Concepts

• Change request: planned, approved modification (vs incident/issue).
• Ninite Pro: centralized silent app installer/updater.
• Malwarebytes: anti-malware scanner that complements traditional antivirus.

---

Chapter 5 — 1. Installing Office 365 Apps

Core Insights

• Service desk work involves many Microsoft Office issues, often from non-technical users (real tickets: "What's PowerPoint?", "red icon on my desktop") — patience and plain-language explanations are core job skills.
• Outlook is the most-supported Office app in business: it manages email, calendars, and contacts; managers depend on it, so Outlook tickets can be higher priority.
• Office 365 licensing is complicated (Home vs Business, E1/E3/E5, Office 365 vs Microsoft 365); a service desk analyst must study the options to recommend the right solution.
• Since Office 365, Office is subscription-based (pay monthly/yearly, never own it) — a shift from the old one-time purchase model.

Detailed Notes

• Presenter's package: Office 365 Business. Two reasons chosen: (1) Outlook is NOT included in many Home packages; (2) Business allows commercial use — Home licenses don't.
• License rules: Home = up to 6 family members; Business = 1 user but installable on up to 5 devices that the company owns.
• Large companies (hundreds/thousands of users): Office 365 E3 or E5 — cheaper (~$8/month per user), more features.
• Confusing lineup: Office 365 / Microsoft 365 / Home 365 / Office Business 365 / Office 365 E1-E5. When in doubt, a Microsoft partner can recommend the best fit.
• Install: log in at office.com → download "Office 365 apps" → one click installs everything (no prompts asking which apps).
• Older versions (e.g. Office 2010): download via Microsoft link, enter product key, verify, package downloads (presenter verified this works).
• Cost comparison: Office 2010 bought once 11 years ago (£300-400); now ~$20-30/month with flexibility to pause/resume — no $500 upfront. Prediction: even Windows itself will become subscription-based.

Action Items

• Practice explaining Office basics to non-technical users without jargon.
• Study the current Office 365/Microsoft 365 license comparison (Home vs Business vs E3/E5) so you can recommend plans.
• Walk through an Office install from office.com on a test machine.

Key Terms/Concepts

• Office 365 / Microsoft 365: subscription plans for Office apps; names overlap confusingly.
• Office 365 E3/E5: enterprise plans, cheaper per user at scale.
• Product key: code needed to download/verify older, non-subscription Office versions.
• Subscription model: pay periodically to use software; you never own the license.

Chapter 5 — 2. Outlook and Emails

Core Insights

• Outlook can be used as a web app (Outlook on the web/OWA) or as the desktop client; both work simultaneously and synchronize.
• Exchange-based accounts (Microsoft Exchange / Exchange Online — a paid Microsoft email server service) auto-configure in Outlook: just enter the email address, no server details needed.
• Non-Exchange accounts (Gmail, Yahoo, own server) require incoming/outgoing server settings — the most popular interview question at service desk hiring.
• Data file types: Exchange uses OST (syncs with server); POP3 accounts store mail in PST — backing up email = copying the PST file.

Detailed Notes

• Demo account: Exchange Online address (onmicrosoft.com domain); you can later move to your own domain; presenter cancelled it after recording.
• Setup on a new PC: Outlook searches for accounts automatically; if already logged in with the same account, nothing to configure.
• Incoming server: POP3 protocol, port 110 (port = numeric identifier of a service); downloads email to the PC.
• Outgoing server: SMTP (Simple Mail Transfer Protocol), port 25.
• Encryption option: SSL/TLS — the same tech behind HTTPS in your browser (the "S" = secure); enforced by the email administrator.
• Adding Gmail: Outlook auto-detects the server; your own server/Yahoo requires filling in all mailbox fields manually.
• Exchange behavior: emails synchronize with the server (no copying needed) — unlike POP3 which downloads and stores locally. IMAP exists for other accounts (mentioned, out of scope).
• Common Excel ticket: spreadsheet prints across two pages → remove page view, switch to landscape, change size — everything fits one page.
• "Account error" in Office apps: Office uses the Windows login name (e.g. Mike), but the license belongs to another user (Marius) → click the correct licensed account. Recommendation: keep everything under one name per user to avoid this.

Action Items

• Memorize port 110 (POP3 incoming) and port 25 (SMTP outgoing) — classic interview questions.
• Practice setting up Gmail vs Exchange accounts in Outlook on a test machine.
• Learn where OST/PST files live and how to back up by copying the PST.

Key Terms/Concepts

• POP3: incoming email protocol, port 110, downloads mail to the client.
• SMTP: outgoing email protocol, port 25.
• SSL/TLS: encrypted connection protocol (same as HTTPS).
• OST/PST: local Outlook data files; Exchange uses OST, POP3 uses PST.
• Exchange Online: Microsoft's cloud email service (paid).

Chapter 5 — 3. Yet Another Ticket - Issues With Microsoft Word

Core Insights

• Walkthrough of a real ticket: "How can I password-protect my doc?" — resolved by calling the user and guiding them through Word's settings.
• Word offers two separate passwords: one to OPEN the document, one to MODIFY it.
• There is NO official way to recover a password-protected Word document — no master password, no backdoor — even for IT.
• The only recovery path is a brute-force password-cracking tool, and only with manager + security team approval; never recommend it to end users.

Detailed Notes

• Call-based resolution flow: confirm the user has the document ready → File → Save As (any location) → in the Save As dialog open Tools → General Options → set "password to open" and/or "password to modify" → save.
• Polishing the ticket: add a note to the ticket documenting the resolution.
• Bonus question scenario: user forgets the password → IT cannot open the file officially.
• Brute force attack: an application tries every possible combination one by one (aaa, aab, aac…). It's a guessing process, not password "recovery"; can take very long for strong passwords.
• Policy guidance: password-cracking is not a normal service desk task, and recommending tools to customers may be unauthorized; always escalate to your manager and security team first.

Action Items

• Practice password-protecting a Word doc (open + modify passwords) and test both prompts.
• Know your company's policy on password recovery/cracking before handling such requests.

Key Terms/Concepts

• Password to open / password to modify: two independent protections in Word (Tools → General Options in Save As).
• Brute force attack: trying all possible password combinations until one works.
• Backdoor/master password: does NOT exist for Office documents — a common user misconception.

---

Chapter 6 — 1. Basic Networking Terms

Core Insights

• A network exists whenever at least two devices are connected and exchange data — it does not require a cable.
• Every device on a network has a MAC address: a unique, manufacturer-assigned physical hardware address that you do not configure yourself.
• Networks are classified by size: PAN (personal), LAN (local area) and WAN (wide area); a WAN connects two LANs via a router.
• You can find your own MAC address and default gateway on Windows with the ipconfig command.
• The best way to learn networking is to log in to a real router and explore its settings.

Detailed Notes

• MAC address:
  • Physical hardware address, unique per device, assigned by the manufacturer at the factory (e.g., to the wireless card inside a laptop) — you don't change it, you just use it.
  • Used by devices inside a local area network for communication.
  • View it on Windows: run ipconfig, find your network card, and read the Physical Address field (same thing as MAC address).
• Network components:
  • Network Interface Card (NIC) plus a network cable (RJ45 connector) for wired connections; a wireless NIC is used for Wi-Fi instead — either works because the definition of a network is just two devices exchanging data.
  • Example: a Bluetooth headset paired with a phone streaming Spotify is a valid network (a PAN — Personal Area Network).
  • LAN: covers a limited area — one building, one office, one big site.
  • WAN: covers a large area; e.g., connecting a LAN in New York to a LAN in Washington creates a WAN.
  • Switch: the device used inside a LAN to connect many devices — printer, server, scanner, computers. (Pronunciation aside: router, not "router".)
• Default gateway:
  • Shown in ipconfig output; it is the address of your router.
  • At home, open a web browser and type your default gateway IP — ~99.99% of the time you can connect to the router's web interface.
  • Login needs a username/password: often printed on a label on the router, sometimes sent by email from your company, or set by you when you first configure a new router you bought.
• Next lecture preview: a demo ASUS router at demo.ui.asus.com so you don't have to touch your own router if you're not comfortable.

Action Items

• Run ipconfig on your PC and locate your Physical Address (MAC) and Default Gateway.
• Open a browser, type your default gateway IP, and log into your own router.

Key Terms/Concepts

• MAC address: unique physical hardware address assigned by the manufacturer, used within a LAN.
• NIC: Network Interface Card — wired or wireless hardware enabling network connection.
• RJ45: standard connector for network (Ethernet) cables.
• PAN / LAN / WAN: personal / local / wide area network, scaling by geographic coverage.
• Switch: LAN device that lets many devices connect and communicate.
• Router: device that connects networks (e.g., LAN to WAN/Internet).
• Default gateway: the router's address on your local network; used to reach other networks.

Chapter 6 — 2. Let's Connect to a Router

Core Insights

• Logging into a router shows a dashboard/network map: Internet status, number of connected devices, and how each device is connected.
• Better routers support more than one Internet uplink (e.g., broadband + 4G/LTE via USB dongle) and can use both at the same time.
• New routers often ship with an open (no-password) wireless network — you MUST secure it before use.
• Use WPA2 (or WPA3 if available) for wireless security; avoid WPA and WEP.
• The router's LAN settings show the DHCP server, which automatically assigns IP addresses to all devices on the network.

Detailed Notes

• Demo used: an ASUS demo router (not a home router) — logging in reveals a dashboard with a live view of what is happening.
• Network map: similar to a dashboard; in the demo it shows 7 devices connected; clicking the device list shows how each one is connected.
• Multiple Internet links:
  • Cheap routers: only one Internet connection option.
  • More expensive routers: multiple options — e.g., a broadband connection plus a USB dongle with a 4G/LTE SIM as fallback.
  • This is why routers have a WAN port and can use both connections simultaneously: broadband as the primary link and the secondary as backup.
• Wireless security checklist for a brand-new router:
  • Out of the box many routers (e.g., ASUS) arrive as an open system — no wireless password; anyone could join your LAN.
  • Before using it: go into wireless settings and enable WPA2 (choose WPA3 when possible).
  • Avoid legacy protocols WPA and WEP — they are insecure.
• LAN tab: shows the DHCP server status — DHCP means the router automatically assigns IP addresses to all devices in the network. Also offers wireless configuration options.

Action Items

• Log into your router (or use a vendor demo router) and read the network map/dashboard: how many devices are connected and how.
• Check your wireless security mode and change it to WPA2/WPA3 if it is WEP, WPA, or open.
• Identify your router's WAN/Internet options and understand primary vs. secondary (4G/LTE failover) connections.

Key Terms/Concepts

• Network map/dashboard: router homepage showing connected devices and link status.
• WAN port: router port for the Internet/upstream connection.
• USB dongle / 4G LTE: alternative Internet uplink plugged into the router.
• DHCP: service on the router that auto-assigns IP addresses to LAN devices.
• WPA2 / WPA3: modern, secure Wi-Fi encryption standards.
• WEP / WPA: older, weak Wi-Fi security — avoid.

Chapter 6 — 3. GPO - Group Policy Object

Core Insights

• GPO (Group Policy Object) lets IT control settings on many computers at once instead of configuring each device manually.
• Earlier lectures showed pushing applications and installing an agent centrally (e.g., no need to install or update a PDF viewer on every device individually).
• GPO is the answer to "what if I need to change something on 500 devices?" — you change it once, centrally.
• GPO enforces end-user restrictions: which desktop icons are allowed, wallpaper, network settings, and more.
• Policies are assigned per computer or per user account in Active Directory.

Detailed Notes

• Motivation: walking to every device is not feasible; centralized management is required at scale (change a setting on 500 machines at once).
• Use cases:
  • Control what end users are allowed to do with their company laptop (it is meant for work).
  • Prevent users from changing network settings or changing their wallpaper.
  • Enforce a corporate standard: define which icons appear on the desktop, force a specific wallpaper (e.g., a bank's logo on every screen — important when employees share screens with customers or clients accept policies on-screen).
• Scope: GPO can modify hundreds to thousands of Windows settings/options — going through all of them can keep an admin busy for weeks.
• Assignment: after configuring a policy, you assign it — to a computer object or to a user account.
• Context: GPO is an Active Directory feature — a powerful toolset for managing all devices in an organization.

Action Items

• Explore the Group Policy Management console in a lab/Active Directory environment: create a sample GPO.
• Practice assigning a GPO to a computer (computer configuration) vs. a user (user configuration).
• Try small settings in a test environment (e.g., restrict desktop icons or force a wallpaper) before touching production.

Key Terms/Concepts

• GPO (Group Policy Object): central set of rules applied to users/computers in Active Directory.
• Active Directory: directory service that stores user/computer accounts and the target for GPO assignment.
• Computer vs. User configuration: a GPO can target either the machine or the logged-in account.
• Agent/central deployment: pushing software (e.g., PDF viewer) centrally rather than installing per device.

---

Chapter 7 — 1. ITIL in a Nutshell

Core Insights

• ITIL is the framework behind most service desk procedures; a full official course lasts ~3 days (8 hours/day), but a service desk agent only needs a handful of everyday terms.
• ITIL 4's service value chain is a chain of activities: Plan, Improve, Engage, Design & Transition, Obtain/Build, Deliver & Support.
• The four dimensions of service management: organization and people, value streams and processes, partners and suppliers, information and technology — useful to impress managers, but not used daily.
• Terms you will be assumed to know on the job: SLA, OLA, CAB, ECAB (emergency CAB), and change freezes.
• Everything is aimed at delivering the best value and best service to customers.

Detailed Notes

• SLA (Service Level Agreement): agreed service targets — e.g., "4 hours to reply to my customer, 16 hours to close the ticket." It is the agent's responsibility. Data centers quote SLA uptime, e.g., 99.9%.
• OLA (Operational Level Agreement): an agreement between an IT service provider and another part of the same company (department-to-department, e.g., one department and another).
• CAB (Change Advisory Board): approves changes. Example: deploying a cloud-based antivirus solution on 500 devices is a big change that needs approval — unlike fixing a ticket about password-protecting a Word document.
  • Process: submit a special document → get invited to a CAB conference call → present the change so both technical staff and managers understand what you want to achieve → include a backup plan (what you'll do if something goes wrong) → show how you will measure everything. You fill in a template with several fields.
• New service desk agents are rarely asked to raise changes as a first task; changes are often handled by a different department or second-line staff.
• ECAB (Emergency CAB): for urgent changes. Example: Cisco announces a critical firewall bug; the fix requires a firmware update and reboot — that is still a change, but a normal CAB meeting (weekly/monthly) is too slow; you must act within hours, so you go to an emergency CAB and justify why it cannot wait.
• Change freeze: e.g., at Christmas, no changes are introduced because something can go wrong; any change must be justified as an emergency. Change calendars in your applications flag freeze periods and warn you.

Action Items

• Memorize SLA / OLA / CAB / ECAB definitions and the service value chain activities before interviews — most applicants can't even define SLA.
• Practice the classification test: is this a routine fix, or a change that needs CAB/ECAB approval (scale = number of devices affected)?

Key Terms/Concepts

• SLA: Service Level Agreement — agreed response/closure targets (e.g., reply in 4h, close in 16h).
• OLA: Operational Level Agreement — service agreement between parts of the same company.
• CAB: Change Advisory Board — approves non-urgent changes with documented plans.
• ECAB: Emergency Change Advisory Board — fast-track approval for changes that can't wait days.
• Change freeze: period (e.g., holidays) when changes are forbidden unless justified as emergencies.
• Service value chain: ITIL 4's chain of value-adding activities.

Chapter 7 — 2. ITIL in a Nutshell - Part 2

Core Insights

• Service operations run on three ticket types: incidents (something broken), problems (root cause of many related incidents), and service requests (a user asking for something to change).
• Escalation is two-way: you escalate what you can't solve, and unsatisfied users can escalate you to your manager behind your back.
• Continual Service Improvement (CSI) — analyzing, reviewing, and recommending improvements — is part of the job, including flagging security issues.
• Documentation discipline matters: notes must let the next person understand what happened; configuration items must be updated whenever details change.
• Mistakes are inevitable; the goal is to learn and progress from first line toward second/third line.

Detailed Notes

• Incident: something broken that you fix — user "can't print," "can't connect to the Internet," "can't log in."
• Problem: when many incidents share one cause — e.g., 15 calls about an Exchange server / "I can't download my emails" — it is not just an incident; it affects many users and must be raised and fixed.
• Service request: user wants something changed. Sometimes you can't finish a task yourself — e.g., an earlier task where there was no TPM module and someone had to enable a security policy (BitLocker); you escalate: "I don't know how to do it, can you help me please."
• Customer escalation: in most ticketing systems the user has an escalation option; if unhappy, they can escalate to your leader/manager without you knowing — you find out days later when your manager calls a meeting to understand what went wrong. In a good company it is treated as a learning exercise; sometimes it is just an upset user.
• CSI: analyze, review, make recommendations to improve services; tell your manager or a senior person — a really small thing can make a huge difference.
• Security reporting: if you notice a customer saved a document with a password in clear text, don't lecture the user; discuss it with your manager, who takes it from there.
• Monitoring: systems send alerts, events, and incidents; your job is to sort them out.
• Documentation: keep knowledge base pages and notes up to date — e.g., if you change a server's IP address, modify the document straight away: go to assets and update the configuration item. Someone will use that information within hours; when you go home, a colleague must be able to read your notes and reconstruct what happened. Same applies to tickets, incidents, and changes: describe what the problem was.
• Handover: many places have a page to monitor/update what happened in the last 8/16/24 hours — especially important before escalation, because the person you escalate to knows more than you and will challenge obvious mistakes.
• Cautionary example: first-line network agent, customer says "my internet is down"; agent asks "can you see the lights on your router?" — customer says no → agent escalates with "your router is broken." A field engineer was sent on-site to replace the router when the real fix was simply pushing the power cord back in. Verify a bit more before escalating.
• Expect to make mistakes — it's not a question of if but when; learn from them and you'll become a second/third line guy in a few years.

Action Items

• Practice classifying tickets as incident / problem / service request and deciding when to escalate vs. fix yourself.
• Build the habit of writing notes a colleague could act on without talking to you; keep CMDB/configuration items current when anything changes.

Key Terms/Concepts

• Incident: unplanned interruption (e.g., can't print) that must be restored.
• Problem: underlying cause of multiple related incidents affecting many users.
• Service request: user-initiated request to change or provide something.
• Escalation: raising a ticket to higher/specialist support; also customer complaints rising to management.
• CSI: Continual Service Improvement — analyzing and recommending service improvements.
• Configuration item (CI): a tracked asset (e.g., a server and its IP address) that must stay accurate.
• TPM/BitLocker: example from earlier tasks — a missing TPM module required enabling a security policy.

---

Chapter 8 — 1. An Interview Process

Core Insights

• Job hunting follows a standard pipeline: advert → application (CV + cover letter) → screening call → interview → offer; expect each step to take time.
• No single job site lists everything — apply directly on company career pages; many firms only advertise on their own website.
• Recruiters may spend only ~5–6 seconds on a CV when there are hundreds of applications, so yours must be flawless and instantly scannable.
• Even HR screeners can throw basic technical questions (e.g., "what port is SMTP on?" — port 25), so review fundamentals before the first call.

Detailed Notes

• Job sources: online adverts, direct applications to companies, and recruitment agencies working on behalf of firms; never rely on one website/engine as the only source — many big companies post jobs only on their own site.
• Application materials: a polished CV using a clean template, plus a cover letter; if English is not your native language, have a native speaker check it — small mistakes look terrible against hundreds of applicants; keep a professional LinkedIn profile.
• Patience: it can take a few weeks before anyone even opens your application.
• Screening phone call (agency or HR): typical questions — availability, salary expectation, experience, "tell me about yourself", why you want this job, why you applied, why you want to change jobs, availability for an on-site interview, what you want to achieve in the next five years.
• Technical screening: HR staff can ask technical questions from a prepared list; example given: SMTP port number (port 25 — "you know it or you don't"). Review the course's final quiz — a Top 50 interview questions list.
• Interview: on-site or remote (Skype or the company's own platform); a short meeting with a manager and an engineer; many companies give a technical test (often pure memorization), while conversational interviews let you show real understanding. Find a quiet place, stay relaxed, project that you're the best candidate.
• Offer stage: an e-mail saying "we can hire you — here is what we can offer."

Action Items

• Apply directly on big local companies' career sites, not only job portals.
• Get CV/cover letter proofread; polish your LinkedIn profile.
• Prepare answers to the standard screening questions; review the Top 50 interview questions quiz.
• Drill basic protocol/port facts (SMTP = 25) in case HR tests you.

Key Terms/Concepts

• SMTP: email-sending protocol; its well-known port is 25.
• Agency: a third party recruiting on a company's behalf.
• Cover letter: short letter accompanying the CV that tailors you to the role.

Chapter 8 — 2. Tips for you

Core Insights

• You will land an IT job if you are patient, competent, and visibly willing to learn — but it takes time.
• A CV with zero experience must still show proof of effort: completed courses, home labs, tools actually touched.
• You can manufacture experience: freelance small jobs, be active on discussion boards, stay current on hardware/software.
• Lying on a CV backfires — managers are often technical and will probe claims with questions.

Detailed Notes

• Don't send a CV saying "I know nothing about IT": show something — completed online courses (not a Microsoft certificate, but still evidence), e.g. "I completed 15 courses, I created a few labs."
• Sample CV line for no experience: "I built a big lab at home — installed Active Directory, Windows Server, Windows 10; used PRTG for monitoring; used a software-deployment/RMM tool to push software to my end devices; played with Kaspersky Cloud/Endpoint Protection."
• Freelancing as a starting point: post an ad ("I can fix your wireless issues"); a client calls, you pop in and fix it.
• Stay active online: join discussion boards to ask and answer questions; read tech magazines; keep up to date on hardware/software — e.g., be able to recommend a NAS (network-attached storage) device on request.
• Career reality: IT is not a 9-to-5 job — continuous learning, labs, and exams; the payoff is helping people, good pay, job security after a few years, and specializations (networking, cloud, Microsoft, Cisco).
• Don't lie: never claim "I installed 500 servers in the last five years" if you installed a couple in a virtual machine; as a technical manager he routinely asks a few technical questions, surprising candidates.
• Mindset: stay patient, hope someone gives you a chance — it will happen.

Action Items

• Build a home lab (Active Directory, Windows Server, monitoring, deployment tool) and list it on your CV.
• Take small freelance IT jobs (e.g., fixing home Wi-Fi).
• Join discussion boards; read tech news/magazines weekly.
• Keep every CV claim honest — expect technical verification in interviews.

Key Terms/Concepts

• NAS (Network-Attached Storage): dedicated file-storage device on the LAN.
• Active Directory: Microsoft directory service managing domain users/computers.
• PRTG: network and IT infrastructure monitoring tool.

Chapter 8 — 3. A Chat with an HR Specialist

Core Insights

• The #1 first-interview mistake is criticizing your previous employer — the interviewer assumes you'll do the same to them after you leave.
• Timing matters: arriving late reads as chronically late to work; arriving far too early forces a rushed, non-relaxed start; no-shows mean you'll likely never be interviewed there again.
• Never bring family (parents, children, partner/spouse) — it signals home difficulties and that you may get called away from work.
• Skills claims without proof read as lies: any stated skill needs a concrete example or you're immediately disqualified.

Detailed Notes

• Dress professionally even if the workplace is casual: be clean, pressed, and ready; don't assume casual wear is acceptable — the HR specialist recounts candidates arriving in pajamas and slippers.
• Preparation: practice interviewing with someone; read the company website; understand what the company does and who its clients are; bring that research to the interview to show you've done your homework.
• Social media: recruiters look up your name and view your pages; unflattering pictures or content are another automatic disqualifier.
• Compiled with colleagues into a short list of the most important mistakes — these apply to first interviews generally.

Action Items

• Never bad-mouth former employers in an interview.
• Arrive on time (not late, not excessively early); never be a no-show.
• Attend alone, professionally groomed and dressed.
• Prepare 1–2 concrete examples per claimed skill; practice interviewing with someone.
• Audit and clean social media profiles before applying.

Key Terms/Concepts

• No-show: failing to attend an arranged interview; never acceptable, burns the bridge.
• Recruiter: person screening/placing candidates (agency or company HR).

Chapter 8 — 4. An Interview With an IT Analyst

Core Insights

• Believe in yourself and do your homework: understand the service desk concept and the ITIL framework — don't just follow it, understand the standard.
• SLA ≠ resolution deadline: it's the time to acknowledge/respond to the ticket (a 20-minute SLA means acknowledge within 20 minutes, not resolve), then keep updating the ticket as you work.
• Attitude beats experience: he accepted a sys admin offer with zero sys admin background by saying "I'm willing to take this job 100% if given the opportunity" — the manager invested in him.
• Always ask about career prospects in interviews, and read the whole job description so you know exactly what products/expertise the company wants.

Detailed Notes

• Guest's path: 10+ years in service desk roles, then team lead, then system admin; current interest leaning toward security.
• Interview prep: follow and understand ITIL (the ideal framework for service desk work); people get scared of SLA — clarify the acknowledge-vs-resolve distinction; e.g., 20-minute SLA = acknowledge the ticket in 20 minutes ("we are working on it, it will take some time") and post updates on the ticket for that user.
• Learning: Udemy courses at good prices are worthwhile refreshers (he used them himself); get certifications and relevant education; update yourself daily — "if you're out for a while, you're outdated."
• Job expectations: service desk work requires understanding how IT/business functions work and basic troubleshooting; people already do IT themselves (smart TV example: unplug the cable, switch input, restart, update) — service desk scales that up.
• Job description: nowadays it lists the products they need expertise in — read it thoroughly and understand the requirements before applying.
• Most important interview question: "What is my career prospect down the road if I join the company?"

Action Items

• Learn the ITIL framework; practice explaining SLA as acknowledgment time vs. resolution time.
• Adopt a "willing to learn, give me the opportunity" attitude when offered stretch roles.
• Ask about career progression in every interview; study the full job description first.

Key Terms/Concepts

• SLA (Service-Level Agreement): agreed response (acknowledgement) time for tickets, not necessarily resolution time.
• ITIL: IT service-management framework/standard (incident, problem, change processes).
• Service desk vs. sys admin: front-line ticket handling vs. server/domain administration — adjacent but different skill sets.

---

Chapter 9 — 1. AV in the Cloud - We all Have to Keep Learning!

Core Insights

• It is OK (and professional) to say "I don't know" or "I've never used this tool before" — even senior IT people must learn new tools every day.
• Cloud-based antivirus management (Kaspersky Endpoint Security Cloud / Cloud and Point Protection) centralizes all AV admin in one web console: deploy agents, see infections, modify policies.
• Before deploying to a paying client, the presenter tested the solution hands-on in a trial tenant — the lesson is to always test unfamiliar software first.
• Deploying AV via admin-controlled packages is preferred over asking end users to install it themselves.

Detailed Notes

• Kaspersky Endpoint Security Cloud: one console/website/dashboard to manage all antivirus applications.
• Trial: registration with company name, 30 days to test, license covers up to 100 devices — enough for testing.
• Windows Defender note: a "something is broken / not enabled" warning is not always critical — real-time protection was enabled; only one optional feature was off, so no need to panic.
• Client wanted "something better with more features" → requested Kaspersky Cloud and Point Protection.
• Deployment options found in the console: manual installation (download a package), Active Directory Group Policy (GPO software push), distribution packages (create package, push any way you want), run installation on the user's behalf, or write your own script.
• End-user self-install is not recommended — most users won't follow the instructions.
• Package flow: accept/read licenses → package creation takes a moment → package was run/installed silently on a connected test machine (TS01); silent installs ask no questions because IT defines policy (e.g., an HR user shouldn't decide firewall settings).
• Security profiles/options in console: enable/disable/modify features (firewall, web control, host intrusion prevention); presenter disabled the firewall because a VPN in use could be blocked; changes apply automatically to all managed end devices.
• License must be activated after install; "policy has been applied" + device showing up-and-running confirms success.
• Same procedure on servers (test Windows Server 2016): download package, install, activate license.
• Dashboard status: a removed/uninstalled device shows as down (fine); managed device listed in green = good / up to date / up and running.

Action Items

• Practice: create a trial account in a cloud security console, deploy the agent to a test machine, and push a policy change.
• Try any AV (Kaspersky, Norton, Defender, etc.) on a test device or VM, never your main laptop — these apps integrate deeply into the OS.
• Practice troubleshooting a Defender-style warning by reading which component is actually disabled before escalating.

Key Terms/Concepts

• Cloud AV console: centralized web dashboard to deploy agents, view infections, and manage security policies across devices.
• Distribution package: pre-built installer pushed silently to endpoints by IT instead of manual user install.
• Group Policy (GPO): Active Directory mechanism to push software/settings to domain machines.
• Policy applied: console indicator that the pushed security configuration reached and activated on the endpoint.

Chapter 9 — 2. Using a Monitoring System

Core Insights

• Monitoring exists to be proactive: detect problems before the customer calls — they pay you to look after the systems.
• PRTG is an easy-to-use monitoring system that is free (even after trial expiry) for up to 100 devices — great for self-learning on a test machine.
• A monitor uses sensors/probes that regularly query devices (e.g., "how many free gigabytes on the disk?") and flip status red/green.
• The monitoring-tool market is huge and fragmented — at least 100 products in the US alone, and enterprises often use custom-coded solutions.

Detailed Notes

• PRTG should be run on a test device because it gets deep into system settings.
• What to monitor: servers, routers, switches, access points, printers — e.g., a file server where users store important documents needs disk-space monitoring so it never fills up.
• On first connection, one item already shows red (something down); when a service stops it goes red, and green when it works again.
• Green doesn't mean ignore it: go back and review what happened minutes ago (history/incident timeline).
• On install, basic sensors run automatically out of the box: Ping, DNS, HTTP, plus a free-space sensor on the C: drive.
• Sensor thresholds are configurable: trigger an alert when, e.g., only 10% or 50% of disk space remains — thresholds depend on company policy.
• Warning vs alert: a warning means "not down, not critical, but look at it" — it doesn't demand a 7 a.m. Sunday response, but it can escalate into a critical issue if ignored.
• It is not the entry-level support person's job to tune all sensor settings, but experimenting with them is valuable.

Action Items

• Install PRTG on a VM/test device and watch the default sensors (Ping, DNS, HTTP, disk space) come up.
• Change one sensor threshold and verify you receive the corresponding warning.
• Deliberately stop a service (e.g., a web server) and observe the red/green status flip and the alert history.
• Inventory your own devices and list which services (disk, uptime, DNS, HTTP) you would monitor for each.

Key Terms/Concepts

• Monitoring system (PRTG): software that continuously checks devices/services and alerts on failures or threshold breaches.
• Sensor/probe: a component that performs a single check (disk space, ping, HTTP response, DNS lookup) against a monitored device.
• Proactive vs reactive support: finding problems via monitoring before users report them versus fixing after complaints.
• Warning state: a non-critical, non-down condition that should be reviewed, not ignored.

---

Chapter 11 — 1. Policies - GPO in action

Core Insights

• GPO (Group Policy Object) = a collection of policy settings that controls an operating system; lets an admin manage thousands of settings across hundreds of devices from one central place.
• In corporate environments, end users should NOT be local administrators — GPO is how you centrally lock down devices instead of touching each one.
• A GPO must be created AND linked to an OU (Organizational Unit) before it takes effect; linking determines which users/computers it applies to.
• Computer Configuration settings apply to the machine regardless of who logs on; User Configuration settings apply to a specific user.
• "Enabled" does not always mean "allowing" — it can also block something (e.g., "Remove Recycle Bin icon" vs "Enable Active Desktop"); always read the policy description.

Detailed Notes

• Demo setup: server + test device logged in as user "Mike"; created OU "WTA" in Active Directory Users and Computers and moved Mike into it; created policy "Test GPO 1" via Tools → Group Policy Management.
• Right-click the OU → "Create a GPO in this domain and link it here" (combines create + link; you can also create a GPO first and link it later).
• Example policy applied: User Configuration → Administrative Templates → Desktop → "Remove Recycle Bin icon from desktop" → Enabled; each policy shows a description, supported operating systems, and Details/Delegation tabs (delegation lets you scope/lock down who edits it).
• Policy refresh options: reboot the PC (recommended, easiest), or run gpupdate /force (refreshes without reboot; some settings still require a reboot — Microsoft states this in the policy).
• Reboot from command line: shutdown /r /f /t 5 — /r = reboot, /f = force close background apps, /t 5 = do it in 5 seconds.
• Verify applied policies: gpresult /r (summary data) — confirms e.g. "Test GPO has been applied".
• Additional options shown: Prohibit access to Control Panel (blocks Control Panel and PC Settings); Windows Settings can control applications, drive maps, environment, files/folders, registry, shortcuts; Network Settings restrict what is allowed for LAN connections/network settings.

Action Items

• Build a small lab: create a test OU and user, apply a simple GPO, and observe the effect after reboot or gpupdate.
• Practice gpupdate /force, gpresult /r, and shutdown /r /f /t 5 until fluent.
• Read policy descriptions carefully before setting "Enabled" — determine whether it allows or blocks.

Key Terms/Concepts

• GPO (Group Policy Object): collection of policy settings controlling OS behavior, applied via AD.
• OU (Organizational Unit): AD container used to scope GPO application to users/computers.
• gpupdate /force: command to refresh Group Policy immediately.
• gpresult /r: reports applied GPOs (summary data) for troubleshooting.

Chapter 11 — 2. Shares

Core Insights

• Two permission systems work together for shared folders: Share permissions (Read / Change / Full Control) and NTFS permissions (full control, modify, read/write, etc.) on the Security tab.
• When both apply, the most restrictive permission wins — the standard practice is Full Control on the share, then lock down with NTFS.
• Never give end users NTFS Full Control: it lets them take ownership of items and change permissions themselves.
• In enterprises, folder access is a process, not a courtesy: users raise a ticket/change request and someone approves it before the IT admin grants access.
• The engineer's two main daily tasks: managing users in Active Directory and assigning permissions to files and shares.

Detailed Notes

• File systems: legacy FAT/FAT32 not covered; focus on NTFS; ReFS (Resilient File System) is not a replacement for NTFS — it was designed for data stores / data centers on big networks.
• NTFS capabilities: compression, encryption via EFS (Encrypted File System), disk quotas (e.g., give Mike 5 GB of space), and granular security per user.
• Lab flow: create folder "test 1" → Properties shows the two relevant tabs — Sharing (share the folder onward) and Security (NTFS permissions).
• Share permissions = 3 options: Read, Change, Full Control. NTFS permissions = many options; Full Control should be avoided for end users (though sometimes justified).
• Sharing tab → Advanced Sharing → Permissions shows Full Control/Change/Read; Security tab shows Full Control, Modify, etc.
• Effective Permissions: when combinations get confusing (e.g., Full Control + Modify), Windows' advanced security "Effective Permissions" view computes exactly what a user (e.g., Mike) can access — good troubleshooting tool.
• Goal of the upcoming lab: share a folder and map a drive so Mike can access it with a single desktop double-click.

Action Items

• Practice creating a shared folder on any Windows 7/8/10 machine — a server is NOT required to experiment with shares.
• Memorize the difference between Share permissions (Read/Change/Full Control) and NTFS permissions, and the "most restrictive wins" rule.
• Test the Effective Permissions feature with overlapping share + NTFS settings.

Key Terms/Concepts

• NTFS: New Technology File System; supports compression, encryption (EFS), quotas, granular permissions.
• Share permissions: Read / Change / Full Control, applied to the network share.
• EFS: Encrypted File System — NTFS-level file encryption.
• ReFS: Resilient File System for data stores/data centers; not an NTFS replacement.
• Effective Permissions: Windows calculation showing a user's actual combined access.

Chapter 11 — 3. Installing Linux Using VirtualBox

Core Insights

• Virtualization prerequisites: the CPU must support virtualization (Intel VT-x / AMD-V) AND the feature must be enabled in BIOS — check your exact laptop/desktop model with Google (e.g., "HP 250 enable VT-x").
• A VM behaves like a real PC: it needs CPU, RAM, and disk space — plan hardware accordingly (decent i5/i7, lots of RAM, SSD).
• VirtualBox is free (paid license unlocks extra features); commercial alternates are VMware and Hyper-V (built into many Windows platforms); VMware Player is free but limited.
• A dynamically allocated virtual disk only consumes space as the guest OS grows, so you can run many VMs on one machine.

Detailed Notes

• RAM planning: a Windows 10 VM should get ~2 GB of RAM — five or six VMs can quickly exceed 16 GB of total RAM.
• SSD strongly recommended: it speeds up every VM operation; booting a Windows 10 VM can go from minutes to seconds.
• VirtualBox install itself is trivial: Next, Next, accept everything, allow the special driver to be installed.
• Creating a VM: give it a name — VirtualBox recognizes known OS names (e.g., "Linux") and auto-suggests/customizes the type; specify RAM; create a new hard disk or use an existing one.
• Hard disk file type options matter mainly when moving VMs between platforms — skip them when starting from scratch.
• Sizing: e.g., specify 50 GB; choose the dynamic option so the disk grows as needed instead of reserving 50 GB immediately.
• First boot fails until you attach an OS image (ISO): Windows 10 needs a full install wizard; Kali Linux is pre-configured — no wizard, usable straight away (shown in the next lecture).

Action Items

• Verify your CPU supports VT-x/AMD-V and check it is enabled in BIOS before installing any hypervisor.
• Download a Linux ISO (e.g., Kali) and complete a full VirtualBox VM creation walkthrough.

Key Terms/Concepts

• Virtualization: running a complete OS in software as a VM on a host machine.
• VT-x / AMD-V: CPU instruction sets that enable hardware-assisted virtualization.
• Hyper-V: Microsoft's hypervisor, available on many Windows editions.
• VMware / VirtualBox: virtualization platforms; VirtualBox is free, VMware Player is free but limited.
• Dynamic disk: virtual disk that grows with usage rather than pre-allocating full space.

Chapter 11 — 4. Overview of Windows 10

Core Insights

• Windows editions and system requirements are a guaranteed exam topic — memorize which editions exist and what each one can do.
• Two main editions: Home (ships with most laptops/desktops, for home users) and Pro (for corporate networks — the key feature is joining a domain, i.e., being managed by a Windows Server).
• Home cannot join a domain and cannot host Remote Desktop (RDP) connections; Pro can do both.
• Enterprise, Mobile, and Education are volume-license editions: large organizations license them per number of users (e.g., 10,000) instead of buying thousands of individual Pro copies.
• BitLocker full-disk encryption is built into Windows but only available in Pro, not Home.

Detailed Notes

• RDP: Settings → Remote allows enabling Remote Desktop on the Enterprise edition in the demo; the Home edition has no RDP role — you cannot RDP into a Home client.
• "S" edition: a limited version designed for Microsoft Surface-type devices; can be upgraded from S to Home or Pro.
• Pro vs Home comparison: user experience and security basics are the same; differences are in business features such as Group Policy (domain join + server-applied policies require Pro — Home has no Group Policy Objects), Remote Desktop, and Hyper-V (virtualization, covered later).
• BitLocker: available in Windows 10 Pro (it was NOT available in Windows 7 Pro) but not in Windows 10 Home — Home users cannot encrypt their hard disk with BitLocker.
• Licensing model: to equip a company (e.g., 10,000 users) you negotiate an Enterprise license covering X users; same model applies to Mobile and Education editions.
• Resources: the lecture shows links to a comparison table / Wikipedia table listing every edition and its features — worth visiting.

Action Items

• Memorize the Windows 10 edition list (Home, Pro, S, Enterprise, Mobile, Education) and the features unique to Pro (domain join, BitLocker, GPO, RDP host, Hyper-V).
• Check the Wikipedia edition-comparison table and the official Microsoft comparison page.

Key Terms/Concepts

• Domain join: connecting a PC to an AD domain so a server manages it via Group Policy — Pro feature only.
• RDP (Remote Desktop Protocol): remote desktop access; hosting it requires Pro/Enterprise, Home cannot receive RDP.
• BitLocker: built-in Windows full-disk encryption; Pro only.
• Group Policy: server-applied policies for managed clients; Home cannot receive GPOs.
• Volume licensing: bulk/enterprise licensing for many users (Enterprise, Mobile, Education).