Windows Control Panel

A+ Core 2 — 220-1102 | Domain 1.3

Windows
Control Panel

The legacy administrative hub for Windows. Still essential for advanced configuration, device management, and tasks not yet migrated to Settings.

19 Slides Domain 1.3 System • Network • Devices • Admin Tools Exam 220-1102

Slide 2 of 19

What Is Control Panel?

The original Windows configuration hub, present since Windows 1.0 (1985). Still ships in all Windows 10 and 11 versions.

History

Control Panel has been the central configuration interface for every Windows version. Microsoft has been migrating features to the Settings app since Windows 8, but full replacement has not happened. CP will likely remain for the foreseeable future.

Access Methods

Win + R, type control. Search "Control Panel" in Start. Run: control.exe. Direct applet access: control appwiz.cpl (Programs), control sysdm.cpl (System Properties), control inetcpl.cpl (Internet Options).

View Modes

Category view (default): groups into 8 categories. Large Icons and Small Icons view: flat list of all ~50 applets. Technicians often switch to icon view for faster direct access without navigating categories.

Why Still Matters

A+ 220-1102 explicitly tests Control Panel alongside Settings. Advanced tasks like BitLocker (Home users), credential management, Internet Explorer options, legacy network adapter configuration, and Administrative Tools are still CP-only or CP-primary.

Slide 3 of 19

Control Panel Category Map

Eight top-level categories in Category view. Each opens a group of related applets.

Slide 4 of 19

System & Security

The most exam-dense category: firewall, BitLocker, Admin Tools, System Properties.

System Properties

sysdm.cpl opens the 5-tab dialog: General, Computer Name, Hardware (Device Manager), Advanced (Performance, User Profiles, Startup/Recovery), System Protection (System Restore), Remote (RDP). Critical for exam scenarios.

Windows Defender Firewall

Allow an app through firewall, create inbound/outbound rules, toggle on/off per network profile (Domain, Private, Public). Advanced Settings opens wf.msc for rule-based configuration.

BitLocker Drive Encryption

Enable/disable full-disk encryption on OS and data drives. Requires TPM 1.2+ for OS drive without PIN, or PIN/USB startup key without TPM. Recovery key management. Pro/Enterprise only on workstations.

Action Center (Security & Maintenance)

Centralized status for Antivirus, Firewall, Windows Update, SmartScreen, UAC settings, and backup. Yellow flag = warning, red X = critical. Was renamed Security and Maintenance in Win 10.

Administrative Tools

Shortcut folder to: Computer Management, Event Viewer, Services, Task Scheduler, Performance Monitor, Resource Monitor, Local Security Policy, Component Services, ODBC Data Sources.

Power Options

Full power plan management: edit plan settings (screen and sleep timers), create custom plan, choose what closing lid or pressing power button does. The only place to access High Performance plan on most systems.

Slide 5 of 19

Network & Internet

Network and Sharing Center, adapter settings, and Internet Options.

Network and Sharing Center

View active connections, change network profile (Private/Public/Domain), set up new connection, troubleshoot. Access adapter properties from here. Key path for static IP assignment: Change Adapter Settings → adapter → Properties → IPv4.

Change Adapter Settings

ncpa.cpl lists all network adapters. Right-click → Properties for IPv4/IPv6 addressing, DNS, binding order. Right-click → Disable/Enable to cycle adapter. Right-click → Diagnose to run built-in repair.

HomeGroup (Legacy)

HomeGroup was removed in Windows 10 version 1803. Replaced by network sharing via workgroup or domain. If a question mentions HomeGroup it is testing legacy knowledge or a pre-1803 system.

Internet Options (inetcpl.cpl)

7 tabs: General, Security, Privacy, Content, Connections, Programs, Advanced. Controls IE and legacy Edge settings. Still used to configure: proxy, SSL/TLS cipher settings, trusted sites, pop-up blocker, certificate management.

Exam Path: Static IP

Control Panel → Network and Internet → Network and Sharing Center → Change adapter settings → right-click adapter → Properties → Internet Protocol Version 4 → Use the following IP address.

Ticket: User cannot connect after IP conflict. Open ncpa.cpl, right-click adapter, Properties, IPv4. Check if set to static. If so, verify address is outside DHCP pool. Release/Renew if switching to DHCP: ipconfig /release and /renew.

Slide 6 of 19

Hardware & Sound

Device Manager, Devices and Printers, Sound applet, and Power Options.

Device Manager (devmgmt.msc)

Tree view of all hardware devices. Yellow exclamation = driver error. Red X = disabled device. Down arrow = driver disabled by user. Update, roll back, disable, uninstall drivers. View hidden devices (View → Show hidden devices) to find ghost devices.

Devices and Printers

GUI view of connected peripherals. Right-click printer for: Set as default, Printing preferences, Printer properties, Troubleshoot. Add printer wizard launches here. Useful for basic printer management without WMI or PowerShell.

Sound (mmsys.cpl)

4 tabs: Playback, Recording, Sounds, Communications. Set default playback and recording devices. Configure exclusive mode, sample rate, bit depth. Communications tab auto-lowers other audio when Windows detects a call.

Power Options (powercfg.cpl)

Balanced (default), Power Saver, High Performance, and custom plans. Edit plan: screen off and sleep timers. Change plan settings for lid close, power button, sleep button. Always available; balanced is the exam default. High Performance disables sleep.

Display (Legacy)

Links to Screen Resolution and Display settings. Mostly replaced by Settings → Display in Win 10/11. Still appears in Control Panel for consistency. ClearType Text Tuner accessible here.

AutoPlay

Configures automatic media handling for removable drives, cameras, and discs. Set per media type: ask, open folder, run program, import. Disabling AutoPlay is a security hardening step to prevent AutoRun-style attacks.

Slide 7 of 19

Programs

Programs and Features, Windows features, and default programs.

Programs and Features (appwiz.cpl)

Complete list of installed applications with publisher, install date, size, and version. Uninstall, Change (repair), or modify. View installed updates under "View installed updates." Sort by date for recently installed malware identification. Still works for Win32 apps that Settings cannot fully uninstall.

Turn Windows Features On or Off

Check/uncheck Windows components: Hyper-V, Windows Sandbox, Internet Information Services (IIS), Telnet Client, TFTP Client, Windows Subsystem for Linux, .NET Framework versions, Print and Document Services. Requires restart for most changes.

Default Programs

Set Default Programs (per application, claim all associations). Associate a file type or protocol. Change AutoPlay settings. In Win 10/11, this mostly redirects to Settings → Apps → Default Apps for modern apps.

View Installed Updates

Programs and Features → View installed updates. Shows individual Windows Updates with KB numbers and install dates. Right-click → Uninstall to remove a specific update. Used when rolling back a problematic patch without using System Restore.

Malware Removal Workflow

Suspect software installed? Appwiz.cpl → sort by Install Date (descending) to identify recently added programs. Note publisher. If publisher is unknown or the program was installed without user knowledge, uninstall and scan with AV.

Slide 8 of 19

User Accounts

Account management, UAC settings, and Credential Manager.

Manage Accounts

Create, delete, and change account type (Standard or Administrator). Change password (for other accounts as admin). Change account picture. In domain environments, use Computer Management → Local Users and Groups (lusrmgr.msc) instead.

User Account Control (UAC)

Slider with 4 levels: Always notify → Notify only for app changes → Notify only without dimming → Never notify (off). Default is second level. Never notify disables UAC entirely, a security risk. Change UAC settings requires admin privileges.

Credential Manager

Stores Windows credentials (network shares, domain) and certificate-based credentials. Web Credentials: Internet Explorer and Edge legacy. Windows Credentials: UNC paths, RDP sessions, mapped drives. Used to update stored passwords when domain password changes.

netplwiz

Run netplwiz for advanced user account settings. Toggle "Users must enter a username and password to use this computer" for auto-login configuration. Useful for kiosk-type setups. Requires UAC elevation. Not accessible from Settings app directly.

Account Type Differences

Administrator: unrestricted, can install software, change system settings, access all files. Standard User: limited, UAC prompts for elevation, cannot change system settings. Guest account disabled by default in Win 10/11.

Microsoft vs. Local Account

Local: no sync, no OneDrive auto-setup, no Microsoft Store sign-in without separate account. Microsoft: syncs settings, enables BitLocker recovery through Microsoft account, required for some features. Both can be admin or standard.

Slide 9 of 19

Internet Options

inetcpl.cpl — 7 tabs that every technician must know cold.

Tab	Key Settings	Exam Relevance
General	Home page, browsing history, appearance, tabs behavior	Reset IE settings, clear history
Security	Internet, Intranet, Trusted Sites, Restricted Sites zones; security level slider	Add sites to Trusted Zone for enterprise apps
Privacy	Cookie policy, pop-up blocker, InPrivate browsing settings	Unblock pop-ups for specific sites
Content	SSL certificate management, AutoComplete, content advisor	View/export/import certificates
Connections	Dial-up connections, LAN settings (proxy), VPN	Configure proxy: LAN Settings button
Programs	Default browser, HTML editor, add-ons	Manage browser add-ons
Advanced	SSL/TLS versions, security options, graphics acceleration, browsing settings	Enable TLS 1.2/1.3, disable SSLv3

Proxy Configuration Path

Internet Options → Connections tab → LAN Settings button → Check "Use a proxy server" → Enter IP and port. This also configures the proxy for legacy Edge and many enterprise applications that use the system proxy setting.

Slide 10 of 19

Administrative Tools

The MMC snap-in launcher hub. Every tool here is also accessible by direct .msc command.

Computer Management (compmgmt.msc)

All-in-one: System Tools (Event Viewer, Task Scheduler, Device Manager, Disk Management), Storage, Services and Applications. The single most-used admin console on a Windows PC for A+ work.

Event Viewer (eventvwr.msc)

Windows Logs: Application (app events), Security (logon/logoff, privilege use), System (driver, hardware, service events), Setup. Custom Views for filtered queries. Subscriptions for remote log collection.

Services (services.msc)

Start, stop, pause, restart services. Set startup type: Automatic, Automatic (Delayed Start), Manual, Disabled. Recovery tab defines action on first/second/subsequent failure. Dependencies tab shows inter-service requirements.

Task Scheduler (taskschd.msc)

Create and manage scheduled tasks. Triggers: on schedule, at logon, on event, at startup, on idle. Actions: run program, send email (deprecated), display message (deprecated). Used for maintenance scripts and monitoring.

Local Security Policy (secpol.msc)

Account Policies (password policy, lockout policy), Local Policies (audit policy, user rights, security options), Windows Firewall rules, Software Restriction. Not available on Home editions — only Pro/Enterprise.

Disk Management (diskmgmt.msc)

Create, delete, format, extend, shrink volumes. Convert MBR to GPT (with data loss). Initialize new disks. Change drive letters. Mark partition active. View disk status (Healthy, Failed, Unallocated, Foreign). Critical for storage troubleshooting.

Slide 11 of 19

Device Manager Deep Dive

devmgmt.msc — the primary tool for hardware and driver troubleshooting.

Error Indicators

Yellow exclamation (!): driver error or conflict. Red X: device disabled. Down arrow: manually disabled. No indicator: working correctly. Code 43: hardware reported a problem (common for USB devices). Code 10: device cannot start.

Driver Operations

Update driver (search online or browse locally). Roll back driver (reverts to previous version — one level only). Disable: stops device without uninstalling. Uninstall device: removes driver; Windows may reinstall on reboot. Delete driver software: removes package from store.

View Options

View → Show hidden devices: reveals non-present hardware (ghost devices from disconnected drives or old NICs). View → Devices by connection: shows PCI/USB topology. View → Resources by type: IRQ, I/O, DMA assignments.

Error Code	Meaning	Common Fix
Code 1	Not configured	Reinstall driver
Code 10	Cannot start	Update/reinstall driver
Code 22	Device disabled	Enable in Device Manager
Code 28	No driver	Install driver
Code 43	Hardware failure	Replace device or reinstall USB drivers
Code 45	Not connected	Reconnect or clear ghost device

Driver Signing

Windows 64-bit requires digitally signed drivers. Unsigned driver installs fail without disabling Secure Boot / enabling Test Mode. In enterprise, use WHQL-certified drivers for stability.

Slide 12 of 19

Programs & Features

Uninstall, repair, and manage installed software and Windows components.

Uninstall a Program

Select program, click Uninstall. Some programs offer Uninstall, Change (repair/modify), or Repair. If Uninstall fails, use vendor removal tool or Microsoft's "Microsoft Support and Recovery Assistant." Residual files may remain in Program Files.

View Installed Updates

Left panel link. Lists all installed Windows Update KB articles. Sort by "Installed On" to find recent updates. Right-click → Uninstall to remove. Cannot remove security-only packages or cumulative updates on Win 10/11 (some are protected).

Turn Windows Features On or Off

Checkboxes for optional Windows components. Checked = installed, cleared = removed (not deleted, can be re-added). Half-filled = partially installed. Examples: IIS, Hyper-V, WSL, Telnet Client, SNMP, DirectPlay (legacy gaming), XPS Viewer.

Exam Windows Features

Telnet Client: test port connectivity (telnet host port). TFTP Client: file transfer to network devices. IIS: local web server for development. Hyper-V: requires Pro/Enterprise + hardware virtualization. WSL: Linux environment in Windows.

Telnet as a Diagnostic Tool

telnet smtp.domain.com 25 — if it connects, port 25 is open. If it hangs or refuses, the port is blocked by firewall or the service is down. Telnet Client must be installed first via Windows Features. In Win 10/11, Test-NetConnection (PowerShell) is the modern alternative.

Slide 13 of 19

Credential Manager

Stored authentication tokens for network resources, RDP, mapped drives, and web.

Windows Credentials

Stores credentials for: network shares (\\server\share), RDP sessions, HomeGroup (legacy), certificate-based authentication. Username, domain, and encrypted password stored per resource. Edit or remove when password changes to prevent repeated auth failures.

Certificate-Based Credentials

X.509 certificate credentials for smart card or certificate-based authentication. Linked to specific certificates in the certificate store. Used in high-security environments where password auth is insufficient.

Web Credentials

Stores credentials saved by Internet Explorer and legacy Microsoft Edge. Modern Edge uses its own credential store. Synced with Microsoft Account if enabled. Can be a privacy concern — exported or scraped by credential-harvesting malware.

Backup and Restore

Back up credentials to an encrypted .crd file. Restore to another PC or after OS reinstall. Useful in enterprise migrations where mapped drive credentials need to move with user profiles. Password required for decrypt.

Ticket: "User gets repeated password prompts when opening mapped drive after password change." Solution: Control Panel → Credential Manager → Windows Credentials → find the network resource entry → Edit → update password. No further prompts.

Slide 14 of 19

File Explorer Options

Formerly "Folder Options" — controls how File Explorer displays files and folders.

General Tab

Open File Explorer to: Quick Access or This PC. Browse folders: open each in same or new window. Click items: single-click (IE style) or double-click (default). Privacy: show recent files and folders in Quick Access.

View Tab

Key toggles: Show hidden files/folders/drives. Hide extensions for known file types (default on — security risk, enables double extension attacks). Hide protected operating system files. Show full path in title bar. Separate process for each window.

Search Tab

Index settings, search non-indexed locations. "Don't use the index when searching" for real-time but slower searches. Include system directories and compressed files in search.

Security Setting

"Hide extensions for known file types" is enabled by default. This allows malware named "invoice.pdf.exe" to display as "invoice.pdf" in File Explorer. Technicians should disable this on all managed systems.

Show Hidden Files

Required for virus removal, profile troubleshooting, and AppData access. View tab → "Show hidden files, folders, and drives." Also show protected OS files to see pagefile.sys and hiberfil.sys.

Quick Access

Pinned folders and recent files. Right-click any folder to pin. Right-click recent files to remove from history. Privacy: clear Quick Access history under General tab → Clear File Explorer History.

Slide 15 of 19

System Properties

sysdm.cpl — 5 tabs covering computer info, hardware, performance, restore, and remote access.

Tab	What Is Here	Common Use
Computer Name	NetBIOS name, workgroup or domain membership, full computer description	Rename computer, join/leave domain
Hardware	Device Manager shortcut, Device Installation Settings, Drivers (signature enforcement)	Launch Device Manager, configure driver signing
Advanced	Performance (visual effects, virtual memory), User Profiles, Startup and Recovery (default OS, BSOD settings, dump file type)	Change pagefile size, configure BSOD dump
System Protection	Configure System Restore per drive: enable/disable, max disk usage. Create restore point, System Restore wizard	Create restore point before changes; restore after failure
Remote	Remote Assistance (allow helpers to connect), Remote Desktop (allow RDP connections), select allowed users	Enable RDP, add users to Remote Desktop Users group

Virtual Memory Path

Advanced tab → Performance → Settings → Advanced tab → Virtual memory → Change. Default: system managed. Manual: set initial and maximum size. Rule of thumb: 1.5x RAM minimum, 3x RAM maximum. Moving pagefile to non-OS drive improves performance.

Slide 16 of 19

Direct Applet Commands

Win + R shortcuts that bypass Control Panel navigation entirely.

Command	Opens
control	Control Panel home
sysdm.cpl	System Properties
appwiz.cpl	Programs and Features
ncpa.cpl	Network Connections
inetcpl.cpl	Internet Options
firewall.cpl	Windows Defender Firewall
mmsys.cpl	Sound applet
powercfg.cpl	Power Options

Command	Opens
timedate.cpl	Date and Time
intl.cpl	Region (International)
devmgmt.msc	Device Manager
diskmgmt.msc	Disk Management
compmgmt.msc	Computer Management
services.msc	Services
secpol.msc	Local Security Policy
netplwiz	User Accounts (advanced)

Exam Strategy

Many A+ scenario questions describe a task and ask which tool to use. Memorize .cpl and .msc commands. Faster than navigating menus in the field and often the only path when the Start menu or taskbar is unavailable (safe mode, kiosk mode, broken shell).

Slide 17 of 19

Windows Defender Firewall

firewall.cpl — network profile rules, app exceptions, and advanced inbound/outbound rules.

Network Profiles

Domain: applied when joined to an AD domain. Private: trusted network (home, office). Public: untrusted network (coffee shop, airport). Firewall rules are profile-specific. A remote app can work on Private but be blocked on Public.

Allow an App Through

firewall.cpl → Allow an app or feature. Check application name, select profiles (Domain, Private, Public). Change Settings button required to modify. "Allow another app" to add unlisted programs. Does not create granular port rules.

Advanced Settings (wf.msc)

Windows Firewall with Advanced Security. Create: Inbound rules (block incoming traffic to a port), Outbound rules (block application from contacting internet), Connection Security rules (IPsec). Sort by profile, protocol, port, or application. Monitoring tab shows active rules.

Task	Tool	Path
Turn firewall on/off	firewall.cpl	Turn Windows Defender Firewall on or off
Allow a program	firewall.cpl	Allow an app or feature through
Block a port (inbound)	wf.msc	Inbound Rules → New Rule → Port
Block an outbound app	wf.msc	Outbound Rules → New Rule → Program
Reset to defaults	firewall.cpl	Restore defaults (removes all custom rules)

Slide 18 of 19

Indexing Options

Control which locations Windows Search indexes for fast file and content retrieval.

What Is Indexed

By default: Start Menu, user profile folders (Documents, Music, Videos, Pictures, Desktop, Downloads, AppData\Roaming). Can add more locations (e.g., D:\Projects). Can exclude specific folders within indexed locations.

Advanced Options

Rebuild index (resolves search errors, slow after rebuild). Change index location (move index database to non-OS drive for performance). File types tab: set which extensions are indexed by properties only or properties + content.

Troubleshooting Search

If Windows Search returns no or incorrect results: Indexing Options → Advanced → Rebuild. Index status shows number of items indexed. May take 30-60 minutes on first build. Search service: WSearch must be running (services.msc).

Performance Note

Indexing runs as a background service (SearchIndexer.exe). High CPU/disk usage after large file copy is normal. Indexing pauses when battery is low. On SSDs, the index rebuild is fast. On HDDs, it can spike disk usage for an hour.

Search Troubleshooter Path

Settings → System → Troubleshoot → Other troubleshooters → Search and Indexing. Runs automated checks on the WSearch service and index integrity. Use this before manually rebuilding the index.

Ticket: "User's file search returns nothing." Check: Is WSearch service running? (services.msc). If yes, Indexing Options → check status — if 0 items indexed, Rebuild. If service is stopped, set to Automatic and start it.

Slide 19 of 19 — Summary

Control Panel Key Takeaways

01

8 categories in Category view; switch to Large Icons for direct applet access. Use .cpl and .msc commands for fastest access.

02

System Properties (sysdm.cpl) covers Computer Name, Device Manager, Performance/Pagefile, System Restore, and Remote Desktop in one place.

03

appwiz.cpl — sort by Install Date to identify recently installed malware. View Installed Updates to roll back a bad patch.

04

Credential Manager must be updated when network passwords change or mapped drives will prompt repeatedly.

05

Internet Options → Connections → LAN Settings is the system-wide proxy configuration path for legacy apps and IE.

06

Device Manager error codes: Code 10 = cannot start, Code 22 = disabled, Code 43 = hardware failure, Code 28 = no driver.

07

File Explorer Options → hide extensions is enabled by default. Disable it on managed systems to prevent double-extension attacks.

08

wf.msc (Advanced Firewall) creates granular inbound/outbound rules by port, program, and profile. firewall.cpl is for simple app exceptions only.

Exam Domain Coverage

This presentation covers CompTIA A+ 220-1102 Domain 1.3 (Microsoft Windows OS) with emphasis on Control Panel applets, administrative tools, and technician troubleshooting paths for hardware, networking, and security.