Kurt Shintaku's Blog

We’re pleased to announce the release of our newest free ebook, Windows 10 IT Pro Essentials Support Secrets (ISBN 9781509302802), by Ed Bott.

Here’s the introduction.

This ebook is for anyone whose responsibilities include training people to use Windows 10.

That group includes full-time professional trainers, of course, but it also includes IT pros and those brave souls who staff the help desk in corporations. Most of all, it includes the incredibly large population of people who have earned a reputation for being “the person who knows Windows.”

With that knowledge comes a seemingly endless stream of questions from friends, family, and coworkers. As Windows 10 moves into its second full year and begins to take over an increasing share of the installed base of PCs, many of those questions are going to begin “How do I…”

That’s where this ebook comes in. My goal here is to introduce the building blocks of Windows 10 to you in a way that can help you answer those questions quickly. It also offers the kind of information you need to go one step further, offering the kind of extended details about how Windows 10 works that might, just might, answer that next question before it’s even asked.

I’m grateful to the developers and designers at Microsoft who are building Windows 10, for giving me an operating system that’s fun to write about. I’d also like to thank Microsoft Press, which gave me complete editorial independence for this project. Every word in this book comes from my personal experience. I hope you find it useful.

I encourage you to share your feedback about this book directly with me. Email your comments to me at feedback@realworldwindows.com.

Ed Bott
July 7, 2016

Grab the book here:

• Windows 10 IT Pro Essentials Support Secrets, Standard PDF (238pgs, 12.5MB)
  https://aka.ms/Win10Supp/StndPDF
• Windows 10 IT Pro Essentials Support Secrets, Mobile PDF (238pgs, 8.9MB)
  https://aka.ms/Win10Supp/MobPDF

I’ve been asked a couple times recently how clients can obtain support for their development efforts now that they’ve gotten their hands on devices.

Here are your outlets:

1. Open Support Ticket for HoloLens
   https://support.microsoft.com/en-us/getsupport?wf=0&tenant=ClassicCommercial&oaspworkflow=start_1.0.0.0&locale=en-us&supportregion=en-us&pesid=16052&ccsid=636053333210161853
2. Forums for discussing HoloLens Development
   https://forums.hololens.com/
   You can ask questions here:
   https://forums.hololens.com/categories/questions-and-answers
3. Twitter discussion at @hololens
   https://twitter.com/hololens

Just announced, the HoloLens Commercial Suite includes the Development Edition, enterprise features for added security and device management, and a warranty. Transform your business with Microsoft HoloLens.

Enterprise features

• Kiosk mode. With HoloLens kiosk mode, you can limit which apps to run to enable demo or showcase experiences.
• Mobile Device Management (MDM) for HoloLens. Your IT department can manage multiple HoloLens devices simultaneously using solutions like Microsoft InTune. You will be able to manage settings, select apps to install and set security configurations tailored to your organization’s need.
• Identity. Azure Active Directory and next generation credentials with PIN unlock.
• Windows Update for Business. Controlled operating system updates to devices and support for long term servicing branch.
• Data security. BitLocker data encryption and secure boot is enabled on HoloLens to provide the same level of security protection as any other Windows device.
• Work access. Anyone in your organization can remotely connect to the corporate network through a virtual private network on a HoloLens. HoloLens can also access Wi-Fi networks that require credentials.
• Windows Store for Business. Your IT department can also set up an enterprise private store, containing only your company’s apps for your specific HoloLens usage. Securely distribute your enterprise software to selected group of enterprise users.

What’s in the box

• Microsoft HoloLens Development Edition
• Clicker
• Carrying case
• Microfiber cloth
• Charger
• Micro-USB 2.0 cable

For more information, visit:

• Introducing Microsoft HoloLens Commercial Edition
  https://www.microsoft.com/microsoft-hololens/en-us/commercial-suite

Outlook wants to make it easy to focus on what matters most to you. Toward this goal, we’ve recently made big improvements to help you stay on top of your travel reservations and package deliveries by showing summary cards in your inbox and automatically adding events to your calendar.

Today, we are introducing Outlook Interesting calendar—special calendar additions that help you track your favorite events. You will be able to add the 2016 Summer Games in Rio—as well as other popular sports—to your calendar.

Read more on Office Blogs.

Many enterprise customers have been asking us for the ability to:

• Require MFA for specific Office 365 workloads
• Restrict access so users can only access Office 365 or other cloud apps from within their corporate network.

So I’m happy to announce that these Conditional Access policies are now Generally Available to customers.

You can read about it on the EMS blog: https://aka.ms/ucnhae

This is one of the highest value and most differentiated capabilities of Azure AD Premium & because of the closely integrated architecture of Azure Active Directory and Office 365, we can uniquely offer the ability to create different conditional access policies for each backend Office workload load and pilot/rollout those policies separately.

To be clear:  The only way to get this capability for Office 365 is through Azure Active Directory Premium.

More details are available here:

• EM&SS BLOG: AzureAD Conditional Access: Per app MFA and Network Location based policies are GA!
  https://blogs.technet.microsoft.com/enterprisemobility/2016/07/28/azuread-conditional-access-per-app-mfa-and-network-location-based-policies-are-ga/

Skype Operations Framework is a comprehensive guide and toolset for implementing and managing a reliable, cost-effective communications service based on Skype for Business. It covers the entire customer lifecycle, including planning, deployment, adoption, and operations. It is a multi-faceted approach to the successful deployment of Skype for Business, incorporating key elements that have customer success firmly at the center.

• Watch a brief video overview of SOF
• Register for in-depth SOF training through the Skype Academy.
• Learn all about SOF at http://www.skypeoperationsframework.com/

TRAININGS FROM JULY 18-AUG 9
Trainings start at 8am PST and will last one hour each. All trainings will be recorded and recordings will be shared on Skype Academy.  Trainings include:

• SOF Overview
• Cloud PBX & PSTN Conferencing Get Deployed
• Envisioning: Overview and Ojective Key Results
• Envisioning: Discovery
• Envisioning: Business Use Cases
• Envisioning: High Level Architecture Workshop
• Skype for Business Adoption Methodology and Success Framework
• Network Readiness
• Delivering Network Readiness
• Cloud PBX, Technical Planning Architecture Session
• Deployment Guidance
• Polycom Phone Provisioning with Skype for Business Online
• Configuring Call Quality Dashboard
• Testing
• Scripted user enablement
• Service health and service usage
• Managing Call Quality

For a full list of trainings & dates

• Skype Operations Framework (SOF)list of trainings
  https://blogs.technet.microsoft.com/learningittogether/2016/07/17/skype-skype-operations-framework-sof-list-of-trainings/

If your Surface is running really hot, there may be an application or system process that is running at high CPU. Some processes like Windows Update, Office sync, anti-virus scanning, and Edge may run high CPU at times. Over time these processes should subside.

HIGH CPU FROM “SYSTEM AND COMPRESSED MEMORY”
However, I’ve been told that there is also a Windows 10 bug where the "system and compressed memory" task runs at high CPU and causes the system to heat up.

The current workaround is to Disable "Fast Startup" in Control Panel:

1. Right click the battery icon in SysTray, Choose "Power Options"
2. In the left pane, Click “Choose what the power buttons do”
3. Click “Change settings that are currently unavailable”
4. Scroll to the bottom of the window & uncheck “Turn on Fast Start”
5. Reboot

UPDATE 5/15/17
Just posted an update to the spreadsheet, “DRAFT v.09” which includes the newly released Office 365 Threat Intelligence & Office 365 Advanced Data Governance.

• Kurt’s Secure Productive Enterprise E3-E5 Suite Comparison – DRAFT .09 – CR
  https://1drv.ms/x/s!Ao0Dfn8MQdoAq9FsyTTlosiqwD_3lg

—————
UPDATE 2/23/17
Okay, this post documenting Secure Productive Enterprise is fairly out of date yet it gets a lot of hits.  The reason this is concerning is that SPE has E3/E5 changed quite a bit since I first wrote this 7 months ago: Numerous features & services have been added since I wrote this.

To help my customers understand just what is included in the SPE E3/E5 suite(s), I’ve created a living spreadsheet that I occasionally use with my customers with collapsible rows for each suite component.  Hopefully it’ll be useful for you too:
(WARNING: It’s called "living" because I change this spreadsheet monthly and I may not have the most recent stuff posted here – so be forewarned. At the time of this edit, I’m making DRAFT .08 available for download here.)

• Kurt’s Secure Productive Enterprise E3-E5 Suite Comparison – DRAFT .08 – CR
  https://1drv.ms/x/s!Ao0Dfn8MQdoAqexq8lFv2l4cpoIAEQ

—————
ORIGINAL POST 7/23/16
Two new licensing SKUs will be offered in August 2016 called the Secure Productive Enterprise (SPE) that replaces the Enterprise Cloud Suite SKU (with the same technologies or more included depending on which SKU is chosen) with one very important additional right:

CLOUD & ON-PREMISES RIGHTS
Users licensed for Secure Productive Enterprise are licensed for the following workloads in BOTH the cloud as well as on-premises.  Entitlements to use on-premises servers are granted as well as online services*:

• On-premises productivity server entitlements including Exchange, SharePoint, and Skype for Business for any user licensed with Secure Productive Enterprise
• One on-premises install of Office Professional Plus per user

WHAT’S IN THE “SECURE PRODUCTIVE ENTERPRISE” SUITE LICENSE?

Secure Productive Enterprise is a suite replacing ECS that comes in two configurations – E3 & E5:

Breaking down the Office 365, Enterprise Mobility + Security, and Windows 10 Enterprise technologies in each SKU:

• Secure Productive Enterprise E3
  • Office 365 E3
    • Exchange Online
    • SharePoint Online
    • Skype for Business Online
    • OneDrive for Business (Unlimited Storage)
    • Yammer Enterprise
    • Office 365 Pro Plus + Office Online
  • Enterprise Mobility + Security Suite E3 (Same as the previous Enterprise Mobility Suite)
    • Azure AD Premium P1 (Same as previous Azure AD Premium)
    • Azure Information Protection P1 (Same as previous Azure RMS Premium)
      • File Encryption, Cloud-based File Tracking
    • Microsoft Advanced Threat Analytics (formerly Aorato)
    • Microsoft Intune
  • Windows 10 Enterprise E3 (Available Aug 1^st)
    • Windows Enterprise w/ SA per-user

Secure Productive Enterprise E5 is the “premium” SKU and adds the following additional capabilities/licenses, indicated by a RED (E5):

• Secure Productive Enterprise E5
  • Office 365 E5
    • Exchange Online
    • SharePoint Online
    • Skype for Business Online
    • Enterprise Voice w/Skype for Business (for On-prem PBX) (E5)
    • Cloud PBX (E5)
  • PSTN Conferencing (E5)
  • OneDrive for Business (Unlimited Storage)
  • Yammer Enterprise
  • Office 365 Pro Plus + Office Online
  • Advanced Services
    • Advanced eDiscovery (formerly Equivio) (E5)
    • Exchange Online Advanced Threat Protection – Secure Attachments and URLs (E5)
    • Customer LockBox – Access Controls (E5)
    • Delve Analytics
      • End User Analytics
      • Organizational Analytics (E5)
  • Enterprise Mobility + Security Suite E5
    • Azure AD Premium P2
      • Everything in Azure AD Premium P1
      • Azure Active Directory Identity Protection (E5)
      • Azure Active Directory Privileged Identity Management (E5)
    • Azure Information Protection P2
    • Azure Information Protection P1 (File Encryption, Cloud-based File Tracking)
    • Automatic document classification (formerly Secure Islands) (E5)
    • Microsoft Advanced Threat Analytics (formerly Aorato)
    • Microsoft Intune
    • Microsoft Cloud App Security (formerly Adallom)
      • Identity-driven security in the cloud (E5)
  • Windows 10 Enterprise E5 (Avail Aug 1^st)
    • Windows Enterprise w/ SA per-user
    • Windows Defender Advanced Threat Protection (E5)

Notes:

1. Windows Defender Advanced Threat Protection will be available as an add on to Windows Enterprise SA customers.
   https://microsoft.sharepoint.com/sites/infopedia/pages/layouts/kcdoc.aspx?k=G02KC-1-6602
2. Enterprise Mobility + Security Suite announcement is public:
   https://blogs.technet.microsoft.com/enterprisemobility/2016/07/07/introducing-enterprise-mobility-security/
3. Microsoft Intune “Mobile App Management” is the pillar they reference & emphasize for these SKUs.
   https://blogs.technet.microsoft.com/enterprisemobility/2015/11/17/enhancing-managed-mobile-productivity/
4. Microsoft Advanced Threat Analytics does not change between E3/E5 however is classified in the same security pillar as Cloud App Security
   http://www.microsoft.com/ata

* On-premises entitlements subject to program availability and licensing terms. Details to be provided in advance of launch.

Technical diagrams for SharePoint 2013
These diagrams provide visual representations of recommended solutions for SharePoint 2013 in the form of models, which are poster-size documents. These resources are available in Visio (.vsd) format (Visio 2010 and Visio 2013) and PDF format.(Last Modified: 2016-05-27)

• https://technet.microsoft.com/en-us/library/cc263199.aspx

Technical diagrams for SharePoint 2016 & Online
These diagrams provide visual representations of recommended solutions for SharePoint 2016 in the form of models, which are poster-size documents. These resources are available in Visio (.vsd) format (Visio 2010 or Visio 2016) or PDF format, and on Docs.com. This poster describes the SharePoint Online, Microsoft Azure, and SharePoint on-premises configurations that business decision makers and solutions architects need to know about.
(Last Modified: 2016-05-20)

• https://technet.microsoft.com/en-us/library/cc263199(v=office.16).aspx

(Note: This is part of a set of resources we publish for SharePoint Server 2016 located here: https://technet.microsoft.com/en-us/library/cc303422(v=office.16).aspx)

As announced on the new UAblog, Upgrade Analytics is a new service from Microsoft which leverages telemetry in order to provide customers with insights which allow them to quickly evaluate application and driver readiness and mitigate potential problems.

Upgrade Analytics helps you accelerate your move to Windows 10 by providing

• Up-to date application and driver inventory, including usage data
• Information about known application and driver issues as well as guidance on how to mitigate them
• A way to track whether an application or driver is ready Windows 10 in your organization
• Per-Computer readiness information which you use to target computers for Windows 10 deployments

You can see from the released photo that we leverage Operations Management Suite for reporting & administration of the solution, and endpoint telemetry from Windows 7 or 8.1 is transmitted to the cloud for aggregation & analysis.  A KB package & regkey settings are required on each client to enable telemetry transmission, as per the Upgrade Analytics Deployment Script that’s been published as a download. (See below)

FREE – NO COST
There are no Azure/OMS costs to you for implementing Upgrade Analytics, nor are there any licensing costs for the UA software.

• New OMS customers can use a completely free OMS tier
• Existing OMS customers will see no additional charges from the UA data collection & analysis from Upgrade analytics

ENROLLMENT IN THE PREVIEW
Upgrade Analytics Public Preview is available now. Instructions on setting it up are here:
https://blogs.technet.microsoft.com/upgradeanalytics/2016/07/22/upgrade-analytics-public-preview-is-now-available/

DOCUMENTATION
Documentation is available here:
https://technet.microsoft.com/itpro/windows/deploy/upgrade-analytics-get-started

For more information, visit the Upgrade Analytics Blog:

• ANNOUNCEMENT: Meeting Upgrade Analytics
  https://blogs.technet.microsoft.com/upgradeanalytics/
• SIGNUP: Upgrade Analytics Preview Now Available
  https://blogs.technet.microsoft.com/upgradeanalytics/2016/07/22/upgrade-analytics-public-preview-is-now-available/
• DOWNLOAD: Upgrade Analytics Deployment Script
  https://www.microsoft.com/en-us/download/details.aspx?id=53327