Kurt Shintaku's Blog

These spreadsheets list the policy settings for computer and user configurations that are included in the Administrative template files delivered with the Windows operating systems specified. You can configure these policy settings when you edit Group Policy Objects.

You can use the filtering capabilities that are included in this spreadsheet to view a specific subset of data, based on one value or a combination of values that are available in one or more of the columns. In addition, you can click Custom in the drop-down list of any of the column headings to add additional filtering criteria within that column.
To view a specific subset of data, click the drop-down arrow in the column heading of cells that contain the value or combination of values on which you want to filter, and then click the desired value in the drop-down list. For example, to view policy settings that are available for Windows Server 2012 R2 or Windows 8.1, in the Administrative Template worksheet, click the drop-down arrow next to Supported On, and then click At least Microsoft Windows Server 2012 R2 or Windows 8.1.

What’s New?
The Administrative Template spreadsheet contains three columns that provide more information about each policy setting’s behavior related to reboots, logoffs, and schema extensions. These columns are the following:

• Reboot Required: A "Yes" in this column means that the Windows operating systems requires a restart before it applies the described policy setting.
• Logoff Required: A "Yes" in this column means that the Windows operating system requires the user to log off and log on again before it applies the described policy setting.
• Active Directory Schema or Domain Requirements: A "Yes" in this column means that you must extend the Active Directory schema before you can deploy this policy setting.
• Status: A "New" in this column means that the setting did not exist prior to Windows Server 2012 R2 and Windows 8.1. It does not mean that the setting applies only to Windows Server 2012 R2 and Windows 8.1. Refer to the column entitled "supported on" to determine to which operating system the policy setting applies.

Contents include:

• TP4 Policy Settings Spreadsheet.xlsx
• Windows 10 ADMX spreadsheet.xlsx
• Windows 8.1 Update and Windows Server 2012 R2 Update 1 .xlsx
• Windows Server 2016 TP5 policy settings spreadsheet.xlsx
• WindowsServer2003SP2GroupPolicySettings.xls
• WindowsServer2008andWindowsVistaSP1GroupPolicySettings.xlsx
• WindowsServer2008R2andWindows7GroupPolicySettings.xlsx
• WindowsServer2012andWindows8GroupPolicySettings.xlsx
• WindowsServer2012R2andWindows8.1GroupPolicySettings.xlsx
• WindowsServer2012R2UpdateGroupPolicySettings.xlsx
• WindowsVistaGroupPolicySettings.xls

Get the entire package here:

• DOWNLOAD: Group Policy Settings Reference for Windows and Windows Server
  http://www.microsoft.com/en-us/download/details.aspx?id=25250

Microsoft shipped a NEW sync client for OneDrive & OneDrive for Business cloud file storage services.  As of this week, Microsoft made the new sync client’s usage mandatory if you wish to continue to sync your OneDrive for Business files. (This applies if you have fewer than 250 clients in your organization. Office 365 tenants with more than 250 clients will not have this requirement placed on them)

Previously there were separate sync clients for each service: One for OneDrive & one for OneDrive for Business.  As of a month or so ago, there is now a NEW single client for syncing files from BOTH services. (Users that need to sync SharePoint document repositories will ALSO need to install/maintain the old OneDrive for Business client to continue to sync those files)

BACKGROUND
Microsoft has 2 services for cloud file storage: OneDrive & OneDrive for Business.

• OneDrive is a consumer service designed to provide anyone with 5GB or more of free online file storage (The storage a user has can be as high as 1TB, if the user also has a Office 365 Home subscription)
• OneDrive for Business is a commercial service that provides business users that are subscribed to certain Office 365 plans “unlimited cloud file storage”. (There is an initial cap of 10TB by default per user, however this can be increased upon request)

Each of these services PREVIOUSLY had separate sync clients – or separate software that would synchronize files between their Windows computer & the cloud file storage service.

ONLY ONE “SYNC CLIENT” EXISTS FOR ONEDRIVE & ONEDRIVE FOR BUSINESS As of this winter, the sync client for BOTH OneDrive (Consumer) and OneDrive for Business are one and the same.  A single sync client is installed & used to synchronize files from both services. 

Click here to help determine which OneDrive sync client am I using?

To get the next-gen sync client for both services, download it here:

• DOWNLOAD: OneDrive & OneDrive for Business Next Generation Sync Client
  http://go.microsoft.com/fwlink/p/?LinkId=248256

You can install & configure the OneDrive “next gen” sync client to sync files to your local machine using:

• yourname@outlook.com 
  or any Microsoft Account
  (OneDrive – Consumer)
• yourname@companyname.com
  or your work/school organizational account 
  (OneDrive for Business)

The next gen sync client, despite being a single client, will have 2 icons in the system tray once configured properly: OneDrive Consumer sync (circled in GREEN) & OneDrive for Business sync (circled in RED)

If you previously used the old OneDrive (Consumer) & OneDrive for Business sync client, you will find that after the new “next gen” OneDrive sync client will automatically take over the configuration & responsibility for synchronization of your OneDrive (Consumer) file sync & you’ll find that the old OneDrive (Consumer) client will have been uninstalled.

This is not the case for OneDrive for Business file sync. 

CONFIGURING THE NEXT GEN SYNC CLIENT FOR YOUR ONEDRIVE FOR BUSINESS
Even after the next-gen sync client is installed, your OneDrive for Business files will continue to be synchronized by the OLD OneDrive for Business client, which should still be installed and exist in your Start Menu.  See below:

There are 2 OneDrive clients for Windows today: One is used for both OneDrive (Consumer) & OneDrive for Business file sync. This is the application listed (above) in the START menu as “OneDrive”.

The other client is the old, legacy “OneDrive for Business” client that is listed separating the START menu (above) and is still available but only for syncing SharePoint document shares.

The reason for this is that the old OneDrive for Business client is still required if you need to sync SharePoint document repositories to your local PC.  For this reason, the next gen sync client LEAVES ONEDRIVE FOR BUSINESS ALONE. 

You will however need to manually configure the next gen sync client you just installed to also sync your OneDrive for Business files.  (If you are syncing SharePoint document repositories, those will continue to be synced by the old OneDrive for Business client and will need to remain installed)

To configure the next gen sync client to sync your OneDrive for Businesss files, you need to simply add your work account by launching the OneDrive sync client, assuming it’s been properly installed.  Click the link below to start this process:

• Click here to add a work or school account

Go to the following link for more information on on the manual configuration process:

• Upgrade your OneDrive for Business sync client
  https://support.office.com/en-us/article/Upgrade-your-OneDrive-for-Business-sync-client-5b0adb85-4250-4d0a-b00c-8a2b751b6014?ui=en-US&rs=en-US&ad=US
• Get started with the OneDrive for Business Next Generation Sync Client in Windows
  https://support.office.com/en-us/article/Get-started-with-the-OneDrive-for-Business-Next-Generation-Sync-Client-in-Windows-615391c4-2bd3-4aae-a42a-858262e42a49

SYNCING SHAREPOINT DOCUMENT REPOSITORIES
If you need to sync files to your local machine from SharePoint document repositories, you will need to continue to use the original OneDrive for Business sync client.  If you were using it previously, it should still be installed and still be running on your PC.

The old OneDrive for Business sync client continues to sync SharePoint document folders via the icon circled in  LIGHT BLUE in the system tray, alongside the two icons controlled by the new next gen sync client for OneDrive.

If you need to download or install the old OneDrive for Business sync client to sync with SharePoint document stores, (also known as the Groove client) download it here:

• How to install the OneDrive for Business sync client for SharePoint 2013 and SharePoint Online
  (Note: This is for the preview version of the OD4B sync client and NOT the next-gen sync client)
  https://support.microsoft.com/en-us/kb/2903984

FOR IT ADMINISTRATORS
We have documentation for IT admins dealing with this OneDrive sync client transition.

• Transition from the previous OneDrive for Business sync client
  https://support.office.com/en-us/article/Transition-from-the-previous-OneDrive-for-Business-sync-client-4100df3a-0c96-464f-b0a8-c20de34da6fa?ui=en-US&rs=en-US&ad=US

We’re opening up a public preview to a new product for both Windows & Macintosh we announced back in October called “GigJam”.

WHAT IS GIGJAM?
GigJam helps you spontaneously and momentarily involve others in your work. You just summon all the live information you need, divvy it up by circling what you want to share and crossing out what you don’t and control what others can see or even co-work with you in real time. Now you can finally involve others inside and outside your organization to help you get work done in the moment.

Here are just a few examples of how GigJam lets you change the way you work:

To enroll in the beta program, visit the web site below:

• SITE: Microsoft GigJam
  https://www.microsoft.com/gigjam/

For more on announcements around GigJam, visit the blog:

• BLOG: Microsoft GigJam
  https://blogs.technet.microsoft.com/gigjam/

Here’s a great book we just posted… available for free!

We’re pleased to announce the release of another new free ebook: Planning and Preparing for Microsoft SharePoint Hybrid (ISBN 9781509302420), by Jeremy Taylor. Enjoy!

This book is part of a series to provide readers from all over the world with a guide on how to connect SharePoint on-premises to Microsoft’s cloud services. You will gain insight into planning, architecture, configuration, and management of SharePoint hybrid. This book covers foundational topics with which you will learn more about Office 365 and Microsoft Azure, architecture planning, platform hygiene and preparation, directory synchronization, and how to configure a seamless single sign-on experience for users.

…

Grab the eBook here:

• DOWNLOAD: Planning and Preparing for Microsoft SharePoint Hybrid (113 pgs)
• Download standard PDF – 5.05 MB
• Download mobile PDF – 4.59 MB
• Download ePub – 6.91 MB
• Download Mobi – 14.6 MB
• ANNOUNCEMENT: Free ebook: Planning and Preparing for Microsoft SharePoint Hybrid
  https://blogs.msdn.microsoft.com/microsoft_press/2016/04/26/free-ebook-planning-and-preparing-for-microsoft-sharepoint-hybrid/

Those of you who’ve been following me for a while know that I don’t write commentaries on this blog very often but I’m taking the time to write a quick gushing post about a Microsoft card game that’s come out called, “Bedlam”… because it’s just that good.

WHAT’S “BEDLAM”?
Bedlam is a card game named after an incident that occurred in the mid-90’s (Yes, I was there) that involved an email that went out to 20,000 people in the company via an Exchange Distribution List entitled, “Bedlam DL3”.  Enough people “replied all” to the Bedlam distribution list that the original email targeted that it caused what was essentially the first “email reply storm” on an Exchange mail system.  The reference to Bedlam is essentially a test of how old school a Blue Badge you are.

The game itself was created by a Microsoft employee and is sold in the Microsoft Company Store in boxed form. One of the reasons I’m writing this post is that you’ll be hard pressed to find ANY information on the game anywhere.  It’s been sort of an inside joke at Microsoft for a while, where people have played it during breaks on campus or with coworker friends at home.  Or in one instance, as a fundraiser for Microsoft’s Giving Campaign. (Which raised $20,000!)

WHAT’S IT LIKE?
Gameplay works similar to Cards Against Humanity where one person plays a black card with a blank to fill in and all other players have to play white cards to “fill in the blank”.  The winner is the card assessed as the ‘best’ answer by the player that played the black card.

Here’s some of the cards in the game.  I’ll let it speak for itself:

These are some of the tamer cards.  I chose to deliberately not show some of the cards that might get me in trouble.

It’s loaded with Microsoft internal references and for any Blue Badge that’s been at the company for a while, you’ll be in stitches in no time.  Especially the references to HR, Legal, & Standards of Business Conduct.  OMG, those cards are winners.

WHAT DOES IT LOOK LIKE?
Here’s my copy. And you know what’s awesome?  There’s NO information about the game on the box itself – not even on the rims.  There’s not even a bar code.  The front cover is all that’s written on the box.

Employees should recognize the faux Company Store sticker as well as the obligatory EULA for the game.  Which is awesome, especially because of the ‘nuclear facility’ reference which some old folk will recognize.

WHERE DO I GET IT?
If you are a Blue Badge, you can get it from the Company Store in Building 92.  Check the Bedlam Yammer Group for availability since it sells out quickly.

Alternatively, I think you can actually buy a copy yourself from the Game Crafter, where the original development was published.  You’ll notice that it’s entitled “RC” which of course stands for Release Candidate, but FYI the term’s usage is another inside joke as the RC is actually the RTM. #lol

• Bedlam RC ($42)
  https://www.thegamecrafter.com/games/bedlam-rc-

And K.C. is building Service Packs to extend the game.  I’m not kidding:  There’s even an expansion pack specifically for the Operating Systems Group.

• Bedlam Service Pack Beta ($10.99)
  https://www.thegamecrafter.com/games/bedlam-service-pack-1-beta

SharePoint 2016 is here and it is an exciting time to be a SharePoint professional.  Microsoft is renewing the SharePoint brand by bringing it to the forefront of the Office 365 stack with a ton of new features and capabilities. 

Join us on May 18th to hear Grant Earl from Microsoft highlight the most exciting elements of this release.

We will also be taking our first look at the latest solution building tools: PowerApps and Flow!  Darrell Johnson has been busy trying out these tools and will bring his insight and demonstrations for us to see.

We look forward to seeing your there!

Schedule:

• 6:30 PM – 6:50 PM Eat and Greet
• 6:40 PM – 7:00 PM Welcome
• 7:00 PM – 7:20 PM Round table Q&A (bring your SharePoint questions)
• 7:20 PM – 8:30 PM Speaker
• 8:30 PM – SharePint (meetup at local pub after meeting)

Date/Time:
Wednesday, May 18, 2016
6:30 PM – 8:30 PM

Location:
Outsource Technical
2 Corporate Plaza, Suite 125
Newport Beach, CA 92660
Directions

Registration:
http://www.eventbrite.com/e/orange-county-sharepoint-user-group-may-2016-meeting-tickets-25378097573

ServiceNow customers can now integrate with Azure for VM Management. 

The Microsoft Azure Cloud application integrates with Azure to expose virtual machine and managed services management to ServiceNow users. The application enables users to request Azure virtual resources through the service catalog and provides flexible reporting for Azure admins.

The Microsoft Azure Cloud application provides the following fundamental services:

• Lifecycle management for individual VMs
• Lifecycle management for resource groups
• Cost and Usage reports of Azure data using ServiceNow report modules

For more information:

• SITE: ServiceNow – Microsoft Azure Cloud
  https://docs.servicenow.com/bundle/geneva-it-operations-management/page/product/azure-cloud-provisioning/concept/c_MicrosoftAzureCloud.html

A few days ago, the Microsoft Advanced Threat Analytics team release v1.6.

Today, we are proud to announce that ATA’s new version (1.6) is publicly available. With this blogpost, I would like to share detailed information about this update and explain the exciting new enhancements our team developed.

As pioneers of the UEBA market, we set the bar very high and we are introducing exciting new capabilities and innovation:

• New detections such as
  • Pass-The-Hash and Bruteforce based on unusual protocol behavior
  • Elevation of privileges
  • Reconnaissance via Net Session enumeration
  • Compromised credentials via malicious DPAPI Request
  • Compromised credentials via malicious Replication Requests
• New deployment option with the ATA Lightweight Gateway helping with branch sites and IaaS deployments
• New and improved detection engine that significantly improves our performance and scale
• Support for automatic updates and upgrades using Microsoft Updates
• Improvements in third party integration to enrich detection

…

Additionally, they’ve posted online documentation for migrating from previous versions to 1.6 step-by-step:
https://docs.microsoft.com/en-us/advanced-threat-analytics/understand-explore/ata-update-1.6-migration-guide

Read the announcement below:

• BLOG: Advanced Threat Analytics new version 1.6 is now available!
  https://blogs.technet.microsoft.com/ata/2016/05/05/advanced-threat-analytics-new-version-1-6-is-now-available/

For those interested in using Xamarin, Microsoft’s cross platform development solution for Visual Studio developers, there is a LOT of online conference sessions to be viewed now.

Xamarin Evolve, the Xamarin conference for developers interested in and using Xamarin for Visual Studio (previously April 24-28 in Orlando, FL), has posted all their recorded content online – roughly 60 sessions… including the closing keynote featuring both Miguel de Icaza & Steve Wozniak.

• SITE: Xamarin Evolve Video Recordings:
  https://evolve.xamarin.com/#videos

Read more at the Xamarin blog:

• BLOG: All Xamarin Evolve 2016 Sessions Now Available
  https://blog.xamarin.com/all-xamarin-evolve-2016-sessions-now-available/

Folks concerned about whether their end users will “like” Microsoft’s Surface devices now have documentation that says they need not worry:  Microsoft has just been cited as having nearly the highest customer satisfaction ratings for a any tablet vendor – second only to Apple, by a single point.

In the latest J.D. Power 2016 U.S. Tablet Satisfaction Study, Microsoft surpassed most of the field, particularly in the space of features & function for hybrid tablets, which rated 11 points higher than non-hybrid tablets.

To quote the study’s summary:

An increase in usage activity on hybrids is enabled by their ability to function in two core capacities. When using a physical keyboard or a mouse/stylus, customers can use hybrids for work-related activities. When using a touch-screen interface/virtual keyboard, hybrids provide a tablet-like experience for personal use, including sharing content, surfing the Internet and watching movies.  Among hybrid tablet owners, usage is higher than among non-hybrid device owners  when using Microsoft Office (1.0 hour vs. 0.6 hours for non-hybrids); browsing the Internet (4.5 hours vs. 4.1); using social media (2.4 hours vs. 2.2); and texting/instant messaging (1.1 hours vs. 0.9).

Notably, customers who own hybrid tablets have downloaded more paid apps within the previous 30-day period than those who own non-hybrid tablet devices (2.9 vs. 1.3, respectively). Additionally, owners of hybrid devices have a higher incidence of data plans (33% vs. 28% among non-hybrid owners).

“Increasing the number of activities that can be done on a single device has a positive impact on the overall user experience,” said Kirk Parsons, senior director and technology, media & telecom practice leader at J.D. Power. “Hybrid tablets are raising customer expectations for device performance. Brands with a strong lineup of hybrids are in a favorable position to satisfy the needs of consumers interested in a single device for business computing and entertainment. A satisfying hybrid tablet experience can lead to brand loyalty, recommendations and repurchase intent.”

Read the full summary & download the study here:

• DOWNLOAD: J.D. Powers 2016 US Tablet Satisfaction Study – Vol 1
  http://www.jdpower.com/press-releases/2016-us-tablet-satisfaction-study-volume-1