Kurt Shintaku's Blog

This is just announced at MMS 2013… & wicked cool.  MBAM can now support hardware-level encryption for SSDs & take ownership of a remote laptop’s TPM chip without a reboot.  Mind. Blown.

Today’s an exciting day for us here at the annual Microsoft Management Summit (MMS) in Las Vegas, as we just announced the general availability of the Microsoft Desktop Optimization Pack (MDOP) 2013 for Software Assurance, which includes a major update to Microsoft BitLocker Administration and Monitoring (MBAM) as well as a series of Service Pack updates for APP-V, UE-V, DART, and AGPM. As mentioned in our announcement on the Windows For Your Business blog the big star in the MDOP 2013 release is MBAM 2.0 which is designed to help you make significant costs reductions when it comes to provisioning, managing and supported encrypted devices (running Windows 7, Windows 8, and Windows To Go) within your environment.

For those of you that have been following our previous MBAM posts here on Springboard or have participated in the MBAM 2.0 beta program,  you’re likely already familiar with the feature set and I’d wager that you’re eager to learn more about how to deploy the final build within your environment. For those of you new to MBAM 2.0, or for anyone who may need a quick refresh, I’d like to quickly point out the key features that you will find in this release:

• Self-Service Portal: The Self-Service Portal helps end users perform the most common support tasks without need of help desk assistance.
• System Center Configuration Manager Integration: Integration with System Center Configuration Manager (SCCM) 2007 and 2012 enables organizations to integrate MBAM’s compliance management and reporting capabilities within your existing SCCM infrastructure.
• Windows 8 Support: Support for managing Bitlocker on Windows 8 and Windows to Go devices has been included along with the ability to take advantage of new WinPE capabilities that will dramatically reduce encryption times.
• Compliance reporting calculation improvements: Reporting has been updated so that devices are only marked as non-compliant when they’re in a state that is less secure than the minimum requirements defined in policy. This differs from MBAM 1.0 where compliance was based on strict adherence to policy and resulted in devices appearing non-complaint even when they were in a more secure configuration than policy required.

Each of these features were present in the MBAM 2.0 Beta 2 release and have since been improved, however, please note that a number of all new features have been added to the final release which include:

• Support for managing Windows to Go devices
• BitLocker pre-provisioning with WinPE including the use of Used Disk Space Only Encryption on Windows 8 devices
• Windows 8 Operating System Drives can now be protected with the Password protector
• Improved scalability and performance will enable you to deploy MBAM with less infrastructure
• Devices left in “protection suspended” mode will automatically resume protection after reboot
• MBAM can take ownership of the TPM without requiring a reboot (if TPM turned on in BIOS)

…

Read the rest of this VERY LONG post on the Windows Springboard blog:

• Get Ready to Deploy MBAM 2.0
  http://blogs.windows.com/windows/b/springboard/archive/2013/04/10/get-ready-to-deploy-mbam-2-0.aspx

Microsoft Management Summit 2013 session recordings are now accessible on Channel 9:

• http://channel9.msdn.com/Events/MMS/2013

KEYNOTE
This includes Brad Anderson’s keynote, “Cloud Optimize your Business with Microsoft Management Solutions,” where he describes Transforming the Data Center, Dev Ops, StorSimple (recent acquisition), People Centric IT, and more:

• http://channel9.msdn.com/Events/MMS/2013/key1

Here’s some other sessions of note:

Windows Deployment

• Implementing the Windows To Go Concept in an Enterprise Environment
  http://channel9.msdn.com/Events/MMS/2013/DC-B304
• Application Compatibility for Windows 8
  http://channel9.msdn.com/Events/MMS/2013/DC-B305
• Building the Perfect Windows 8 Image
  http://channel9.msdn.com/Events/MMS/2013/DC-B306
• Deploying Windows 8 Using Lite Touch
  http://channel9.msdn.com/Events/MMS/2013/DC-B308
• Deploying Windows To Go in the Real World
  http://channel9.msdn.com/Events/MMS/2013/DC-B317
• What’s New in Windows 8 Deployment
  http://channel9.msdn.com/Events/MMS/2013/DC-B318

Windows Maintenance

• What’s New with Windows 8 Bitlocker and Microsoft BitLocker Administration and Management 2.0
  http://channel9.msdn.com/Events/MMS/2013/DC-B312
• Maximizing Windows 8 Performance: Troubleshooting Tips
  http://channel9.msdn.com/Events/MMS/2013/DC-B313
• Windows Sysinternals Primer:
  http://channel9.msdn.com/Events/MMS/2013/DC-B311
• Making PC Recovery Easier with the Microsoft Diagnostics and Recovery Toolset
  http://channel9.msdn.com/Events/MMS/2013/DC-B321
• Advanced Automation Using Windows Powershell
  http://channel9.msdn.com/Events/MMS/2013/DC-B401

Virtual Desktop Infrastructure

• Microsoft Windows Server 2012 Desktop Virtualization (VDI) on Dell Active Infrastructure
  http://channel9.msdn.com/Events/MMS/2013/DV-B291
• Designing a Virtual Desktop Infrastructure Architecture for Scale and Performance
  http://channel9.msdn.com/Events/MMS/2013/DV-B301
• Optimizing Windows 8 for Virtual Desktop Infrastructure
  http://channel9.msdn.com/Events/MMS/2013/DV-B308
• What’s New in Windows Server 2012 Virtual Desktop Infrastructure and Remote Desktop Services
  http://channel9.msdn.com/Events/MMS/2013/DV-B310

Private Cloud

• Competitive Advantages of the Microsoft Private Cloud over the VMware vCloud
  http://channel9.msdn.com/Events/MMS/2013/IM-B204
• System Center 2012 for VMware Infrastructure
  http://channel9.msdn.com/Events/MMS/2013/IM-B309
• System Center 2012 SP1 Virtual Machine Manager: Managing Large Datacenters
  http://channel9.msdn.com/Events/MMS/2013/IM-B308
• What’s New in System Center 2012 Virtual Machine Manager
  http://channel9.msdn.com/Events/MMS/2013/IM-B311
• Getting Started with Virtual Machine Manager and App Controller
  http://channel9.msdn.com/Events/MMS/2013/AM-B305

Datacenter Management

• The Benefits and Reasons for Upgrading to Windows Server 2012 Active Directory
  http://channel9.msdn.com/Events/MMS/2013/AI-B301
• System Center 2012 SP1 Operations Manager Overview
  http://channel9.msdn.com/Events/MMS/2013/IM-B202
• Business Continuity with System Center
  http://channel9.msdn.com/Events/MMS/2013/IM-B315
• Provisioning in System Center: Users, Groups, Virtual Servers, Software and More!
  http://channel9.msdn.com/Events/MMS/2013/IM-B317

…and over 200+ more sessions!

60+ million Windows licenses sold. On May 2, learn the ‘why’ and ‘how’ of designing, building and marketing an app for Windows 8 and Windows Phone. Hear from developers who have done it and find out for yourself.

Speakers include:

• Keynote: The Windows Opportunity
  Steve Guggenheimer, Corporate Vice President, Chief Evangelist at Microsoft
• Show and Tell: Top Apps Development Revealed
  [Speaker to be announced]
• "But I’m an iOS Developer…"
  Evan Kirchhoff, CTO at Qubop Inc.
• Android Developers: Expand Your Portfolio
  [Speaker to be announced]
• What can Windows 8 Development Frameworks do for you?
  [Speaker to be announced]
• Designing for a New Digital Canvas
  [Speaker to be announced]
• Monetizing your Windows 8 apps with Advertising
  Michael Johnson, Principal Technical Evangelist at Microsoft
• The "Get Rich Pitch"
  Kevin Ashley, Microsoft Technical Evangelist

Date/Time: May 2 / 9am – 2pm PST

Register: http://build.windowsstore.com/virtualsummit

Yeah, yeah… I know.  Just lock it down & get goin’.

• MS13-028 Critical – Cumulative Security Update for Internet Explorer (KB2817183)
• MS13-029 Critical – Vulnerability in Remote Desktop Client Could Allow Remote Code Execution (KB2828223)
• MS13-030 Important – Vulnerability in SharePoint Could Allow Information Disclosure (KB2827663)
• MS13-031 Important – Vulnerabilities in Windows Kernel Could Allow Elevation of Privilege (KB2813170)
• MS13-032 Important – Vulnerability in Active Directory Could Lead to Denial of Service (KB2830914)
• MS13-033 Important – Vulnerability in Windows Client/Server Run-time Subsystem (CSRSS) Could Allow Elevation of Privilege (KB2820917)
• MS13-034 Important – Vulnerability in Microsoft Antimalware Client Could Allow Elevation of Privilege (KB2823482)
• MS13-035 Important – Vulnerability in HTML Sanitization Component Could Allow Elevation of Privilege (KB2821818)
• MS13-036 Important – Vulnerabilities in Kernel-Mode Driver Could Allow Elevation Of Privilege (KB2829996)

Admittedly, this is purely gratuitous but if you were a child of the 80’s, you may remember a little band called OMD.  They stopped by Microsoft’s “Bing Lounge” to do a live performance celebrating the release of their new album, “English Electric”.  (This is of particular interest to me being that my wife & I have seen them live in Hollywood every time they’ve come through Los Angeles, performing at the Nokia Theatre & the Music Box in Hollywood.)

Here they are performing their latest single, just released today, “Metroland”:

Here are the other on-demand performances from 4/8/13:

• Interview
  http://www.bing.com/bingvideohub/browse/bing-lounge?videoid=0425fb89-d936-4b80-87d1-9d39b8d72091&src=v5:share:sharepermalink:uuids&from=sharepermalink
• Metroland
  http://www.bing.com/bingvideohub/browse/bing-lounge?videoid=6560ed62-f456-4ddf-b023-789aa10cf2f6&src=v5:share:sharepermalink:uuids&from=sharepermalink
• History of Modern (Part 1)
  http://www.bing.com/bingvideohub/browse/bing-lounge?videoid=8546b07a-afb2-475b-b0f2-3ba91d69f8bd&src=v5:share:sharepermalink:uuids&from=sharepermalink
• If You Leave
  http://www.bing.com/bingvideohub/browse/bing-lounge?videoid=b20b68a9-dc48-4a24-b9d6-894fa437ff9b&src=v5:share:sharepermalink:uuids&from=sharepermalink
• Enola Gay
  http://www.bing.com/bingvideohub/browse/bing-lounge?videoid=9ebded46-9d78-487a-b843-eb9dd7a4eda9&src=v5:share:sharepermalink:uuids&from=sharepermalink

Join us on Friday, April 26, at 9:00 AM Pacific Time, for “Enabling Your Business Through Effective Asset Management.”

During this 60-minute webcast, we will outline how to promote greater business outcomes in your organization through precise asset management. We will also discuss key industry trends that can affect your licensing investment. Software Asset Management experts from Microsoft will talk about how to reduce challenges and improve business agility when faced with ever changing business events that take place in the enterprise.

Please register today.

Date: Friday April 26th, 2013
Time: 9:00-10:00 AM PST (Pacific Standard Time)
Register:
https://msevents.microsoft.com/CUI/EventDetail.aspx?EventID=1032545076&culture=en-us

They will be using Live Meeting for this session which requires the installation of the Live Meeting client:

• Testing your computer for Live Meeting capability: http://go.microsoft.com/fwlink/?LinkId=90703
• If you need to install the Live Meeting Client, please click HERE and follow the download instructions.

If you’re interested in participating in additional licensing related sessions, please sign up for our “Microsoft Volume Licensing Communications and Events” newsletters:

• Volume Licensing Newsletter sign up:
  https://profile.microsoft.com/RegSysProfileCenter/subscriptionwizard.aspx?wizid=493597d4-49ea-4551-87e2-a3411765854f&lcid=1033&CR_CC=200047480&CR_ID)

Well, it finally happened… and that’s probably a good thing.  There’s power adapters available from 3rd parties to power your Surface RT & Pro.

• Microsoft Surface RT Wall Charger Power Adapter for Windows 8 Tablet ($16.95)
  http://www.ebay.com/itm/US-SELLER-Microsoft-Surface-RT-Wall-Charger-Power-Adapter-for-Windows-8-Tablet-/251249097628

• NEW 45W Wall Power Charger Adapter For Microsoft Surface 10.6 Windows 8 Pro ($19.47)
  http://www.ebay.com/itm/C095-NEW-45W-Wall-Power-Charger-Adapter-For-Microsoft-Surface-10-6-Windows-8-Pro-/171012507438

This script can be used to remove multiple Windows Store apps from a user account in Windows 8. It provides a list of installed Windows Store apps. You can specify the application IDs, and remove them all at once.

The tool provides a text list of installed applications, each enumerated in the menu by app ID.  Select the app IDs you wish to uninstall, comma-delimited, and hit enter.  You’re done.

For more instructions on using the script, or for a quick video tutorial go to the TechNet download page:

• DOWNLOAD: Remove Windows Store apps in Windows 8 (PowerShell)
  http://gallery.technet.microsoft.com/scriptcenter/Remove-Windows-Store-Apps-a00ef4a4

Why Windows Surface RT? – An infographic by the team at Paul Thurrott’s SuperSite for Windows

Try the new “Reply All” button by coworker, David Gorgone, created for Outlook!

To set it up in Outlook:

1. Right click on the Ribbon
2. Select "Customize the Ribbon"
3. Click "Import/Export" to import the configuration file below

Now you’ll have a new Reply All button the reminds your users how they should use the ‘Reply All’ feature.  Use it or you’ll be printing t-shirts like this one:

• DOWNLOAD: The “Yes, I Have Thought Carefully About It and I Am 100% Sure I Want to Reply All” button for Outlook (Configuration File)
  https://skydrive.live.com/redir?resid=DA410C7F7E038D!10045