Windows 8 Secrets

Windows 8 also expands on the HomeGroup sharing functionality from Windows 7, by adding a new Metro- style interface. And HomeGroup-style sharing is more important than ever because of the prevalence of Microsoft account sign-ins, which makes old-school sharing schemes a bit more difficult. But if you do need to access the network resources of a PC running an older Windows PC, too, the hidden Windows Credentials feature will make that happen.

Chapter 14 Windows 8 for Business

In This Chapter

• Joining a domain with Windows 8

• Enabling EFS to protect files and folders

• Using BitLocker and BitLocker To Go to protect entire disks

• Using Client Hyper-V to install virtual environments

• Managing your virtual resources with Hyper-V Manager

• Accessing virtual machines with Hyper-V Virtual Machine Connection

• Integrating virtual hard disks with the Windows shell

• Using Remote Desktop, Remote Desktop Connection, and Remote Desktop Host

• Understanding which features are unique to Windows 8 Enterprise

• Understanding how consumer-oriented Windows RT tablets can be used in corporate settings securely

Let there be no doubt: Windows 8 is quite definitely a consumer-focused release of Windows, the first since perhaps Windows Me to cater almost exclusively to that part of the market. This is understandable, given the rapid rise of competing consumer technologies from companies like Apple and the rapid adoption of those technologies, even in businesses. This trend, called the consumerization of IT, has revolutionized many aspects of technology used in business, including areas that were once sacrosanct. And it’s led to a loosening of the reigns, so to speak, as the workforce has evolved to engage in computing activities away from the office.

Microsoft has embraced this trend with its client and server products and cloud services, and while Windows 8 may seem a bit light on the business technology side, this needs to be viewed in perspective. First, as a superset of Windows 7, Windows 8 does

include all of the business-oriented features and functionality that graced that product, often in upgraded or enhanced form. That means that it shares the same basic deployment tools, manageability, and other back-end technologies, as well as its general feature set.

But Windows 8 also includes some new business-oriented technologies of its own. And while consumers are having fun with the Metro-style experiences that dominate this product, what you’re about to discover is this version of Windows also offers a compelling upgrade case for businesses, too.

CROSSREF

Windows 8 isn’t just about Metro. There are numerous updates to the desktop environment, which we discuss in Chapter 4, plus a new desktop version of Internet Explorer, amazing new file and system recovery tools (Chapter 11) and network and connectivity capabilities (Chapter 13). Metro is fun, and beautiful to look at. But Windows 8 is a productivity champion, too. It’s in the product’s DNA.

NOTE

Most of the features described in this chapter require Windows 8 Pro, the business- and enthusiast-focused version of Microsoft’s latest operating system. Some require Windows 8 Enterprise, which is only available via Microsoft’s volume licensing program, Software Assurance. Those features that also work with the base version of Windows 8 will be noted as such.

Domain Join and Group Policy

When you think about it, traditional home-based Windows PCs are unmanaged in the sense that there’s no central oversight available, either by the head of a household or a central server. This type of computing, which has been formally described as workgroup computing makes a certain amount of sense at home, where each PC is an island of functionality onto itself. In the workplace, however, especially at mid-sized businesses and enterprises where there can be hundreds or thousands of PCs, the go-your-own route doesn’t actually make any sense. Corporations need a central way to manage users, PCs, devices, and other entities, and ways to secure and update their computing products. They need what’s called a managed solution.

The most popular managed solution for businesses is called Active Directory, or AD. It requires a centralized Windows Server infrastructure and uses Group Policy to establish rules for its computing services. While AD and Group Policy haven’t made a lot of headway with smaller businesses—though that could change with the adoption of these services in cloud-based solutions like Windows Azure, Office 365, and Windows Intune—it’s the standard at larger businesses. And chances are, if you’re provided with a PC at work, you’ll be required to sign in to your AD domain, not just to the PC using a local account or Microsoft account. Domain joined computers are controlled via policy, so they can be very restrictive, especially for such things as application installation and certain system customizations. But they’re also typically better locked down from a security standpoint and, when configured properly, allow you to access your company’s secure network resources, even while working remotely.

Domain join works in Windows 8 as it did in previous Windows versions. If your Windows 8 PC hasn’t been pre-configured with your user account, you can sign in to the domain in two ways: from the lock screen or through the Advanced System Properties control panel.

To sign in to your domain from the lock screen, select Other user. Then, in the screen shown in Figure 14-1, you must provide your domain, username, and password credentials.

Figure 14-1: Signing in to a domain from the Windows 8 lock screen

This sign-in must take a specific form, like domainusername or username@domain, in the username field. (Your employer will provide the domain name.) Assuming the domain name is mydomain.com and the username is paul, the username would then be mydomainpaul or [email protected].

Alternatively, you can connect to your domain first from a local (or Microsoft) account using the Advanced System Properties control panel. You might use this method if you wanted to access your work account from your own home PC, for example, though again your workplace would likely provide you with additional tools (such as a VPN) or information for making the connection.

First, of course, you must find Advanced System Properties. The easiest way is to use Start Search from the Start screen, type advanced system, and then choose Settings from the Search bar. In the search results list, select View advanced system settings. You’ll see a window like the one in Figure 14-2. (If not, navigate to the Computer Name tab.)

Figure 14-2: Advanced System Properties