A Bit About the Windows Servicing Model

Hello, Paul Bergson back again with a discussion on the upcoming changes to our monthly patch releases to align down-level supported operating systems, updating practices to coincide with the Windows 10 Service Model. This includes Windows 7/8/8.1 and Windows Server 2008 R2/2012/2012R2. “From October 2016 onwards, Windows will release a single Monthly Rollup that addresses… Read more

Using PowerShell Runspaces to Generate GPO Reports

Stephen Mathews here to talk to you about generating Group Policy Object reports quickly and efficiently. I had a customer ask me if there was an easy way to find all the RunOnce GUIDs in their GPOs. The customer was concerned that they would generate duplicate GUIDs in their deployment of Group Policy Preferences. Yes,… Read more

WPT: Peeking at Logon Delays

Hi everyone, Randolph Reyes (Randy) here with another blog contribution. In this particular engagement, I was working doing an Active Directory Offline Security Assessment (awesome delivery), and one employee with knowledge of using Windows Performance Toolkit stopped me on my way to lunch. Customer: Can we see how long takes an employee to type their… Read more

Preparing for DAC

Hello everyone. This is Randy Turner to share some insights learned with implementing Dynamic Access Control (DAC.) There are numerous posts which I will share at the end to discuss the steps to implement all the features covered by DAC, but very little on how to adopt these changes. DAC is just an outcome from… Read more

The Importance of KB2871997 and KB2928120 for Credential Protection

Hello, my name is Paul Bergson and this is my first time writing a blog for AskPFEPlat. I am a platforms PFE in the Premier division of Microsoft. If my name looks familiar, it could be because I spent about 10 years in TechNet’s Directory Service Forum as an MVP and Moderator (pbbergs). I wanted… Read more

Down and Dirty WinPE USB for Surface

Hi everybody! My name is Stephen Mathews and you may know me from my 3-part PowerShell Basics video series on Taste of Premier. Today I’m here to show how to create a bootable Windows PreInstallation Environment USB drive to use on our Microsoft Surface devices. I was onsite with one of my customers, as a… Read more

Reading the fine print on the Protected Users Group

Hi all – This is Jerry Devore back again with a quick post on the “Protected Users” group.  As a PFE, I work with several enterprise customers who have a global presence, and have become very focused on protecting highly privileged accounts.  The major concern that’s at the top of their list is “How do… Read more

PFE Days: Microsoft Irvine office: Thursday, March 24th, 2016: Vital Signs Express featuring the CLUE

Hi all,  If you guys are in the Irvine, Orange County area, stop by for 2-3 hours of automating the Windows client and server performance troubleshooting using CLUE. • Have you been manually setting up Perfmon/PAL and Windows Performance Toolkit (WPT a.k.a. WPA/Xperf) to troubleshoot performance issues? • Have you been automating data analysis using… Read more

Secure Administrative Workstations

Hi All. This Jerry Devore a Midwest PFE back after a long hiatus from blogging. If you thumb through the owner’s manual of your car you will find a maintenance schedule section.  There you can see how often the manufacture suggests you should change your engine oil, flush your radiator fluid and replace various filters. … Read more

Local Administrator Password Solution (LAPS) Implementation Hints and Security Nerd Commentary (including mini threat model)

Hi, Jessica Payne from Microsoft Enterprise Cybersecurity Group’s Global Incident Response and Recovery team guest starring on the Platforms PFE blog today. Credential theft is a major problem in the security landscape today. Matching local administrator passwords in an environment often contribute to that problem and are a popular target for bad guys. Far more… Read more