About Robert...
I have been in the IT industry since 1993 focusing mainly on networking. Though I got an early start as an amateur computer enthusiast and wrote my first database app at age 12, I started my professional career working in the MIS department of one of the largest liquor distributors in the northeast. I started out there as a systems operator on the company’s two mainframe systems. From there I moved into PC support, and help design and implement the company’s first client-server network… This was back in the days of Win NT 3.51 when I worked on my first migration to Windows NT 4.0 server.
From there I went on to work with Novell 3.x and 4.x along with Windows domains and Microsft's brand new Active Directory. Working my way up from technician to specialist, to an administrator, and eventually all the way up to Sr. Engineer. I spent many years working for MSPs/consulting firms, 9 of which I owned and operated my own firm.
Over the years, I have worked with (at an expert level) various versions of Windows client and server operating systems (including Windows 11 and Windows Server 2019); various virtualization technologies (Hyper-V, VMware, etc.); MS-SQL server 6.5- 2014 R2; Exchange 4-2019, and much more. Over the years I have built a lot of experience around the Microsoft Azure and Microsoft 365 cloud environments.
I am now CTO at Infused Innovations where our team is focusing on helping clients build a Secure Intelligent Workplace through InfoSec (Zero Trusts Framework), Modern Workplace, and Business Intelligence.
I have been heavily involved in the IT user group community, including serving as president of the board of Boston User Groups, Inc., and president of IT-Pro User Group. In 2017/2018 Microsoft awarded me the Microsoft MVP (Most Valuable Professional) Award, with a focus of Microsoft Azure cloud, for my efforts in the IT community.
I am in a constant state of learning about new products, and new versions of products. Many of which we end up implementing in lab environments and sometimes for our clients. I have a very broad range of expertise and experience. It is my goal to share some of this experience on this blog to help enrich the IT community.
Microsoft is gearing up to revolutionize Windows enterprise update management by unifying Windows Autopatch with the Windows Update for Business deployment service (WUfB-DS). This integration, set to begin in mid-September 2024 and complete by mid-October 2024, aims to streamline the update management experience within Microsoft Intune. By consolidating update capabilities into three main categories—Windows Updates, Tenant Management, and Windows Autopatch Reports—Microsoft is making it easier for users to automate and deploy updates seamlessly.
The Windows Updates category will allow users to create and assign policies for Quality, Feature, and Driver updates, ensuring devices are always up-to-date. Tenant Management will enable the organization of devices into different update rings, such as pilot, production, or test, using Autopatch groups. Additionally, the Support requests blade will facilitate the creation of tickets for further assistance. The Windows Autopatch Reports category will provide various reports to analyze update performance and troubleshoot any issues, enhancing the overall reliability of devices.
Existing customers will retain their current licensing rights, including Microsoft Intune, Entra ID Premium, and Microsoft 365/Windows 11 Enterprise E3/E5, and Microsoft 365 F3, with these rights extending to Windows 365 Enterprise. Organizations with A3, A5, and Microsoft 365 Business Premium subscriptions will also maintain their license rights for WUfB-DS capabilities.
To prepare for these changes, organizations should inform their teams and visit the Intune admin center for support. If assistance is needed, service requests can be filed through the Intune admin center. Additional details will be provided on the Microsoft documentation site post-release. This update is designed to make PC update management more efficient and user-friendly, ensuring that all necessary functionalities are maintained while simplifying the overall process.
This update is poised to make PC update management more efficient and user-friendly, ensuring all necessary functionalities are maintained while simplifying the overall process. Organizations should prepare by informing their teams and utilizing the Intune admin center for support and service requests.
Permanent link to this article: https://www.robertborges.us/2024/08/windows/unification-of-microsoft-autopatch-and-windows-enterprise-update-management/
Starting on or after October 15, 2024, Microsoft will implement a significant security enhancement by mandating multi-factor authentication (MFA) for admins accessing the Microsoft Azure portal, Microsoft Entra admin center, and Microsoft Intune admin center. This requirement will also extend to any services accessed through the Intune admin center, such as Windows 365 Cloud PC. The introduction of MFA is a proactive measure to bolster security, providing an extra layer of protection against unauthorized access. Microsoft strongly recommends enabling MFA as soon as possible to take full advantage of its security benefits. For detailed guidance, admins are encouraged to review the document “Planning for mandatory multifactor authentication for Azure and admin portals.”
This change will have a direct impact on organizations by necessitating the activation of MFA for their tenants. Admins will need to ensure that MFA is enabled to maintain access to the Azure portal, Microsoft Entra admin center, and Intune admin center post-implementation. The transition to mandatory MFA underscores Microsoft’s commitment to enhancing security protocols and safeguarding sensitive information.
To prepare for this change, organizations must set up MFA before the October 15, 2024 deadline. This proactive step will ensure that admins can seamlessly access the necessary portals without interruption. In cases where setting up MFA before the deadline is not feasible, organizations have the option to apply for a postponement of the enforcement date. However, it is crucial to note that if MFA is not configured before the enforcement begins, admins will be prompted to register for MFA upon their next sign-in to the Azure portal, Microsoft Entra admin center, or Intune admin center.
The introduction of mandatory MFA is a strategic move by Microsoft to enhance the security framework of its admin portals. By requiring an additional authentication factor, Microsoft aims to mitigate the risks associated with single-factor authentication, such as password breaches and unauthorized access. This initiative reflects a broader industry trend towards strengthening security measures in response to evolving cyber threats.
Organizations are advised to communicate this upcoming change to their admin teams and ensure that all relevant documentation is updated accordingly (see Planning for mandatory multifactor authentication for Azure and admin portals). By doing so, they can facilitate a smooth transition to the new security requirements and minimize any potential disruptions. The implementation of MFA is not just a compliance measure but a critical step towards safeguarding organizational data and maintaining the integrity of admin operations.
Microsoft’s decision to mandate multi-factor authentication for admin access to key portals is a pivotal enhancement in its security strategy. This change, effective from October 15, 2024, will require organizations to enable MFA to ensure uninterrupted access for their admins. By taking proactive steps to implement MFA, organizations can significantly bolster their security posture and protect against unauthorized access. Admins are encouraged to familiarize themselves with the new requirements and prepare accordingly to leverage the full benefits of this enhanced security measure.
By mandating MFA, Microsoft is taking a significant step towards bolstering the security of its admin portals. Organizations should prepare for this change to ensure seamless access and enhanced protection for their admin operations.
Our lives have become intricately intertwined with the digital realm in a world dominated by technology. From personal communications to financial transactions, our reliance on online platforms has grown exponentially. However, as we immerse ourselves in this digital revolution, we must also acknowledge the vulnerabilities that come with it. This is where Multi-Factor Authentication (MFA) swoops in, like a magical key, to unlock the digital fortress and empower us on our journey toward a secure and seamless digital experience.
Unleashing the Digital Revolution: Embrace the MFA Magic!
The power of MFA lies in its ability to fortify our online presence by adding additional layers of security. Gone are the days when a simple password was sufficient to keep our digital lives safe. MFA combines multiple authentication factors, such as passwords, biometrics, and one-time codes, to ensure that only authorized individuals gain access to our sensitive information. By embracing MFA, we protect ourselves and contribute to the collective effort of building a more secure digital ecosystem.
Beyond the realm of personal security, MFA opens the doors to a multitude of opportunities. It enables us to explore the vast landscape of the digital world without fear of falling victim to cyber threats. With MFA, we can confidently venture into e-commerce, online banking, and remote working, knowing that our digital fortress is impenetrable. By embracing this powerful tool, we empower ourselves to embrace the infinite possibilities of the digital age.
Blast Open the Gates: Let MFA Empower Your Digital Journey!
By embracing MFA, we unleash the true potential of the digital revolution. We liberate ourselves from the constraints of traditional security measures and step into a world where innovation and creativity thrive. MFA not only protects our digital identities but also provides a solid foundation for developing groundbreaking technologies. As we secure our digital lives, we can confidently explore emerging fields such as artificial intelligence, blockchain, and the Internet of Things.
Moreover, MFA bridges the gap between user experience and security. While traditional security measures often come at the cost of convenience, MFA strikes a harmonious balance between the two. With its diverse authentication factors, MFA ensures that our digital journey remains seamless and hassle-free, allowing us to focus on what truly matters – our aspirations and ambitions in the digital realm.
In a world where our lives are increasingly intertwined with the digital realm, it is essential to embrace the power of Multi-Factor Authentication. When we enhance the security of our online presence by adding extra layers of protection, we not only safeguard ourselves but also help to establish a more secure digital environment. With MFA, we can confidently embark on our digital journey, exploring new horizons and embracing the boundless possibilities of the digital revolution. So let us unlock the digital fortress, empower ourselves, and embrace the magic of MFA!
How to Enable MFA in Windows
Implementing MFA on Windows can be done in a few steps. First, you need to enable MFA in the account settings of the online service you are using. Major services like Microsoft Accounts or Azure Active Directory provide the option to enable MFA. After enabling, you will be prompted to verify your identity using a secondary method, such as a phone call, text message, or an authenticator app.
Once you’ve enabled MFA on your account, the setup on your Windows device will mostly be automatic. After entering your password, you’ll be prompted for your secondary authentication factor. Depending on the setup, this could be a code from your authenticator app, a fingerprint scan, or a prompt on your mobile device. Your device will remember your MFA setup and use it for future logins.
How to Enable MFA on an iPhone
To implement MFA on an iPhone, you first need to head to the ‘Settings’ app. Then, tap on your name at the top of the screen to access Apple ID settings. Scroll down to ‘Password & Security’ and tap it. Here, you can turn on ‘Two-Factor Authentication’.
After turning on two-factor authentication, you’ll be asked to enter your trusted phone number. This number will be used to send verification codes when you sign in on a new device or browser. Once you’ve verified your phone number, two-factor authentication will be turned on. You’ll now receive a verification code every time you sign into your Apple ID on a new device.
How to implement MFA on Android
Enabling MFA on an Android device is a straightforward process. If you’re using Google services, start by visiting the ‘Google Account’ section in your phone’s settings. Under the ‘Security’ tab, find the ‘2-Step Verification’ option and tap on it.
After tapping ‘2-Step Verification’, you’ll be prompted to enter your password. Once your password is entered, you’ll be directed to a screen where you can choose how you’d like to receive your second form of authentication: through a Google prompt, a text, or a call to your backup phone, or by using an authenticator app. Choose the option that suits you best, follow the prompted steps, and voila! You’ve enabled MFA on your Android device.
OpenAI has done something pretty unique. They have opened up their new product, ChatGPT (https://chat.openai.com), to the world for free during a training period.
A bit of background on GPT
GPT-3 (short for “Generative Pre-training Transformer 3”) is a language generation model developed by OpenAI. It is a type of artificial intelligence (AI) that is capable of generating human-like text and can be used for a wide range of natural language processing tasks, including language translation, summarization, and question-answering.
GPT-3 is based on a machine learning technique called transformers, which are neural networks that are able to process and analyze large amounts of text data. GPT-3 is trained on a massive dataset of billions of words, which allows it to generate highly coherent and realistic text.
GPT-3 has received a lot of attention in the media and the tech industry due to its impressive capabilities and the potential applications of its technology. It has also been the subject of some controversy, as there are concerns about the potential impact of advanced language generation models on society and the job market.
ChatGPT is an evolution of GPT-3 where training has been thoroughly performed and results are handled through a chat inquiry. This is useful whether you are looking for a starting point for a school paper about Cleopatra, want help writing a Microsoft Graph query to show the last AAD login date, build a SQL query using parameters you define, or write up a follow-up email to a customer based on your meeting notes.
Though there is an immense cost to this, OpenAI is making this service free to the public, during the training period.
Why is there a training period?
Training for ChatGPT is critical because AI systems like ChatGPT need first to learn to become accurate, and the amazing minds at OpenAI need to protect the system from humans trying to do harm. There are some limitations to the system. It is not connected to the internet and is only aware of facts leading up to 2021. It also is not always correct in its responses, so you should take care to fact-check the results. During the training period, users have the ability to give a thumbs up/thumbs down response to results and leave detailed feedback on relevancy and accuracy.
OpenAI says, “As part of our commitment to safe and responsible AI, we review conversations to improve our systems and to ensure the content complies with our policies and safety requirements.”
AI has the potential to bring real value to many fields. Analyzing large amounts of medical data can help doctors make more accurate diagnoses and treatment recommendations. Personalizing learning experiences can provide personalized feedback to students. It can be used to analyze traffic management and safety data, as well as optimize routes for delivery trucks and other vehicles. Also, AI can be used to monitor and analyze data related to the environment, such as weather patterns and pollution levels, and to help identify ways to reduce waste and improve sustainability. In manufacturing processes, AI can be used to improve quality control and efficiency. In addition, AI can be used to analyze financial data and identify patterns and trends, which can help financial institutions make more informed investment decisions.
Is AI Dangerous?
Like many technologies, AI has the potential to be used for both good and bad purposes, and it is important for society to consider the potential risks and benefits of AI development and use. Some people have raised concerns about the potential for AI to be used in ways that are harmful to society, such as for automated weapons systems, or to perpetuate biases and discrimination. These are just some of the reasons that ChatGPT’s training period is so critical to its development.
However, it is also important to note that AI can be used for a wide range of positive purposes, such as improving healthcare, education, transportation, and environmental sustainability. The key is to ensure that AI is developed and used ethically and responsibly, with appropriate safeguards and oversight in place to minimize potential negative impacts.
It is important for researchers, policymakers, and the general public to engage in ongoing discussions about the responsible development and use of AI, and to consider the potential risks and benefits of different AI applications. Responsible AI is key!
In the business world just a couple of decades ago, a certain amount of occasional downtime was almost expected in business systems. It wasn’t uncommon for email systems, web servers, and file/applications servers to need occasional reboots, fall victim to memory leak errors, succumb to internet outages, or crash all together. Avoiding unplanned downtime was possible, but doing so tended to be very costly for a truly redundant solution. This limited the highly coveted 4 and 5 nines (9.999% and 9.9999%) of uptime to the large enterprise environments which could afford this level of redundancy.
Since then, even the smallest businesses have become less and less accepting of unplanned downtime in our production environment. After all, our internet provider connections have become much more affordable to allow redundant connections, power protection is the norm, and operating systems have become much more reliable (though at times it doesn’t always feel that way).
SaaS (software as a service) and PasS (platform as a service) solutions like Microsoft 365, Azure SQL services, Azure Virtual Desktop, Azure Front Door, and others, often build in redundancies or make them easily deployable. But what if you are still running virtual machines in the Azure cloud or in your on-premises environment?
It also goes without saying that taking the appropriate posture on cybersecurity and employing a good data backup solution is critical, but for the purpose of this discussion, I will stick to redundancy options.
Protecting Virtual On-Prem
Whether you’ve invested in Hyper-V or VMware for your virtualization hypervisor platform, there are a few things to consider.
Redundant networks – Multiple physical host adapters for management and VM traffic, preferably all connecting to different network switches.
Redundant power – Multiple power supplies in each virtualization host, each connected to a different UPS (uninterruptible power supply). Having a backup generator on top of this is a plus for any power outage beyond a few minutes.
Scale-out file server / SAN – Storage used by the hypervisors should be well thought out, allowing for resiliency not just within disk sets, but between disk arrays. Don’t just plan on individual disks failing. Disk controllers and even entire arrays can have critical issues.
VM (virtual machine) clustering – Just like everything else, virtualization hosts are not immune to having issues. Failover clustering allows a VM to automatically (or sometimes manually) start up on a different host when its primary host is either down unexpectedly or needs maintenance. Clustering in the VMware world is pretty simple leveraging vSphere. In Hyper-V, clustering is a little more complicated, but Microsoft has a lot of great resources to help you along the way. There are also some really great 3rd party tools to manage failover and make failback a cinch.
Storage Redundancy and SLAs
Storage in Azure has multiple resiliency options depending on your uptime requirements. Here are a few of Microsoft’s SLA (service level agreement) guaranteed uptimes for Azure Storage:
At least 99.99% (99.9% for Cool and Archive* Access Tiers) of the time, we will successfully process requests to read data from Read Access-Geo Redundant Storage (RA-GRS) accounts, provided that failed attempts to read data from the primary region are retried on the secondary region. Rehydration is not supported in the secondary region.
At least 99.9% (99% for Cool and Archive* Access Tiers) of the time, we will successfully process requests to read data from Locally Redundant Storage (LRS), Zone Redundant Storage (ZRS), and Geo Redundant Storage (GRS) accounts.
At least 99.9% (99% for Cool and Archive* Access Tiers) of the time, we will successfully process requests to write data to LRS, ZRS, GRS accounts, and RA-GRS accounts.
Protecting Azure Virtual Machines
Simple VMs in Azure should have at least a 95% uptime guarantee from Microsoft without any additional work. If 95% uptime is not quite good enough, there are plenty of options to improve this score considerably.
For example, you can expect a 99% SLA simply by using Premium SSD, Ultra Disk, or Premium SSD v2 for all Operating System Disks and Data Disks.
Availability Zones in Azure. Source: Microsoft
An Availability Set is two or more VMs deployed across different Fault Domains to avoid a single point of failure. When deploying two or more VM instances in the same Availability Set or in the same Dedicated Host Group, you can expect an SLA of up to 99.95%.
Availability Zones are fault-isolated areas within an Azure region, providing redundant power, cooling, and networking. They can make reliability even better with an SLA of up to 99.99% when two or more instances are deployed across two or more Availability Zones in the same Azure region.
Availability Sets and Availability Zones can be leveraged for VMs and also with Azure Virtual Desktop (AVD) to ensure a significant reduction in any single point of failure.
If you are planning an AVD deployment, then also consider On-Demand Capacity Reservations, since it will guarantee you will receive compute capacity up to the reserved quantity of VMs at least 99.9% of the time.
As you may have heard, LastPass has been breached for the second time in three months. It is suspected that the second attack was by the same bad actor as the first, using information acquired during the initial breach.
Back in August 2022 LastPass said that an unauthorized party “gained access to portions of the LastPass development environment through a single compromised developer account and took portions of source code and some proprietary LastPass technical information” and their security measures “prevented the threat actor from accessing any customer data or encrypted password vaults.”
LastPass posted a Notice of Security of this latest incident saying: “We have determined that an unauthorized party, using information obtained in the August 2022 incident, was able to gain access to certain elements of our customers’ information. Our customers’ passwords remain safely encrypted due to LastPass’s Zero Knowledge architecture.”
In an interview, LastPass CEO Karim Toubba said “We immediately launched an investigation, engaged Mandiant, a leading security firm, and alerted law enforcement.”
LastPass available on Windows, MacOS, and mobile devices. Source: LastPass.com
According to LastPass, customer data was accessed by the attacker, however, user data is encrypted. The end user’s LastPass password is an integral part of that encryption process. This means that even LastPass should not have the ability to decrypt user data stored on their service.
How to protect yourself?
LastPass recommends (and has done so for a very long time) that all users turn on multi-factor authentication for account access. This will effectively eliminate the risk of unauthorized access to customer data.
It is also recommended to not allow the LastPass mobile app or browser plug-ins to remember your password, as this creates a major vulnerability to anyone with access to that computer or mobile device.
Microsoft has announced several changes to the Microsoft 365 cloud. These new features will be of interest to both end users and companies alike. If you’ve opted in to see preview features, some of these items may be visible now.
Microsoft Viva Connections
At this point, many people are familiar with Microsoft’s existing product, Viva Insights. Microsoft is releasing a new module to the Viva family called Viva Connections. Viva Connections helps users stay connected with the latest and greatest communications. The goal is to empower users to take a more active role in their data and collaboration and allow users to interact with content more than ever before by commenting and reacting.
The main interface to Viva Connections is the dashboard, which is customizable. The interface becomes a gateway to a more modern employee experience. Viva Connections allows users to save a SharePoint article for later consumption and provides a platform for the company to push announcement videos to users. Viva Connections is currently in public preview and can be viewed from within Microsoft Teams. Here are some examples of the new interface (courtesy of Microsoft):
While Viva Connections is the hot topic making the headlines, there are several other new features coming to the Microsoft 365 cloud.
One Player Video Playback in OneDrive/SharePoint
Changes to the video controls in SharePoint and OneDrive for Business will allow you to pop-out video for a more immersive experience. The new pop-out video provides new options to change playback speed from 0.5x up to 2x, and skip forward and back by 10 seconds. This new functionality makes reviewing videos, such as recorded meetings, easier and more efficient.
For example, Whiteboards will no longer be stored in SharePoint, but rather in the OneDrive of the creator. Also, Yammer now allows for nested replies, which improves conversation experience and keeps things in context.
Teams – Reply to Message
Microsoft Teams now allows users to respond to a specific message within a thread or conversation. Previously, you could reply to a whole conversation, but this was confusing when someone replied to a message further in the past. When replying to a specific message, a copy of the original message is quoted for reference.
Changes to SharePoint Online
The text web part in SharePoint is getting a minor update. Now you can paste images into a text web part. This automatically creates a gap around the pasted image so that text wraps as desired. There are also options to align to the left, right, and center. Also, formatting is updated so that spacing between headers and body, and between bullet points, is reduced slightly.
SharePoint Navigation in team sites can be switched between vertical and horizontal. You can now choose the design (left or top navigation) that works best for your team.
Share a list with a hyperlink. Now, the same rules that apply to sharing files/folders now also apply to sharing a list.
Microsoft Lists applied filters are being updated. You can now see which filters are applied. With a single click, you can view and adjust your filters, making this process a little more seamless.
Changes to Microsoft Planner
Microsoft is updating Recommended Plans in the Planner service. Now you can discover plans that are relevant to your work. This makes it easier to find tasks that are assigned to you but you haven’t noticed yet. Recommended Plans can be found in the left pane between Favorites and Recent.
There are also new options for managing Planner tasks. Previously, you could only move tasks between plans within the same team. Now users can move tasks to any Planner plan across Teams. To use this, click on the ellipse menu in the upper right corner of a task, and select Move task.
While most of these are not gigantic leaps forward, this shows a constant evolution that makes the Microsoft cloud better for everyone.
Microsoft has announced improvements to the accessibility functionality of Microsoft Teams and Outlook to help improve the inclusiveness of the workplace. Several of these features are aimed at improving the experience for “deaf and hard of hearing people and increase flexibility and focus for everyone.” Though, these features are useful for a far greater user base.
Support Employees’ mental health and wellness with Viva Insights
Microsoft states that “mental health conditions are the number one disability in the world today.” Viva can help users “achieve balance, collaborate intelligently, find greater focus, and be their best from wherever they work.” Viva Insights uses AI to improve work/life balance. The Protect Time experience helps block time on your calendar, so you have the time necessary to respond to messages and time to focus on work. There are improved Meditation options to increase calm. The new Virtual Commute experience helps you mentally close out the day by offloading tomorrow’s tasks.
Multiple improvements announced for accessibility in Outlook
Improvements to Outlook for Windows’ Editor tool will offer the user “refinements to improve clarity, conciseness, inclusiveness, and more.” Microsoft’s goal is to “give you more confidence as a writer and communicator.”
Dictation now supports more voice commands and automatic punctuation. With these improvements to dictation, you can add recipients, add text to the subject line of an email, and verbally give the command to send an email. By turning on auto-punctuation, you no longer need to verbally say how you would like to punctuate your sentences and can speak much more naturally. This is available in the Outlook app for Windows and Mac (as well as the Microsoft Word application).
“Accessibility Checker MailTip” will automatically prompt you when you’re including inaccessible content. These reminders make Outlook more accessible than ever before.
Teams improved with Live Captions, Live Transcription, CART support, and improvements to views
Captioning is not new to Microsoft Teams, but here are some interesting improvements. Once enabled by an administrator, users can turn on Live Captions that only they can see during the meeting. Captions are generated automatically using Microsoft’s AI technology and have been expanded by increasing the number of supported languages to 28 and including support for speaker attribution. This functionality is now available in both Teams meetings and Teams Live Events.
Live Transcription can convert the spoken word to written text and can be available both during and after the meeting has ended. Once the feature is enabled by an administrator, this transcription happens in near real-time and can start automatically when the meeting recording begins. It can also be enabled without recording the meeting.
Live Captions and Live Transcription can be very useful tools but do have some limitations when there is a lot of technical terminology or when speakers have multiple accents. To address these limitations, Microsoft is announcing CART (Communication Access Realtime Translation) Captioning support for Teams. This is where a person is translating spoken word to text. This can be particularly useful in circumstances where translation/dictation software usually fails. To use this feature the user will receive a special link along with the meeting invite from the meeting organizer, which will connect them to their preferred CART captioner. The CART captioner will enter text in real time.
In the past, it has been challenging to view both a presentation and sign language interpreter on the screen simultaneously. Teams was limited to viewing one or the other. This is now changing in Microsoft Teams. Now you can spotlight or pin multiple videos at the same time. This can allow a user to view a sign language interpreter and a presentation screen on a video call. Pinning changes the view for the user only. Spotlighting is done by a presenter (or organizer) and allows them to highlight up to 7 different feeds which are displayed to all attendees.
Since the very early versions of Windows in the 1980’s, copy and paste has been a very simple process. Highlight the item you’d like to copy, press +, which would copy that item to the Windows Clipboard. When you’d like to paste that item you would then press + and it would magically appear. The Windows clipboard was always limited to storing one thing at a time, such as a single word, paragraph, or a graphic. Since most Windows users only used a single computer, this wasn’t much of a limitation at the time.
There is a set of new features available in the Windows 10 May 2019 update which may be a big benefit to many… the ability to keep multiple items in the Windows Clipboard and select which you’d like to paste into a document. Holding down the + will display the last 25 items copied to the Windows Clipboard.
The feature isn’t enabled by default. To turn it on, type Clipboard Settings into the Windows search box.
Since this new Windows Clipboard now lives in the cloud, you also have the ability to synchronize the clipboard across all of your Windows devices.
Since the Microsoft Ignite conference in early November, I have been reviewing the Surface Go device to see how useful it is to someone like me. For this review unit, I opted for the matching surface keyboard and pen. My daily driver laptop is a Lenovo ThinkPad T460 which is rock solid and where I run my work applications. The purpose of using the Surface Go was not for it to be a replacement for my work computer, but rather an in-between device. Something that can handle most of my personal computing needs. There are a few different models available, but I chose a model with an Intel Pentium 4415Y CPU, 128 GB of storage, and 8 GB of RAM. This device comes with Windows 10 Home in S-Mode. For this testing period, I kept Windows in this mode so that I was testing an out-of-the-box experience.
Microsoft Surface Go Tablet (source: Microsoft.com)
Windows S Mode
If you aren’t familiar with S-Mode, you’re not alone. This is a relatively new mode in Windows Home and Pro which only allows the system to run applications from the Windows Store. This means no downloading and installing applications or games from vendor websites. All applications must come from the Windows Store. This has a few different benefits:
The store is somewhat curated, so it is less likely that you will download malicious software.
Running Windows Store applications only means the computer will run more efficiently. This results in very few apps running in the background. On most Windows 10 computers, background applications normally kill battery life, slow the system by taking up compute resources, and slow the boot process (since all these apps need to load when you log in).
With the efficiencies of Windows in S-Mode, the Surface Go boots up very quickly so you can start working quickly. Battery life is also pretty good for such a small battery.
If Windows S-Mode isn’t for you, it can be disabled so you can run whatever Windows applications you’d like. However, given that this device has such low-end specs, it may not be advisable to do so.
Display
Screen size is smaller than the other members of the Microsoft Surface family, but I found it adequate for most tasks. At 1800×1200, the resolution is not bad for a screen this size. The drawback is when you zoom in more than 125%, as your apps don’t fit normally on the screen vertically. I have been keeping my screen zoom at 150%, and deal with the screen real estate loss by hiding ribbon bars and such. I find this zoom level perfect for me so I’m not straining to read text with or without my glasses. Overall, I was pleasantly surprised by the screen.
Performance
As you may expect, a 1.6 GHz Pentium processor does not provide very much horsepower in this day and age. It is no secret that the Surface Go does not have the power you’d need to run applications like SolidWorks or Photoshop. For example, I ran into issues filtering data on a rather large Excel spreadsheet. Then again, this device isn’t designed to be your daily driver. The performance shortcomings are saved by Windows S-Mode and how it handles applications.
When connected to a USB-C hub with an external monitor, I did notice graphic distortions when the system was being taxed, even if the screen showed nothing other than the Windows desktop.
Surface Type Cover
As with the other Surface tablets, the Surface Go Type cover protects the screen when closed, and has a built-in keyboard. When open, the keyboard can either lay flat on the table or be wedged up against the screen for a more comfortable typing experience. Surprisingly, the biggest hurdle for me was not Windows running in S-mode or the low-end processor installed, but rather the keyboard. The Surface Go’s Type keyboard is smaller than just about any other computer keyboard I’ve ever used. Not only are keys re-arranged to maximize the use of space, but the keys are considerably smaller and the throw is shorter. It took me a couple of days to get to a point where I could type a complete sentence without typos.
The keyboard is also loud. This isn’t noise from the key travel, but the fact that there is a void between the keyboard and the table below it, resulting in a drum-like sound when typing.
Surface Pen
Like previous Surface tablets, the Surface Pen (sold separately) can magnetically attach to the side of the screen. This keeps it handy for whenever you want it. When storing the Surface Go in my bag, the pen would pop off. Storing the device on its side with the pen side up, resolved this problem. Long term, it probably makes more sense to keep the pen in a safe place (like a pen holder slot) in the bag.
Small Footprint
I found the Surface Go’s size was great for meetings. The smaller footprint is less intrusive in a meeting than a laptop. If you’re a person who prefers using the pen, then there are obvious benefits there as well. Even with the keyboard, I found it very easy to store the Surface Go in my bag along with my laptop.
The size and weight (about 1.15 lbs.) of this device make it very portable and relatively easy to hold for long periods. I decided to test this device by running a meeting PowerPoint presentation, and it went better than I expected. I was able to easily connect to the wireless display (Wi-Di) and control my PowerPoint slides by holding the tablet in my hand. It also put my notes right in front of me, making the conversation with the audience more natural. I found this much less distracting and more seamless. This is my new preferred way to control slide decks during meetings.
One issue I ran into while presenting was screen auto-rotate. Whenever I moved the tablet so that It auto rotated from landscape to portrait, the wireless display would refresh resulting in the audience staring at a Windows desktop instead of the presentation. I don’t know if this issue was caused by Windows or PowerPoint, but disabling auto-rotate prevented this from happening.
I read that the Surface pen can also be used to change slides by clicking a button, but I didn’t have time to get that working.
Storage and Communication
The Surface Go comes with either a 64 GB or 128 GB solid-state drive (SSD), depending on the model you choose. The model I am using has the latter. I did not run into any storage issues during my testing, but there is also a Micro SD slot on the back for additional local storage.
I opted for the WiFi-only model, but there is a model available with a 4G radio as well. Since I was using this where I knew there was reliable Wi-Fi or could put my phone into a Wi-Fi hotspot mode, I didn’t feel I needed this. If you re considering the Surface Go as a device always on the go and need to stay connected, then you may want to splurge for the 4G model.
Price
As of the time I’m writing this, all Surface Go models come with an Intel Pentium 4415Y processor.
The Surface Go keyboard, pen, and mouse are all optional and are available in various colors.
Overall, I found that this is a useful size whether you are presenting, taking notes, or just need a lightweight computer to use around the house. I was expecting to hate this device because of the performance, but I didn’t. The Surface Go is by no means a replacement for a high-end daily driver, but it might meet the needs of those times when you don’t need that heavy computing power.
BYOD (Bring Your
Own Device) is the allowance of employee-owned equipment onto company
systems. Typically, this involves employees using consumer computing
devices (such as iPads or Surface tablets) to get work done, either in the
office, at home, or on the road. Many of these devices are not designed to “get work done,” but instead to consume content (e.g., checking email, reading news, social media, etc.). These devices are not managed and may lack even the most basic security features enabled. Here is the problem: If your BYOD strategy is not planned correctly, this can spell disaster for any corporate network. How is your company protecting its data on
devices out of its control? What happens when an employee leaves the company or a device is accidentally left behind at a coffee shop?
Traditionally Windows VMs (virtual machines) in Azure would include a Windows Server Datacenter license. The cost of this license was built into the hourly/monthly fee for that VM. This made systems easy to roll out using the GUI wizards and made licensing a cinch. If you are moving existing virtual machine workloads to the cloud, this can be expensive since you paying again for licenses you’ve already purchased.
According to their new announcement, Microsoft says “now you can move your existing Windows Server licenses to Azure when you extend your datacenter to the cloud. With the Azure Hybrid Use Benefit, you can use on-premises Windows Server licenses that include Software Assurance to run Windows Server virtual machines in Azure at the base compute rate.” Continue reading
PowerShell in Action – June 2, 2017 – Microsoft Burlington
Join us for a day of PowerShell. Just as it is a tool for you to do amazing things, we are going to use it as a tool to explore amazing technologies. If you are looking to learn PowerShell, we have an entire track dedicated for you. If you already know the basics, go deep and learn more in our full professional track. There will be sessions on Azure, Containers, Nano Server, and hands-on lab sessions where you will be able to put the practices you learn to use on your own equipment. Don’t forget to Bring a laptop and power supply. Also, for security to get in the building, you will need to present an official ID.
Whether you are on the Dev or the Ops side, there is plenty here to learn.
Purpose: Introduce and Dive Deep into PowerShell leveraging the latest and greatest technologies such as Windows Server 2016, Office 365, Nano Server, Containers, DevOps, Azure Cloud
Target Audience: Those that work in the IT sector.
Professional System Administrators, security professionals, virtualization professionals, or others that are part of the “Operations” side of the business.
Developers (generally enterprise, but all are welcome) who want to learn how they can make their life better by learning PowerShell, Containers, DevOps and other technologies
Those that what to learn introduction or deep dive on the technologies covered in this event.
Early career IT or Dev
Audience Expectations: Learn about PowerShell and how to leverage PowerShell for managing, automating other technologies that are growing rapidly. Most of the content presented will have some element or lessons in PowerShell. Take home the lab guide, a USB drive with all content and scripts.
Platinum Sponsor: Microsoft
Keynote Presentation by: Tim Mangan
A Walk-through of a real-world example of PowerShell to automate VM Management and application packaging
The Windows ADK for the 1703 release includes PowerShell based scripts for automation in a Hyper-V environment. Although intended for App-V packaging, these scripts make a great example for general automation of VMs including the following:
OS Image creation
Unattended VM creation and OS installation
Creating a local account in the VM and enabling remote management
Setting VM Parameters (ex: memory, CPU, NIC, AutoStart)
Creating a checkpoint
Reverting and starting the VM
Copying files into the VM and injecting commands
Event Information
We will focus on Automating via PowerShell but also cover DevOps practices, Containers, Windows Server 2016 Nano and how Azure helps deliver and leverage all of these technologies. There will be a fee to cover expenses (USB drives, Drawing prizes, Snacks, Drinks, Lab Guides, etc.) (equivalent to other all day classes for $1200). Wow, we landed a great partner and sponsor, Microsoft! As a result, we are now able to offer a new reduced Price, $25.00!!!! (was $50). Still looking for other sponsors too 🙂
All Attendees Will Get
A full day of training on PowerShell and many other great and new technologies
USB Thumbdrive with all content scripts, slides, additional resources, etc.
Printed and bound Lab Guide so you can do more labs on your own
Door prizes and the opportunity to win great drawing prizes
Overall breakdown of the day…
Introductions
Keynote: Tim Mangan
Breakouts (two tracks): Professional | Getting Started
Lunch & Hands-On Labs (Thanks to Microsoft)
Hands-On Labs
Raffle Drawing Prizes
All-Star Speaker Lineup …
Tim Mangan
Gene Laisne
Robert Borges
Dan Stolts
Lee Benjamin
Warren Frame
Bill Wilder
Jason Haley
Jeffery Hicks
More…
Topics and Technologies…
PowerShell
Containers
Hyper-V
Nano Server
PowerShell on Linux
Azure
Docker
DevOps
Office365
Permanent link to this article: https://www.robertborges.us/2017/05/learning-resources/powershell-in-action-june-2nd-microsoft-burlington-ma/
One of the more controversial features of Windows 10 is Wi-Fi Sense. Though it has been on Windows Phone for some time, this is a new feature of Windows 10. Wi-Fi Sense allows you to share access to a wireless network with your friends on social media sites like Facebook. Wi-Fi Sense also allows you to connect to wireless networks shared by your social media friends. Continue reading
I am extremely excited to announce this week I got the word that I have been awarded this year’s Microsoft Most Valuable Professional award for Microsoft Azure.
I am very thankful to Microsoft and to everyone who helped make this possible. I feel so very lucky to be amongst the very few selected for this award each year. Continue reading
Permanent link to this article: https://www.robertborges.us/2017/01/events/thank-you-microsoft-for-the-mvp-award/
Traditionally Windows VMs (virtual machines) in Azure would include a Windows Server Datacenter license. The cost of this license was built into the hourly/monthly fee for that VM. This made systems easy to roll out using the GUI wizards and made licensing a cinch. If you are moving existing virtual machine workloads to the cloud, this can be expensive since you paying again for licenses you’ve already purchased.
