Archive

Archive for the ‘Group Policy’ Category

Webinar: Mobile Device Management

Hi all,

Tuesday the 8. of December at 11.00 AM I’ll host a webinar about Mobile Device Management.

It will be in Danish and will be non technical information about what you can do to help your coworkers in being productive while maintaining a secure data model.

Registration is free, use the following link
http://eg.dk/om-eg/aktuelt/cloudwebinarer

Hope to see you.

Applying an ICD provisioning package (Part 3)

16/11/2015 2 comments

1. part – I installed Windows Imaging and Configuration Designer (ICD) tool

2. part – I created a provisioning package

In this final part I’ll apply the created provisioning package to a Windows 10 Pro client system.

 

Here I got the non domain joined machine with a non standard computer name.

The computer is running Windows 10 Pro.

image 

 

Copy the newly created provisioning package to the computer or a USB.

 

image

 

Run the Provisioning package? Yes, sure

image

 

Du you trust the creator? Yes, add it

image

 

NOTE: I removed the password in my test setup. In production you will be prompted for a password to apply the package.

 

The provisioning package is applied……

 

image

image

 

After the provisioning package is applied you’ll be signed out and the computer will restart a couple of times.

image

 

We sure did change something Smiley, der blinker

image

 

Verify that you now can login with your domain account.

image

 

After login. Cool…

image

 

The computer is now domain joined, have a standard computer name and the Windows version is now Enterprise.

image

 

Verify that the computer is in the right OU in Active Directory too and the mission is accomplished.

 

/Enjoy

The Power of Windows Imaging and Configuration Designer (Part 2)

The Windows Imaging and Configuration Designer (ICD) tool can be used to a lot of different stuff. But for now I see the biggest gain for companies to use the tool for people that buy a new computer and is not near a company location where a new computer can be deployed or if the bought computer model is not on the official hardware certification list.

This guide will change the following at a Windows 10 Pro computer.

New standard computer name

Domain joined

Get the computer staged in the right OU

Upgrade the SKU to Enterprise

Let’s get started.

Start Windows Imaging and Configuration Designer (ICD)

image

Select New provisioning package

image

Enter Project details and choose a folder.

image

Select what Windows versions can use the package. I’ll choose Common to all Windows desktop editions

image

As this is a new package, I’ll not import any package, click Finish

image

To filter out some settings, select Common IT Pro settings

image

Enter the account used to do the domain join

image

Target OU

image

Enter Computername. In the case I use a variable to get different computernames.

TESTPC%SERIAL%

image

Enter DomainName

image

Set domain join password

image

To upgrade the OS version to Windows Enterprise enter an appropriate PID.

image

Save the project

image

Click Export and select Provisioning package

image

Give the provisioning package a name and select ranking

image

You should encrypt the package, so no one can read the passwords stored inside the package or the license key.

Further more only admins/users with the password can use the provisioning package and there by join computers to the domain.

image

Save

image

Building

image

Done, Finish

image

The provisioning package is  now ready for use.

image

Next part I’ll run the package at a non domain joined Windows 10 Pro machine.

Speaking at SCUG.DK

 

Last Friday I had the honor to speak, once again, at the local Danish User Group SCUG.DK.

I shared a session with my colleague and MVP Ronni Pedersen, about Windows as a Service.

When companies are deploying or evaluating Windows, there are a bunch of things you should be aware of.

  • Windows 10 Licensing
  • Group Policies
  • MDOP
  • Windows 10 Activation (KMS vs ADBA)
  • IE11 / Edge
  • Enterprise mode
  • Windows 10 (Windows Defender / Endpoint Protection)
  • Default Build-in Apps
  • Default Apps and File Associations
  • Windows 10 Business Store
  • In-place Upgrade or Reimage
  • Domain joined, Azure joined

I hope the slides will be available at www.scug.dk, if not I’ll attach them here.

Slides from my session at Microsoft Campus Days 2014

The biggest technical Microsoft event in Denmark, Campus Days 2014, is over. It was a plessure to meet you all and I’m proud, as I have attended as a speaker at all Campus Days events held in the past until today.

IMG_0764

Here you can download my presentation. Remember that is holds links (one of the last slides) to the security stuff I spoke about.

Protecting your Private Cloud/Data
https://onedrive.live.com/?cid=805B93F8AD5DCF57&id=805B93F8AD5DCF57%2147447

Thank you for evalualing, it’s important to me. Hope to see you NeXT year at Campus Days.

/Jens Ole

Changes to Group Policy Preferences (store passwords)

A couple of days ago, Microsoft annouced that they are removing the feature to set passwords using GPP. The stored passwords can be compromised as they are stored in the Group Policy. This will affect the ability to set local administrator password via GPP and other settings as well.
Read more here: https://support.microsoft.com/kb/2962486

/Jens Ole

Powerpoint Slides from Microsoft Campus Days 2013

13/10/2013 2 comments

Here are my slides from my presentations at Microsoft Campus Days 2013 in Denmark.

DA307 Windows Server 2012 R2 – Active Directory 3.1

WC304 Windows Intune – ADFS – 3.1