Windows 10

Edge Insider and group policy support

I have been using the Edge Insider (Chromium), for awhile and I am impressed. You can find the download here, and not only for Windows 10 as shown here: We now also have a preview of an admx file (Policy settings). You can find the preview here The

Continue to read »

Mindcore Tech and SSPR follow-up

Yesterday at our Mindcore Tech meeting, one of our test sceneries did not work as expected. We did not get the reset password option on the Windows 10 insider build. The reason behind was “just” some missing configuration in the lab we build during the meeting In order to

Continue to read »

Connect Microsoft Store for Business with Intune

This time let’s try to connect Store for Business with Intune and deploy the Company Portal to all users. First thing to do is to register Store for Business, so sign in to using the same tenant account you use to sign into Intune. Select Manage: Click Settings –

Continue to read »

Azure AD Password Protection

We now have Azure AD Password Protection generally available, this will allow us to eliminate easily guessed passwords. By using it we can lower the risk of password spray attacks. Password spraying is using a large number of usernames and loops them with a single password, this will give a

Continue to read »

Azure AD Password Reset on login screen

In one of the last posts we enabled SSPR in our hybrid environment. This time let’s enable password reset on the Windows 10 clients login screen. Before we start we need to be aware of the following: Supported on Windows 10, version April 2018 Update (1803). Device must be

Continue to read »

Windows Defender Application Guard – Settings

Let take one more look at the Windows Defender Application Guard. You can find the previous posts about WDAG here: Testing Windows Defender Application Guard on a VM Windows Defender Application Guard In the last post we saw that by default we were not allowed to do copy and paste

Continue to read »

Windows Defender Application Guard

This time let’s give Windows Defender Application Guard a very simple test: You can test this on a physical client or a Hyper-v client, take a look here for the requirements: Testing Windows Defender Application Guard on a VM The test will be done in an enterprise Active Directory domain

Continue to read »

Testing Windows Defender Application Guard on a VM

If you want to test Windows Defender Application Guard your test environment must meet the requirements: A 64-bit computer with minimum 4 cores (logical processors) with CPU virtualization extension, minimum 8GB RAM and 5 GB free space. But what if we want to test this on a virtual Windows 10

Continue to read »

Office Client Policy Service

Microsoft has made the new Office Client Policy Service available as preview, and this is looking promising. The solution is a cloud-based service that can enforce policy settings for Office 365 ProPlus on the office client. This is possible even if the device isn’t domain joined or otherwise managed. The

Continue to read »

Enterprise State Roaming

This time I will have a quick test-drive of the Enterprise State Roaming Feature (ESR) with a hybrid Azure AD joined device, for those of us still using our own AD. Enterprise State Roaming will offer a secure synchronization of user settings from Windows and applications to the cloud. You

Continue to read »

Windows Sandbox

Let’s have a quick look at the new Windows Sandbox feature. Windows Sandbox is a feature of Windows 10 Pro and Enterprise (right now only in insider builds). Virtualization must be enabled in the BIOS. If you are using a physical machine, it depends on the hardware but something like

Continue to read »

Windows 10 and Office 2013

When deploying Windows 10 and Office 2013 with SCCM (here 1602) you might see that the update progress stops and the task sequence hangs. If you take a closer look at the WUAHandler.log you will also notice that the installation progress has stopped. Opening the event viewer will reveal that

Continue to read »

Cannot obtain read/write access for install.wim

In some situations ICD can not do what you need, and because of that, you might still need a good old unattend.xml for Windows 10. When opening a new install.wim in Windows System Image manager for the first time without a catalog file you will be asked if you want

Continue to read »

Hi – We’re happy you’re here

When you logon to Windows 10 for the first time with a new user without a profile you will see this dialog: Hi   We’re happy you’re here Lots of great features to get excited about Getting everything ready for you Let’s start You might not like this dialog and

Continue to read »

Administrative Templates (.admx) for Windows 10

Microsoft has now released ADMX files from Windows 10 Update 1511 as a downloadable file. Administrative Templates (.admx) for Windows 10 When I compare the downloaded ADMX files with my previous downloaded files, the following ADMX files are deleted microsoft-windows-geolocation-wlpadm.admx (see parentalcontrols.admx These ADMX files are changed: avsvalidationgp.admx biometrics.admx

Continue to read »

Windows 10 Domain Admin problems

You might discover that you are not able to fully administrate your domain joined Windows 10 computer using a domain administrator account. Just as an example when you click on Change product key nothing happens: Clicking Get Started (Get Insider Builds) again nothing happens: In a local policy (gpedit.msc) or

Continue to read »

Group Policy settings in Windows 10

Microsoft has released new Excel spreadsheet with information’s about the Group Policy settings in Windows 10. You can filter settings so you are able to see only new policies or for example only Microsoft Edge settings. Group Policy Settings Reference for Windows and Windows Server These spreadsheets list the policy

Continue to read »

WinPE versions

Ok we are booting into Windows PE but how do we determine / identify the version. First of all we need command support in the WIM file (F8), then in the command prompt we can use the command ver From Windows 10 PE (10): From Windows 8.1 PE (5.0): But

Continue to read »

Windows 10 KMS keys and KMS Server update

The default KMS keys used for volume licensing editions of Windows 10 has been published: KMS Client Setup Keys Operating system edition KMS Client Setup Key Windows 8.1 Professional GCRJD-8NW9H-F2CDX-CCM8D-9D6T9 Windows 8.1 Professional N HMCNV-VVBFX-7HMBH-CTY9B-B4FXY Windows 8.1 Enterprise MHF9N-XY6XB-WVXMC-BTDCT-MKKG7 Windows 8.1 Enterprise N TT4HM-HN7YT-62K67-RGRQJ-JFFXW Windows Server 2012 R2 Server Standard

Continue to read »

Windows Profile versions

When using roaming profiles and Windows 10 you will notice that it creates V5 (version 5) profiles by default (.V5 extension) You might ask why version 5 but there is a good explanation: Windows 8 and Windows 8.1 could create V3 and V4 if a hotfix were used and a

Continue to read »

Join Windows 10 to Azure Active Directory

This time lets try to join a Windows 10 client build 10061 to Azure AD. First we need to enable Device Registration Azure AD. open the Azure portal and browse to your Directory, select Configure and select Yes on Enable Device Registration, then save the change: On the Windows 10

Continue to read »

Time to Upgrade Windows 10 from build 9860 to 9878

Update 14-11-2014 Build 9879 is available, the update procedure is the same as last time, you just need to change your update pace to fast: This time there the enterprise version is also available as a ISO file, in order to download this go here: Original post Microsoft has

Continue to read »
Search blog posts
Modern Workplace consultant and a Microsoft MVP in Enterprise Mobility.
Modern Workplace consultant and a Microsoft MVP in Windows and Devices for IT.

Infrastructure architect with focus on Modern Workplace and Microsoft 365 security.

Passionate IT professional with 20+ experience in IT architecture, consulting, and design. 

Cloud & security specialist with focus on Microsoft backend products and cloud technologies.

Cloud & Security Specialist, with a passion for all things Cybersecurity

Cloud and infrastructure security specialist with background in networking.

Infrastructure architect with focus on design, implementation, migration and consolidation.

Infrastructure consultant with focus on cloud solutions in Office365 and Azure.

follow us in feedly

Follow on SoMe