Pimp my Windows 10 – Business Customization Reference

This post serves to document the common asks from customers regarding what can and cannot be customized in Windows 10. Please check back regularly and share this post with others as I’ll be continuing to update it. Last updated August 2016 for Windows 10, Version 1607 – You’ll see (New!) in sections that contain new content….


Windows 10 Device Guard and Credential Guard Demystified

While helping Windows Enterprise customers deploy and realize the benefits of Windows 10, I’ve observed there’s still a lot of confusion regarding the security features of the operating system. This is a shame since some of the key benefits of Windows 10 involve these deep security features. This post serves to detail the Device Guard…


Changes to Convenience PIN / Windows Hello Behavior in Windows 10 Version 1607

The purpose of this post is to quickly publish details of some changes designed to create distinction of our next generation credential, now called Windows Hello for Business and its associated PIN. If you are currently managing an enterprise computing environment utilizing Windows 10 with Windows Hello then you should read this article to determine…


WSUS Syncs Metadata, but Doesn’t Download Updates

Recently, I visited a customer who was having some challenges getting WSUS to synchronize with the public Windows Update service. While the fix is fairly straightforward, there isn’t a lot of information around on this topic and was hard to find when doing Internet searches, so I’m documenting this here. In this particular case, this…


Why Can’t I Customize Certain Settings in Windows 10?

The goal of this post is to help you understand some of the rationale as to why certain settings can or cannot be customized programmatically by OEMs or Enterprise IT in Windows 10. Note that we do review what mechanisms exist for customization and make improvements, so the specific limitations mentioned here may not be…


PSA – Known issue regarding Sysprep failing on Windows 10 image build & capture

There’s a known issue where sysprep fails (machine freezes or BSOD intermittently – SYSTEM_THREAD_EXCEPTION_NOT_HANDLED ) on Windows 10 when running on Hyper-V hardware. You would most commonly run across this issue when trying to prepare your image after running through a build-and-capture task sequence, usually using MDT. The cause is almost always an issue with…


Jargon Busting: Azure AD Join, MDM Enrolment & Add Account

The terms used to describe MDM and cloud account sign in and management have evolved and changed over time from the original terms used in Windows 8. This post’s purpose is to give you the low-down on the options available to you in Windows 10, Version 1511 and onwards. They have had many names and…


Windows Enterprise Client Boot and Logon Optimization

Hi folks, My colleague Mark Renoden has been writing an excellent multi-part series on how to optimise your enterprise clients for performance. If this is something that is of interest to you, check it out here: http://blogs.technet.com/b/markrenoden/archive/2015/07/15/windows-enterprise-client-boot-and-logon-optimization-part-1-introduction.aspx Really well written & covers the basics from the beginning – definitely worth the time investment to read!


Windows 10 and Device Limits for Store Apps

Just a quick PSA to get the word out there as I've had a few questions today about this issue. If you're seeing errors or receiving emails that your device limit for the Store has been reached, this may very well be why! Background When we first launched Windows 8, users were able to associate…


Friendly Reminder: Get off FRS now!

As mentioned in my last post, the need for environments to move away from FRS replicating SYSVOL is getting more and more pressing. This article serves as a friendly reminder to: 1. Check if you've moved to using DFSR for SYSVOL replication 2. Migrate to DFSR if you haven't yet! First, some backstory. In the…