David Overton's Blog

We had this question circulate around at work, so I wanted to share.  Window Intune needs access to the internet.  This means that the services need unhindered access to the internet.  While for most of us, once we are connected, we are connected, some firewall / proxy devices require extra information to be entered into a browser and this is something that Windows Intune cannot deal with. Luckily, Richard at Windows Intunepedia has written about this and quite some time ago .  The key elements are: Ports 80,443 will be needed for outgoing communications and the firewall / proxy must be as follows: If the client computers exist behind an authenticating proxy server, you must configure the proxy server as follows: 1. Confirm that the proxy server supports HTTP and HTTPS. 2. Enable either Non-auth or Negotiate (Kerberos) authentication methods on the proxy. If your proxy server is using the Negotiate (Kerberos) authentication method then you must configure it to allow authentication using computer...

Microsoft has not made many significant announcements about Windows 8 since the BUILD conference late last year.  Since then, lots of information about how Windows 8 will work has been delivered through the  blog. At CES, we have seen Windows 8 running on some lovely slate/tablet and ultrabook devices and also on Intel and ARM chipsets.  Long Zheng has been following Windows for a long time and has posted some useful information and an update on the pre-beta build running at CES and a host of screenshots on his blog at Analyzing the Windows 8 demo from CES 2012 keynote . Then of course there is the discussion about native applications and it is interesting that BlueStacks now have a product to run Android applications on Windows too.  This item can be found here . From a devices point of view, I like this video:   There is plenty more, but I wanted to share these items as I liked them!   ttfn David

Having written a little about VDI and RHSD the other day, I see that Register has an item about RemoteFX and playing games.  This uses the technology of RDS as well as either VDI or RSHD. While you can play games, Windows 7 renders in all it’s glory too.  One word of warning from a licensing front.  If you are using RemoteFX then you will need an RDS CAL when you are buying the licenses as RemoteFX is licensed by the RDS CAL and remote admin tasks that you can do on a server without needing a RDS CAL does not include playing games (IMHO).  You also need to check that you have a client device that can handle RemoteFX.  While platforms like Citrix, Quest and VMware will enable various remote access technologies that do not use RemoteFX (Citrix and Quest will even allow the use of their own technology or RemoteFX) the device chosen still requires the capabilities to display the high quality applications and games, even if not enough to process it all in the first place! For example, for Citrix...

[updated 12-Jan 2012 with images and notes about a hosted solution] This is part two of the discussion around VDI and RHSD and this section looks at licensing.  I am frequently asked questions about Microsoft licensing as I look after the relationship between Citrix and Microsoft in the UK. I often hear people getting confused about how to license, or even worse, assuming that licenses are somehow free when using a VDI or DV (Desktop Virtualisation) solution. Having seen the article at Computer Weekly I decided I would share some thoughts on how to get it right. I should say, while I have a lot of experience, always talk to a Microsoft Licensing Specialist . Always! The second comment is that these are my thoughts and experiences not those of Microsoft’s. Always verify your understanding of licensing with a specialist.  Get out the legal documents if required (I do link to the relevant sections) and get formal comments from a certified licensing specialist if you require it. Microsoft licensing moves...

I saw this over e-mail at work today and thought I would share with you: - Factsheet (What’s new?) - http://technet.microsoft.com/en-us/library/hh452635.aspx - Best Practices (Deploying Software and Third Party Updates with Windows Intune)  http://technet.microsoft.com/en-us/library/hh441740.aspx - Trial Guide (View the complete Windows Intune Getting Started Guide) http://technet.microsoft.com/en-us/library/hh441719.aspx - FAQ (Windows Intune: Frequently Asked Questions (FAQ))  http://www.microsoft.com/en-us/windows/windowsintune/faq/default.aspx   ttfn David

Ontario Systems is a larger Windows Intune reference with 350 employee PC’s to manage. They needed a better way to manage mobile computers and Windows Intune was the answer to their problems as it enabled them to manage these computers providing they were connected to the Internet and verify this management to enable PCI certification. The two most notable benefits (besides saving money) were: More control, better insight. With the ability to monitor PCs, distribute software and updates, and perform remote tasks from a single console, Ontario Systems has more control and better insight into its PC environment. The IT department will save up to an hour each time it delivers the software updates that employees need to work productively and securely. “Being able to use Windows Intune to issue a security update or remotely initiate a malware scan without interrupting our employees’ workday saves time for the IT staff and helps avoid hours of PC down time,” says Hughes. Better security compliance. By using Windows...

Steve presented at this Microsoft Advertising event in late November, but I wanted to share it because it enables us to get a small insight into Microsoft’s goals.  Interesting quotes include “our goal is to make the technology invisible” and “we probably have over 100 computers in our lives”.  He talks about these trends: The cloud Explosion of devices Displays Everywhere Explosion of data Explosion of social computing Connectivity everywhere Natural interfaces Steve also said he would study as a “data scientist” if he went back to university today as it is and will be the most interesting area to examine! It was nice to see Steve using the voice interface on Xbox before launch and the US version failing to recognise his accent as well as his daughter already expecting all devices to work this way   I have this at home, it is on all Xboxes now, and it is great plus my kids love it and use it all the time.  It is funny listening to Molly talking to the Xbox – she won’t control it any other...

While having the book reviewed one feature that was asked for, but is not possible with Windows Intune, was the ability to make Windows Intune wake a computer at night and carry out an anti-virus scan. This blog post is referred to in the book when setting the Anti-Malware policy. To solve this, there are two issues to tackle: Wake up the computer Start a scan The answer appears to be that to wake the computer we need to use a task in Task Scheduler and then we need to start a scan. One very important thought here is that we need to ensure the power settings on the computer will put it back to sleep though! The command line required is “ %ProgramFiles%\Microsoft Security Client\Antimalware>MpCmdRun.exe -scan -scantype 0 ” While working on this, I also wanted something that could be deployed by Windows Intune. In the end I have written a small piece of software that can create a task that wakes the computer and will start a scan. If you do not want a scan to start, change the program to execute to...

Hi, even though the Windows Intune V2 service has been out for a little while, my existing V1 accounts have not yet been upgraded.  Today I got this e-mail telling me that it was now scheduled to happen in 4 days time. When I clicked on the link, I was taken to the alert that looks like this in the console: It talks about the “Account Details page” to find out more information.  I know Windows Intune quite well and I was not sure what the Account Details page was.  However, if we go to the Administration workspace and look at the Administration Overview then at the top of the page we see… “Planned account migration date: 12/16/2011” – OK, so it is in US date format, but at least it is coming this week!! I just wanted to share that the updates are coming and where to get the date from.   Thanks David

I saw this and just had to blog it.. The graphic on the left has amazing information – 41 of Interband Top 100 run on Microsoft’s cloud productivity services. 90% of Office 365 customers (not the seats, but the customer count) are SMEs with less than 50 employees.  You can guess the big customers from the stats. The PR can be found at Microsoft Cloud Services Get Major Service Updates, New Customers: New features in Microsoft Office 365 and updates to sharing in Microsoft SkyDrive make it easier for people to work together. One last thing I like, since I’ve been hearing people say “SharePoint is hard for file sharing” – SkyDrive works with Office 365 too.  This is simple, drag and drop and works natively with Office! Snippets from the PR statement: Small Businesses and Big Brands Bet on Office 365 More and more large global companies are choosing Office 365 to enable their employees and customers to work together in the cloud. In fact, more than 40 per cent of the global Interbrand list of the 100 top...

I saw this case study and wanted to share as it has some fantastic good news in it, highlighting how Windows Intune is helping this customer.  The highlights for me were: Reduced IT Costs SkyWire Media avoided the cost of third-party products that it would need to perform desktop management tasks by using Windows Intune. “I looked at antivirus and malware [malicious software] servers for [U.S.]$8,000 each,” says Malloy. “When you add $2,000 for the software and another $70,000 for a full-time administrator, we were looking at $80,000. Windows Intune saved us from those expenses.” With Windows Intune, SkyWire can retire on-premises solutions. “The software distribution feature now available in Windows Intune will save us an estimated $10,000 in software costs because we can retire the third-party tools that we were using for this purpose,” says Castleberry. Simplified PC Management Now that SkyWire Media has standardized the desktops on Windows 7 Enterprise and Windows Intune has delivered all required updates...

Hi, I love Christmas.  I’m not religious, but I really enjoy the happiness it brings people and the fact that everyone seems to spend time not working, with their families or unwinding.  One way I do this is through putting a stupid number of lights on my house.  For the last few years it has looked like this: I moved to a new house this year, so things are a little different.  I’ve not finished yet, but this is what I have so far.  The "train” is hidden and once it is all completed, I will share the final picture.   Just sharing my little pleasure (although I think my electricity supplier likes me doing this as well!)   David