Changes to Convenience PIN / Windows Hello Behavior in Windows 10 Version 1607

The purpose of this post is to quickly publish details of some changes designed to create distinction of our next generation credential, now called Windows Hello for Business and its associated PIN. If you are currently managing an enterprise computing environment utilizing Windows 10 with Windows Hello then you should read this article to determine…


Why Can’t I Customize Certain Settings in Windows 10?

The goal of this post is to help you understand some of the rationale as to why certain settings can or cannot be customized programmatically by OEMs or Enterprise IT in Windows 10. Note that we do review what mechanisms exist for customization and make improvements, so the specific limitations mentioned here may not be…

PSA – Known issue regarding Sysprep failing on Windows 10 image build & capture

There’s a known issue where sysprep fails (machine freezes or BSOD intermittently – SYSTEM_THREAD_EXCEPTION_NOT_HANDLED ) on Windows 10 when running on Hyper-V hardware. You would most commonly run across this issue when trying to prepare your image after running through a build-and-capture task sequence, usually using MDT. The cause is almost always an issue with…


Pimp my Windows 10 – Business Customization Reference

This post serves to document the common asks from customers regarding what can and cannot be customized in Windows 10. Please check back regularly and share this post with others as I’ll be continuing to update it. Last updated August 2016 for Windows 10, Version 1607 – You’ll see (New!) in sections that contain new content….


Jargon Busting: Azure AD Join, MDM Enrolment & Add Account

The terms used to describe MDM and cloud account sign in and management have evolved and changed over time from the original terms used in Windows 8. This post’s purpose is to give you the low-down on the options available to you in Windows 10, Version 1511 and onwards. They have had many names and…

Windows 10 Device Guard and Credential Guard Demystified

While helping Windows Enterprise customers deploy and realize the benefits of Windows 10, I’ve observed there’s still a lot of confusion regarding the security features of the operating system. This is a shame since some of the key benefits of Windows 10 involve these deep security features. This post serves to detail the Device Guard…


Windows Enterprise Client Boot and Logon Optimization

Hi folks, My colleague Mark Renoden has been writing an excellent multi-part series on how to optimise your enterprise clients for performance. If this is something that is of interest to you, check it out here: Really well written & covers the basics from the beginning – definitely worth the time investment to read!


Interesting Windows hotfixes/updates for April

Folks, just a quick note about the following updates that you might find interesting from a Windows Devices perspective: Update to support copying .mkv files to Windows Phone from a computer that is running WindowsOK so this isn't a major one; but does fall under the 'interesting' category. This update, available via Windows Update, will…

DirectAccess Design and Deployment Considerations

DirectAccess is one of those technologies that can be a very powerful thing – having seamless remote access can change the way your users work remotely. However, finding where to get started can be a little tricky. In this post, I’ll walk you through the kinds of design and deployment decisions you’ll need to consider…