Vol. 20, #38 - September 21, 2015 - Issue #1048

Managing Windows 10 

  1. Editor's Corner
    • Ask Our Readers - Opening Office 2010 documents after upgrading to Windows 10
    • Ask Our Readers - Roaming profiles in Windows 10
    • Managing Windows 10
      • Installation
      • Licensing and Activation
      • Enterprise Deployment
      • Privacy
      • Manageability
      • Desktop Apps
      • Summary
    • Send us your feedback
    • Recommended for Learning
    • Microsoft Virtual Academy
    • Registration is open for Exchange CON 2015
    • Quote of the Week
  2. Admin Toolbox
    • Admin Tools We Think You Shouldn't Be Without
  3. This Week's Tips
    • Windows 10 - System reserved partition
    • Windows 10 - Consequences of disabling services
    • Windows 10 - Boot into safe mode
  4. Events Calendar
    • North America
  5. Tech Briefing
    • Amazon Web Services
    • Cloud computing
    • Exchange & Office
    • Hyper-V
    • Security and Privacy
  6. Recommended TechGenix Articles
    • Recommended articles from websites in TechGenix Network
  7. Windows Server News
    • Ten ways to control public cloud spending
    • Problems running legacy Windows as a guest OS
    • How to deliver individual apps with an RDSH farm
    • Windows 10 no savior for slumping PC market
  8. WServerNews FAVE Links
    • Just A Casual Day In Australia
    • How To Get A Car Unstuck Out Of The Mud
    • Changchun Airshow - Cockpit View
    • When Cats Attack
  9. WServerNews - Product of the Week
    • Deep Packet Inspection for Quality of Experience Monitoring

 

 

Editor's Corner

This week's newsletter includes a guest editorial by Jeffrey Harris, one of our long time newsletter readers who recently spent time exploring Windows 10 and what it may mean for administrators. We also welcome Matt Tinney the CEO and founder of Windows Management Experts (WME) a leader in Microsoft System Center technologies that helps customers reduce IT operations cost through services and solutions. Matt Tinney has been working in IT for over 15 years and will be regularly contributing tips to our newsletter. Finally, we also have the usual assortment of tools, tips, resources and news items that make our newsletter one of the best resources around for those who work in the information technology field at any level. 

Yes I know it doesn't sound very humble when we call ourselves "one of the best resources around" but it's hard to be humble when you're the best, right? After all, it's not what we say about ourselves that matters, it's what's inside a person that counts, isn't it? Of course Dogbert would be suspicious of such a statement as the following Dilbert comic strip demonstrates:

http://www.wservernews.com/go/c7p7c9wq/

Yes it is a funny world, isn't it?

P.S. Next week I'll be sharing my own recent Windows 10 upgrade experience which includes an interesting story about contacting tech support at 3 am to ask for help...so stayed tuned!

Ask Our Readers - Opening Office 2010 documents after upgrading to Windows 10

A reader named Sam alerted us to a problem one of his customers is experiencing after upgrading their computers from Windows 7 to Windows 10. We wanted to publish it here in case other readers of this newsletter are experiencing the same issue.

Customer at a catering company (small business, 15 employees, 1 office computer, 1 laptop) wanted to upgrade to w10 pro. Verified that everything was working OK before the upgrade, performed backup. Upgrade went well but…..

Office 2010 now not opening documents saved and therefore new documents are having to be re-created. All the documents are written and saved in Office and opened fine before the upgrade. With over 100 customers, recreating documents is not easy and there is no previous visible document to use as a reference because office 2010 won't open them. Not all documents are affected just about 30%. Copied the documents from the backup and all the documents open on W7 with office 2010 (used another computer) but not in W10 with office 2010.  Tried repairing Office, look up this issue on the internet, seems to be fairly common with no solution. It really bites.

We had some spare cycles so we did some quick research and found that the following seems to be the key thread on the Microsoft Answers forum concerning this issue:

http://www.wservernews.com/go/uvf5pn0p/

The solution Bryan Jeffries suggests in this thread is found in this KB article:

http://www.wservernews.com/go/zzwfdpyg/

Note however that this KB is for Office 2013 applications. To perform the equivalent "update now" in Office 2010 applications like Word 2010 you can do following the instructions in this Microsoft Office Support article:

http://www.wservernews.com/go/cpzqzvv2/

I passed this info on to Sam and he replied as follows:

I did that already, I always run the office update after an upgrade to W10 as part of the upgrade. As a matter of fact the third automatic update downloads and installs a "compatibility package" for office. That did not work but copying the files over the 2010 Office (so I have an "original" and a copy), I can get them to open. Weird, I know, but it works! Then went document by document and if the original did not open the copy did, had to delete the original and rename the copy. A real pain but the problem is resolved.

So Sam seems to have found a workaround for this problem but it doesn't really address the underlying issue which seems to be some kind of broken functionality in Office 2010 when a system has been upgraded from Windows 7 to Windows 10. Have any other readers experienced this problem or found any further information what causes it and how to fix? Email us at [email protected]

Ask Our Readers - Roaming profiles in Windows 10

Jeffrey Harris who has contributed the guest editorial for this issue also wanted us to ask whether any of our readers have any further insight into the following issue concerning roaming profiles in Windows 10:

I wanted to solicit feedback from readers whether they have seen any issues with migrating Windows 7 profiles to Windows 10.  I believe that after logging into a Windows 10 system for the first time with a user who has a roaming Windows 7 profile with a .v2 extension, Windows 10 should create a new profile with a .v5 extension, and all of the user's profile settings (application settings, favorites, wallpaper, etc.) except for Start Menu customizations should carry over.  But that is not happening.  In one case, a new roaming profile was created, but no settings were migrated, and in another, the profile folder with a .v5 extension was created, but the user's settings were neither loaded onto the Windows 10 machine (it stated there was an error and loaded a temporary profile), nor written back into the roaming profile folder.

If any readers have any insight on this matter, please send us your feedback at [email protected]

Ask Our Readers: WServerNews has almost 100,000 subscribers worldwide. That's a lot of expertise to tap into. Do you need help with some issue or need advice on something IT-related? Got a question you'd like us to toss out to our readers to try and answer? Email us at [email protected]

And now on to our guest editorial by Jeffrey Harris...

Managing Windows 10

Windows 10 has generated considerable buzz for what it is (the newest version of Windows) and what it is not (Windows 8.2). In this commentary, I will look at some things that those of us who will be managing Windows 10 systems should know about, and some tips on things that are not entirely obvious. This commentary is not meant to explore all features of Windows 10, but some things I discovered in my exploration of Windows 10.

Installation

For those of you without volume licenses, the first hurdle is access to the upgrade. I did not want to wait for Microsoft to select my Windows 7 system for an upgrade, so I went hunting for an installation ISO. Microsoft does not provide downloadable installation ISO files, as with Windows 7, but requires the execution of a media generation utility, see here:

http://www.wservernews.com/go/2a1tvzzl/

There are x32 and x64 versions of the utility, but the x64 version would not run on my existing Windows 7 system, and neither the x32 nor x64 versions would run on my Windows Servers. Fortunately, I was able to run it on my new workstation, and was pleased to discover that unlike its Windows 8/8.1 counterparts, the utility will generate either an iso image or flash drive files for both x32 and x64 system installations. The same utility will also generate either Home or Professional Editions of Windows 10.

Although I had previously successfully loaded an x64 version of Windows 8 on a 2005 Pentium 4 based Dell system, Microsoft changed the processor requirements for Windows 8.1 and 10 from Windows 7/8, see here for Windows 8.1:

http://www.wservernews.com/go/nl808udj/

and here for Windows 10:

http://www.wservernews.com/go/dnhoyf2i/

Note that the processor constraints only affect x64 versions of Windows 10, so that may be a consideration for upgrading older systems currently running x64 versions of Windows 7 or 8.

Upgrading is fairly straightforward. I mounted the iso file using WinCDEmu on the running Windows 7 system, and started the upgrade process, which took about an hour and required multiple reboots. [Editor's Note: For a tip from Jeffrey concerning the system reserved partition, see This Week's Tips in this issue]

Licensing and Activation

Normal Microsoft licensing practices apply to the free Windows 10 upgrade -- an upgrade from an OEM copy is non-transferrable, and an upgrade from retail media is transferrable.

Activation for upgrades is different; full installs of retail copies likely follow the same process. Microsoft has not spoken publically about activation changes for Windows 10, but activation is based less on an unique installation key and more on Microsoft storage of a hardware profile to automatically activate systems that have been previously been activated, and are subsequently freshly reinstalled using a generic product key. Microsoft has not made clear how users can transfer retail licenses activated during the free upgrade period to replacement systems after the free upgrade period ends.

Volume licensing and volume activation policies and methods are largely unchanged, with both multiple activation licenses and Key Management Server (KMS) licenses still available. However, Microsoft has stated that KMS hosted on Windows Server 2008 R2 cannot activate Windows 10 licenses, see here:

http://www.wservernews.com/go/zuiv7oku/

An update is required for KMS hosted on Windows 8/8.1/Windows Server 2012/R2 as described here:

http://www.wservernews.com/go/rbpylj6y/

Enterprise Deployment

Enterprise deployment of Windows 10 is supported through SCCM. Creation of Windows 10 images is now supported in a recently release upgrade to the Microsoft Deployment Toolkit 2013 Update 1 is available here:

http://www.wservernews.com/go/ds6jbf8o/

Privacy

Microsoft has taken considerable criticism for the privacy features (or lack thereof) in Windows 10. The biggest complaints that people should have are (1) the lack of centralized settings for all privacy settings (even Facebook has centralized settings) and (2) the inability to easily turn off all of the data collection in Windows 10.

I found no less than five places to configure privacy settings through the user interface (and that does not count other parts of Windows such as the Task Scheduler):

I did not explore how extensive group policy support for privacy is in Windows 10, but at least a few settings can be turned off through group policies, such as participation in the Customer Experience Improvement Program. [Editor's Note: We'll be exploring some of the new Group Policy settings in Windows 10 in the future]

Manageability

It seems as if Windows 10 is less manageable in an enterprise environment than Windows 7 and 8/8.1 are.

First, Windows 10 uses a new format for user profiles (V5 from V2), and it seems as if the migration process does not work at all. I have tried to migrate two accounts with roaming profiles to Windows 10, and none of the user settings, including favorites and desktop wallpaper, transferred to the new Windows 10 profile. It appears that no roaming profile is created at all. [Editor's Note: See Jeffrey's question in the Ask Our Readers section of this issue and let us know if you have any further information concerning this matter.]

Second, Windows 10 does not support inclusion of start menu configuration settings (shortcuts/last used applications/jump lists) into roaming profiles. A workaround is to deploy Classic Start Menu.

Third, group policies for managing Windows updates on local systems no longer work. While use of WSUS or SCCM to deploy updates still works, users with administrative rights to their systems (such as developers) have no ability to review or defer updates to the local system.

Desktop Apps

I wanted to finish with a discussion of management of desktop apps. Microsoft does allow enterprises to manage their own intranet based apps store. However, the apps store moves the focus for applications from being system based to user based. And Microsoft has not made the process to manage apps easy, compared to applications hosted on Windows 7.

Some apps can be uninstalled using the Settings control. Other apps can only be uninstalled using PowerShell (but apps that can be uninstalled using the Settings control can also be uninstalled using PowerShell). Furthermore, uninstalling an app using Settings only uninstalls it for the current user. To uninstall it for all existing accounts requires the use of PowerShell.

But wait, there is more! Just uninstalling an app for all users does not prevent the app from being installed for new user accounts on the system! To prevent that, the package that installs the app also has to be uninstalled, again using PowerShell--but only as an administrator, and in a 64-bit PowerShell window on 64-bit systems, which can only be accessed using the PowerShell ISE or customizing a shortcut to the 64-bit PowerShell executable, because Windows 10 does not include a standard shortcut to the 64-bit PowerShell console window! And finally, uninstalling a package does not delete the installation files; that has to be done manually.

PowerShell does however allow automation of the removal process. To remove all apps, simply run the following PowerShell commands as administrator (again, in a 64-bit PowerShell window on 64-bit Windows 10 installations):

Get-AppxPackage -AllUsers | Remove-AppxPackage" and "Get-appxprovisionedpackage -online | remove-appxprovisionedpackage -online"

To customize the removal of apps on a system, I created the following PowerShell script, which when executed, generates two new PowerShell files, which in turn can be edited and then executed to uninstall specific apps and remove their specific packages.

Remove-Item -LiteralPath C:\temp\removeApps.ps1

$a=(Get-AppxPackage).PackageFullName

foreach ($a1 in $a)

{$a1 = [string] $a1; $a2 = "remove-appxpackage -package $a1"

out-file -file C:\temp\ removeApps.ps1 -in $a2 -Append

}

$a3=(Get-appxprovisionedpackage -online).PackageName

foreach ($a1 in $a3)

{$a1 = [string] $a1;

$a4= "remove-appxprovisionedpackage -online -package $a1"

out-file -file C:\temp\ removeApps.ps1 -in $a4 -Append}

The script/PowerShell commands in my document will absolutely remove Cortana, Edge and the Microsoft Store.  Additionally, some services support the Microsoft Store.  [Editor's Note: See also the tip concerning the consequences of disabling Windows 10 services in the This Week's Tips in this issue]

Summary

As with all new versions of Windows, Windows 10 provides new challenges for people responsible for installing and managing it. However, Microsoft's new focus on the Apps Store as a primary means of adding content to Windows 10 systems, all the privacy challenges associated with this new infrastructure, and its intent to incrementally build the capabilities of the product over time mean that there are more challenges in supporting Windows than ever.

About Jeffrey Harris

Jeffrey Harris CISSP is an IT Professional with over 30 years of experience specializing in security and identity management. His previous work assignments include the Department of Homeland Security, the Pentagon, and the White House, where he served as White House e-mail administrator. Jeffrey is currently working as a senior information security specialist for a major insurance company.

[Editor's Note: In a future issue of this newsletter Jeffrey will return and look at some of the quirks of the UI in Windows 10]

Once again, if you find any other similar system vendor pages that we've missed concerning Windows 10 upgradability, let us know at [email protected] so we can include them in a future issue of this newsletter.

Send us your feedback

Got feedback about anything in this issue of WServerNews? Email us at [email protected]

Recommended for Learning

New on Channel9 – Building a Windows Server in the Azure Portal and Getting Started with Automation

http://www.wservernews.com/go/6kzf4sp1/

Microsoft Virtual Academy

Starting September 22:  edX: Compliance in Office 365: eDiscovery 

Whether it's in response to an internal audit request or external legal query or to address compliance issues, make the most of the cloud with Compliance Center eDiscovery tools in Office 365. Beginning on September 22, check out "edX: Compliance in Office 365: eDiscovery," the first in a series on compliance in Office 365. Find out how to plan, implement, manage, and troubleshoot eDiscovery for your organization. Plus, for the demos, lab exercises, and homework, work with pre-populated Inboxes and SharePoint sites.  Enroll now!

http://www.wservernews.com/go/jfc8vxnx/

Registration is open for Exchange Con 2015        

Registration is open for this year’s MS Exchange CON event, the annual online gathering of IT Strategists, System Administrators, Solution Providers and, and Microsoft MVPs. This virtual live event is I hosted by MSExchange.org and TechGenix as a convenient and cost-effective opportunity for IT Professionals everywhere to catch-up on the latest technologies, solutions and strategies to manage MS Exchange in the Enterprise, Office 365 and Hybrid Environments.

This year’s event kicks off with a Keynote address by Michael Osterman, discussing the challenges and uncertainties facing organizations as they deal with the shifting landscape of on-premise Exchange and Office 365. A few of the wide range of topics and issues he’ll address includes:  

The virtual live conference takes place on Thursday, September 24, 2015, starting at 10am ET / 9am CT / 7am PT / 3pm GMT.  

Register here:  

http://www.wservernews.com/go/c6x6a043/   

Following the kick-off presentation, you will be able to choose from multiple breakout focus sessions featuring experts addressing topics of interest to the MS Exchange Community and the newest tools offered by leading solutions providers, including ENow, Barracuda Networks, Kemp Technologies, and Binary Tree.

Participation is limited to the first 1,000 registrants, so reserve your spot today!                

Sign up for this online event today:        

http://www.wservernews.com/go/wpou35hx/

Quote of the Week

"There's something that doesn't make sense. Let's go and poke it with a stick." --Steven Moffat

Until next week,
Mitch Tulloch

Note to subscribers: If for some reason you don't receive your weekly issue of this newsletter, please notify us at [email protected] and we'll try to troubleshoot things from our end.

Admin Toolbox

Admin Tools We Think You Shouldn't Be Without

Browse, search and export items directly from Veeam backups of your Exchange 2010 and 2013 VMs with new Veeam Explorer for Exchange. FREE download!

http://www.wservernews.com/go/zotf06qi/

The latest V10 release of Promodag Reports adds support for Office 365.  Cloud migrators finally get a hybrid reporting solution for combined Cloud and on-premises Exchange installations.

http://www.wservernews.com/go/uh3mgd8p/

The SharePoint Client Browser uses the CSOM to connect to a remote SharePoint Site Collection and shows the site structure with related properties and values:

http://www.wservernews.com/go/as85gu5m/

DHCP Find finds active DHCP servers on your network:

http://www.wservernews.com/go/8e7v4i3z/

This Xml To Csv Conversion Tool contains an API that you can use to convert XML into comma separated values (CSV):

http://www.wservernews.com/go/8pir1adg/

GOT ADMIN TOOLS or other software/hardware you'd like to recommend? Email us at [email protected] 

This Week's Tips

Windows 10 - System reserved partition

This tip is by Jeffrey Harris who contributed the guest editorial for this issue:

If you are installing a fresh copy of Windows 7/8/8.1 to then upgrade to Windows 10, use the advanced disk partitioning options available in the Windows 7/8/8.1 and set the reserved system partition from 100MB or 300MB to 500MB. That will allow more flexibility for some advanced features such as BitLocker. In my guest editorial my Windows 10 system is already using 350MB of space even without BitLocker.

Windows 10 - Consequences of disabling services

In his explorations Jeffrey also discovered an unintended consequence of disabling one of the Windows 10 services that are enabled by default:

I disabled the Client License Service, and broke access to Solitaire, which obviously communicates with Microsoft to validate its license, and is a service that normally cannot be disabled, but it can through a registry change, and a reboot. 

Can you imagine the outcry from your users if you pushed out this registry change to all client computers in your organization? <grin> Seriously though, this is a good reminder not to disable Windows services that are enabled by default since (a) you might break something (like Solitaire) and (b) you'll probably be putting your systems into an unsupported state (i.e. a state that Microsoft hasn't included in their test matrix when they developed the platform).

Windows 10 - Boot into safe mode

Here's a tip from Matt Tinney that describes the different says you can boot Windows 10 into Safe Mode:

There are three ways you can boot Windows 10 into Safe Mode:

Option 1: type msconfig in the search bar to bring up System Information. Go to Boot tab and select Safe Boot and the option you want to boot to:

Image

Option 2: hold Shift and click restart machine in the Start Menu or logon screen

Option 3: boot from recovery CD

Matt Tinney is CEO and founder of Windows Management Experts (WME) a leader in Microsoft System Center technologies that helps customers reduce IT operations cost through services and solutions:

http://www.windowsmanagementexperts.com/

GOT TIPS you'd like to share with other readers? Email us at [email protected]

Events Calendar

North America

AWS re:Invent on October 6-9 in Las Vegas, Nevada USA
http://www.wservernews.com/go/edbfsp5b/

Microsoft Convergence on April 4-7, 2016 in New Orleans, Louisiana USA
http://www.wservernews.com/go/mlko3mwy/

Add Your Event

PLANNING A CONFERENCE OR OTHER EVENT you'd like to tell our 100,000 subscribers about? Contact [email protected]

Tech Briefing

Amazon Web Services

Importing a Virtual Machine into Amazon EC2 (Part 6) (InsideAWS.com)

http://www.wservernews.com/go/8e9fppf9/

Getting to Know Amazon Mobile Analytics (InsideAWS.com)

http://www.wservernews.com/go/ofl5rgt6/

Cloud computing

Intelligent Cloud - CRM Online & Power BI  (Rojy Thomas)

http://www.wservernews.com/go/pu7877ho/

Creating a Data Culture (Microsoft UK Small and Medium Business)

http://www.wservernews.com/go/wume5ite/

Exchange & Office

Off-boarding email from Office 365 to Exchange 2013 (Part 3) (MSExchange.org)

http://www.wservernews.com/go/nw3mnx4g/

Office 365 Groups - Introduction & Frequently Asked Questions (Tom Vangaever)

http://www.wservernews.com/go/vpc3r1wy/

Hyper-V

When to use Hyper-V Dynamic Memory versus Runtime Memory Resize (Virtualization Blog)

http://www.wservernews.com/go/4hkte3om/

Mapping features of Hyper-V to VMware (VirtualizationAdmin.com)

http://www.wservernews.com/go/sr4uvka6/

Security and Privacy

Microsoft Ignites a new Focus on Security (Part 1) (WindowSecurity.com)

http://www.wservernews.com/go/4w3folxg/

Robots.txt tells hackers the places you don't want them to look (The Register)

http://www.wservernews.com/go/r4hi0qd3/

Recommended TechGenix Articles

The Power of Orchestration
http://www.wservernews.com/go/eloci0xh/

AWS, Security Based on a Shared Responsibility Model (Part 2)
http://www.wservernews.com/go/dgsf31wg/

Cisco ACI – Creating Contracts
http://www.wservernews.com/go/n18p3ol4/

Embracing The Internet of Things as well as its Security Challenges (Part 2)
http://www.wservernews.com/go/blbbk09m/

Getting to Know the Enterprise Mobility Suite (Part 2)
http://www.wservernews.com/go/89u678pn/

Windows Server News

Ten ways to control public cloud spending

Public clouds are exploding across today's enterprise landscape, but can often become expensive to deploy and maintain.  Fortunately, there are a few simple ways to reduce your cloud spending costs while still getting the most out of your cloud. Learn how to lower your enterprise's cloud spending in 10 easy steps.

http://www.wservernews.com/go/83ndifrg/

Problems running legacy Windows as a guest OS

All major hypervisor vendors support Windows OS running with a VM, but they usually only support very specific versions. Access valuable troubleshooting tips, should you need to run an unsupported version of Windows as a guest OS on your VM.

http://www.wservernews.com/go/vwj0zrho/

How to deliver individual apps with an RDSH farm

Today's organizations can now deliver individual VMware Horizon View desktop applications to workers without all the add-ons of a full desktop, with the help from app pools in an RDSH farm. Learn more about delivering single apps via Horizon 6 RDSH application pools and more.

http://www.wservernews.com/go/ecgm5hru/

Windows 10 no savior for slumping PC market

So far, Windows 10 has been well received since its recent July 2015 launch, but industry experts don't expect the new OS to turn around the PC market.  Discover what the experts are saying about Windows 10 and its inability to change users' reliability on tablets and other Windows mobile devices.

http://www.wservernews.com/go/jwkp41wr/

WServerNews FAVE Links

This Week's Links We Like. Tips, Hints And Fun Stuff

GOT FUN VIDEOS or other fun links to suggest you'd like to recommend? Email us at [email protected]

Just A Casual Day In Australia

Rob Bredl, the Barefoot Bushman, is not afraid of crocodiles.  He even takes a ride on the crocodile's back:

http://www.wservernews.com/go/rx6kpuvq/

How To Get A Car Unstuck Out Of The Mud

Getting stuck in the mud is not uncommon when driving on unpaved roads.  With a little bit of ingenuity you can get yourself out of it:

http://www.wservernews.com/go/wqldpd07/

Changchun Airshow - Cockpit View

The Red Falcon aerobatic team of the Chinese Air Force shows off their skills.  The view from the cockpit is staggering:

http://www.wservernews.com/go/o8kc88go/

When Cats Attack

A funny compilation of frisky felines playfully, and not so playfully, attacking their humans and other animals:

http://www.wservernews.com/go/199ni486/

WServerNews - Product of the Week

 

WServerNews - Editors

Mitch Tulloch is Senior Editor of WServerNews and is a widely recognized expert on Windows administration, deployment and virtualization. Mitch was lead author of the bestselling Windows 7 Resource Kit and has been author or series editor for almost fifty books mostly published by Microsoft Press. Mitch is also a ten-time recipient of Microsoft's Most Valuable Professional (MVP) award for his outstanding contributions in support of the global IT pro community. Mitch owns and runs an information technology content development business based in Winnipeg, Canada. For more information see www.mtit.com.

Ingrid Tulloch is Associate Editor of WServerNews and was co-author of the Microsoft Encyclopedia of Networking from Microsoft Press. Ingrid is also manages research and marketing for our content development business and has co-developed university-level courses in Information Security Management for a Masters of Business Administration program.