Kurt Shintaku's Blog

We announced our inclusion as a leader in the Gartner Magic Quadrant for IaaS today on the Azure blog.  Here’s an excerpt from the post:

Today, Gartner has named Microsoft Azure as a leader in its Magic Quadrant for Cloud Infrastructure as a Service for the third year in a row based on completeness of our vision and ability to execute. We are honored by this continued recognition as we are relentless about our commitment and rapid pace of innovation for infrastructure services. With the G series, Azure led with the largest VMs in the cloud and we continue to deliver market leading performance with our recent announcement supporting SAP HANA workloads up to 32 TB. And while Azure is a world class cloud platform for Windows, it’s also recognized for industry-leading support for Linux and other open source technologies. Today, nearly one in three VMs deployed on Azure are Linux. Strong momentum for Linux and open source is driven by customers using Azure for business applications and modern application architectures, including containers and big data solutions. With over sixty percent of the 3,800 solutions in Azure Marketplace built on Linux, including popular open source images by Ubuntu, CoreOS, Bitnami, Oracle, DataStax, Red Hat and others, it’s exciting that many open source vendors considered Microsoft one of the best cloud partners.

…

What is specifically interesting however is that only Microsoft is considered a leader by Gartner in IaaS, PaaS & SaaS solutions.  In fact, when reviewing vendors identified as leaders across the major cloud Gartner Magic Quadrants, Microsoft’s presence is dominating.

The following table summarizes vendors in the leader quadrant across Gartner MQs for IaaS, PaaS and SaaS solutions for key enterprise cloud workloads.

To read the post, go here:

• AZURE BLOG: Microsoft: a Gartner cloud computing leader across IaaS, PaaS, and SaaS
  https://azure.microsoft.com/en-gb/blog/microsoft-a-gartner-cloud-computing-leader-across-iaas-paas-saas/
• GARTNER: Magic Quadrant for Infrastructure as a Service (Requires Subscription)
  https://www.gartner.com/doc/3400818?ref=AnalystProfile&srcId=1-4554397745

[Twitter user & follower Ginny Caughey found this one]

If you go to the following URL, you can force the installation of Windows 10 Anniversary Update.  Alternatively, going to Update & Security & clicking on “Learn More” will do the same thing.

About the Windows 10 Anniversary Update

Windows just keeps getting better and better.

The Windows 10 Anniversary Update is the second big update since the launch of Windows 10. It’s full of great new features that customers told us they want. The Windows 10 Anniversary Update will automatically download and install when it becomes available for your device (your device will be running Windows 10 Version 1607 after it’s installed). Want it now? Click the button below to get it.

So if you’ve been waiting for the Anniversary Update, click on the “Learn More” link in Update & Security or you can go get it simply by going to one of the URLz below:

• SUPPORT: Windows 10 History
  https://support.microsoft.com/en-us/help/12387/windows-10-update-history?ocid=update_setting_client
• DOWNLOAD: Windows 10 Upgrade Tool 28084.exe (5.52MB)
  Get the Anniversary Update now
  http://go.microsoft.com/fwlink/p/?LinkId=821403

We’re pleased to announce the release of our newest free ebook, Windows 10 IT Pro Essentials Support Secrets (ISBN 9781509302802), by Ed Bott.

Here’s the introduction.

This ebook is for anyone whose responsibilities include training people to use Windows 10.

That group includes full-time professional trainers, of course, but it also includes IT pros and those brave souls who staff the help desk in corporations. Most of all, it includes the incredibly large population of people who have earned a reputation for being “the person who knows Windows.”

With that knowledge comes a seemingly endless stream of questions from friends, family, and coworkers. As Windows 10 moves into its second full year and begins to take over an increasing share of the installed base of PCs, many of those questions are going to begin “How do I…”

That’s where this ebook comes in. My goal here is to introduce the building blocks of Windows 10 to you in a way that can help you answer those questions quickly. It also offers the kind of information you need to go one step further, offering the kind of extended details about how Windows 10 works that might, just might, answer that next question before it’s even asked.

I’m grateful to the developers and designers at Microsoft who are building Windows 10, for giving me an operating system that’s fun to write about. I’d also like to thank Microsoft Press, which gave me complete editorial independence for this project. Every word in this book comes from my personal experience. I hope you find it useful.

I encourage you to share your feedback about this book directly with me. Email your comments to me at feedback@realworldwindows.com.

Ed Bott
July 7, 2016

Grab the book here:

• Windows 10 IT Pro Essentials Support Secrets, Standard PDF (238pgs, 12.5MB)
  https://aka.ms/Win10Supp/StndPDF
• Windows 10 IT Pro Essentials Support Secrets, Mobile PDF (238pgs, 8.9MB)
  https://aka.ms/Win10Supp/MobPDF

I’ve been asked a couple times recently how clients can obtain support for their development efforts now that they’ve gotten their hands on devices.

Here are your outlets:

1. Open Support Ticket for HoloLens
   https://support.microsoft.com/en-us/getsupport?wf=0&tenant=ClassicCommercial&oaspworkflow=start_1.0.0.0&locale=en-us&supportregion=en-us&pesid=16052&ccsid=636053333210161853
2. Forums for discussing HoloLens Development
   https://forums.hololens.com/
   You can ask questions here:
   https://forums.hololens.com/categories/questions-and-answers
3. Twitter discussion at @hololens
   https://twitter.com/hololens

Just announced, the HoloLens Commercial Suite includes the Development Edition, enterprise features for added security and device management, and a warranty. Transform your business with Microsoft HoloLens.

Enterprise features

• Kiosk mode. With HoloLens kiosk mode, you can limit which apps to run to enable demo or showcase experiences.
• Mobile Device Management (MDM) for HoloLens. Your IT department can manage multiple HoloLens devices simultaneously using solutions like Microsoft InTune. You will be able to manage settings, select apps to install and set security configurations tailored to your organization’s need.
• Identity. Azure Active Directory and next generation credentials with PIN unlock.
• Windows Update for Business. Controlled operating system updates to devices and support for long term servicing branch.
• Data security. BitLocker data encryption and secure boot is enabled on HoloLens to provide the same level of security protection as any other Windows device.
• Work access. Anyone in your organization can remotely connect to the corporate network through a virtual private network on a HoloLens. HoloLens can also access Wi-Fi networks that require credentials.
• Windows Store for Business. Your IT department can also set up an enterprise private store, containing only your company’s apps for your specific HoloLens usage. Securely distribute your enterprise software to selected group of enterprise users.

What’s in the box

• Microsoft HoloLens Development Edition
• Clicker
• Carrying case
• Microfiber cloth
• Charger
• Micro-USB 2.0 cable

For more information, visit:

• Introducing Microsoft HoloLens Commercial Edition
  https://www.microsoft.com/microsoft-hololens/en-us/commercial-suite

Outlook wants to make it easy to focus on what matters most to you. Toward this goal, we’ve recently made big improvements to help you stay on top of your travel reservations and package deliveries by showing summary cards in your inbox and automatically adding events to your calendar.

Today, we are introducing Outlook Interesting calendar—special calendar additions that help you track your favorite events. You will be able to add the 2016 Summer Games in Rio—as well as other popular sports—to your calendar.

Read more on Office Blogs.

Many enterprise customers have been asking us for the ability to:

• Require MFA for specific Office 365 workloads
• Restrict access so users can only access Office 365 or other cloud apps from within their corporate network.

So I’m happy to announce that these Conditional Access policies are now Generally Available to customers.

You can read about it on the EMS blog: https://aka.ms/ucnhae

This is one of the highest value and most differentiated capabilities of Azure AD Premium & because of the closely integrated architecture of Azure Active Directory and Office 365, we can uniquely offer the ability to create different conditional access policies for each backend Office workload load and pilot/rollout those policies separately.

To be clear:  The only way to get this capability for Office 365 is through Azure Active Directory Premium.

More details are available here:

• EM&SS BLOG: AzureAD Conditional Access: Per app MFA and Network Location based policies are GA!
  https://blogs.technet.microsoft.com/enterprisemobility/2016/07/28/azuread-conditional-access-per-app-mfa-and-network-location-based-policies-are-ga/

Skype Operations Framework is a comprehensive guide and toolset for implementing and managing a reliable, cost-effective communications service based on Skype for Business. It covers the entire customer lifecycle, including planning, deployment, adoption, and operations. It is a multi-faceted approach to the successful deployment of Skype for Business, incorporating key elements that have customer success firmly at the center.

• Watch a brief video overview of SOF
• Register for in-depth SOF training through the Skype Academy.
• Learn all about SOF at http://www.skypeoperationsframework.com/

TRAININGS FROM JULY 18-AUG 9
Trainings start at 8am PST and will last one hour each. All trainings will be recorded and recordings will be shared on Skype Academy.  Trainings include:

• SOF Overview
• Cloud PBX & PSTN Conferencing Get Deployed
• Envisioning: Overview and Ojective Key Results
• Envisioning: Discovery
• Envisioning: Business Use Cases
• Envisioning: High Level Architecture Workshop
• Skype for Business Adoption Methodology and Success Framework
• Network Readiness
• Delivering Network Readiness
• Cloud PBX, Technical Planning Architecture Session
• Deployment Guidance
• Polycom Phone Provisioning with Skype for Business Online
• Configuring Call Quality Dashboard
• Testing
• Scripted user enablement
• Service health and service usage
• Managing Call Quality

For a full list of trainings & dates

• Skype Operations Framework (SOF)list of trainings
  https://blogs.technet.microsoft.com/learningittogether/2016/07/17/skype-skype-operations-framework-sof-list-of-trainings/

If your Surface is running really hot, there may be an application or system process that is running at high CPU. Some processes like Windows Update, Office sync, anti-virus scanning, and Edge may run high CPU at times. Over time these processes should subside.

HIGH CPU FROM “SYSTEM AND COMPRESSED MEMORY”
However, I’ve been told that there is also a Windows 10 bug where the "system and compressed memory" task runs at high CPU and causes the system to heat up.

The current workaround is to Disable "Fast Startup" in Control Panel:

1. Right click the battery icon in SysTray, Choose "Power Options"
2. In the left pane, Click “Choose what the power buttons do”
3. Click “Change settings that are currently unavailable”
4. Scroll to the bottom of the window & uncheck “Turn on Fast Start”
5. Reboot

UPDATE 5/15/17
Just posted an update to the spreadsheet, “DRAFT v.09” which includes the newly released Office 365 Threat Intelligence & Office 365 Advanced Data Governance.

• Kurt’s Secure Productive Enterprise E3-E5 Suite Comparison – DRAFT .09 – CR
  https://1drv.ms/x/s!Ao0Dfn8MQdoAq9FsyTTlosiqwD_3lg

—————
UPDATE 2/23/17
Okay, this post documenting Secure Productive Enterprise is fairly out of date yet it gets a lot of hits.  The reason this is concerning is that SPE has E3/E5 changed quite a bit since I first wrote this 7 months ago: Numerous features & services have been added since I wrote this.

To help my customers understand just what is included in the SPE E3/E5 suite(s), I’ve created a living spreadsheet that I occasionally use with my customers with collapsible rows for each suite component.  Hopefully it’ll be useful for you too:
(WARNING: It’s called "living" because I change this spreadsheet monthly and I may not have the most recent stuff posted here – so be forewarned. At the time of this edit, I’m making DRAFT .08 available for download here.)

• Kurt’s Secure Productive Enterprise E3-E5 Suite Comparison – DRAFT .08 – CR
  https://1drv.ms/x/s!Ao0Dfn8MQdoAqexq8lFv2l4cpoIAEQ

—————
ORIGINAL POST 7/23/16
Two new licensing SKUs will be offered in August 2016 called the Secure Productive Enterprise (SPE) that replaces the Enterprise Cloud Suite SKU (with the same technologies or more included depending on which SKU is chosen) with one very important additional right:

CLOUD & ON-PREMISES RIGHTS
Users licensed for Secure Productive Enterprise are licensed for the following workloads in BOTH the cloud as well as on-premises.  Entitlements to use on-premises servers are granted as well as online services*:

• On-premises productivity server entitlements including Exchange, SharePoint, and Skype for Business for any user licensed with Secure Productive Enterprise
• One on-premises install of Office Professional Plus per user

WHAT’S IN THE “SECURE PRODUCTIVE ENTERPRISE” SUITE LICENSE?

Secure Productive Enterprise is a suite replacing ECS that comes in two configurations – E3 & E5:

Breaking down the Office 365, Enterprise Mobility + Security, and Windows 10 Enterprise technologies in each SKU:

• Secure Productive Enterprise E3
  • Office 365 E3
    • Exchange Online
    • SharePoint Online
    • Skype for Business Online
    • OneDrive for Business (Unlimited Storage)
    • Yammer Enterprise
    • Office 365 Pro Plus + Office Online
  • Enterprise Mobility + Security Suite E3 (Same as the previous Enterprise Mobility Suite)
    • Azure AD Premium P1 (Same as previous Azure AD Premium)
    • Azure Information Protection P1 (Same as previous Azure RMS Premium)
      • File Encryption, Cloud-based File Tracking
    • Microsoft Advanced Threat Analytics (formerly Aorato)
    • Microsoft Intune
  • Windows 10 Enterprise E3 (Available Aug 1^st)
    • Windows Enterprise w/ SA per-user

Secure Productive Enterprise E5 is the “premium” SKU and adds the following additional capabilities/licenses, indicated by a RED (E5):

• Secure Productive Enterprise E5
  • Office 365 E5
    • Exchange Online
    • SharePoint Online
    • Skype for Business Online
    • Enterprise Voice w/Skype for Business (for On-prem PBX) (E5)
    • Cloud PBX (E5)
  • PSTN Conferencing (E5)
  • OneDrive for Business (Unlimited Storage)
  • Yammer Enterprise
  • Office 365 Pro Plus + Office Online
  • Advanced Services
    • Advanced eDiscovery (formerly Equivio) (E5)
    • Exchange Online Advanced Threat Protection – Secure Attachments and URLs (E5)
    • Customer LockBox – Access Controls (E5)
    • Delve Analytics
      • End User Analytics
      • Organizational Analytics (E5)
  • Enterprise Mobility + Security Suite E5
    • Azure AD Premium P2
      • Everything in Azure AD Premium P1
      • Azure Active Directory Identity Protection (E5)
      • Azure Active Directory Privileged Identity Management (E5)
    • Azure Information Protection P2
    • Azure Information Protection P1 (File Encryption, Cloud-based File Tracking)
    • Automatic document classification (formerly Secure Islands) (E5)
    • Microsoft Advanced Threat Analytics (formerly Aorato)
    • Microsoft Intune
    • Microsoft Cloud App Security (formerly Adallom)
      • Identity-driven security in the cloud (E5)
  • Windows 10 Enterprise E5 (Avail Aug 1^st)
    • Windows Enterprise w/ SA per-user
    • Windows Defender Advanced Threat Protection (E5)

Notes:

1. Windows Defender Advanced Threat Protection will be available as an add on to Windows Enterprise SA customers.
   https://microsoft.sharepoint.com/sites/infopedia/pages/layouts/kcdoc.aspx?k=G02KC-1-6602
2. Enterprise Mobility + Security Suite announcement is public:
   https://blogs.technet.microsoft.com/enterprisemobility/2016/07/07/introducing-enterprise-mobility-security/
3. Microsoft Intune “Mobile App Management” is the pillar they reference & emphasize for these SKUs.
   https://blogs.technet.microsoft.com/enterprisemobility/2015/11/17/enhancing-managed-mobile-productivity/
4. Microsoft Advanced Threat Analytics does not change between E3/E5 however is classified in the same security pillar as Cloud App Security
   http://www.microsoft.com/ata

* On-premises entitlements subject to program availability and licensing terms. Details to be provided in advance of launch.