5. 1 st

6. Lost Data and Files Recovery Planning Distributed Workforce System Failures Traditional approaches to machine recovery don’t meet the needs of a highly productive global workforce

7. Accelerate Desktop Repair Onsite and Remotely Shift desktop repair planning from reactive to proactive Identify the cause, repair the problem, restore productivity Simple recovery image creation and deployment

8. Recover unbootable PCs Access deleted files, repair disk partitions Reset passwords Detect and remove malware while offline Prepare PC disks for donation Centralized IT staff Common Enterprise Scenarios

9. Disk and File Administrative Recovery

10. Disk Commander Disk Wipe Explorer File Restore Search SFC Scan Disk and File Administrative Recovery

11. Disk and File Administrative Recovery Computer Management Registry Editor TCP/IP Config Remote Connection

12. Crash Analyzer Defender Locksmith Hotfix Uninstall Disk and File Administrative Recovery

15. There are two types of enterprises. Those who realize they’ve been hacked. Those who haven’t yet realized they’ve been hacked.

16. There are threats that are familiar and those that are modern.

17. Windows 8 and 8.1 Security Capabilities First Class Biometric Experience Multifactor Authentication for BYOD Trustworthy Identities and Devices Provable PC Health Improved Windows Defender Improved Internet Explorer Improved System Core Hardening Pervasive Device Encryption Selective Wipe of Corp Data UEFIModern Biometric Readers TPM UEFI

19. Create DaRT Image (WIM) with latest WDO Definitions Deploy and start DaRT remotely (recommend CM) Analyze Reports (weekly)

20. Create DaRT Image (WIM) with latest WDO Definitions Deploy and start DaRT remotely (recommend CM) Analyze Reports (weekly)

21. Install DaRT 8 Launch Recovery Image Wizard On Advanced Options-> Defender Tab, select download the latest definitions (Recommended) For CM, on Create Image Tab -> Ensure Create WIM is checked.

22. More info: http://aka.ms/PoSHDaRTImagehttp://aka.ms/PoSHDaRTImage

23. From Power Shell: Import Microsoft.Dart Module NameDescription Copy-DartImageBurns an ISO to a CD, DVD, or USB drive. Export-DartImage Allows the source WIM file, which contains a DaRT image, to be converted into an ISO file. New-DartConfiguration Creates a DaRT configuration object that is needed to apply a DaRT toolset to a Windows Image. Set-DartImage Applies a DartConfiguration object to a mounted Windows Image. This includes adding all files, configuration, and package dependencies

24. Create DaRT Image (WIM) with latest WDO Definitions Deploy and start DaRT remotely (recommend CM) Analyze Reports (weekly)

25. Import DaRT WIM as a boot image Build the Task Sequence "%ProgramFiles%\Microsoft Security Client\OfflineScannerShell.exe" /autoscan Deploy the Task Sequence, Validate & Roll-out

26. Create DaRT Image (WIM) with latest WDO Definitions Deploy and start DaRT remotely (recommend CM) Analyze Reports (weekly)

27. Example of MPDetections-XXXX.log 2013-02-04T22:04:11.068Z DETECTION Virus:DOS/EICAR_Test_File file:C:\eicar_utf8.txt->(UTF-8) Virus:DOS/EICAR_Test_File

28. Create DaRT Image (WIM) with latest WDO Definitions Deploy and start DaRT remotely (recommend CM) Analyze Reports (weekly)

32. Install DaRT 8 Launch Recovery Image Wizard On Advanced Options-> Defender Tab, select download the latest definitions (Recommended) For CM, on Create Image Tab -> Ensure Create WIM is checked.

37. WCA-H206Microsoft Diagnostics and Recovery Toolset (DaRT) Hands on Lab (HOL) WCA-B370R What’s New in Blue Security (Repeat Session) Thursday 17:00 -18:15 WCA-B208Microsoft Application Virtualization 5.0 Migration and Co-Existence with 4.6Tuesday 13:30 -14:45 WCA-B203Microsoft Application Virtualization 5.0 and Microsoft Office: Better TogetherTuesday 17:00-18:15 WCA-B206The Replaceable PCWednesday 10:15-11:30 WCA-B319Implementing Microsoft Application Virtualization 5.0: Lessons Learned from a Production RolloutWednesday 10:15-11:30 WCA-B209What's New with Windows 8 BitLocker and Microsoft BitLocker Administration and Management (MBAM) 2.0 Wednesday 12:00-13:15 WCA-B359Microsoft User Experience Virtualization (UE-V): How to Manage and Deploy UE-V across an Enterprise Thursday 10:15-11:30 WCA-B324Integrating the New Microsoft Application Virtualization 5.0 with other Virtualization SolutionsFriday 10:15-11:30

38. http://microsoft.com/msdn www.microsoft.com/learning http://channel9.msdn.com/Events/TechEd http://microsoft.com/technet