December 2, 2013 12:25 PM
Posted by: Ed Tittel
clean up a pilot or master image to build 8.1 deployment media
, slipsteadm 8.1 drivers into clean install for best results
, Windows 8.1 deployment
Over the holiday weekend, I migrated several more PCs from 7 to 8 to 8.1, and made some deliberate variations along the path from the initial starting point (Windows 7 SP1 ) to the final destination (a fully-patched and up-to-date Windows 8.1) to see what I could learn about how to make that path as smooth as possible. The short version of my story, for those disinclined to revel in the gory details, is best summarized as: “Update all drives after the first step, from Windows 7 to Windows 8, and the second step from 8 to 8.1 will go more easily.”
|Drivers in need of upgrade as per DriverAgent
||7 –> 8
||8 –> 8.1
|Lenovo X220 Tablet
I will happily provide configuration details on the machines included in the preceding table, should anyone be interested. But my primary observation is that while there are undoubtedly and indisputably many good reasons to perform a clean install for any new major Windows OS version, minimizing post-install driver tweaking surely isn’t one of them. In fact, I saw a profound tendency for the Windows 8.1 installer to replace newer (and valid) drivers for Intel network adapters and built-in HD graphics circuitry than for any other kinds of components, but also observed that chipset elements, storage (particularing SATA AHCI and RAID drivers) and USB (particulary USB 3.0 drivers) were likely to experience rollbacks as a result of clean Windows 8 installations.
Does this mean that IT should reverse its longstanding policies and beliefs that clean installs are generally preferable to upgrades? Not at all; not even a little bit. What it means is that it’s probably a good idea to take a representative machine through the process by hand, use it to identify and obtain the latest and greatest drivers for Windows 8.1 before performing any further installs. This could even lead to slipstreaming those drivers into a customized WinPE based Windows 8.1 install image, so that all the necessary drivers — as well as applications, utilities, policy updates, and so forth — could be integrated into the actual 8.1 image used to perform 8.1 clean installations in bulk.
In fact, the bigger the population of machines that need to go through the clean install, the easier it is to justify the extra one or two days of effort that will be required to put all the pieces together to enable them to proceed without requiring any post-install clean-up whatsoever. Ultimately, the time and effort that the necessary planning and preparation can save will overshadow the time spent planning and preparing for a large-scall rollout.
November 27, 2013 2:53 PM
Posted by: Ed Tittel
, DriverAgent misreports some bad drives on Win8.1
, Windows 8.1 clean install
, Windows 8.1 driver issues
, Windows 8.1 upgrade vs. clean install
As a person who loves to tinker with his systems, I couldn’t stop myself from rebuilding my primary 8.1 test machine over the past couple of days. It’s a brute of a system with an i7-3700K CPU, 32 GB RAM, almost 6 TB of storage including 2 SSDs, and lots of other bells and whistles. The ostensible reason for the rebuild was to see if a clean install of Windows 8.1 works better than an upgrade from Windows 8 to 8.1 did. Interestingly enough, the answer in this case turned out to be: “In some ways yes, and in some ways no.”
The install certainly went quite quickly: from start to finish, including rearranging SATA drives in the system so I could switch from an older OCZ Vertex 3 128 GB SSD which had been acting as the system drive, to a newer OCZ Vertex 4 256 GB SSD, the whole shebang took less than 20 minutes. With another half hour to get through all the updates and so forth, this was less than half the time the upgrade took on roughly the same configuration (different system disk). I was also able to get all four of the bays in my plug-in 2.5″ drive bay device hooked up and working, so the system now has 9 storage devices attached: 6 SATA-attached HDs and SSDs varying in size from 119 GB (actual, nominal 128 GB) to 1.36 TB (actual, nominal 1.5 TB), plus a couple of USB 3.0 attached hard disks in a ThermalTake dual drive caddy, and a Blue Ray player/burner as well.
But unlike my recent experiences in upgrading Lenovo and Dell notebooks, and with a mini-ITX DIY system, all of which I took from Windows 8 to 8.1 recently, I didn’t do anywhere near as well on the driver front. To my astonishment, DriverAgent reported 23 out of 40 drivers as bad after the initial install was completed, or over 50% bad drivers. On other systems, I’ve never seen worse than 25% of drivers, and that only once or twice over the decade or so I’ve been using this platform on my various PCs. In fact, DriverAgent is still showing 25% bad drivers — rating I think is bogus for reasons I will shortly explain — even after my best efforts in trying to catch things up. My research has shown, however, that it is not unusual to get better results from an upgrade from 8 to 8.1 than from a clean install on the same hardware, so I’m not alone in observing this phenomenon.
Here’s the most galling example of what DriverAgent is showing me in graphic form for this system right now:
The yellow question mark means “unknown device” and the listings show odd driver discrepancies, too.
Here’s a list of the dates and drivers that DA says I should have installed, next to what’s actually installed for all of these items:
|Other Devices Entries from DriverAgent on Win8.1 i7-3770K PC
|ASMedia XHCI Controller
|Intel C200 USB EHC 1C26
|Intel C200 USB EHC 1C2D
|Intel SATA AHCI Controller
|Nvidia GeForce GTX 560 Ti
Now the way I understand it, you only need to replace a driver if the one found on your system is older or has a lower version number than the one in the update database. Occasionally, DA gets things wrong and either recommends a driver that causes problems once installed (rare), or a driver for which the automated installer won’t work on the target machine (more common). This is the first time I’ve seen so much stuff show up under the Unknown Device yellow question mark, for which the scanner apparently recognizes most, if not all, of the salient device details (including all of the stuff that I care about). It also doesn’t make sense that DA is tagging these items because none of them is older or lower in version number than the recommended alternative. Bizarre!
But at least the system is running well, and behaving itself nicely. I’m still in the process of reinstalling all my favored apps and tools, but have hit no serious snags so far into the process. As and when I do, I’ll report further on what I learn. Happy Thanksgiving to one and all, too!
[Note: WOW! Talk about a quick fix
I sent a copy of this blog post to Eric Pellerin at DriverAgent right after lunch today, and asked him to share my observations with his engineering folks. About one hour later I got a phone call to say that the problem was known and relates to a change between previous versions of Windows up to Windows 8, and 8.1. That change saw two registry entries per device in earlier versions: a descriptive ID field, plus a GUID to uniquely identify the device in encoded format. In Windows 8.1, the descriptive ID field is no more, and only the GUID is used. The DA software needs to find both entries on the reporting machine, or be able to find them in its own database, so as to avoid the “unknown device” reporting with a yellow question mark. And now I know that this didn’t happen for those particular devices.
But it wasn’t for a lack of effort or a failure of preparation. To get ready for Windows 8.1, the DA team made sure to add all of the descriptive field data they could muster for possible devices, but in the words of engineer Kevin (no last name given nor requested) “we missed a few.” He went on to explain that, in particular, display devices, disk controllers, and USB 3.0 drivers, were prone to lack the DA-supplied descriptive ID data for Windows 8.1 lookups. Because of my input, they were able to identify and fix those offending entries. And the last time I ran the driver scan, all of those Unknown Device items were gone. Check this out! Now THAT’s what I call customer service…
Hey presto! All fixed, and I’m impressed.
November 25, 2013 11:46 AM
Posted by: Ed Tittel
One week ago, I posted a blog here entitled “Windows 8.1: More Than an Update, More than an SP.” The point I was trying to make therein was that upgrading to Windows 8.1 involves some interesting and unexpected changes, especially where device drivers are concerned (many of which get replaced as a consequence of the upgrade, sometimes even involving over-writing newer already-installed drivers with older ones, sometimes involving driver replacement when 8.1-specific items are known to the Windows 8.1 installer). This post provoked an interesting comment from user “Branestawm” (Richard) who warned against upgrading to 8.1 on a Lenovo laptop:
My advice would be not to update to 8.1 if you have a Lenovo laptop. Their website lists a large number of incompatible models. I have an Ideapad U330 Touch (which is supposed to be OK) and have just reinstalled 8 after my problems.
Many people share this problem, as can be seen on the Lenovo forum:
Other models have similar tales of woe. Lenovo support say that they are working on the problems, but I can’t understand why they were not sorted out before launch.
DON’T UPGRADE YOUR LENOVO!
Thus it was with some trepidation that I went ahead later that week on a planned upgrade sequence for my production Lenovo T520 notebook (i7-2640M CPU, 16 GB RAM, mSATA and SATA3 SSDs, Intel 3000/Nvidia Quadro NVS 4200M graphics) that would take it from Windows 7 SP1 to Windows 8 and onto Windows 8.1. I’m sorry for Richard’s troubles with his IdeaPad U330 Touch, but I’m happy to report it was smooth sailing all the way for my T520 laptop (my X220 Tablet is on loan to a friend and colleague right now, and still running 8, but I plan to upgrade that unit to 8.1 once it’s returned to me after the upcoming holiday).
Given the perhaps overly dire admonitions included above, I was expecting trouble during my upgrade. But that trouble didn’t materialize, and I got two very pleasant surprises on the path to 8.1 both nicely encapsulated in this pair of screenshots from Driveragent to report on the final state of drivers for both of those Windows 8 releases:
Yes, that’s right: I was able to update ALL drivers for the T520 to most current status for 8 and 8.1!
Interestingly, DriverAgent showed 4 drivers as behind the curve on Windows 7 SP1 before I started the adventure, and that represented the best I was able to do in terms of getting those drivers completely up-to-date. Yet after each upgrade (first to 8, then to 8.1) I started out with only two drivers behind the times on either of those releases. In other words, my driver status right after the upgrade was already better for either of the two Windows 8 versions I worked through than it had been for Windows 7 to begin with. That was a real surprise, and differs dramatically from my experiences on other systems from Dell (an XPS12 convertible notebook and my son’s XPS2710 touchscreen All-in-One) and on home-built systems, both of which include Asus motherboards (a P6X68D-E on one, and a P8Z68-V on the other), and an Acer 5552 notebook with an AMD dual-core CPU.
As always, the devil is in the details. I don’t think it’s necessary to warn any and all Lenovo notebook owners off of the Windows 8.1 upgrade process completely, but that doesn’t mean every upgrade will go as smoothly as mine just did, either. YMMV, indeed.
November 22, 2013 12:36 PM
Posted by: Ed Tittel
I’ve blogged many times here about the excellent Secunia Personal Software Inspector (PSI) tool, which checks all the installed programs on a PC and compares them to its database of current (and fully patched, as in the case of the Windows OS itself) software programs and systems. Recent PSI versions have, however, been subject to a variety of “issues” with Windows 8 and 8.1, especially on PCs running Internet Explorer version 11, which primarily manifest in one of two forms:
1. The software scan hangs prior to completion, and never appears to complete
2. As a Windows (8.1) system freezes, a message that reads “Stop running this script” appears on-screen.
In another recent (11/22/2013) InfoWorld article (“Secunia fixes PSI…“), Woody Leonhard explains that the easiest fix for these problems was to roll back from the most current version (220.127.116.1113) to its predecessor, 18.104.22.16811. With the release of a new version (22.214.171.12415) all of these problems have apparently been solved.
When I went looking to figure out which versions of PSI I had installed on my various notebook, tablet, and desktop PCs, I quickly learned two interesting things. First, there’s no easy way to get version information about your PSI install unless you run a scan, and then check the details on the listing for PSI inside of the “Show Programs” view from PSI itself. If you find the program icon, right-click it, and select “Show details” you’ll see something like this:
Interestingly, the easiest way to get information about which version of PSI you have installed is from examining details about the program compiled in a PSI scan.
Second, it’s clear from looking at my various PCs with version 3 of PSI installed that PSI doesn’t update itself, either. I found versions ranging back to 126.96.36.199xxx, depending on how long ago I had installed the program on the particular machine I was checking. I also learned that if you download and reinstall a newer version, PSI will automatically uninstall the older one before installing the newer, and migrate scan results, settings, and other data into the new version more or less seamlessly.
The bottom line here is that Windows 8 and 8.1 users with Internet Explorer 11 installed (voluntary on 8, automatic on 8.1) should immediately download the latest PSI version and install it on their PCs.
November 20, 2013 3:13 PM
Posted by: Ed Tittel
The Enhanced Mitigation Experience Toolkit (EMET) is a collection of Microsoft security tools and software designed to protect Windows users from zero-day exploits. I first blogged about it in September, 2012, and its general content and coverage remains current even today. A recent update to this toolkit (dated November 12) is now available, and even though Windows 8.1 doesn’t appear on the list the Windows versions it supports, it works fine on the half-dozen or so test and production systems upon which I’ve now deployed it.
Not only does EMET 4.1 work with Windows 8.1, it also offers some nice updates and improvements to the previous version (I was still running version 3.0 until I found this).
EMET 4.1 is smart enough to recognize when it gets installed on a PC running an earlier version, and to remove the older version of the program before installing itself. Those already familiar with earlier versions will notice some interesting changes as they explore the new GUI interface for the 4.1 version. There’s also a helpful 42-page User Guide that comes bundled with the application. Security aficionados will find the explanations of the program’s various mitigation techniques (Section 1.2), application mitigations, and its built-in protection profiles particularly interesting. There’s also a section on deployment that aims primarily at System Center that will speak to anyone who’s using some form of centralized management to push the latest EMET version out to a user base.
One word of warning, straight from the User Guide: “As of EMET 4.1, we no longer support EMET 1.x or EMET 2.x. We will continue to support EMET 3.0 until June 2014, 12 months after EMET 4.0 release.” Also, there’s a 5.0 version planned for November, 2014, twelve months after 4.1′s release.
November 18, 2013 1:34 PM
Posted by: Ed Tittel
I’m approaching a ten count on applying the Windows 8.1 update/upgrade to Windows 8 systems, many of which I had first to upgrade to Windows 8 to take advantage of that free upgrade from the Windows Store. As my count has crept up, I’ve begun to notice more interesting aspects of the process that really didn’t impress themselves on me sufficiently on my first two or three such efforts. At this point, I feel better equipped to pause and reflect about what I do and don’t like about the Windows 8 to Windows 8.1 update/upgrade process.
MS Support explains the various steps and potential stumbling blocks to a successful Windows 8 to 8.1 upgrade.
1. Aside from the half-hour plus needed to download the upgrade file (which the MS store lists at 3.6 GB) the application process is pretty fast and mostly straightforward, especially on PCs already linked to Microsoft accounts.
2. On machines with Intel Rapid Start Technology, UEFI, and SSDs, the technology truly lives up to the name. My various qualifying PCs and laptops all boot in under 25 seconds, and shut down in 5-10 seconds. Wow!
3. Even aside from technological sleight of hand like Intel RST, 8.1 seems a bit zippier in everyday activity than did 8. The overall user experience is also more consistent and predictable, too.
1. You’ll need to reinstall certain elements after the upgrade — most notably, start menu replacements like Start8 or Classic Shell.
2. Surprisingly, lots of settings and preferences (such as those made in Task Manager, for example) get reset to their defaults after the upgrade is over.
3. Even more surprising, Windows 8.1 overwrites up-to-date drivers on Windows 8 with out-dated drivers in Windows 8.1 (not even Service Packs do this across the board, as does Windows 8.1). On several machines I went from one or two (erroneously identified) bad or out-of-date drivers in DriverAgent on Windows 8 prior to the upgrade to eight to ten (mostly correctly identified) bad or out-of-date drivers for Windows 8.1 post-upgrade.
4. Lots of people have already written about the issues involved in upgrading on a machine without a linked MS account; on my wife’s PC she got badly bitten because her account is purely local (who knew before researching that “Create a new account” would lead to an account bypass opportunity?).
I’ve also read some interesting horror stories about incompatibilities in Windows 8.1 that prevent it from running on systems that would happily run 8.0, and I’ve seen enough bits and pieces of software (and drivers) that didn’t gracefully transition from 8 to 8.1 that I wish MS had included a standalone compatibility checker for the upgrade (the MS “Update to Windows 8.1 from Windows 8” page claims that “…we check your current desktop apps and connected devices, and let you know what you’ll need to do to get them ready for the update, or to get them working again after the update”), because I’ve heard of enough missed items, and encountered a few myself — e.g. Start8 — to know that this works better in the literature than on various specific PC configurations.
All in all, it is really more like a major OS upgrade along the lines of Vista to 7, or 7 to 8, than it is like applying an SP to an existing OS. If you proceed from that understanding, you’ll have less cause for concern or alarm as you work your way through the “update” process!
November 15, 2013 1:20 PM
Posted by: Ed Tittel
I found myself on the phone this morning, talking to my former MCSE trainer, Herb Martin, who also happens to be something of a PowerShell and .NET programming whiz as well. I’ve gotten far enough into my Powershell script to know I’ve got something potentially useful. Now it’s time to bring in a real professional to turn it into something ACTUALLY useful instead. So that’s what I’m doing. Here’s what the output from the script looks like at the moment:
It’s the same info as reported in earlier WEI versions, with the same general layout, and a “close enough” format to be instantly intelligible.
In the course of our discussion, I found myself explaining to Herb why I’m doing this, and taking a “next step” beyond my own abilities to turn the work into something worth sharing with the world at large. Here’s how I justified the extra effort and expense involved in doing things right: I told Herb that anybody can complain or whine about Microsoft, or point out how something that MS is doing (or not doing, as seems to be the case here) isn’t right, fair, of sufficient merit or quality, or whatever other stimulus may be causing the complainer to hold forth. But once I understood that anybody could grab and use this information I realized that given my knowledge of HTML, XML, and PowerShell, I could put something together that anyone could use. So rather than rail at Microsoft for leaving WEI out of Win8.1, I’m simply going to offer a simple, straightforward tool to remedy that lack.
Herb made some great suggestions about this tool in our initial discussion, which we’ll follow up on next week. Independently, he also suggested converting the code to a small C# program that could then be compiled into an .exe file to make it into a “real program.” That sounds like absolutely the right ticket to me. But whether it stays a script, or turns into a program, I hope readers will find the approach of building something that’s missing better than waxing wroth because MS didn’t include it in the 8.1 System control panel applet. If you’re really dying to play with this before I’m ready to set it free on the Internet, drop me an email at ed at edtittel dot come with “Send WEI Script” as your subject line. You can play with it before it’s finished, too, if you like.
Stay tuned for further news on this software development. I’ll let everybody know when the final version is completed, and the resulting tool becomes freely available to any and all interested parties.
[Note added 11/15/2013 2:20 PM: A near-final version of the build-wei.ps1 script is now complete, and apparently working, so I can provide that file and operating instructions to those who send e-mail requests for same. Don't forget to put "Send WEI script" in the subject line, and send it to ed at edtittel dot com, please!]
November 13, 2013 11:18 AM
Posted by: Ed Tittel
Woody Leonhard has been one of my ongoing sources for tips, tricks, and inside Windows (and MS Office) information for over 20 years now. That’s why I was delighted to find an unusually tasty nugget of Windows insight and information in a recent Slideshow he put together for InfoWorld. Entitled “The hidden fangs of Windows 8.1 — and how to avoid them,” he includes an item on how to obtain the information that recent versions of Windows up through Windows 8 (source of the following screencap, in fact) have presented under the heading of the “Windows Experience Index,” often abbreviated as WEI.
Widely reported as no longer available in Windows 8.1, MS simply chooses not to report data that it still gathers.
As it happens, reports to the contrary notwithstanding (namely, that Windows 8.1 no longer compiles data to calculate the WEI), Woody points out that you can indeed obtain this data from Windows 8.1 if you’re willing to jump through some command line action and inspired data access to do so. Here’s how, in step-by-step form
1. Launch a command window in Windows 8.1: A search on cmd.exe will do nicely for this task; right-click the item and select “Run as administrator” from the resulting pop-up menu. On an unaltered Win 8.1 desktop, right-click the Start menu button and select “Command Prompt (Admin)” from the resulting pop-up menu instead.
2. Enter the command string winsat formal at the command line.
3. Use File Explorer to navigate to C:\Windows\Performance\WinSAT\DataStore
4. Right click the first Formal.Assessment file you see (or the most recent such file, if your file listing criteria don’t show most recent files first), click Open with, then use Internet Explorer to view the contents of this XML file (the full name of this file on my PC was 2013-11-12 18.06.44.438 Formal.Assessment (Recent).WinSAT.xml)
5. Look for the section in the XML document labeled <WinSPR>; everything inside that block up to the closing </WinSPR> tag provides the data that used to appear in the old Windows Experience Index display shown earlier (and then some).
If know what to do, and where to look, Windows 8.1 continues to provide WEI data as shown right here.
WEI is a rough-and-ready tool for assessing Windows performance and system capability. It’s not on a par with more serious performance evaluation suites like SiSoftware Sandra, PCMark, Passmark Performance, and so forth (see this great slideshow from Tom’s Guide for a list of 15 PC benchmarking programs including commercial and freeware offerings). But WEI is something familiar and comfortable that Windows users have had at their disposal since the XP days. By following these simple steps, you can see how a Windows 8.1 PC ranks on this rating scale, too.
November 11, 2013 11:25 AM
Posted by: Ed Tittel
Thanks to old friend, occasional co-author, and MS Security MVP Deb Shinder, I’m now aware of a snazzy little utility named 8GadgetPack that restores those ever-so-handy-and-informative desktop gadgets to Windows 8. For those who don’t recall, gadgets were stripped out of Windows just over a year ago because of security concerns, more or less in synch with the release of Windows 8 (here’s an undated MSDN article entitled “Desktop gadgets removed” that provides MS’s official rationale for that decision). Given that Ms. Shinder is a ten-year recipient of the MVP with a focus on Enterprise security — see her bio for more details — I feel even more comfortable adding back Gadgets to Windows 8 than I did before, in stubbornly refusing to give them up on Windows 7 (all of my surviving Windows 7 machines still run them).
The screen capture you see to the left of this text material shows what the default install of 8GadgetPack looks like on my production Windows 8.1 PC. It appears in the old-fashioned (but very handy) fenced-in sidebar area reserved on the right-hand edge of the screen that was introduced with Windows Vista, and removed in Windows 7. Those who elect to put their gadgets elsewhere, or do away with the fenced in area completely, need only right-click inside the sidebar and manipulate the program’s Options settings to arrange things more to their liking. I like these defaults (at least for now: it’s still only my second day with the program installed on my Windows 8.1 deskop) so I’m going to leave them alone for a while.
I’d more or less resigned myself to living without gadgets on Windows 8, resorting instead to a handful of other favorite tools to glean similar information from the OS to what’s show to the left of this text. But with the ability to regain access to both Network Meter and CPU Usage (both from AddGadget.com, and my two very favorite Windows gadgets because they show me what my PC is doing locally and on the network at all times with only a quick glance) I’m happy to put those items back on my Windows 8 and 8.1 desktops. The information they provide is simply too useful and informative to live without, when I don’t have to. And with dual layers of firewalls around my local network, and reasonably strong endpoint security software on all of those machines in addition, I’m willing to shoulder the security risks of compromise through those gadgets, given that my understanding is that it’s pretty minimal under these conditions.
I still need to find a reliable source for one more old favorite gadget, simply known in its own information block as the “Shutdown Gadget.” It provides a simple control bar with three icons: shutdown, restart, and logout current user. Like the other gadgets I use, it offers great convenience and easy access to functions I like to keep immediately at my fingertips (that goes double on those Windows 8 systems I own with touchscreens, where a fingertip is all that’s needed to activate those controls). By tracing it back to the name of the gadget file itself on one of my Windows 7 machines, I learned that it is named shutdown_v2.gadget, and remains available for download from Microsoft. The last time I went looking for this, I found several sites that purported to offer this item were in fact offering malware-infected payloads. The original from Microsoft remains entirely safe, so feel free to use the foregoing download link yourself, if you like.
To those who never really got into gadgets, I apologize for the “happy dance” tone of this blog post. Personally, I have always found some of these simple and tightly focused programs quite helpful, so I am delighted to see them return to my Windows 8 and 8.1 desktops. If this has been nothing more than a big ho-hum for you, after asking “Why are you still reading this?” I can add “So sorry for going off about something so apparently insignificant.” In my own case, however, the information the foregoing items provide to me (especially as I have to ponder whether or not to restart an apparently hung PC, or wait for some oddball resource consumption spike to work its way through my system) makes a certain amount of celebration entirely worthwhile. Woohoo!