Managing a Windows based system
This subtopic addresses the comprehensive management of Windows-based systems, encompassing installation strategies, user authentication, network connectivity, application deployment, user profile settings, cloud service access, file and print services, encryption, endpoint security, and disaster recovery. It equips learners with the practical skills to administer and secure Windows environments in line with enterprise requirements.
Assessment criteria
Quick Revision Summary (Key Takeaway)
The City & Guilds Level 2 Award in ICT Systems and Principles covers the fundamental hardware, software, and networking concepts that underpin modern computer systems. This qualification equips students with practical knowledge of system components, troubleshooting, and the principles of data transmission, preparing them for further study or entry-level IT roles.
Topic Overview
The City & Guilds Level 2 Award in ICT Systems and Principles introduces students to the core components of computer systems, including hardware, software, and networking. This qualification is designed to provide a solid foundation for those aspiring to work in IT support, technical roles, or further study in computing. The curriculum covers the function of key internal components such as the CPU, memory, storage devices, and input/output devices, as well as the principles of operating systems and application software.
A significant portion of the course focuses on networking fundamentals, including the difference between LANs and WANs, the roles of switches, routers, and other network devices, and the basics of data transmission. Students also learn about system security, troubleshooting common hardware and software issues, and the importance of health and safety when working with ICT equipment. These topics are essential for anyone entering the IT industry, as they provide the practical knowledge needed to support and maintain computer systems in a professional environment.
The qualification is assessed through a combination of multiple-choice and short-answer questions, as well as practical tasks that test the application of knowledge. By mastering these concepts, students develop a strong understanding of how computer systems operate, which is crucial for progression to higher-level qualifications such as the Level 3 Diploma in ICT. Moreover, the skills gained are directly applicable to real-world scenarios, making this award a valuable stepping stone for a career in technology.
Key Concepts
Core ideas you must understand for this topic
- →Hardware components: CPU, RAM, ROM, storage devices (HDD, SSD), motherboard, and input/output devices.
- →Software types: system software (operating systems) and application software, and their roles.
- →Networking fundamentals: LAN, WAN, IP addresses, MAC addresses, and the function of switches, routers, and modems.
- →Data transmission: serial vs. parallel, bandwidth, and the difference between analogue and digital signals.
- →Health and safety: ergonomics, electrical safety, and safe disposal of ICT equipment.
Learning Objectives
What you need to know and understand
- Be able to implement management of a Windows based operating system, Be able to implement an installation strategy, Be able to implement Windows authentication, Be able to implement intranet connectivity, Be able to implement an application strategy for Windows, Be able to implement a solution for user settings, Be able to configure access to cloud service, Be able to implement access to file and print services, Be able to implement encryption for Windows, Be able to implement endpoint security, Be able to implement extranet connectivity, Be able to implement recovery solutions
- Be able to implement management of a Windows based operating system, Be able to implement an installation strategy, Be able to implement Windows authentication, Be able to implement intranet connectivity, Be able to implement an application strategy for Windows, Be able to implement a solution for user settings, Be able to configure access to cloud service, Be able to implement access to file and print services, Be able to implement encryption for Windows, Be able to implement endpoint security, Be able to implement extranet connectivity, Be able to implement recovery solutions
- Be able to implement management of a Windows based operating system, Be able to implement an installation strategy, Be able to implement Windows authentication, Be able to implement intranet connectivity, Be able to implement an application strategy for Windows, Be able to implement a solution for user settings, Be able to configure access to cloud service, Be able to implement access to file and print services, Be able to implement encryption for Windows, Be able to implement endpoint security, Be able to implement extranet connectivity, Be able to implement recovery solutions
- Be able to implement management of a Windows based operating system, Be able to implement an installation strategy, Be able to implement Windows authentication, Be able to implement intranet connectivity, Be able to implement an application strategy for Windows, Be able to implement a solution for user settings, Be able to configure access to cloud service, Be able to implement access to file and print services, Be able to implement encryption for Windows, Be able to implement endpoint security, Be able to implement extranet connectivity, Be able to implement recovery solutions
- Be able to implement management of a Windows based operating system, Be able to implement an installation strategy, Be able to implement Windows authentication, Be able to implement intranet connectivity, Be able to implement an application strategy for Windows, Be able to implement a solution for user settings, Be able to configure access to cloud service, Be able to implement access to file and print services, Be able to implement encryption for Windows, Be able to implement endpoint security, Be able to implement extranet connectivity, Be able to implement recovery solutions
- Be able to implement management of a Windows based operating system, Be able to implement an installation strategy, Be able to implement Windows authentication, Be able to implement intranet connectivity, Be able to implement an application strategy for Windows, Be able to implement a solution for user settings, Be able to configure access to cloud service, Be able to implement access to file and print services, Be able to implement encryption for Windows, Be able to implement endpoint security, Be able to implement extranet connectivity, Be able to implement recovery solutions
- Be able to implement management of a Windows based operating system, Be able to implement an installation strategy, Be able to implement Windows authentication, Be able to implement intranet connectivity, Be able to implement an application strategy for Windows, Be able to implement a solution for user settings, Be able to configure access to cloud service, Be able to implement access to file and print services, Be able to implement encryption for Windows, Be able to implement endpoint security, Be able to implement extranet connectivity, Be able to implement recovery solutions
- Be able to implement management of a Windows based operating system, Be able to implement an installation strategy, Be able to implement Windows authentication, Be able to implement intranet connectivity, Be able to implement an application strategy for Windows, Be able to implement a solution for user settings, Be able to configure access to cloud service, Be able to implement access to file and print services, Be able to implement encryption for Windows, Be able to implement endpoint security, Be able to implement extranet connectivity, Be able to implement recovery solutions
- Be able to implement management of a Windows based operating system, Be able to implement an installation strategy, Be able to implement Windows authentication, Be able to implement intranet connectivity, Be able to implement an application strategy for Windows, Be able to implement a solution for user settings, Be able to configure access to cloud service, Be able to implement access to file and print services, Be able to implement encryption for Windows, Be able to implement endpoint security, Be able to implement extranet connectivity, Be able to implement recovery solutions
- Be able to implement management of a Windows based operating system, Be able to implement an installation strategy, Be able to implement Windows authentication, Be able to implement intranet connectivity, Be able to implement an application strategy for Windows, Be able to implement a solution for user settings, Be able to configure access to cloud service, Be able to implement access to file and print services, Be able to implement encryption for Windows, Be able to implement endpoint security, Be able to implement extranet connectivity, Be able to implement recovery solutions
Assessment Criteria
Key criteria assessors look for in your portfolio
- Award credit for demonstrating the ability to perform unattended Windows installations using answer files or deployment tools, ensuring correct disk partitioning and driver integration.
- Award credit for correctly configuring Active Directory-based authentication including domain joining, user account management, and group policy application.
- Award credit for successfully establishing intranet connectivity through appropriate IP configuration, DNS settings, and VLAN or subnet implementation.
- Award credit for implementing an application deployment strategy such as Group Policy software installation or Microsoft Store for Business integration, with attention to licensing and updates.
- Award credit for implementing a user settings solution that leverages roaming profiles, folder redirection, or UE-V to maintain consistency across logins.
- Award credit for configuring access to cloud services via Azure AD Join or hybrid identity, ensuring seamless single sign-on and appropriate security policies.
- Award credit for implementing file and print services, including share permissions, NTFS permissions, printer management, and mapping drives through GPO or script.
- Award credit for deploying BitLocker encryption and EFS to protect data at rest, with proper recovery key management.
- Award credit for configuring endpoint security features such as Windows Defender Firewall, antivirus, exploit protection, and controlled folder access.
- Award credit for setting up an extranet connectivity solution using VPN (e.g., SSTP, IKEv2) or Web Application Proxy, ensuring secure remote access.
- Award credit for designing and testing a recovery solution incorporating System Restore, Windows Backup, or third-party imaging to meet recovery objectives.
- Implement management of Windows OS using Group Policy and other tools.
- Plan and execute an installation strategy for Windows.
- Configure Windows authentication (e.g., Active Directory).
- Set up intranet and extranet connectivity.
- Implement encryption and endpoint security measures.
- Implement an installation strategy for Windows operating system.
- Configure Windows authentication methods (e.g., local, domain).
- Set up intranet connectivity and file/print services.
- Implement encryption and endpoint security measures.
- Configure access to cloud services and extranet connectivity.
- Implement management of Windows OS using tools.
- Configure authentication methods.
- Set up intranet and extranet connectivity.
- Implement encryption and endpoint security.
- Configure access to cloud services and file/print services.
- Implements Windows authentication and user settings.
- Configures intranet and extranet connectivity.
- Manages application deployment and access to cloud services.
- Implements encryption and endpoint security measures.
- Sets up file and print services and recovery solutions.
- Implement installation strategies and authentication methods.
- Configure intranet and extranet connectivity correctly.
- Deploy applications and manage user settings effectively.
- Set up cloud services and file/print services.
- Implement encryption, endpoint security, and recovery solutions.
- Implements installation strategies for Windows operating systems.
- Configures authentication methods such as Active Directory.
- Sets up intranet and extranet connectivity.
- Applies encryption and endpoint security measures.
- Implements recovery solutions for system failures.
- Implement management of a Windows operating system.
- Implement an installation strategy for software.
- Configure Windows authentication and security.
- Implement file and print services and cloud access.
- Implement installation strategy for Windows OS.
- Configure Windows authentication methods.
- Set up intranet connectivity and cloud services.
- Implement file and print services.
- Configure encryption and endpoint security.
- Award credit for demonstrating a clear installation strategy that includes planning, partitioning, and post-installation configuration tasks.
- Expect evidence of implementing Windows authentication methods, such as local accounts, domain accounts, and multi-factor authentication, with appropriate security settings.
- Credit should be given for successful configuration of intranet connectivity, including IP addressing, DNS, and firewall rules.
- Assessors should look for a structured application strategy that includes compatibility testing, deployment methods (e.g., Group Policy, SCCM), and licensing compliance.
- Evidence of configuring access to file and print services must include share permissions, NTFS security, and printer mapping via Group Policy.
Assessment Guidance
Guidance for achieving higher grades
- 💡Document every configuration step with screenshots and detailed explanations; assessors require clear evidence of hands-on implementation.
- 💡When implementing encryption, demonstrate both full-disk and file-level encryption scenarios, and show the recovery process to fully meet grading criteria.
- 💡Always verify connectivity and access rights after configuring networking or share permissions, and include testing evidence (e.g., ping, access tests) in your submission.
- 💡Use a systematic approach: first plan on paper, then execute, then validate—this mirrors industry best practices and strengthens your assignment structure.
- 💡Familiarise yourself with Windows Server administration tools.
- 💡Understand the difference between local and domain accounts.
- 💡Practice setting up VPN and remote access.
- 💡Practice using Group Policy and PowerShell.
- 💡Understand the difference between local and domain accounts.
- 💡Familiarise yourself with Windows Server roles.
- 💡Practice using PowerShell for automation.
- 💡Learn common registry edits.
- 💡Understand Active Directory basics.
- 💡Use virtual machines to practice configurations safely.
- 💡Document each step for troubleshooting.
- 💡Understand the purpose of each management task.
- 💡Practice step-by-step configuration in a lab environment.
- 💡Understand the purpose of each service before implementing.
- 💡Document your steps to show logical progression.
- 💡Use virtual machines to practise configurations safely.
- 💡Document all steps for troubleshooting.
- 💡Understand the difference between intranet and extranet.
- 💡Use Group Policy for consistent settings.
- 💡Regularly update and patch systems.
- 💡Back up configurations before changes.
- 💡Use Group Policy for efficient management.
- 💡Understand the difference between local and domain accounts.
- 💡Practice disaster recovery scenarios.
- 💡For assignments, always document every step of the configuration with screenshots and explanations to demonstrate understanding.
- 💡In practical assessments, verify that all security settings are applied correctly by testing from a non-privileged user account.
- 💡When implementing extranet connectivity, ensure you differentiate between VPN types and justify your choice based on the scenario requirements.
- 💡Always use correct technical terminology in your answers. For example, say 'volatile memory' instead of 'temporary memory' to show deeper understanding.
- 💡When answering questions about network devices, clearly state the layer at which they operate (e.g., switch at Layer 2, router at Layer 3) to demonstrate higher-level knowledge.
- 💡Read the question carefully to identify the number of marks. For a 6-mark question, aim to provide at least three distinct points with explanations, not just a list.
Common Mistakes
Common errors to avoid in your coursework
- Neglecting to check hardware compatibility (e.g., TPM version for BitLocker) before installation, causing deployment failure or reduced functionality.
- Misconfiguring DNS settings when implementing intranet connectivity, leading to name resolution failures and inaccessible network resources.
- Forgetting to create system restore points or backups before major configuration changes, complicating recovery when issues arise.
- Applying overly permissive share or NTFS permissions (e.g., 'Everyone Full Control'), compromising security and failing assessment criteria.
- Overlooking certificate or pre-shared key requirements when setting up VPN for extranet connectivity, resulting in authentication failures.
- Misconfiguring Group Policy settings causing system issues.
- Not testing recovery solutions before deployment.
- Overlooking security best practices for cloud services.
- Misconfiguring user permissions leading to security gaps.
- Neglecting to test recovery solutions.
- Overlooking compatibility issues with cloud services.
- Misconfiguring Group Policy settings.
- Overlooking security updates.
- Incorrectly setting up user permissions.
- Misconfiguring Group Policy settings.
- Neglecting to test recovery solutions after implementation.
- Overlooking security best practices for cloud services.
- Misconfiguring authentication protocols leading to access issues.
- Neglecting security best practices when setting up cloud services.
- Failing to test recovery solutions after implementation.
- Misconfiguring network settings causing connectivity issues.
- Neglecting to test recovery procedures.
- Overlooking security updates and patch management.
- Not testing configurations before deployment.
- Overlooking security best practices.
- Failing to document changes made.
- Misconfiguring user permissions leading to security gaps.
- Failing to test backup and recovery procedures.
- Overlooking patch management and updates.
- Students often confuse share permissions with NTFS permissions, failing to recognise that the most restrictive combination applies.
- A frequent error is neglecting to test recovery solutions, leading to incomplete or non-functional backup and restore procedures in the evidence.
- When implementing encryption, learners may overlook the importance of key management and recovery agents, resulting in potential data loss.
- Misconception: More RAM always makes a computer faster. Correction: While more RAM can improve performance if the system is running out of memory, other factors like CPU speed and storage type also affect speed.
- Misconception: The internet and the World Wide Web are the same. Correction: The internet is the global network of interconnected computers, while the World Wide Web is a service that runs on the internet, consisting of web pages and resources accessed via browsers.
- Misconception: A router and a modem are the same device. Correction: A modem modulates/demodulates signals to connect to the ISP, while a router routes data between networks. Many home devices combine both functions.
Revision Plan
How to revise this topic in 1–2 weeks
- 1Week 1: Focus on hardware components. Create flashcards for each component (CPU, RAM, ROM, HDD, SSD) and their functions. Test yourself daily.
- 2Week 2: Study software and operating systems. Compare different types of software and practice identifying examples. Use online simulations to understand how the OS manages resources.
- 3Week 3: Dive into networking. Draw diagrams of a LAN and label devices. Practice explaining how data travels from one device to another.
- 4Week 4: Review all topics and attempt past exam questions. Time yourself to simulate exam conditions. Focus on areas where you lose marks.
Exam Question Types
How this topic typically appears in the exam
- 📋Multiple-choice questions: These test recall of key facts. Read each option carefully and eliminate obviously wrong answers first.
- 📋Short-answer questions: Often ask for definitions or explanations. Use the command word to guide your response (e.g., 'State' requires a brief answer, 'Explain' requires a reason).
- 📋Scenario-based questions: Present a real-world situation (e.g., a network problem) and ask you to identify the issue and suggest a solution. Apply your knowledge systematically.
- 📋Labeling diagrams: You may be asked to label parts of a computer or network diagram. Memorise the standard layout of components.
Command Word Expectations (CITY & GUILDS LIMITED)
What examiners look for when using specific command words in this specification
Give a brief, factual answer without explanation. For example, 'State two input devices' – just list them.
Give a reason or cause. For example, 'Explain why RAM is volatile' – describe that it loses data when power is off.
Give a detailed account of what something is or how it works. For example, 'Describe the function of a router' – mention connecting networks and routing data.
How Students Lose Marks (Examiner Pitfalls)
Common mark loss traps and how to write 100% full-mark answers
Step-by-Step Worked Solutions
Detailed solution breakdown for typical exam problems
Question: A computer system has 8 GB of RAM and a 1 TB hard disk drive. Explain the difference between RAM and the hard disk drive in terms of volatility, speed, and purpose. (6 marks)
- 1.Step 1: Define RAM: volatile, fast, temporary storage for running programs and data.
- 2.Step 2: Define hard disk drive: non-volatile, slower, permanent storage for files and software.
- 3.Step 3: Compare speed: RAM is much faster than HDD, which is why data is loaded into RAM for processing.
- 4.Step 4: State purpose: RAM holds data currently in use; HDD stores data for long-term use even when power is off.
Question: A small office has 5 computers and one printer. They want to share files and the printer. Describe the hardware and software needed to set up a LAN. (6 marks)
- 1.Step 1: Identify hardware: network interface cards (NICs) in each computer, a switch or router, Ethernet cables or Wi-Fi access point.
- 2.Step 2: Explain the switch/router: connects all devices, allowing them to communicate.
- 3.Step 3: Mention the printer: must be network-enabled or connected to one computer and shared.
- 4.Step 4: Software: network operating system or client software, and file sharing protocols (e.g., SMB).
- 5.Step 5: Configuration: assign IP addresses (static or DHCP), set up a workgroup or domain, and configure sharing permissions.
Active Recall Memory Test
Test your memory before revealing the key facts
Frequently Asked Questions
Common questions students ask about this topic
Pass / Merit / Distinction Evidence Checklist
How your portfolio evidence is graded for CITY & GUILDS LIMITED Managing a Windows based system
Every vocational unit is marked against named criteria rather than an exam percentage. Your tutor's brief lists the exact codes for this unit — here is what each band is asking you to do.
Demonstrate baseline knowledge, accurate terminology, and core practical application.
Provide detailed analysis, structured explanations, and clear workplace reasoning.
Deliver thorough evaluation, original problem solving, and fully justified recommendations.
Before You Start
Prior knowledge that will help with this topic
- •Basic understanding of what a computer is and common peripherals.
- •Familiarity with using a computer, including file management and basic software applications.
- •No formal programming knowledge is required, but logical thinking is beneficial.
Coursework AI Review
Paste your assignment brief and check your draft against its P/M/D criteria
Key Terminology
Essential terms to know
- Be able to implement management of a Windows based operating system, Be able to implement an installation strategy, Be able to implement Windows authentication, Be able to implement intranet connectivity, Be able to implement an application strategy for Windows, Be able to implement a solution for user settings, Be able to configure access to cloud service, Be able to implement access to file and print services, Be able to implement encryption for Windows, Be able to implement endpoint security, Be able to implement extranet connectivity, Be able to implement recovery solutions
- Be able to implement management of a Windows based operating system, Be able to implement an installation strategy, Be able to implement Windows authentication, Be able to implement intranet connectivity, Be able to implement an application strategy for Windows, Be able to implement a solution for user settings, Be able to configure access to cloud service, Be able to implement access to file and print services, Be able to implement encryption for Windows, Be able to implement endpoint security, Be able to implement extranet connectivity, Be able to implement recovery solutions
- Be able to implement management of a Windows based operating system, Be able to implement an installation strategy, Be able to implement Windows authentication, Be able to implement intranet connectivity, Be able to implement an application strategy for Windows, Be able to implement a solution for user settings, Be able to configure access to cloud service, Be able to implement access to file and print services, Be able to implement encryption for Windows, Be able to implement endpoint security, Be able to implement extranet connectivity, Be able to implement recovery solutions
- Be able to implement management of a Windows based operating system, Be able to implement an installation strategy, Be able to implement Windows authentication, Be able to implement intranet connectivity, Be able to implement an application strategy for Windows, Be able to implement a solution for user settings, Be able to configure access to cloud service, Be able to implement access to file and print services, Be able to implement encryption for Windows, Be able to implement endpoint security, Be able to implement extranet connectivity, Be able to implement recovery solutions
- Be able to implement management of a Windows based operating system, Be able to implement an installation strategy, Be able to implement Windows authentication, Be able to implement intranet connectivity, Be able to implement an application strategy for Windows, Be able to implement a solution for user settings, Be able to configure access to cloud service, Be able to implement access to file and print services, Be able to implement encryption for Windows, Be able to implement endpoint security, Be able to implement extranet connectivity, Be able to implement recovery solutions
- Be able to implement management of a Windows based operating system, Be able to implement an installation strategy, Be able to implement Windows authentication, Be able to implement intranet connectivity, Be able to implement an application strategy for Windows, Be able to implement a solution for user settings, Be able to configure access to cloud service, Be able to implement access to file and print services, Be able to implement encryption for Windows, Be able to implement endpoint security, Be able to implement extranet connectivity, Be able to implement recovery solutions
- Be able to implement management of a Windows based operating system, Be able to implement an installation strategy, Be able to implement Windows authentication, Be able to implement intranet connectivity, Be able to implement an application strategy for Windows, Be able to implement a solution for user settings, Be able to configure access to cloud service, Be able to implement access to file and print services, Be able to implement encryption for Windows, Be able to implement endpoint security, Be able to implement extranet connectivity, Be able to implement recovery solutions
- Be able to implement management of a Windows based operating system, Be able to implement an installation strategy, Be able to implement Windows authentication, Be able to implement intranet connectivity, Be able to implement an application strategy for Windows, Be able to implement a solution for user settings, Be able to configure access to cloud service, Be able to implement access to file and print services, Be able to implement encryption for Windows, Be able to implement endpoint security, Be able to implement extranet connectivity, Be able to implement recovery solutions
- Be able to implement management of a Windows based operating system, Be able to implement an installation strategy, Be able to implement Windows authentication, Be able to implement intranet connectivity, Be able to implement an application strategy for Windows, Be able to implement a solution for user settings, Be able to configure access to cloud service, Be able to implement access to file and print services, Be able to implement encryption for Windows, Be able to implement endpoint security, Be able to implement extranet connectivity, Be able to implement recovery solutions
- Be able to implement management of a Windows based operating system, Be able to implement an installation strategy, Be able to implement Windows authentication, Be able to implement intranet connectivity, Be able to implement an application strategy for Windows, Be able to implement a solution for user settings, Be able to configure access to cloud service, Be able to implement access to file and print services, Be able to implement encryption for Windows, Be able to implement endpoint security, Be able to implement extranet connectivity, Be able to implement recovery solutions
Ready to learn?
AI-powered learning tailored to this unit