Kurt Shintaku's Blog

Today we are announcing “Microsoft Azure Information Protection”, preview.

Azure Information Protection is a new service that makes it simpler to classify and protect information, even as it travels outside of your organization. It combines Secure Islands’ classification and labeling technology with Azure Rights Management. It enables customers to enable a protection process including these steps:

1. Classify
2. Label
3. Protect
4. Monitor
5. Respond

In the above demo, you’ll see the new options that let you define how your users can classify their documents and emails during the normal course of their work. Find out how you can define the labels, protections, and visual markings appropriate for your organization. And finally, track where sensitive documents are traveling and how to stop them in their tracks.

A public preview of Azure Information Protection will be available next month.

For more information, visit the announcement post at:

• EMS BLOG: Azure Information Protection
  https://blogs.technet.microsoft.com/enterprisemobility/2016/06/22/announcing-azure-information-protection/

Are you a global company?  Are you looking to understand which cloud services are available in the language of the country that your business or your business segment resides in?

Each service has different country and language availability, as outlined below:

• Office 365, Exchange Online Protection, and Power BI
• Skype for Business PSTN Conferencing
• Skype for Business PSTN Calling
• Microsoft Azure
• Microsoft Intune
• Microsoft Dynamics CRM Online
• Microsoft Social Engagement
• Microsoft Dynamics Marketing
• Parature, from Microsoft
• System Center Advisor
• System Center Endpoint Protection
• System Center Global Service Monitor
• Live Meeting

(All Microsoft Online Services are unavailable in Cuba, Iran, Democratic People’s Republic of Korea, Sudan, and Syria.)

• INFO: Language availability for Microsoft Online Services (Office 365, Azure, Intune, Dynamics Online, etc.)
  https://products.office.com/en-us/business/international-availability

Gartner has released a research document around how Windows 10 addresses the needs of end users around cloud, mobile and device-type experiences.

Summary:

“Microsoft’s Windows 10 operating system has a surprising number of elements that can be incorporated into digital workplace strategies. Digital workplace planners can use these to promote a more cloud-connected, user-centric and self-service environment.”

– Analyst: Stephen Kleynhans

To view the entire research document for free, visit:

• GARTNER: Windows 10 Impacts the Digital Workplace
  https://www.gartner.com/doc/reprints?id=1-2RTY36R&ct=151109&st=sb

I was recently asked a couple questions about Ransomware & Office 365 that I thought might be useful for others interested in the same topic.

————

Re: Are there any specific things customers should consider re: Ransomware between onprem vs cloud?

The Office 365 Security blog has a specific post that talks about this topic.  Please review the following post from Office 365 Security:

• Office 365 Security Blog: “How to Deal with Ransomware”
  https://blogs.technet.microsoft.com/office365security/how-to-deal-with-ransomware/

————

Re: Anything to be said about ransomware preparedness?

Please review the following:

MICROSOFT MALWARE PROTECTION CENTER
We have specific guidance on the Ransomware prepared on the Microsoft Malware Protection Center, specifically a LIVING page summarizing our Threat Intelligence Reports which has specific areas that address:

• Ransomware statistics
• Ransomware characteristics
• Ransomware analysis
• Ransomware mitigateion
• Ransomware prevalent threats

Again, this content is living and is constantly updated. Notifications are available via RSS.  Please review this content here:

• MMPC: “Threat intelligence reports – Ransomware”
  https://www.microsoft.com/security/portal/enterprise/threatreports_september_2015.aspx

We also have a dedicated page to Ransomware on the MMPC site:

• MMPC: “Ransomware”
  http://aka.ms/ransomware

CYBERTRUST BLOG RANSOMWARE SERIES
There is also an initial post on our CyberTrust blog kicking off a special series of articles about the Ransomware threat entitled, “Understanding the Risk” written by Tim Rains, our Director of Security at Microsoft.  It touches on everything from tactics to coming threats and he specifically closes with guidance around what to do to prepare:

“I asked some of the experts in Microsoft’s Enterprise Cybersecurity Group to provide some guidance based on the work they are doing to help enterprise customers protect, detect and respond to ransomware cases. The Enterprise Cybersecurity Group has unique, industry-leading cybersecurity expertise from client to cloud that I’m excited to tap. They have helped numerous enterprise customers protect, detect and respond to some of the most sophisticated ransomware attacks to date. This experience informs their approach, something partially summarized in the table below.”

Again, this is just the first article in the series.  Read more at :

• Cybertrust Blog: “Understanding the Risk
  http://blogs.microsoft.com/cybertrust/2016/04/22/ransomware-understanding-the-risk/

THREAT RESEARCH & RESPONSE BLOG
Recently a post was made on the MMPC Threat Research & Response blog around Ransomware.  It has guidance toward the end that specifically recommends, “Enable Microsoft Active Protection Service (MAPS) to get the latest cloud-based ransomware detection and blocking.” (https://blogs.technet.microsoft.com/mmpc/2015/01/14/maps-in-the-cloud-how-can-it-help-your-enterprise/)

Please review this post for more:

• MMPC Threat Research & Response Blog: “The 5Ws and 1H of Ransomware”
  https://blogs.technet.microsoft.com/mmpc/2016/05/18/the-5ws-and-1h-of-ransomware/

MCS CYBERSECURITY & RANSOMWARE
Finally, I have an introductory 50-slide deck from Microsoft Consulting Service’s Cybersecurity team (https://www.microsoft.com/en-us/microsoftservices/campaigns/cybersecurity-protection.aspx) which provides some insight as to how our Cybersecurity approaches ransomware as well as an overview of the services that Microsoft has available to address the matter as well as the guidance we have specifically around Ransomware.  They have a very thorough approach to ransomware and are brought in on contract to help customers prepare for the threat, or address ransomware once it’s landed.

If you’re a customer of mine that is interested in this deck, please let me know.

Update 1606 for Configuration Manager Technical Preview has been released.

Taken from the announcement post:

Update 1606 for Configuration Manager Technical Preview has been released. New and improved features in this update include:

• ConfigMgr as a managed installer for easier application whitelisting on Windows10: You can now configure clients so that ConfigMgr-deployed software is automatically trusted, but software from other sources is not. Read more in this blog post.
• Cloud Proxy Service: This technical preview provides a simple way to manage ConfigMgr clients on the Internet. The Cloud Proxy Service, which is deployed to Microsoft Azure and requires an Azure subscription, connects to your on-premises ConfigMgr infrastructure using a new role called the cloud proxy connector point. You can use the ConfigMgr console to deploy the service to Azure and configure the supported roles to allow cloud proxy traffic.
• Grace period for application and software update deployments: You are now able to give users a grace period to install required applications or software updates beyond any deadlines you configured. This can be useful for when a computer has been turned off for an extended period of time like when an end user has just returned from vacation.
• Multiple device management points for Windows 10 Anniversary Edition devices: On-premises Mobile Device Management (MDM) supports a new capability in Windows 10 Anniversary Edition that automatically configures an enrolled device to have more than one device management point available for use. This capability allows the device to fall back to another device management point when the one it was using is not available.

This release also includes the following new feature for customers using System Center Configuration Manager connected with Microsoft Intune to manage mobile devices:

• Device categories: You can create device categories, which can be used to automatically place devices in device collections when used in hybrid environments. Users are then required to choose a device category when they enroll a device in Intune.

Read more here:

• Update 1606 for Configuration Manager Technical Preview – Available Now!
  https://blogs.technet.microsoft.com/enterprisemobility/2016/06/20/update-1606-for-configuration-manager-technical-preview-available-now/

Two new Technology Adoption Programs (Beta) have been announced.

BizTalk Server 2016 Technology Adoption Program (TAP) is now open for nominations!
We are pleased to announce that we are now accepting nominations for the BizTalk Server 2016 TAP program. The goal of the TAP is to get critical feedback on feature capabilities and product quality that will be used to determine when BizTalk Server 2016 is ready to ship as well as giving customers the opportunity to take BizTalk Server 2016 to production as soon as possible.

• BETA: BizTalk Server 2016 Technology Adoption Program
  https://aka.ms/biztalk2016tap
• ANNOUNCEMENT: BizTalk Server 2016 Technology Adoption Program (TAP) is now open for nominations!
  https://blogs.msdn.microsoft.com/biztalk_server_team_blog/2016/06/21/biztalk-2016-technology-adoption-program-tap-is-now-open-for-enrollment/

Microsoft Host Integration Server 2016
Technology Adoption Program Nomination
Microsoft HIS product team is accepting nominations for the HIS 2016 TAP. The program is intended to enable the HIS product team to obtain critical feedback on HIS 2016 technologies and tools, with which to improve quality and supportability prior to retail release of the software. The program enables enterprise IT organizations to develop and deploy new host integration solutions using pre-release copies of HIS 2016, obtaining support from the HIS product team. The HIS product team will select TAP sites that best enable the team to achieve these goals.

• BETA: Microsoft Host Integration Server 2016 Technology Adoption Program Nomination
  https://aka.ms/histap
• ANNOUNCEMENT: Accepting nominations for the Host Integration Server 2016 Technology Adoption Program (TAP)
  https://blogs.msdn.microsoft.com/hostintegrationserver/2016/06/21/accepting-nominations-for-the-host-integration-server-2016-technology-adoption-program-tap/

Are you an Azure customer?  Are you investigating solutions for Disaster Recovery as a Service?

Check out what you already have with Azure DRaaS.  Gartner’s new DRaaS magic quadrant highlights the availability of Azure Site Recovery, which incorporates:

• a cloud hosting service
• a cloud migration & disaster recovery tool
• management through Operations Management Suite

They also highlight Azure’s DRaaS GLOBAL availability relative to other solutions and cross-platform hybrid approach , which makes recovery suitable from VMware & Hyper-V.

Read the Magic Quadrant document here:

• GARTNER: Magic Quadrant for Disaster Recovery as a Service (June 16, 2016)https://www.gartner.com/doc/reprints?id=1-39NNEX2&ct=160617&st=sb

Free employees to work from anywhere, anytime, on any device.

Today’s employees are calling for more freedom and flexibility from their work environments. They want to be able to work when, where, and how they choose, which creates unique challenges for modern IT departments.
Fortunately, with The Innovator’s Guide to Uncompromised Freedom, flexibility and adaptation is easier than ever. The authority on achieving the freedom employees desire and the protection IT departments require, this eBook demonstrates how Microsoft’s Enterprise Mobility Suite (EMS) helps businesses create a more secure and productive work environment from virtually anywhere by:

• Encrypting nearly any type of file on almost any device
• Centrally managing identities across data centers and the cloud
• Providing easy and intuitive device enrollment
• And much more

For more information on how employees and businesses can achieve unprecedented flexibility and freedom, download The Innovator’s Guide to Uncompromised Freedom today.

• DOWNLOAD: Microsoft eBook, “The Innovator’s Guide to Uncompromised Freedom” (Securing Managed Mobility)
  https://info.microsoft.com/InnovatorsGuideEMSeBook.html

Today, I got a couple questions about Office 365 Pro Plus & languages:

Do we have the rights to deploy multiple languages in Office 365 Pro Plus under Office 365 E3 or do we need to purchase them separately

Yes, if you have a qualified Office 365 subscription, you have the right to use multiple languages for users that are subscribed to Office 365.

Per the “Office 365 Licensing Brief” documentation:

“Microsoft Office Multi-Language Pack provides the flexibility to customize Microsoft Office for multilingual needs. Customers licensed for Office 365 ProPlus may deploy and use the latest version of the Office Multi-Language Pack during the term of the Office 365 ProPlus subscription.”

• LICENSING: Licensing Microsoft Office 365 ProPlus Subscription Service in Volume Licensing
  https://www.microsoft.com/en-us/Licensing/learn-more/brief-office-365.aspx

Where can I download the languages or language packs for our enterprise deployment?

You need to use the Office Deployment Tool to obtain & integrate multiple languages into the Click-to-Run package. Please review the Office 365 Pro Plus Deployment Guide (https://technet.microsoft.com/en-us/library/gg715562.aspx) which has a chapter specifically on this topic:

“If you purchased an Office 365 subscription, you can use it to install Office in multiple languages. You do not have to buy a Language Pack. If your organization allows it, users can install Office 365 ProPlus languages directly from the Office 365 portal. When users install Office from the software page, they select a language from the Language drop-down box.
In managed enterprise environments, end-users may not have permission to install software from the Office 365 portal. If you are configuring an on-premises deployment of Office 365 Click-to-Run applications for users in your organization, you can use the Office Deployment Tool and a custom Configuration.xml file to install Click-to-Run in multiple languages.”

• TECHNET: Plan for multilanguage deployment of Click-to-Run-based Office installations
  https://technet.microsoft.com/en-us/library/dn186220.aspx

As an individual, if permitted, one can download the appropriate language pack on their own, install it locally to their system, then change the language setting for their installation. (Note: The site says Office 2016, but also applies to Office 365 Pro Plus)

• SUPPORT: Language Accessory Pack for Office 2016
  https://support.office.com/en-us/article/Language-Accessory-Pack-for-Office-2016-82ee1236-0f9a-45ee-9c72-05b026ee809f?ui=en-US&rs=en-US&ad=US

Outlook now makes it easier for you to have that personal connection by enabling you to meet your customers, business partners or study group at your favorite Starbucks location, all with a few clicks from your Outlook inbox.  Introducing the Starbucks for Outlook add-in.

• SCHEDULE MEETINGS AT A LOCAL STARBUCKS
  Simply click the “Meet at Starbucks” command from the ribbon when creating a new meeting request, search for your favorite Starbucks store, and add it as the location of your upcoming meeting.

• SEND STARBUCKS GIFTCARDS OVER EMAIL
  Now you can effortlessly and quickly express thanks or appreciation for a job well done by sending a Starbucks eGift Card right from your inbox. 

HOW TO INSTALL:
The Starbucks for Outlook add-in is available in the Office Store as a free download to users of the new Outlook.com, as well as Outlook 2013, Outlook 2016 and Outlook on the web users with Office 365 or Exchange 2013 or Exchange 2016 mailboxes.

If you are using Office 365 or the  new Outlook.com, simply click on https://aka.ms/getcoffee to begin installation of the Starbucks for Outlook add-in. If you are using Exchange 2016 or Exchange 2013 on premise, please follow the steps below to install the add-in:

1. In Outlook 2013 or Outlook 2016, click Store from the Home tab on the ribbon. In Outlook on the web click the gear icon (top right) and select Manage Add-ins.
2. Type in “Starbucks” in the search bar on the top right.
3. The search will return the “Starbucks for Outlook” add-in, then set the toggle to “on” to install the add-in.
4. The add-in will appear in the command bar ribbon on the top.

Note: Some users in Outlook 2013 may not see the new in-client store UI above. For these users, follow the steps below:

• Click Store from the Home tab on the ribbon-> click Manage Add-ins. 
• In the Manage Add-ins page, click the + sign and then select the “Starbucks for Outlook” add-in from the Office Store.
• Click the “Add” button to begin installation.

We hope you give the new Starbucks for Outlook add-in a try and find it a helpful and easy tool to build great connections. Be sure to also take advantage of our limited time offer when you share a Starbucks eGift Card so you can get one in return.

We’re eager to hear your feedback on the Starbucks for Outlook add-in and any suggestions on new partner solutions that you’d like to see in Outlook. Joining the conversation on Outlook is easy—visit Outlook.UserVoice.com  and sign in with your Microsoft account to leave your feedback.

Read more here:

• BLOG: Starbucks for Outlook Add-in Now Available!
  https://betterwith.office.com/Starbucks-for-Outlook-add-in

(p.s. To make this even sweeter, we have an exciting offer running for a limited time! When you send a Starbucks eGift Card using Outlook, you are eligible to get a free $5 Starbucks eGift Card in return, so your next coffee is on us!)