What many IT admins don’t know is that Microsoft has a strong play to offer in the area of BYOD — namely, Microsoft Intune, which is now included as part of that company’s Mobile Device Management (MDM) offering. Though Intune, enterprise IT can deliver application and device management via the cloud, or on-premises through integration with System Center Configuration Manager, using a single, coherent management console.
Intune lets businesses manage end-user devices including smartphones, tablets, and PCs (Android, iOS, and Windows included).
What’s coming sometime this month? According to a recent NeoWin story, the upcoming optimizations will provide enhanced management capabilities for Windows 10, including improvements to support new native features such as the Health Attestation Service and Microsoft Passport. Perhaps equally significant, the update will enable admins to remotely wipe all data on Windows 10 desktops enrolled with the Intune service. Health Attestation relies on Trusted Platform Module (TPM) capabilities in laptops and PCs, and allows admins to check configuration trustworthiness (BitLocker status, malware check results, and so forth) before permitting users to access in-house resources. The upcoming update makes it possible for admins to enforce Attestation Service compliance on applicable devices, and to view data from Intune as part of its ongoing service delivery.
In the same vein, the upcoming update also permits administrators to define and enforce policies for Microsoft’s so-called “Passport for Work” feature, whereby admins can configure specific authentication methods that users must then employ to log into devices enrolled with Intune. Likewise, Android and iOS devices will get some Intune improvements, too — namely, the ability to configure the Smart Lock feature in Android 5 (Lollipop), and the ability of iOS users to select their own e-mail app, while continuing to send diagnostic reports via Intune (only the default app is currently supported).
According to MS, this update should be released sometime on or before January 14. See the Intune blog post (1/6/16) entitled “Coming Soon: Support for new Windows 10 features, Apple VPP for business, and more” for further information.
On Monday, January 4, Yusuf Mehdi posted that “Windows 10 [is] Now Active on over 200 Million Devices” to the Windows Experience blog. This not only ups the official count for Windows 10 installations, it also changes the basis upon which Microsoft publishes such counts. The last official count that MS announced was 110 million, and it occurred on October 6, at the Windows 10 Devices Event. But this count was based on the number of copies of the OS that had been downloaded by that date, and included technical previews downloaded through the Windows Insider program, as well as upgrades to Windows 7 and 8.1, as well as new licenses issued via OEM, enterprise (volume licensing), and retail sales.
Here’s the headline from the “new count” post to the Windows Experience Blog on 1/4.
Now the basis for counting is somewhat different. The latest count is based on “active users,” which means it counts only unique instances of Windows 10 encountered as running and in use via MS telemetry. This is indeed a much more accurate and rational basis for counting, because it’s based on running instances of the OS rather than a count of downloads of that same OS (which may or may not actually be running anywhere, and may instead be sitting on a drive somewhere not yet installed or in use).
In the same blog post, Mehdi also shared some other interesting usage and uptake statistics about Windows 10, including the following items (summarized from that content, see original for his precise wording):
- More than 40% of new Windows 10 devices have become active since Black Friday (11/27/2015).
- According to MS, Win10 is “on the fastest growth trajectory of Windows … ever” and is at 140% of Windows 7 and 400% of Windows 8 at the same point in time (3 months) after RTM.
- Customers are showing an increasing preference for Win10 on the PCs they’re buying.
- Enterprise and education customers are also starting to get involved with Win10, with 22 million devices running Win10 among enterprise and education customers, and 76% of enterprises now actively piloting Win10 deployments.
According to other sources (Neowin) this latest number also includes some 30 million Xbox One consoles, now also running Windows 10 since a major update in late November 2015. I wish the company had provided more information to understand the faster uptake claims for Windows 10 vis-à-vis Windows 7 and 8 as well. Other sources (PCWorld) have recently reported that Windows 10 uptake has fallen behind that for Windows 7 at about five months past RTM, based on reported usage statistics from NetApplications. However, given the new basis for Microsoft’s counts on telemetry pick-ups, the company may very well have an effective counter to such numbers, though the inclusion of Xbox One consoles makes the whole thing somewhat tricky. This should be an interesting development to follow throughout 2016 — especially in light of Mark Twain’s famous epigram (“There are three kinds of lies: lies, damn lies, and statistics”).
Thanks to the magic of Web analytics, and the generosity of TechTarget for sharing its data with me, I can report on — and link to — the ten most popular blog posts right here at Windows Enterprise Desktop for 2015. This data was provided to me in November, so it really only covers the first 11 months of the year, but is highly interesting nonetheless. Check it out (publication dates appear in monospaced font to the right of or below each linked page title):
|Page Title||Page Views|
|Windows 8.1 Administrivia: Accessing .mobi files with Kindle 3.24.14||3,652|
|KB 3001652 Goes Bad on Update Tuesday 2.11.15||3,308|
|Windows Enterprise Desktop (blog landing page: no date)||2,941|
|Refresh/Recimg.exe Gone Missing in Win10 6.1.15||2,426|
|Auto-Update for KB2310138 Spreads Consternation for MSE Users 7.27.11||2,304|
|Seismic Shift in Windows Punditsphere 1.17.15||1,936|
|Factory Reset Offers Way Out for Surface Pro 3 Catch-22 8.10.15||1,593|
|Windows ADK for 8.1 Now Available 9.25.13||1,544|
|Windows 10 Free Upgrade for Win7, 8.1, Phone 8.1 Users for One Year After GA 1.21.15||1,519|
|Goodbye CCleaner, Hello Wise Disk Cleaner? 8.27.14||1,348|
There are lots of interesting things to note about this table, that speak to apparent uses for this blog’s content, including:
- Dates in red above indicate items dated from years prior to 2015. I have to presume that the only way people would get to this content would be via search engine. Given that 4 of the 10 items fall into this category, that says people read such items to solve current problems or address current topics despite their age (one dates as far back as 2011, much to my surprise).
- Some of the biggest hits were what I’d call news items rather than tech items, including the KB item (number 3), the seismic shift item (which explains that Paul Thurrott has left WinSuperSite.com to start Thurrott.com), and the free upgrade item. I would have to guess these items’ visit counts spiked close to their publication dates, as old news is usually not very interesting news.
- I can help but be amazed that the top-ranked item is a brief explanation of where to put .mobi files in the Windows 8.1 file hierarchy (also works for Windows 7 and 10) so as to make them accessible to Kindle. Even though that item was 17 months old when the data was compiled, it still comes out on top. That tells me this is a subject that isn’t explained well elsewhere, though perhaps it should be.
It’s nice to know that this blog apparently has a greater impact than simply providing current information about Windows desktop topics. To me, these results also speak eloquently to how modern workers consume information, and how important search engines remain to finding useful and/or interesting information.
Over the past couple of days, I’ve reinstalled Windows 10 on my colleague Kim’s Lenovo T530 laptop. I also installed a Samsung EVO 840 mSATA SSD as the unit’s new boot drive. The prior occupant of that role was a three-year-old HGST 500 GB HDD (probably still a Hitachi hard disk at the time it was manufactured, though the brand is now part of the Western Digital family). I’m pretty sure most of the resulting performance improvement comes from switching from a spinning disk to an SSD, but the results of this switchover are nothing short of amazing. Where the laptop used to take almost a minute to boot, it now takes less than 10 seconds. Where it used to take almost 30 seconds to shut down, it now finishes that task in about 7 seconds.
The old partition scheme featured 5 partitions.
The real benefits from the clean install include more than just a speed boost, they also encompass the following improvements as well:
- Vastly increased system stability: even though the previous install reported back from DISM /online /cleanup-image /checkhealth with no component store corruption, it suffered from numerous quirks and instabilities. Not the least of these was recurring issues with the Start menu (subsequent research lays responsibility for these faults on Dropbox, BTW, not MS).
- Reduced system clutter: a clean install sweeps away all updates and applications that are outdated and/or unused. That’s because (a) they don’t get applied or (b) because they don’t get re-installed. Once again, Ninite proved invaluable in making it easy-peasey for me to reinstall the apps that Kim wanted on her machine. The only to-dos left were for-a-fee subscription suites such as MS Office 365 and Adobe Creative Cloud.
- Driver sanity: I used SlimWare’s excellent DriverUpdate to bring the T530 drivers up to snuff. Despite Win10’s generally great driver handling abilities, I ended up adding or updating 14 drivers after the clean install completed. Several items, such as Intel’s Rapid Storage Technology, are not included in the base install from MS and need to be added if one wishes to use their facilities. Thanks to DriverUpdate’s outstanding automation, all I had to do was to reboot, reboot, reboot while those installs kept completing to make sure they altered system state and configuration as they were supposed to.
I did encounter a couple of gotchas on my way to completing the add SSD/clean install task list. They included an unwillingness for the OS (diskmgmt.msc, actually) to “see” the Samsung mSATA SSD until after rebooting twice following physical installation, and the unwillingness of the HGST drive to surrender its priority position in the BIOS boot order, no matter what contortions I went through with BCD editing, startup repair, and so forth. I eventually had to delete all of that drive’s partitions in DISKPART, then restore the files from a backup to the reformatted, single-partition I created to replace the original five-partition disk structure that reflected upgrades from Windows 7 to 8 to 8.1 to 10 (depicted in the DISKPART screen cap earlier in this post).
For once, the story has a happy ending. The Samsung EVO 840 250 GB drive retails for about $150-165 right now, but remains well worth the money. Even though it’s (relatively) loafing along in the SATA-2 equivalent PCIe slot it currently occupies in Kim’s laptop, it’s so much faster than the HDD it supersedes that the system performance is noticeably and pleasingly faster. Happy New Year!
On December 4, I reported a mismatch between DISM and SFC for Windows 10 in Build 10586.17. It is apparently related to conflicting versions of the opencl.dll driver file associated with Nvidia graphics adapters, where the OS is looking for a smaller Microsoft-supplied version and the runtime environment generally also comes equipped with a larger, OEM-provided version from Nvidia itself (file sizes are 30K vs. 110-120K). Since that time, a new version of the Nvidia driver has been released (361.43) and the build number for Windows 10 has incremented to 10586.36 on the Current Branch. This morning, I tried the combination of DISM and SFC commands shown in the following screenshot, only to observe that the mismatch has not yet been fixed:
Despite changes to both sides of this mismatch since 12/4, the opencl.dll issue persists.
For the time being, unless CBS.log from SFC reports corruption in files other than opencl.dll, it’s probably best to rely on DISM to check for potential file corruption issues in Windows 10. I’ll keep checking this issue as new Nvidia drivers and new Windows 10 cumulative builds become available, and let you know if and when this mismatch disappears.
One more thing: as the foregoing screencap shows — it come from my Surface Pro 3 which hosts only Intel HD 5000 graphics from the unit’s i7-4650U CPU — this problem is not limited to PCs that host Nvidia graphics adapters, as I had originally believed. It apparently affects all Windows 10 PCs (like my Surface Pro 3) whether or not they have Nvidia graphics installed. Given this breadth of impact, I’m a little surprised that MS hasn’t yet fixed this problem.
TechNet describes Windows’ built-in REAgentC.exe command as able to “configure a Windows Recovery Environment (Windows RE) boot image and a push-button reset recovery image, and to administer recovery options and customizations.” The same reference goes onto observe that “You can run the command on an offline Windows image or on a running Windows operating system.” As one should expect with a command that operates on the way the OS recovers from problems with booting or running, this command must be run from an elevated command prompt (easily accessible through the Command Prompt (Admin) option in the pop-up menu that results from striking Windows Key-X in Windows 8 or 10).
Here’s a bit of syntax by way of example that grabs information from REAgentC for use in the disk partition (diskpart) command that provides some powerful illustration of what this command can do, and why one might want to do it. The screen capture comes from my Surface Pro 3, originally purchased running Windows 8.1, and then to 10 (it’s currently running Build 10586.36).
This SP3 tablet shows the remains of two previous OSes in its listing of recovery partitions.
[Click on image to see full-size screencap]
The preceding screenshot shows how you can combine the info option for REAgentC with the diskpart command to figure out which WinRE partition your current OS is using, to see where it fits into your current disk layout. What this information tells me is that a WinRE partition for Windows 8.1 may still be hanging around (probably in partition 1) even though it’s no longer in use, that partition 5 is where the WinRE partition boots from, and that it gets its boot image from partition 6. Were one in need of extra disk space, one could use a tool like Paragon’s Hard Disk Manager Suite to recover the space that unused partitions consume, though I’d recommend a complete image backup and a known working image restore capability (which the Paragon utility also provides) before mucking about with recovery partitions of any kind. In my case, that’s only 350 MB of disk space, so it’s not worth the effort to me to get less than 0.1% of my drive space back (the drive has 230 GB of usable storage space in all).
This is a useful tool for inspecting recovery partitions to see what’s on machines under one’s management, but REAgentC.exe also supports setting the location of a WinRE boot image of one’s construction and/or choosing. It’s also suitable for working on images offline, for admins who must manage libraries or collections of such things. You can also use the command “REAgentC.exe /BootToRE” to force Windows to boot into the Recovery Environment the next time a target machine reboots.
Good stuff, and worth getting to know!
From pocket desktops to virtual reality devices to tablets and more, expect tech presents galore stuffed in stockings and nestled neatly under trees everywhere this holiday season.
While Santa is making his list and checking it twice up at the North Pole you might want to do the same thing to find out what new devices might enter your network after the new year.
Take a look at a few of the top items tech enthusiasts are asking for this holiday season and find out what security lessons you can learn from a Barbie doll.
Have yourself a merry little mobile desktop
The Kangaroo Mobile Desktop delivers a desktop that fits in a user’s pocket. At only 14 millimeters thick, the Kangaroo works on any monitor and can easily make like a joey and hop into users’ pockets when they’re on the move. It was built for Windows 10 and runs the full 64-bit version of Microsoft’s newest OS. It even runs Windows 10 on Apple iOS devices with its OS Linx feature. In addition users can access documents, photos and OneDrive through the Kangaroo Mobile Desktop.
The big drawback, particularly in the enterprise, is the Kangaroo’s limited storage capacity. With just 2 GB of RAM and 32 GB of storage, it simply can’t replace a full desktop and should really only be used for a limited number of apps and Web browsing.
What tablet is this?
Microsoft’s Surface Pro 3 was the standard by which other tablets and notebooks were judged. Now the Surface Pro 4 is out, and although it doesn’t feature any revolutionary changes, it tweaks the formula slightly to make improvements over the Surface Pro 3. Among the changes are the addition of the Surface Pen and its magnetic dock, Windows 10 integration, and the Type Cover with its Chiclet keys, glass trackpad and fingerprint sensor.
Simply put, the Surface Pro 4 is the best Windows tablet or notebook hardware available. However, if users already have the Surface Pro 3 they don’t really need the Pro 4. Both devices have the exact same ports and users can buy the Surface Pen and Type Cover for the Surface Pro 3.
Virtual reality is comin’ to town
Smartphones make the virtual reality of today far more practical than the absurd contraptions of the past. Nowadays users just place goggle-like devices such as Samsung’s Gear VR on their heads and slide their phones into the viewers to enter the virtual world.
The Gear VR improves upon previous models by charging users’ phones while they use the virtual reality tool and rectifying the overheating issues of the past. It also includes a Super AMOLED display, wide field of view and head tracking.
Although virtual reality devices are mostly for playing games and watching videos, they could easily make their way in to the enterprise as ways for workers to look at 3D models or simulations for example.
Barbie its cold outside
As great as these tech presents are, it’s important to remember that while you’re putting up the tree, stringing the lights and in the words of Paul McCartney, simply having a wonderful Christmastime, hackers are still trying to access your corporate data. Even when you sit down for a well-deserved glass of eggnog you have to keep security at the top of your mind, especially as more and more devices enter your network.
Even Barbie isn’t safe these days. One of the hottest toys for kids this Christmas is Hello Barbie, a Barbie doll that connects to the Internet to answer children’s questions and interact with them much in the same way that Siri or Cortana work on a smartphone. It sounds innocent enough, but a security expert was able to hack into the Barbie doll and access user information, audio files and photos. He also believes hackers could access the microphone and make the doll say anything the hacker wants.
Obviously this is scary for parents, and while most workers (probably) don’t bring Barbie dolls to work, it should also be scary for you. As Internet of Things devices — which Hello Barbie is — become more popular and employees bring them to work, hackers can access your network through one of these potentially less-protected devices. They could also unearth valuable information the device picked up through video, photo or audio files. The lesson is that the more internet-connected devices you have in your organization, the more gateways there are into your corporate data.
So as your employees make merry this December and try to simplify their lives with nifty gadgets, remember the Grinch is always lurking around the corner and those gadgets could be an entry way for disaster. Happy Holidays!
Trolling for this morning’s blog fodder, I was both bemused and amazed by the results of a visitor survey on Windows news source NeoWin.net. Here’s a graphic I captured after responding to their survey question for today on a whim, that returned some surprising results:
Survey sez: your answer not only depends on who you ask, but also on what you ask!
Is there even a remote chance that these results represent anything other than a self-selecting population with a strong interest in the leading and/or bleeding edge of Windows OSes? My answer has to be “Not only no, but heck no!” By way of comparison, here are this morning’s figures for the “Desktop Operating System Market Share” from NetMarketShare.com, which I have to believe captures a population more generally representative of who’s out there using desktop devices on the Internet:
NetMarketShare’s figures are drawn from a much broader and more representative population.
There’s a world of difference between those numbers as even a glance at both sets of numbers will demonstrate. Which one do I believe? Neither, completely, but the second set much more than the first. In fact, I think NeoWin’s results speak to exactly who their readership is, rather than to the more general public. Even so, that’s a pretty amazing proportion of the audience to be on the Current Branch of Windows 10.
Just a little something for your Christmas stocking, perhaps?
As 2015 draws to a close, the staff of TechTarget’s end-user computing sites took to Slack and held an hourlong chat about the year’s biggest trends. Over the next few days, we’ll bring you slightly edited excerpts from those discussions. In today’s post, our editors discuss Windows 10 and the uncertain future for tablets.
Jamison Cush, executive editor: Windows 10 threw cold water all over the so-called tablet revolution. It’s a mouse- and keyboard-friendly OS, closer to Windows 7 than Windows 8. The wholesale rejection of Windows 8, which was developed at a time with the iPad was king, illuminated the fact that people aren’t ready to ditch QWERTY and precision navigation for finger taps and swipes.
Maggie Jones, site editor: But it’s adaptive, too. You can still use it on a tablet. Is that not a good user experience?
Jamison: It’s tablet-friendly, but Windows 8 was tablet-focused. In other words, the tablet experience on Windows 10 stinks. It’s an afterthought.
Maggie: That seems backwards to me. There’s all this talk about Continuum, the feature that lets Windows 10 tell what device you’re using, which is obviously focused on 2-in-1s.
Jamison: It’s so ham-fisted, I turn it off. It’s annoying and sluggish.
Maggie: What’s the point of a 2-in-1 that runs Windows 10, then? Just get a straight-up laptop.
Jamison: Portability, mostly. And some of the various modes are useful. Tent mode works well.
Colin Steele, editorial director: What about the overall trend of tablets becoming more PC-like? We’ve had the Surface for a few years now, but things really stepped up in 2015 with the Surface Book and iPad Pro. Is this just a slow realization that there aren’t a lot of tablet-specific use cases?
Jamison: People misread what made tablets so popular from 2010 and onward. It wasn’t the touch navigation that we liked, but the all-day battery life, the instant-on, the thin design and portable build.
Alyssa Wood, managing editor: It’s a realization that tablet use cases are really most viable in certain verticals like manufacturing but not really in the office.
Maggie: And if you have to add a keyboard and mouse to make a tablet work for you, then how much of a tablet is it?
Bridget Botelho, senior news director: People like the idea of a tablet — the cool factor — but ultimately need a laptop experience to do meaningful work.
Colin: I don’t think people need laptops, per se. But they do need a device that replicates most of its functionality. I love traveling with my iPad Air 2 for work, but why do I love it? Because it has Word and a physical keyboard, like a PC.
Adam Hughes, news editor: As someone who has had an iPad for four years now, I learned very quickly that you can’t get any real work done on it. Even with Office as an app, I’m still going for my crappy Dell laptop to work on a story.
Colin: Totally disagree. I do real work (writing and editing) on my iPad all the time.
Bridget: You are using a keyboard, not the touchscreen, to do work. I can’t even do that, though. I brought an iPad to a conference, with a Bluetooth keyboard, and by the end of the day I wanted to throw the damn thing.
Adam: I had a keyboard a few years ago with my iPad, and it was fine for the most part. I mean, it cost over $100, but again, it just felt more inconvenient than using my laptop. I stick to my iPad to watch Netflix and answer emails.
Jamison: The rise of big-screen smartphones have also dented tablet sales. We really don’t need them. A phablet and a laptop is good enough.
Bridget: The iPad in my house is primarily used by my 3-year-old to watch Nick Jr. I have a Fisher-Price safety case on it. Does that say it all about the usefulness of tablets?
Maggie: Once I got a smartphone and my super-thin Dell from IT, I pretty much stopped using my iPad altogether.
It’s been an interesting last couple of days on the Windows 10 front. Just yesterday, I got word that a new technical preview had become available, so I upgraded both of my test machines to what promises to be the first in a series of builds whose numerical designations begin with “11xxx” instead of the “10xxx” associated with the initial version first released this summer. Later that same day, a new Cumulative update (KB3124200) for production Windows 10 showed up with a designation of 10586.36 (up by .07 from the previous production version numbered 10586.29). Here are the side-by-side Winver outputs from my production PC (left) and Dell VP 11 7139 (right):
The downloads from Windows Update were flying fast and furious yesterday (12/17/2015).
[Click image for larger version]
The New Tech Preview: 11082.1000
I’m not sure where the .1000 suffix in this version number comes from, but there you have it. Installation went without a hitch on both test machines (a Dell VP 11 7139 hybrid tablet, and an i7-2600K homebrew desktop), and quite quickly as well. Total size of the download was on the order of 2.5 GB, and the Windows.old files on the post-install systems were just over 15 GB (Dell) and 18 GB (desktop). I did find some spurious drivers (older versions rendered obsolete by newer ones) in the DriverStore after the update, mostly for graphics devices (Intel and Nvidia), system devices (Intel and others), and network adapters (Atheros and Intel). But both systems kept chugging along nicely after the upgrade was complete, and seem to be working just fine. So far, I can’t tell much difference between the pre- and post-update OS versions, but I haven’t made a detailed pass over the basic system utilities and File Explorer interfaces just yet, either. I’ll report further later as stuff pops up under my eyeballs, or in the news elsewhere.
A New Cumulative Update Takes Production Win10 to 10586.36
As is apparently now typical for Windows 10 cumulative updates, KB3124200 (x64) appeared without explanatory details as to what’s been changed or updated with this code tweak (see Catalog page for complete collection; IE required to view this page as intended). So far, only a few TenForums users are reporting issues with the update (one with PIN vs. password login, some with miscellaneous error codes) and most are reporting modest but noticeable performance improvements, especially in File Explorer and the built-in search function. A handful have reported fixes to some networking and Bluetooth issues. Over at InfoWorld, Woody Leonhard reports that “one bug that caused the WLAN AutoConfig service to crash randomly, bringing down Wi-Fi services in the process” may have been fixed. Woody also provides an interesting list of cumulative updates released since build 1511 first appeared that confirms my gut feeling that we’d been seeing these things at a better-than-once-a-week frequency:
In the five weeks since build 1511 appeared, I count six cumulative updates:
Version 1511 (OS Build 10586), released Nov. 12, is the first version 1511 — the one that raised the old RTM build 10240 version of Win10 to the November Update/Threshold 2 level
* Cumulative Update 1, KB 3105211, Nov. 10, build 10586.3
* Cumulative Update 2, KB 3118754, Nov. 18, build 10586.11
* Cumulative Update 3, KB 3120677, Nov. 24, build 10586.14
* Cumulative Update 4, KB 3116908, Dec. 2, build 10586.17
* Cumulative Update 5, KB 3116900, Dec. 8, build 10586.29
* Cumulative Update 6, KB 3124200, Dec. 17, build 10586.36
None of the other usual sources for good Windows 10 news and details (such as WinBeta.org and NeoWin.net) shed any further light on this cumulative update as yet. Stay tuned for more news on this, too!