Latest Event Updates

Risks and Considerations for Win10 LTSC over Win10 Current Channel

Posted on Updated on

It’s no secret that with the introduction of Windows 10 that Microsoft has moved into the direction of releasing new feature updates twice per year, which is commonly referred to as Windows as a Service.  An organization could be faced with challenges around the frequency, size, and the new administrative cadence of feature updates to Windows (even though Microsoft has done and is doing great work to address these challenges).

In light of these challenges, it can be tempting for an organization to try to “standardize” on version of Windows 10 that is supported for 10 years.  This version is called the Long Term Servicing Branch Channel, or LTSC for short, and is designed for “Specialized systems—such as PCs that control medical equipment, point-of-sale systems, and ATMs—often require a longer servicing option because of their purpose. These devices typically perform a single important task and don’t need feature updates as frequently as other devices in the organization.”  (Side note that the nomenclature usage of the word “Branch” was recently dropped

While it may sound great that there is a version of Windows 10 which is supported for 10 years, there are many considerations and risks with trying to use it across the board.  This posting is an attempt to pull together and consolidate disparate references to help highlight, educate, and inform on Win10 LTSC for general production use.  Even Gartner says Rethink Windows 10 LTSB Deployment Based on Microsoft’s Updated Guidance.

Consideration #1

General guidelines state that devices that fulfill the following criteria are considered general-purpose devices and should be paired with Windows 10 using the Current Channel servicing option:

  • Devices that run productivity software such as Microsoft Office
  • Devices that use Windows Store applications
  • Devices that are used for general Internet browsing
    (for example, research or access to social media)

Reference: https://docs.microsoft.com/en-us/windows/deployment/update/waas-overview#long-term-servicing-channel

Consideration #2

Support for the latest processor / chipsets:

  • LTSC will support the currently released silicon at the time of release of the LTSC version
  • As future silicon is released, support will be created through future LTSC releases that customers can deploy for those systems
  • This enables Microsoft to focus on deep integration between Windows and the silicon, while maintaining maximum reliability and compatibility with previous generations of platform and silicon

Implications:

  • Multiple LTSC versions would be required to be used and managed within the organization for the life of the hardware
  • Hope you’re ready to buy hundreds or thousands of computers with supported chipsets to just keep on hand

Consideration #3

LTSC, being that it’s code base and features are set “in stone” for 10 years and will not be modified, then it will be unable to keep up with current security capabilities and needs.  Case in point, the LTSB 2015 and 2016 releases do not have support for the following, only the current channels of Win10.  This would further widen the security gap of an organization until they are added into a future LTSC release (which is only every few years).

Consideration #4

Windows Analytics provides data-driven insights that reduce the cost of deploying, servicing, and supporting Windows 10.  It gives an organization actionable information to help gain deep insights into operational efficiency and the health of Windows 10 devices in the environment. But Windows 10 LTSC is not supported.  The three tools include:

  • Upgrade Readiness (general availability) provides powerful insights and recommendations about the computers, applications, and drivers in your organization, at no extra cost and without additional infrastructure requirements.
  • Update Compliance (public preview) provides a unified view of Windows Update and Windows Defender Antivirus compliance for Windows 10 devices, regardless of the management solution being used. It allows organizations to keep their devices secure and up-to-date, track protection and threat status, and monitor update deployments and troubleshoot issues as they arise.
  • Device Health (public preview) provides proactive insights to help detect and remediate end-user impacting issues. This new service uses telemetry data to provide such insights without additional infrastructure requirements. Proactively remediating end-user issues enables you to reduce support costs and improve efficiency.

Consideration #5

Examples of functionality missing that was included in the Windows 10 Creators Update (1703) in April 2017 include the following.  For each and every release of Windows 10, this list would grow.

Consideration #6

Various other limitations

  1. Fewer non-security and reliability fixes
  2. Visual Studio is not supported on LTSC
  3. Office ProPlus (traditional MSI) is highly recommended, and not using Office 365 ProPlus (aka click-to-run) on LTSC
  4. In-place upgrade of Win7 to LTSC is not supported – a full reimage, backup/restore of data and applications, just like the old days
  5. Depending upon IHV and ISV, there may be support and limitations on LTSC
  6. Doesn’t contain in-box apps, such as Store, Calculator, Photos, Camera, Music, Clock, and Edge – and yes, Edge is also a more secure browser

Consideration #7

Core Surface device experiences are impacted.

  • Windows Feature Updates, including enhancements such as:
    • Improvements to Direct Ink and palm rejection provided in Windows 10 1607
    • Improved support for high DPI applications provided in Windows 10 1703
  • Pressure sensitivity settings provided by the Surface app
  • The Windows Ink Workspace
  • Key touch-optimized in-box applications including Microsoft Edge, OneNote, Calendar, and Camera
  • Driver and firmware updates are not explicitly tested against releases of Windows 10 Enterprise LTSC
  • If you encounter problems, Microsoft Support will provide troubleshooting assistance. However, due to the servicing nature of the Windows LTSC, issue resolution may require that devices be upgraded to a more recent version of Windows 10 Enterprise LTSC, or to Windows 10 Pro or Enterprise with the Current Channel servicing option.

Summary

In summary, in this blog post I have tried to outline evidence to support you in your decision making process for choosing Windows 10 Current Channel over LTSC.  I hope that it leads to the proper choice for you!  Points covered were

  1. Guidelines of what is a general use device vs. a specialized device
  2. Support for the latest processor / chipsets
  3. Security features that are not present in LTSC
  4. Windows Analytics for data-driven insights, is not supported
  5. Example of missing functionality that was delivered in Windows 10 Creators Update (1703)
  6. Various other limitations and their potential impact
  7. Core Surface device experiences are impacted

 

This entry was posted in Windows 10 and tagged .

Windows 10 News You Can Use – August 2017

Posted on Updated on

Windows 10 news for August 2017. Categories:

deployment | security | productivity | windows insider highlights

Deployment & Management

  1. Details have been released as to which processors can be used with Windows products (including Custom Images). For each listed edition, your company must use only the processors listed, as specified in the table below. The requirements below apply whenever the edition below is pre-installed or provided on external media, including as downgrade or down edition software.
    https://docs.microsoft.com/en-us/windows-hardware/design/minimum/windows-processor-requirements
  2. Recommended settings and configurations for Win10 VDI desktops
    https://docs.microsoft.com/en-us/windows-server/remote/remote-desktop-services/rds-vdi-recommendations
  3. Features that are removed or deprecated in Windows 10 Fall Creators Update
    https://support.microsoft.com/sr-latn-rs/help/4034825/features-that-are-removed-or-deprecated-in-windows-10-fall-creators-up
  4. As part of the alignment with Windows 10 and Office 365 ProPlus, we are also adopting common terminology to make it as easy as possible to understand the servicing process.  The names Current Branch (and CB for Business) and Long-Term Servicing Branch (LTSB) are being replaced with Semi-Annual Channel and Long-Term Servicing Channel.
    https://blogs.technet.microsoft.com/windowsitpro/2017/07/27/waas-simplified-and-aligned
  5. Now Available: Update 1706 for System Center Configuration Manager
    https://blogs.technet.microsoft.com/enterprisemobility/2017/07/28/now-available-update-1706-for-system-center-configuration-manager
  6. For the past several months, Microsoft has shared insights on our roll out approach for Windows 10 Creators Update (version 1703). We’re now moving from a targeted offering to full availability for all compatible devices running Windows 10 Creators Update globally via Windows Update. Similarly, our commercial customers should feel confident to deploy this release broadly across their organizations.
    http://blogs.windows.com/windowsexperience/2017/07/27/windows-10-creators-update-fully-available-for-all-windows-10-customers
  7. IT use has evolved. The modern workplace encompasses multiple device platforms, user- and business-owned devices, and the ability for users to work anywhere. Transforming the process for deploying new Windows 10 PCs is an important part of Microsoft’s vision for modern IT.
    https://info.microsoft.com/en-us-landing-ondemand-ModernizethedeploymentprocesswithWindowsAutoPilot.html
  8. Last month Microsoft announced Windows Analytics Device Health, the latest addition to the suite of Windows Analytics functionality designed to ensure employees have the best possible experience with Windows 10.  Through the proactive insights provided by Device Health, we believe we can help you save time and money by reducing helpdesk calls and keeping employees productive.  We are happy to announce that the public preview of Windows Analytics Device Health is available for you to try.
    https://blogs.technet.microsoft.com/windowsitpro/2017/07/31/try-device-health-now

Security

  1. After October 10, 2017, Windows 10 devices running version 1511 will no longer receive security and quality updates. Microsoft recommends updating devices to the latest version of Windows 10.
    https://support.microsoft.com/en-us/help/4035050
  2. Microsoft IT looked to the capabilities of the cloud to help address the challenges of monitoring and protecting the corporate network from advanced adversaries and threats. Windows Defender Advanced Threat Protection (ATP) combines built-in behavioral sensors, machine learning, and security analytics that quickly adapt to changing threats.
    https://www.microsoft.com/itshowcase/Article/Content/935/Windows-Defender-ATP-helps-analysts-investigate-and-respond-to-threats
  3. Windows Defender Antivirus cloud protection service: Advanced real-time defense against never-before-seen malware. In Windows 10 Creators Update, the Windows Defender AV client uploads suspicious files to the cloud protection service for rapid analysis. Our ability to make a swift assessment of new and unknown files allows us to protect customers from malware the first time we see it.
    https://blogs.technet.microsoft.com/mmpc/2017/07/18/windows-defender-antivirus-cloud-protection-service-advanced-real-time-defense-against-never-before-seen-malware/
  4. Solving the TLS 1.0 Problem – This document presents guidance on rapidly identifying and removing Transport Layer Security (TLS) protocol version 1.0 dependencies in software built on top of Microsoft operating systems. It is intended to be used as a starting point for building a migration plan to a TLS 1.2+ network environment.
    https://www.microsoft.com/en-us/download/details.aspx?id=55266
  5. With Windows 10, your needs have guided our product development. We’ve designed Windows 10 to be the safest, most secure Windows yet. Our goals are to simplify IT administration and to deliver more personal and productive experiences with a lower total cost of ownership (TCO) on modern, powerful devices. Find out how your organization can prepare for today’s security threats.
    https://www.microsoft.com/en-us/WindowsForBusiness/Windows-security
  6. Microsoft would like to provide you with the latest information to keep you up-to-date with modern security advancements from Windows, through the latest Modern Security Information Kit.
    https://info.microsoft.com/ModernSecurityInformationKit.html

Productivity

  1. We’re excited to introduce you to the Microsoft Modern Keyboard with Fingerprint ID, a premium quality keyboard that brings the convenience and security of Windows Hello fingerprint sign-in to any PC running Windows 10. With the new Microsoft Modern Keyboard with Fingerprint ID, you can use your finger to sign into your Windows devices, and compatible apps**, with Windows Hello in less than 2 seconds – that’s 3 times faster*** than a password that you have to remember and type in.
    https://blogs.windows.com/devices/2017/07/27/introducing-new-microsoft-keyboard-brings-windows-hello-windows-10-pc
  2. If there’s anything we learned, it’s that after 32 years, MS Paint has a lot of fans. It’s been amazing to see so much love for our trusty old app. Amidst today’s commentary around MS Paint we wanted to take this opportunity to set the record straight, clear up some confusion and share some good news: MS Paint is here to stay, it will just have a new home soon, in the Windows Store where it will be available for free.
    https://blogs.windows.com/windowsexperience/2017/07/24/ms-paint-stay

Windows Insider Highlights

  1. Beginning in the Windows 10 Fall Creators Update, we intend to disable VBScript execution in IE 11 for websites in the Internet Zone and the Restricted Sites Zone by default, to provide a more secure experience.
    https://blogs.windows.com/msedgedev/2017/07/07/update-disabling-vbscript-internet-explorer-11
  2. The End of an Era – Adobe announced that Flash will no longer be supported after 2020. Microsoft will phase out support for Flash in Microsoft Edge and Internet Explorer ahead of this date.
    http://blogs.windows.com/msedgedev/2017/07/25/flash-on-windows-timeline

This entry was posted in News You Can Use, Windows 10.

Win10 News You Can Use – July 2017

Posted on Updated on

June was an active month for Windows 10 advancements, new resources, and security events!  For this edition of the “news you can use”, I’ve broken it into categories for deployment | security | productivity | windows insider feature highlights.

Deployment & Management

  1. MDOP servicing update released in March 2017, which includes updates for things like MBAM 2.5 SP1 support for SQL Server 2016 SP1.
    https://support.microsoft.com/en-us/help/4014009/march-2017-servicing-release-for-microsoft-desktop-optimization-pack
  2. Demystifying Windows as a Service – David das Neves (PFE for Microsoft Germany) shares his current experience and guidance for organizational preparation for WaaS.
    https://blogs.msdn.microsoft.com/daviddasneves/2017/06/18/demystifying-windows-as-a-service-wake-up-please
  3. Introducing a new service to the Windows Analytics suite – Device Health. Device Health functionality is designed to ensure employees have the best possible experience with Windows 10.  To achieve that goal, it helps identify issues that could affect a person’s experience, before they may even notice, while also identifying steps needed to resolve those issues proactively.  This reduces helpdesk calls and support costs, saving time and money.
    https://blogs.windows.com/business/2017/06/29/delivering-modern-promise-windows-10 (read the Proactive Insights section)
  4. Windows AutoPilot is a suite of capabilities designed to simplify and modernize the deployment and management of new Windows 10 PCs. With Windows AutoPilot, IT professionals can customize the Out of Box Experience (OOBE) for Windows 10 PCs and enable end users to take a brand-new Windows 10 device and—with just a few clicks—have a fully-configured device ready for business use. There are no images to deploy, no drivers to inject, and no infrastructure to manage. Most importantly, users can go through the process independently, without making any decisions and without needing to involve IT.  Furthermore, an upcoming WEBINAR on Modernize the deployment process with Windows AutoPilot
    https://blogs.technet.microsoft.com/windowsitpro/2017/06/29/modernizing-windows-deployment-with-windows-autopilot
     https://www.youtube.com/watch?v=JrEU84KK2lQ
     https://blogs.windows.com/business/2017/06/29/delivering-modern-promise-windows-10
  5. Modern management of Internet-based clients using SCCM.
    https://blogs.technet.microsoft.com/arnabm/2017/06/10/modern-management-of-internet-clients
  6. Videos and setup guides for Upgrade Readiness in the Windows Analytics suite.
    https://blogs.technet.microsoft.com/windowsitpro/2017/06/07/setup-guides-for-windows-analytics-upgrade-readiness
  7. One-hour “Ask Microsoft Anything” event upcoming about Windows 10 management at 9:00 a.m. Pacific Time on July 25th. Members of the Windows engineering and product teams will be standing by to answer your questions.  Note: You must be a member of Tech Community to post questions so save the date for the AMA event and visit http://aka.ms/community/Windows10 to join the Windows 10 Tech Community today.
    https://myeventurl.azurewebsites.net/events/Details/246

Security

  1. EMET protections coming to Windows 10 RS3 (branded as Windows Defender Exploit Guard)!
    https://blogs.windows.com/business/2017/06/27/announcing-end-end-security-features-windows-10
  2. Microsoft Mechanics video highlighting the RS3 capability for Windows Defender Application Guard.
    https://www.youtube.com/watch?v=J7fSeYEftRE
  3. New ransomware, old techniques: Petya adds worm capabilities – analysis and recommendations.  Plus, Windows 10 resilience against the Petya ransomware attack.
    https://blogs.technet.microsoft.com/mmpc/2017/06/27/new-ransomware-old-techniques-petya-adds-worm-capabilities
    https://blogs.technet.microsoft.com/mmpc/2017/06/29/windows-10-platform-resilience-against-the-petya-ransomware-attack
  4. Find out how to prevent and contain cyberattacks across email and endpoints with Windows Defender Advanced Threat Protection (Windows Defender ATP) and Office 365 ATP.  This new demo explains how these technologies work together to help detect and prevent attacks, and how—if an attack makes it through your defenses—they can help you contain the threat and take immediate action.
    https://blogs.technet.microsoft.com/windowsitpro/2017/06/12/new-demo-advanced-threat-protection-across-windows-10-and-office
  5. What’s new and coming to Windows Defender ATP in Win10 RS3.
    https://blogs.technet.microsoft.com/mmpc/2017/06/27/whats-new-in-windows-defender-atp-fall-creators-update
  6. Microsoft is pleased to announce the beta release of the recommended security configuration baseline settings for Windows 10 “Creators Update”.
    https://blogs.technet.microsoft.com/secguide/2017/06/15/security-baseline-for-windows-10-creators-update-v1703-draft
  7. Microsoft reluctantly announces the retirement of the Security Compliance Manager (SCM) tool. At the same time, we are reaffirming our commitment to delivering robust and useful security guidance for Windows, and tools to manage that guidance.
    https://blogs.technet.microsoft.com/secguide/2017/06/15/security-compliance-manager-scm-retired-new-tools-and-procedures
  8. The Microsoft Security Configuration Toolkit (replacing SCM as noted above) enables enterprise security administrators to effectively manage their enterprise’s Group Policy Objects (GPOs).  Using the toolkit, administrators can compare their current GPOs with Microsoft-recommended GPO baselines or other baselines, edit them, store them in GPO backup file format, and apply them via a Domain Controller or inject them directly into testbed hosts to test their effects.  The Security Configuration Toolkit consists of two tools, Policy Analyzer and LGPO, and a set of configuration baselines for different releases of Windows.
    https://www.microsoft.com/en-us/download/details.aspx?id=55319

Productivity

  1. Improving input responsiveness in Microsoft Edge.  With EdgeHTML 15 and the Windows 10 Creators Update, Microsoft Edge takes a big leap forward in how it schedules JavaScript work, leading to noticeable improvements in the usability, responsiveness, and performance of the modern web.
    http://blogs.windows.com/msedgedev/2017/06/01/input-responsiveness-event-loop-microsoft-edge
  2. Windows 10 tip: Organize your Start files with new tile folders.
    http://blogs.windows.com/windowsexperience/2017/06/05/windows-10-tip-organize-start-files-new-tile-folders

Windows Insider Feature Highlights

  1. Windows 10 and SMB1: As part of a multi-year security plan, we are removing the SMB1 networking protocol from Windows by default. This build has this change, however the change only affects clean installations of Windows, not upgrades. We are making this change to reduce the attack surface of the OS.
    https://blogs.windows.com/windowsexperience/2017/06/21/announcing-windows-10-insider-preview-build-16226-pc
  2. Windows Defender Application Guard (WDAG) Improvements.
    https://blogs.windows.com/windowsexperience/2017/06/28/announcing-windows-10-insider-preview-build-16232-pc-build-15228-mobile
  3. Introducing Controlled folder access in Windows Defender Antivirus: making it easier for you to protect valuable data from malicious apps and threats, such as ransomware.
    https://blogs.windows.com/windowsexperience/2017/06/28/announcing-windows-10-insider-preview-build-16232-pc-build-15228-mobile
  4. OneDrive files on-demand now available for Windows Insiders.
    http://blogs.windows.com/windowsexperience/2017/06/13/onedrive-files-demand-now-available-windows-insiders

This entry was posted in News You Can Use, Windows 10.

Windows 10 News You Can Use – June 2017

Posted on Updated on

This June 2017 edition of Win10 news you can use is primarily based around security. Do note that item #1 is for an upcoming webcast that could be beneficial for you or others in your team to attend.

  1. Windows 10 deployment: Tips and Tricks from Microsoft IT – LIVE June 20 at 10AM PST – This webinar will focus on best practices and lessons learned, from application compatibility testing and upgrade strategies to smoothing the deployment path through end user readiness
    https://info.microsoft.com/en-us-landing-windows10deploymenttipsandtricksfrommicrosoftit.html

  2. R.I.P … Windows 10 1507 end of support. Next up is end of support for Win10 1511 (Anniversary Update).
    https://support.microsoft.com/en-us/help/4015562/windows-10-version-1507-will-no-longer-receive-security-updates

  3. Recently the Windows Defender Advanced Threat Protection (WDATP) research team noticed security alerts that demonstrated an intriguing attack pattern. These early alerts uncovered a well-planned, finely orchestrated cyberattack that targeted several high-profile technology and financial organizations.
    https://blogs.technet.microsoft.com/mmpc/2017/05/04/windows-defender-atp-thwarts-operation-wilysupply-software-supply-chain-cyberattack
  4. Announced last September in the Microsoft Edge Blog, Windows Defender Application Guard for Microsoft Edge is now available in Windows Insider Preview (Build 16188) for Enterprise users in the Fast Ring. Microsoft Edge running in Application Guard provides enterprises the maximum level of protection from malware and zero day attacks against Windows.
    https://blogs.windows.com/windowsexperience/2017/05/04/announcing-windows-10-insider-preview-build-16188-pc-build-15210-mobile

  5. Improvements for Enterprises in Microsoft Edge on the Windows 10 Creators Update
    https://blogs.windows.com/msedgedev/2017/05/04/improvements-enterprises-microsoft-edge-windows-10-creators-update

  6. The security capabilities of Windows 10, Windows Defender Antivirus, and Windows Defender Advanced Threat Protection are constantly evolving to protect against current and future threats. Download this white paper to learn how Microsoft uses data science, machine learning, automation, behavioral analysis, and expert threat researchers to forge the next generation of security solutions.
    https://info.microsoft.com/Windows-Defender-ML-Whitepaper-Registration.html
  7. Microsoft Secure Blog on “7 types of highly effective hackers (and what to do about them)”; get the free e-book (registration required) to learn about the seven different types of hackers and get recommendations on how you can better prepare your organization against their potential threats.
    https://blogs.microsoft.com/microsoftsecure/2017/05/22/7-types-of-highly-effective-hackers-and-what-to-do-about-them

This entry was posted in News You Can Use, Windows 10.

Windows 10 News You Can Use – May 2017

Posted on Updated on

For this May 2017 edition of “Windows 10 news you can use”, the highlight is the release of the Windows 10 Creators Updates (aka R2, aka 1703). Since there is a lot of news surrounding the release, this newsletter is broken down into three sections.

General Win10 News

  1. ‘Ask Microsoft Anything’ (AMA) about Windows as a service event will give you the opportunity to connect with members of the Windows product and engineering teams, who will be on hand to answer your questions and listen to feedback – held on Thursday, May 4, 2017 from 9:00 a.m. to 10:00 a.m. PT
    https://blogs.technet.microsoft.com/windowsitpro/2017/04/24/save-the-date-windows-as-a-service-ama-on-may-4th
  2. Windows 10 IT Pro content map – A comprehensive list of resources designed to help IT professionals explore, plan for, deploy, manage, and support Windows 10
    https://www.microsoft.com/en-us/download/details.aspx?id=54962
  3. Announcing the Windows Insider Program for Business. Insiders can now register for Windows 10 Insider Preview Builds on their PC using their corporate credentials in Azure Active Directory. Using corporate credentials will enable you to increase the visibility of your organization’s feedback – especially on features that support productivity and business needs. You’ll also be able to better advocate for the needs of your organization, and have real-time dialogue with Microsoft on features critical to specific business needs.
    https://blogs.windows.com/windowsexperience/2017/04/07/announcing-windows-10-insider-preview-build-16170-pc
  4. A series of videos and blog posts are being published introduce you to the best of Microsoft Edge and share tips and tricks for making the most out of your browsing experience
    https://blogs.windows.com/windowsexperience/tag/a-week-with-microsoft-edge
  5. Announcement on the new release cadence of Office 365 ProPlus and SCCM along with Windows 10 branches
    https://blogs.windows.com/business/2017/04/20/windows-office-align-feature-release-schedules-benefit-customers
  6. Microsoft IT showcase – Enhancing remote access in Windows 10 with an automatic VPN profile
    https://www.microsoft.com/itshowcase/Article/Content/894/Enhancing-remote-access-in-Windows-10-with-an-automatic-VPN-profile

Windows 10 1703

  1. A consolidated description of content features and related resources for IT Pros to learn about what’s new in Windows 10, version 1703
  2. With the Creators Update, we’re upgrading Microsoft Edge with dozens of new features and under-the-hood improvements to make the best browser on Windows 10 faster, leaner, and more capable than ever.
    http://blogs.windows.com/msedgedev/2017/04/11/introducing-edgehtml-15
  3. New Microsoft Mechanics videos
  4. Microsoft shares what is collected in the Basic telemetry level. With telemetry enabled, Microsoft is giving back to customers with data-driven insights from the Windows Analytics suite to reduce the costs of deploying, servicing, and supporting Windows 10.
    https://blogs.windows.com/windowsexperience/2017/04/05/windows-10-privacy-journey-continues-more-transparency-and-controls-for-you

Windows 10 Security

  1. Windows 10 Security in Real Life – experts provide an in-depth look at the most secure Windows ever, and see how to put the new features to work for you right away, as you build up your Windows 10 security skills
    https://mva.microsoft.com/en-US/training-courses/windows-10-security-in-real-life-17127?l=Xz1vNy5XD_104300474
  2. Microsoft published a “ransomware response playbook”, which outlines a scenario-driven story about how WDATP can help protect against ransomware in the enterprise
    https://www.microsoft.com/en-us/download/details.aspx?id=55090
  3. Recent Gartner research explores the new Windows threat resistance security features that are important to security and risk management leaders
    http://www.gartner.com/reprints/?id=1-3XQ818D&ct=170411&st=sb
  4. A new, more thorough Windows Defender Antivirus library on TechNet with an impressive 47 topics and 164 pages!
    https://technet.microsoft.com/en-us/itpro/windows/keep-secure/windows-defender-antivirus-in-windows-10

This entry was posted in Uncategorized.

Windows 10 News You Can Use – April 2017

Posted on Updated on

For this month’s edition of Windows 10 news that you can use, I’m excited to share that the Windows 10 Creators Update (aka RS2, aka 1703) has arrived!  Announcement: https://blogs.windows.com/windowsexperience/2017/03/29/windows-10-creators-update-coming-april-11-surface-expands-markets.  Additionally, there is a webcast on April 27th, which will cover changes and new features in further detail – register for it at https://aka.ms/w10itpro/new-in-v1703-webcast.

For the rest of this month’s news:

  1. The Microsoft Edge security team employs a layered strategy to protect you from vulnerabilities that could be used to compromise your device or personal data.  In this post, we’ll explore some of the significant improvements we’ve made in the Windows 10 Creators Update to strengthen our next line of defense: the Microsoft Edge sandbox.
    http://blogs.windows.com/msedgedev/2017/03/23/strengthening-microsoft-edge-sandbox
  2. If you upgraded in-place to Win10 x64 from Win7 x64, then it’s highly likely the disk is in the MBR format. With the release of the Win10 Creators Update (v. 1703), the disk conversion MBR to GPT tool is now ready to be used so that you can convert BIOS to UEFI.
    https://technet.microsoft.com/en-us/itpro/windows/deploy/mbr-to-gpt
  3. Win10 virtual hands-on labs let you try out Windows 10 setup, deployment, and management scenarios using a cloud-based private virtual machine environment. Each lab presents you with a series of instructions, and access to one or more virtual machines, with no additional software or setup required.
    https://blogs.technet.microsoft.com/windowsitpro/2017/03/02/get-free-hands-on-experience-with-windows-10-virtual-labs
  4. Easy to follow Win10 technical demonstration videos – Explore the new features and improvements in Windows 10, and find tips and tricks to simplify deployment.
    https://technet.microsoft.com/en-us/windows/dn708062
  5. Windows Defender Antivirus protection evaluation guide.  Related, if you would like a demo or to personally test out the Block at First Sight capabilities to protect against zero-day malware, then let me know so that I can provide you with instructions to mimic polymorphic malware.
    https://www.microsoft.com/en-us/download/details.aspx?id=54795
  6. Features that are removed or deprecated in Windows 10 Creators Update 1703. This list is intended for IT professionals who are updating operating systems in a commercial environment.
    https://support.microsoft.com/en-us/help/4014193/features-that-are-removed-or-deprecated-in-windows-10-creators-update
  7. On-demand video for Best Practices on Win10 deployment.  Refresh your memory on what Windows as a Service means, and understand how it applies to your own business. Get an overview of the management features and integrations in Windows 10 that make it simpler but also more flexible, such as In-Place Upgrade, Dynamic Provisioning, Azure Active Directory, and Mobile Device Management. Learn more about App-V and UE-V, which makes management of applications and settings more streamlined.
    https://info.microsoft.com/en-us-wbnr-Windows10DeploymentBestPractices-register.html
  8. Windows 10 Deployment and Management Lab Kit updated and good through June 1, 2017.  Note this is still using Win10 1607 as that is the CBB.
    https://www.microsoft.com/en-us/evalcenter/evaluate-windows-10-deployment-and-management-lab-kit

 

This entry was posted in News You Can Use, Windows 10.

Inventory of systems that are using Offline Files

Posted on Updated on

If you need a mechanism by which to identity or inventory systems that have cached files using Offline Files, you can retrieve details through WMI in Win32_OfflineFilesItem.  ConfigMgr inventory can be easily expanded to collect this data for reporting.  Below is an example screen shot from my lab on a Win7 system that has a cached offline file.  Be aware, and keep in mind that you may risk exposing confidential information based upon the server or file name. 

 offlinefiles_wmi

 

p.s. happy Pi day

This entry was posted in ConfigMgr.