Workstations glossary

This workstations glossary defines, in one sentence, the key terms from our courses: deployment, MECM/SCCM, Intune, GPO, security… Each definition stands on its own and, where relevant, points to the related course.

Workstation (endpoint)

The workstation (endpoint) is the end user’s computer — laptop or desktop — to deploy, administer and secure.

Windows 11

Windows 11 is Microsoft’s client operating system; its administration and support are core skills. See Administer Windows 11.

Deployment (imaging)

Deployment installs the OS and applications on endpoints, often from a reference image (master), at scale.

MECM / SCCM

MECM (formerly SCCM) is Microsoft’s fleet-management solution: deployment, inventory, updates and software distribution. See the MECM/SCCM course.

Intune / MDM

Intune is Microsoft’s cloud device-management (MDM) solution: configuration, security and apps, including for remote endpoints.

GPO

A GPO (Group Policy Object) centrally applies configuration and security settings to the endpoints of a domain.

Active Directory

Active Directory is Microsoft’s directory that centralises accounts, machines and policies within a domain.

Reference image (master)

The master is a standardised, tested system image used as the basis for deploying all endpoints.

WSUS & updates

WSUS centralises the approval and distribution of Windows updates across the fleet.

BitLocker

BitLocker encrypts endpoint drives to protect data if a device is lost or stolen. See endpoint security.

EDR / antivirus

Antivirus and EDR detect and block threats on endpoints; EDR adds behavioural detection and response.

Windows Autopilot

Autopilot preconfigures and deploys a brand-new device straight to the user, without a traditional master image.

Domain & user profile

The domain groups endpoints under common administration; the user profile holds each user’s own settings and data.

Software distribution

Software distribution installs and updates applications remotely across the whole fleet, without touching each device.

Level 1 / Level 2 support

Level-1 support handles common incidents, level-2 the complex cases. See Windows 11 Support.

IT fleet

The IT fleet is the whole set of endpoints and devices to manage, inventory and keep up to date.