Microsoft Tools · MIC-52

Windows 11 Administration

Windows 11 Administration is a hands-on course in looking after Windows 11 version 26H2, from planning, installing and migrating from Windows 10 to networking, disks and file permissions, management with PowerShell 7, security with the firewall and BitLocker, and system recovery. It suits IT staff, help desk teams and system administrators with a basic grounding in Windows and TCP/IP.

Updated
From 9,000 THB / person 10,000 −10% excl. VAT 7% · group rates available
PDFDownload the course outline
  • Duration18 hours · 3 days
  • FormatOnsite / live online
  • Next roundOn request
  • CertificateIncluded

Course overview

Windows 10 reached the end of support in October 2025, so most IT teams now look after Windows 11 machines first and foremost. Windows 11 itself changes quickly, with new features arriving in monthly updates, an annual release such as version 26H2, and older tools being removed, such as PowerShell 2.0 and WMIC. Administrators need to know how to install and migrate machines, configure networking and storage, and secure and recover devices when things go wrong.

This course builds a structured foundation in looking after Windows 11 version 26H2, from the update cycle, hardware checks, installing and upgrading from Windows 10 and post-installation settings to IPv4 and IPv6 networking, disks, volumes, file systems and permissions, management with PowerShell 7, troubleshooting and remote support tools, security with Windows Security, the firewall, BitLocker and newer features such as administrator protection, and recovery with the Windows Recovery Environment and quick machine recovery, finishing with a hands-on troubleshooting workshop. (3 days, 6 hours per day, 18 hours in total, Intermediate level.)

What you’ll gain

  • Understand Windows 11 releases and the update cycle, including how 24H2, 25H2, 26H1 and 26H2 differ
  • Plan, install, upgrade and migrate machines from Windows 10 to Windows 11
  • Configure post-installation settings, user accounts and Windows Update appropriately
  • Configure and troubleshoot IPv4, IPv6 and name resolution
  • Manage disks, volumes, file systems, permissions and shared folders
  • Use PowerShell 7 and the Windows troubleshooting tools with confidence
  • Secure devices with Windows Security, the firewall, BitLocker and EFS
  • Recover machines that fail to boot or misbehave with the right tools

Who this course is for

  • IT staff and help desk teams who support users' machines in an organisation
  • System administrators planning the move from Windows 10 to Windows 11
  • Computer technicians who install and troubleshoot Windows machines
  • Anyone building a foundation before moving on to managing devices with Intune or Active Directory

Prerequisites

  • Experience of using Windows on desktop computers, such as Windows 10 or Windows 11
  • Basic knowledge of TCP/IP, such as IP addresses, subnet masks and gateways
  • Some use of Command Prompt or PowerShell will help you learn faster
  • A laptop that can run a Windows 11 virtual machine (16 GB of RAM or more recommended)

Curriculum

Course Details

This is the 2026 edition of the Windows Administration course. It runs for 3 days, 6 hours per day, 18 hours in total (09:00-16:00), hands-on in each learner's own virtual machines, at Intermediate level. The content moves from Windows 10 to Windows 11 version 26H2, released on 29 September 2026, and explains the status of 24H2, 25H2 and 26H1, which ships only on selected new devices. It adds Windows settings backup, PowerShell 7 and CIM in place of the removed PowerShell 2.0 and WMIC, built-in Sysmon, administrator protection, Smart App Control, point-in-time restore and quick machine recovery. Learners bring their own laptop and a Windows 11 evaluation or licensed ISO. Learners take home the course handbook, PowerShell scripts and device care checklists.

Day 1 Planning, Installing and Migrating to Windows 11

Section 1: Windows 11 Today and the Update Cycle

  • Windows 11 version 26H2 and how it relates to 24H2 and 25H2
  • Version 26H1 for selected new devices, and why it is not an upgrade path
  • Annual releases, enablement packages, monthly updates and hotpatch
  • Support periods for Home, Pro and Enterprise, and planning update cycles
  • Removed features such as PowerShell 2.0, WMIC and WordPad

Section 2: Lab: Planning and Checking Hardware

  • Minimum requirements: a supported CPU, TPM 2.0, UEFI and Secure Boot
  • Check machines with PC Health Check, tpm.msc and msinfo32
  • Choose the edition and installation method that suit the organisation
  • Lab: create a virtual machine with a vTPM and Secure Boot

Section 3: Lab: Installing and Deploying Windows 11

  • Clean installation from an ISO or USB drive
  • OOBE, work or local accounts, and joining Microsoft Entra ID
  • Provisioning packages and an overview of Windows Autopilot
  • Lab: install Windows 11 in a virtual machine and set initial settings

Section 4: Lab: Upgrading and Migrating from Windows 10

  • In-place upgrade from Windows 10 and what to check beforehand
  • Windows settings backup to back up and restore settings and the app list
  • Move user data to a new machine, and roll back within the allowed period
  • Lab: upgrade a simulated Windows 10 machine and check the result

Section 5: Lab: Post-Installation Settings and Windows Update

  • Settings, Control Panel and Computer Management
  • User accounts, local groups and Windows LAPS for administrator passwords
  • Local Group Policy for settings that must be enforced
  • Windows Update, active hours, deferring updates and optional features
  • Lab: set up a standard new-starter machine from a checklist
Day 2 Networking, Storage and Management with PowerShell

Section 6: Lab: Configuring IPv4 and IPv6 Networking

  • Static and DHCP addressing, gateways and DNS servers
  • IPv6 address types and how IPv6 works alongside IPv4
  • Public and private network profiles, Wi-Fi and the built-in VPN client
  • Lab: configure networking in Settings and with PowerShell

Section 7: Lab: Name Resolution and Network Troubleshooting

  • Name resolution order, the DNS cache and the hosts file
  • ping, tracert, ipconfig and nslookup
  • Test-NetConnection, Resolve-DnsName and Get-NetIPConfiguration
  • Lab: work layer by layer on a machine that cannot reach websites

Section 8: Lab: Disks, Volumes and Storage Spaces

  • GPT and MBR, basic disks and partitions
  • Disk Management, diskpart and the Storage cmdlets
  • Extend, shrink and maintain volumes, Optimize Drives and chkdsk
  • Storage Spaces and Dev Drive
  • Lab: add disks, create volumes and build a storage pool

Section 9: Lab: File Systems, Permissions and Shared Folders

  • NTFS, ReFS and exFAT, and when to use each
  • NTFS permissions, inheritance and effective access
  • Shared folders: share permissions compared with NTFS permissions
  • Lab: design departmental folder permissions and test them with several users

Section 10: Lab: Managing Machines with PowerShell 7

  • Windows PowerShell 5.1, PowerShell 7 and Windows Terminal
  • Get-CimInstance in place of the removed WMIC commands
  • View device information, services, processes and event logs with cmdlets
  • Execution policy and running scripts safely
  • Lab: a script that collects device information into a CSV report
Day 3 Troubleshooting, Security and Recovery

Section 11: Lab: Troubleshooting Tools

  • Task Manager, Resource Monitor and Reliability Monitor
  • Event Viewer, custom views and Windows Memory Diagnostic
  • Performance Monitor and data collector sets
  • Process Explorer, Process Monitor and the Sysmon now built into Windows
  • Lab: find the cause of a slow machine from real data

Section 12: Lab: Remote User Support

  • Quick Assist for helping users over the internet
  • Remote Desktop and configuring it securely
  • Have users record problem steps with Snipping Tool instead of Steps Recorder
  • Lab: take a call and fix a simulated user's problem remotely

Section 13: Lab: Windows Security and the Firewall

  • Windows Security, Microsoft Defender Antivirus and Smart App Control
  • Windows Defender Firewall: profiles, inbound and outbound rules
  • Connection security rules for connections that require authentication
  • Administrator protection, UAC, Windows Hello and passkeys
  • Lab: open only the ports a job needs and check the result with PowerShell

Section 14: Lab: BitLocker and EFS

  • BitLocker with the TPM, and device encryption
  • Store recovery keys safely, and recover a machine that asks for its recovery key
  • BitLocker To Go for USB drives
  • EFS for per-file encryption, and backing up the certificate
  • Lab: encrypt a drive and practise recovery with the recovery key

Section 15: Workshop: System Recovery and Real-World Troubleshooting

  • Windows RE, Startup Repair, Safe Mode and Roll Back Driver
  • System Restore, point-in-time restore and File History
  • Reset this PC and quick machine recovery
  • Workshop: recover virtual machines with simulated boot failures and faulty drivers
  • Wrap up with a checklist for looking after Windows 11 in an organisation

Schedule & training options

For individuals — public rounds

No public rounds are open right now. Join the waiting list and we will contact you first when the next round opens, or ask us on LINE. Or call 02-570-8449 or 088-807-9770

For organisations — in-house / private

  • Tailor the content to your team’s tools and projects
  • Your dates, at your office or live online
  • Quotation with tax ID for procurement
Corporate training quote

Instructors

Frequently asked questions

Which Windows 11 release is current, and how do 26H1 and 26H2 differ?

The latest annual release is Windows 11 version 26H2, which machines on 24H2 or 25H2 can install with a small enablement package because they share the same base. Version 26H1 is only for selected new devices, uses a different core and is not offered as an upgrade to existing machines. Most organisations therefore plan around 24H2, 25H2 and 26H2, checking each release's support period on Microsoft's Windows release health page.

What is BitLocker and how is it different from EFS?

BitLocker encrypts an entire drive, protecting data if a device or disk is lost or removed and read elsewhere. It usually works with the TPM, and the recovery key must be stored somewhere safe. EFS (Encrypting File System) encrypts individual files or folders on NTFS and is tied to a user account, so other users of the same machine cannot open them, and its certificate should be backed up. The two can be used together.

How do you recover Windows 11 when it fails to start or misbehaves after a driver update?

Start by entering the Windows Recovery Environment through Advanced startup, or let it open automatically after repeated failed boots, and try Startup Repair. If that fails, boot into Safe Mode to roll back the driver in Device Manager, or use System Restore to return to a restore point from before the problem. Recent Windows 11 releases also offer quick machine recovery, which looks for fixes in the cloud when a device cannot boot. For serious damage, use Reset this PC, which can keep personal files.

Who is the Windows 11 Administration course for, and what should I know beforehand?

It suits IT and help desk staff who support users' machines, administrators moving machines from Windows 10 to Windows 11, and computer technicians. You should have experience of Windows on desktops, a basic understanding of TCP/IP and a laptop that can run a Windows 11 virtual machine. Some use of Command Prompt or PowerShell will help you learn faster.

What will I be able to do after the Windows 11 Administration course?

You will be able to plan, install, upgrade and migrate machines from Windows 10 to Windows 11, configure IPv4, IPv6 and name resolution, manage disks, volumes, file permissions and shared folders, manage machines with PowerShell 7, troubleshoot with Event Viewer, Performance Monitor, Process Monitor and Quick Assist, secure devices with the firewall, BitLocker and EFS, and recover machines with Windows RE. Participants who complete the training receive a Certificate of Completion with its own number, which can be verified online.

Can the Windows 11 Administration course be run in-house for our team?

Yes. It can be run in-house for your IT team, with examples adapted to your own work, such as your standard device settings and the way your team handles support calls. You can request a quotation from this page, or contact us on LINE @itgenius or by phone on 02-570-8449.