Changes to Convenience PIN / Windows Hello Behavior in Windows 10 Version 1607

The purpose of this post is to quickly publish details of some changes designed to create distinction of our next generation credential, now called Windows Hello for Business and its associated PIN. If you are currently managing an enterprise computing environment utilizing Windows 10 with Windows Hello then you should read this article to determine…

8

Jargon Busting: Azure AD Join, MDM Enrolment & Add Account

The terms used to describe MDM and cloud account sign in and management have evolved and changed over time from the original terms used in Windows 8. This post’s purpose is to give you the low-down on the options available to you in Windows 10, Version 1511 and onwards. They have had many names and…

0

Windows 10 Device Guard and Credential Guard Demystified

While helping Windows Enterprise customers deploy and realize the benefits of Windows 10, I’ve observed there’s still a lot of confusion regarding the security features of the operating system. This is a shame since some of the key benefits of Windows 10 involve these deep security features. This post serves to detail the Device Guard…

19

(Don’t) Set or Save Passwords Using Group Policy Preferences

Group Policy Preferences provides immensely powerful ways to manage PCs and users and their settings. However, a dangerous situation exists with the manner in which Group Policy Preferences stores passwords that you save in GPOs. It’s really important that you read this post if you are: Setting local user passwords via Group Policy Have configured…

1

Deploying DirectAccess – Notes from the field

DirectAccess is one of those technologies that when deployed right, can deliver a huge benefit to users. Unfortunately, when deployed not-so-right things can go awry fairly quickly. In my role I get to perform health checks on customer deployments of DirectAccess on a regular basis, and wanted to share the top issues and recommendations I…

1