Microsoft: 200M Now Use Windows 10 In The Enterprise

The latest numbers from the company show businesses are close to schedule to move away from Windows 7 before the older OS retires in early 2020.

Windows10 Enterprise

Microsoft on Tuesday said that some 200 million enterprise workers now run Windows 10, a sign that corporations and other businesses are close to schedule to scrub Windows 7 from their machines before that older OS retires in about 20 months, an analyst argued.

“The 200 million resonates with me, based on what I’m hearing from clients,” said Stephen Kleynhans of Gartner Research. Migrations to Windows 10, he added, are progressing “pretty aggressively.”

Joe Belfiore, a corporate vice president who leads the Windows 10 team, revealed the number at Microsoft’s Build developers conference Tuesday. “Right now, there are over 200 million people in corporate accounts using Windows 10,” Belfiore said as he claimed deployment is “really ramping up” in the enterprise. “We’ve seen that [Windows 10] adoption rate increase now at 79% year-over-year growth.”

The day before, Microsoft contended that “nearly 700 million” devices are running Windows 10 worldwide. On that basis, enterprises accounted for less than 30% of all copies of Windows 10.

(Although the two numbers – Belfiore’s 200 million people using Windows 10 in corporate settings and Microsoft’s 700 million devices powered by the operating system – measured two different things, it’s not uncommon for Microsoft to obfuscate this way to prevent direct comparisons. In actuality, because Microsoft typically sells licenses on a per user basis, with multiple devices allowed for each user, 200 million people may be using more than that number of Windows 10 devices.)

While neither the percentage nor the 200 million are to be sneezed at, the former is significantly less than the average overall for commercial PCs, which have historically accounted for more than half – 55% has been an often-cited figure – of all personal computers.

And while Kleynhans did not dispute Microsoft’s claim of 200 people running Windows 10 in the enterprise, he sounded a bit disappointed in the number. “Is it a low number? It’s a little behind where I thought it would be,” Kleynhans said, noting that he expected it to be around 250 million by this point, perhaps even close to 300 million.

That 2009 operating system will fall off Microsoft’s support list on Jan. 14, 2020, meaning that while Windows 7 will continue to work as before, the Redmond, Wash. will stop distributing security updates to it.

It’s unrealistic to expect that all commercial customers will have purged Windows 7 by the retirement date, Kleynhans said, pointing out that he has recently spoken with clients who still run some instances of Windows XP (retired from support in 2014) and even Windows 98 (2006).

“What we [Gartner] expect is that enterprises will get to the 85%-90% level by the deadline,” Kleynhans said of the percentage of corporate devices shifted to Windows 7, “maybe even a little higher than that.” Nothing that’s happened has changed that estimate, he added.

“There are always laggards,” Kleynhans said.

According to other metrics, there may be a considerable number of them.

Estimates from analytics vendors, including U.S.-based Net Applications, which measure user and usage shares, signal that a large resorvoir of Windows 7 users will remain after the operating system’s retirement in 20 months. Net Applications’ latest data, for example, drove a Computerworld forecast that of the world’s Windows personal computers – all the PCs, not just those in the enterprise – 42% would still be running Windows 7 in January 2020, a much larger percentage than the 29% powered by Windows XP when that edition fell off the support list in April 2014.

In the end, large organizations will do what it takes to get off Windows 7 and onto Windows 10 by the former’s support cut-off date. The 200 million touted by Belfiore this week will be quite different a year from now, Kleynhans was certain.

“The speed with which I see Windows 10 moving now, it’s not going to be an issue,” he said.

Windows 10 deployment is, like previous iterations of the OS, on a timetable not of its own making. Instead, because of the vagarities of Microsoft’s historical release schedule and corporate acceptance (or rejection) of some editions, there is a clock ticking on Windows 10 because of the impending retirement of the current corporate standard, Windows 7.

Have questions?

Get answers from Microsofts Cloud Solutions Partner!
Call us at: 856-745-9990 or visit: https://southjerseytechies.net/

South Jersey Techies, LL C is a full Managed Web and Technology Services Company providing IT Services, Website Design ServicesServer SupportNetwork ConsultingInternet PhonesCloud Solutions Provider and much more. Contact for More Information.

 

Remote Desktop Error – An Authentication error has occurred – CredSSP encryption oracle remediation – SOLUTION

CredSSP encryption oracle remediation

CredSSP encryption oracle remediation

Error


We recently had an issue with remote desktop connection to a Windows 2012 server from a Windows 10 Pro client computer that was recently updated.

An Authentication error has occurred.
The function requested is not supported.
Remote computer: <servername>
This could be due to CredSSP encryption oracle remediation

CredSSP updates for CVE-2018-0886

Solution


We had to create a registry key HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System\CredSSP\Parameters; both the CredSSP and Parameters keys had to be created, and then create the AllowEncryptionOracle DWORD and give it a value of 2, worked for me on both Windows 7 and Windows 10 Pro computers. A reboot was not needed.
Registry path: HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System\CredSSP\Parameters
Value: AllowEncryptionOracle
Data type: DWORD

Have Questions?


Leave us a comment or visit: https://southjerseytechies.net/

South Jersey Techies, LLC is a full Managed Web and Technology Services Company providing IT Services, Website Design ServicesServer SupportNetwork ConsultingInternet PhonesCloud Solutions Provider and much more. Contact for More Information.

To read this article in its entirety click here.

DFSR – Windows Server Standard 2016 – The replicated folder has been offline for too long at Site – SOLUTION

We recently had an issue with and Active Directory DFSR – The replicated folder has been offline for too long at Site error for a Windows Server Standard 2016 single Domain Controller environment.

Event ID 4012 – DFSR – The DFS Replication service stopped replication on the folder with the following local path: C:\Windows\SYSVOL\domain. This server has been disconnected from other partners for 149 days, which is longer than the time allowed by the MaxOfflineTimeInDays parameter (###). DFS Replication considers the data in this folder to be stale, and this server will not replicate the folder until this error is corrected.

To resume replication of this folder, use the DFS Management snap-in to remove this server from the replication group, and then add it back to the group. This causes the server to perform an initial synchronization task, which replaces the stale data with fresh data from other members of the replication group. .

Summary


Consider the following scenario:

You want to force the non-authoritative synchronization of SYSVOL on a domain controller. In the File Replication Service (FRS), this was controlled through the D2 and D4 data values for the Burflags registry values, but these values do not exist for the Distributed File System Replication (DFSR) service. You cannot use the DFS Management snap-in (Dfsmgmt.msc) or the Dfsradmin.exe command-line tool to achieve this. Unlike custom DFSR replicated folders, SYSVOL is intentionally protected from any editing through its management interfaces to prevent accidents.

How to perform a non-authoritative synchronization of DFSR-replicated SYSVOL (like “D2” for FRS)

  1. In the ADSIEDIT.MSC tool modify the following distinguished name (DN) value and attribute on each of the domain controllers that you want to make non-authoritative:CN=SYSVOL Subscription,CN=Domain System Volume,CN=DFSR-LocalSettings,CN=<the server name>,OU=Domain Controllers,DC=<domain>

    msDFSR-Enabled=FALSE

     

  2. Force Active Directory replication throughout the domain.
  3. Run the following command from an elevated command prompt on the same servers that you set as non-authoritative:DFSRDIAG POLLAD

     

  4. You will see Event ID 4114 in the DFSR event log indicating SYSVOL is no longer being replicated.
  5. On the same DN from Step 1, set:msDFSR-Enabled=TRUE

     

  6. Force Active Directory replication throughout the domain.
  7. Run the following command from an elevated command prompt on the same servers that you set as non-authoritative:DFSRDIAG POLLAD

     

  8. You will see Event ID 4614 and 4604 in the DFSR event log indicating SYSVOL has been initialized. That domain controller has now done a “D2” of SYSVOL.

More Information


If setting the authoritative flag on one DC, you must non-authoritatively synchronizeall other DCs in the domain. Otherwise you will see conflicts on DCs, originating from any DCs where you did not set auth/non-auth and restarted the DFSR service.For example, if all logon scripts were accidentally deleted and a manual copy of them was placed back on the PDC Emulator role holder, making that server authoritative and all other servers non-authoritative would guarantee success and prevent conflicts.

If making any DC authoritative, the PDC Emulator as authoritative is preferable, since its SYSVOL contents are usually most up to date.

The use of the authoritative flag is only necessary if you need to force synchronization of all DCs. If only repairing one DC, simply make it non-authoritative and do not touch other servers.

This article is designed with a 2-DC environment in mind, for simplicity of description. If you had more than one affected DC, expand the steps to includeALL of those as well. It also assumes you have the ability to restore data that was deleted, overwritten, damaged, etc. previously if this is a disaster recovery scenario on all DCs in the domain.

Have any questions?

Call us at: 856-745-9990 or visit: https://southjerseytechies.net/

South Jersey Techies, LLC is a full Managed Web and Technology Services Company providing IT Services, Website Design ServicesServer SupportNetwork ConsultingInternet PhonesCloud Solutions Provider and much more. Contact for More Information.

To read this article in its entirety click here.

FIX – Windows 10 USB devices and on-board devices, such as a keyboard or mouse, stop working – OS Build 16299.251 – KB4090913

We have had a number of users that were unable to use their keyboard or mouse on their Windows 10 computer. Microsoft released an update that addresses the issue yesterday.

Addresses an issue in which some USB devices and onboard devices, such as a built-in laptop camera, keyboard, or mouse, stop working. This may occur when the Windows Update servicing stack incorrectly skips installing the newer version of some critical drivers in the cumulative update and uninstalls the currently active drivers during maintenance.

Known issues in this update


Symptom

Workaround

Windows Update History reports that KB4054517 failed to install because of error 0x80070643.

Even though the update was successfully installed, Windows Update incorrectly reports that the update failed to install. Select Check for Updates to verify that there are no additional updates available. You can also type About your PC in the search box on the taskbar to verify that your device is using the expected OS build. Microsoft is working on a resolution and will provide an update in an upcoming release.

Because of an issue that affects some versions of antivirus software, this fix applies only to computers on which the antivirus ISV updated the ALLOW REGKEY.

Contact your antivirus manufacturer to verify that their software is compatible and that they have set the following REGKEY on the computer: Key=”HKEY_LOCAL_MACHINE”Subkey=”SOFTWARE\Microsoft\Windows\CurrentVersion\QualityCompat” Value Name=”cadca5fe-87d3-4b96-b7fb-a231484277cc” Type=”REG_DWORD” Data=”0x00000000″

After installing this update, some devices may fail to start, and return INACCESSIBLE_BOOT_DEVICE. This issue occurs when the windows update servicing stack incorrectly skips installing the newer version of some critical drivers in the cumulative update and uninstalls the currently active drivers during maintenance.

Microsoft is working on a resolution and will provide an update in an upcoming release. Workaround steps are available in KB4075150.

Because of an AD FS server issue that causes the WID AD FS database to become unusable after a restart, the AD FS service may fail to start.

There is no way to undo the database corruption. To return your AD FS server to a functional state, you must restore it from a backup.

How to get this update


This update will be downloaded and installed automatically from Windows Update. To get the stand-alone package for this update, go to the Microsoft Update Catalog website.

File information

For a list of the files that are provided in this update, download the file information for cumulative update 4090913.

Have any questions?

Call us at: 856-745-9990 or visit: https://southjerseytechies.net/

South Jersey Techies, LLC is a full Managed Web and Technology Services Company providing IT Services, Website Design ServicesServer SupportNetwork ConsultingInternet PhonesCloud Solutions Provider and much more. Contact for More Information.

To read this article in its entirety click here.

Did you know? Mac Office 2011 support conks out on Oct. 10

End of support is sneaking up on enterprise employees running Office on a Mac

Companies that have employees running Office for Mac 2011 have just over 100 days to replace the suite’s applications with those from last year’s upgrade, Office for Mac 2016.

Support ends for Office for Mac 2011 on Oct. 10, a date that Microsoft first stamped on the calendar two years ago, but has not widely publicized since. As of that date, the Redmond, Wash., developer will cease supplying patches for security vulnerabilities or fixes for other bugs.

The individual applications — Excel, PowerPoint, Outlook and Word — will continue to operate after support ends, but companies will be taking a risk, however small, that malware exploiting an unpatched flaw will surface and compromise systems.

To receive security and non-security updates after Oct. 10, IT administrators must deploy Office for Mac 2016 or instruct workers covered by Office 365 to download and install the newer suite’s applications from the subscription service’s portal.

Office for Mac 2011’s end-of-support deadline was originally slated for January 2016, approximately five years after the productivity package’s release. But in the summer of 2015, when it was clear that 2011’s successor would not be ready by early 2016, Microsoft extended its lifespan by 21 months. At the time, Microsoft cited the long-standing policy of supporting a to-be-retired product for “2 years after the successor product is released” when it added time to 2011.

Mac users: Steerage Class

The impending cutoff for Office for Mac 2011 is an issue only because Microsoft shortchanges Office for Mac users. Unlike the Windows version of Office, which receives 10 years of security support, those that run on macOS are allotted half that. Microsoft has repeatedly classified Office for Mac as a consumer product to justify the half-measure, even for the edition labeled “Home and Business.”

Nor does Microsoft update and service Office for Mac for corporate customers as it does the far more popular Windows SKU (stock-keeping unit). The latter will be upgraded with new features, Microsoft said in April, twice each year for enterprise subscribers to Office 365 ProPlus, with each release supported for 18 months before giving way to a pair of successors.

Mac editions, however, are refreshed with new tools at irregular intervals, often long after the same feature debuts in the same Windows application. (Recently, for example, Microsoft added a delivery-and/or-read receipt option to the Mac version of Outlook; that functionality has been in Outlook on Windows since 2013.) And because there are no regular, large-scale feature upgrades to Office for Mac, support is not curtailed by the release schedule as with Windows.

The difference between Offices — the behemoth Windows on one side, the niche Mac on the other — has been put into even starker relief recently: Microsoft has adopted March and September dates for launching new upgrades to Windows 10, Office 365 ProPlus, and last week, Windows Server, but made no similar promises for Office for Mac 2016.

It’s clearly the odd app out.

Have questions?

Get answers from Microsofts Cloud Solutions Partner!
Call us at: 856-745-9990 or visit: https://southjerseytechies.net/

South Jersey Techies, LL C is a full Managed Web and Technology Services Company providing IT Services, Website Design ServicesServer SupportNetwork ConsultingInternet PhonesCloud Solutions Provider and much more. Contact for More Information.

To read this article in its entirety click here.

10 Windows 7 tips to get the most out of your machine

If you’re one of the many business users who has not upgraded their computer to Windows 10, there are still resources to boost your experience. Here are 10 tips for getting the most out of the OS.

Windows 10 faced a controversial roll-out, with privacy concerns, bugs, and other issues plaguing many users. And as of August 2016, just 1% of business machines had upgraded to Windows 10, according to a study from Softchoice. Instead, 91% of the machines were operating with Windows 7—an 18% increase over the same period of time in 2015.

“It seems businesses don’t see an urgent need to move operating systems, so long as their cloud-based applications are still running fine on Windows 7,” Softchoice’s Microsoft director Craig McQueen wrote in a press release at the time. “In addition to the security benefits, I think once organizations grasp the user benefits—such as touch and Cortana—we will start to see a boost in adoption.”

While experts predict Windows 10 deployments will pick up this year, it’s important for those still using Windows 7 for business to get the most out of their machines. Here are 10  articles with Windows 7 tips that will help enterprise users operate the machines more effectively.

1. 10 ways to speed up Windows 7

While Windows 7 generally performs well, over time, the system can slow down and require some care to get it back up to speed. The OS also contains certain features that users can take advantage of to improve overall performance. Here, we outline 10 steps business users can take to enhance the performance of your Windows 7 system.

2. Use multiple monitors with Windows 7’s Remote Desktop Connection

Windows 7 allows users to connect to a remote computer and utilize the local system’s multiple monitors. Here is a step by step advice on how to configure and operate multiple monitors using Windows 7’s Remote Desktop Connection, as well as how to connect to and from Windows versions that do not support this feature.

3. Quick Tips: Flush the ARP cache in Windows 7

The Address Resolution Protocol (ARP) cache is an important part of IP networking on any OS, as it links Ethernet addressing to hardware addressing. Newly mapped addresses are saved in an ARP cache, which is usually fine, but can sometimes cause issues with internet connections and web page loading times. Here, are the necessary steps to clear the ARP cache, and how to manage it going forward.

4. 10+ Windows 7 services you may not need

While every version of Windows includes a core set of system services, business users can disable some that are not necessary in order to improve performance and security. In this article, we highlight 13 services that users can disable if they so choose on Windows 7 systems that will likely not have any impact on business operations, including IP Helper, offline files, and Network Access Protection.

5. 10 Windows 7 commands every administrator should know

IT staff who troubleshoot Windows 7 problems often have to dive into the command line. Here, are 10 fundamental Windows 7 commands that are useful for IT administrators, including System File Checker, File Signature Verification, and Driverquery.

6. Modifying the Windows 7 boot loader with the Boot Configuration Data Editor tool

In Windows Vista and later versions of Windows, the bootloader was moved from boot.ini to a utility called BCDEdit. This article walks users through how to modify the boot config data using this tool.

7. Change and customize Windows 7’s Logon screen wallpaper

Changing and customizing the Windows 7 Logon screen wallpaper is easy once you know the steps, as Microsoft built the ability to change the wallpaper right into the OS, as opposed to needing any third-party software. Here, we offer a tutorial on doing so.

8. Change the Processor Affinity setting in Windows 7 to gain a performance edge

Most applications have been designed for multi-core processors, and work with an OS to distribute their operations evenly across cores to enhance performance. However, you can sometimes achieve better overall performance from certain applications by configuring them to run on different processor cores, which Windows 7 allows via the Processor Affinity setting. In this article, we explain two ways to change the Processor Affinity setting in Windows 7.

9. Use Windows 7 Event Viewer to track down issues that cause slower boot times

Experiencing a slow Windows 7 boot time? You can use Windows 7’s Event View to investigate the source of the problem. The Event Viewer includes a category of event logs called Applications and Services Logs, which track key elements of the OS. Here, we explain how it is possible to find out how long it took to boot up your system every time, since the day Windows 7 was first installed, along with instances where boot time slowed down, all through these logs.

10. Tag your files for easier searches in Windows 7

This article, walks users through how to tag files to make them searchable via the Search filters built into Windows Explorer’s Search box in Windows 7. It’s possible to do this easily from many applications while saving a file. The ability to more easily find files is a boon for business users who want to enhance their productivity.

Have questions?

Get answers from Microsofts Cloud Solutions Partner!
Call us at: 856-745-9990 or visit: https://southjerseytechies.net/

South Jersey Techies, LL C is a full Managed Web and Technology Services Company providing IT Services, Website Design ServicesServer SupportNetwork ConsultingInternet PhonesCloud Solutions Provider and much more. Contact for More Information.

Change the Processor Affinity setting in Windows 7 to gain a performance edge

Under specific circumstances and with careful tweaking, you can increase Windows 7’s performance using the Processor Affinity setting.

If you have a multi-core processor, chances are good that on the Performance tab in Windows Task Manager, you have noticed that the CPU Usage History graphs look about the same for each core, as shown in Figure A. The reason for this is that most applications you run these days have been designed with multi-core processors in mind and will work with the operating system to distribute their operations as evenly as possible across all the available cores.

Figure A

In most cases, you’ll notice that the CPU Usage History graphs look about the same for each core.

In most cases this even distribution provides you with the best performance possible. However, that’s not always going to be the case. For instance, older applications that were designed for single-core processors can behave irrationally — they may all of a sudden begin maxing out the CPU usage at 100 percent and appear to be locked up. In other circumstances, you might be able to achieve better overall performance from certain applications by configuring each of them to run on different processor cores.

Fortunately, Windows 7 allows you to configure applications to use only one, or several, of the processor cores in a multi-core system by using the Processor Affinity setting.

In this edition of the Windows Desktop Report, Iwe’ll show you two ways to change the Processor Affinity setting in Windows 7.

From Task Manager

Changing the Processor Affinity setting from within Task Manager is a pretty straightforward operation once you know how to do it. To launch Task Manger, you can use the keystroke combination [Ctrl] + [Shift] + [Esc] or you can simply right-click on the taskbar and select Task Manager from the context menu.

Once Task Manager is up and running, select the Applications tab, right-click on the application that you want to work with, and select the Go to Process command, as shown in Figure B. When you get to the Processes tab, right-click on the process and from that context menu, select the Set Affinity command, as shown in Figure C. (If the processes are jumping around, it may be hard to select the correct process, so you might just want to press the Application key or [Shift]+[F10].)

Figure B

Right-click on an application and select the Go to Process command.

Figure C

Right-click on the process and select the Set Affinity command.

After you select the Set Affinity command, you’ll see the Processor Affinity dialog box shown in Figure D. As you can see, the default setting is All Processors, which in the case of my example system are CPU 0 and CPU 1. At this point, you can clear the All Processors check box and then select the CPU on which you want the process to run.

Figure D

The Processor Affinity dialog box allows you to choose which processor(s) you want to use.

An example

To take a look at the effects of using the Set Affinity command, we launched two applications: Microsoft Security Essentials and Disk Defragmenter. Next we used the Set Affinity command to assign Microsoft Security Essentials to CPU 0 and Disk Defragmenter to CPU 1. We then started each application running — Microsoft Security Essentials performing a full scan and Disk Defragmenter defragging a 500GB disk.

Once each application began working, they started sucking up CPU time, so we went to the Performance tab in Windows Task Manager to look at the CPU Usage History graphs. When we did, we could see that each graph was showing different measurements, as shown in Figure E.

Figure E

Each of the CPU Usage History graphs shows different measurements.

To specifically see how each CPU core was faring, we launched Resource Monitor and selected the CPU tab. Again, we could see that each CPU core was showing different usage measurements, as shown in Figure F.

Figure F

Resource Monitor’s CPU tab specifically identifies each CPU core and its usage.

Now, of course, my example combination is purely for the sake of showing each CPU handling a separate process. However, there are instances where running Microsoft Security Essentials on a separate CPU core would be beneficial.

From a shortcut

Now if you find that running an application on a specific CPU core works well, you might want to use it again in the future. If so, chances are that you won’t want to have to go through the Task Manager each time. Fortunately you can create a shortcut to launch an application with a specific affinity setting.

For example, to launch Disk Defragmenter so that it runs only on CPU 0, you would create a shortcut with the following command line:

C:\Windows\System32\cmd.exe /C start /affinity 1 dfrgui.exe

To launch Disk Defragmenter on CPU 1, you would create a shortcut with the following command line:

C:\Windows\System32\cmd.exe /C start /affinity 2 dfrgui.exe

The number that follows the start /affinity command is called the affinity mask and is defined as a hexadecimal number. However, the CPU core number can be calculated more easily using binary numbers. For instance, the command

C:\Windows\System32\cmd.exe /C start /affinity 3 dfrgui.exe

will launch Disk Defragmenter on both CPU 0 and CPU 1. If you convert 3 into a binary number you will get 0011. Under the affinity mask system, processors are numbered from the right to left beginning with 0 and since there are 1’s in the first two places, this indicates CPU 0 and CPU 1.

Suppose you have a Quad core processor. If so and you use an affinity mask of 4, that will convert into binary 0100, which indicates CPU 2. If you use an affinity mask of 9, that will convert into binary 1001, which indicates CPU 0 and CPU 3.

For more information on the start /affinity command, open a Command Prompt window and type the command

start /?

Have questions?

Get answers from Microsofts Cloud Solutions Partner!
Call us at: 856-745-9990 or visit: https://southjerseytechies.net/

South Jersey Techies, LL C is a full Managed Web and Technology Services Company providing IT Services, Website Design ServicesServer SupportNetwork ConsultingInternet PhonesCloud Solutions Provider and much more. Contact for More Information.

To read this article in its entirety click here.

10 Windows 7 commands every administrator should know

The command line is often the best place to resolve Windows 7 desktop problems. These basic commands will help speed your troubleshooting tasks.

PC troubleshooting is becoming less common in larger organizations, but consultants and techs in smaller shops still have to get their hands dirty identifying and fixing desktop problems. Oftentimes, troubleshooting Windows 7 means delving into the command line. Here are 10 fundamental Windows 7 commands you might find helpful.

1: System File Checker

Malicious software will often attempt to replace core system files with modified versions in an effort to take control of the system. The System File Checker can be used to verify the integrity of the Windows system files. If any of the files are found to be missing or corrupt, they will be replaced. You can run the System File Checker by using this command:

sfc /scannow

2: File Signature Verification

One way to verify the integrity of a system is to make sure that all the system files are digitally signed. You can accomplish this with the File Signature Verification tool. This tool is launched from the command line but uses a GUI interface. It will tell you which system files are signed and which aren’t. As a rule, all the system files should be digitally signed, although some hardware vendors don’t sign driver files. The command used to launch the File Signature Verification tool is:

sigverif

3: Driverquery

Incorrect device drivers can lead to any number of system problems. If you want to see which drivers are installed on a Windows 7 system, you can do so by running the driverquery tool. This simple command-line tool provides information about each driver that is being used. The command is:

driverquery

If you need a bit more information, you can append the -v switch. Another option is to append the -si switch, which causes the tool to display signature information for the drivers. Here’s how they look:

driverquery -v
driverquery -si

4: Nslookup

The nslookup tool can help you to verify that DNS name resolution is working correctly. When you run nslookup against a host name, the tool will show you how the name was resolved, as well as which DNS server was used during the lookup. This tool can be extremely helpful when troubleshooting problems related to legacy DNS records that still exist but that are no longer correct.

To use this tool, just enter the nslookup command, followed by the name of the host you want to resolve. For example:

nslookup dc1.contoso.com

5: Ping

Ping is probably the simplest of all diagnostic commands. It’s used to verify basic TCP/IP connectivity to a network host. To use it, simply enter the command, followed by the name or IP address of the host you want to test. For example:

ping 192.168.1.1

Keep in mind that this command will work only if Internet Control Message Protocol (ICMP) traffic is allowed to pass between the two machines. If at any point a firewall is blocking ICMP traffic, the ping will fail.

6: Pathping

Ping does a good job of telling you whether two machines can communicate with one another over TCP/IP, but if a ping does fail, you won’t receive any information regarding the nature of the failure. This is where the pathping utility comes in.

Pathping is designed for environments in which one or more routers exist between hosts. It sends a series of packets to each router that’s in the path to the destination host in an effort to determine whether the router is performing slowly or dropping packets. At its simplest, the syntax for pathping is identical to that of the ping command (although there are some optional switches you can use). The command looks like this:

pathping 192.168.1.1

7: Ipconfig

The ipconfig command is used to view or modify a computer’s IP addresses. For example, if you wanted to view a Windows 7 system’s full IP configuration, you could use the following command:

ipconfig /all

Assuming that the system has acquired its IP address from a DHCP server, you can use the ipconfig command to release and then renew the IP address. Doing so involves using the following commands:

ipconfig /release
ipconfig /renew

Another handy thing you can do with ipconfig is flush the DNS resolver cache. This can be helpful when a system is resolving DNS addresses incorrectly. You can flush the DNS cache by using this command:

ipconfig /flushdns

8: Repair-bde

If a drive that is encrypted with BitLocker has problems, you can sometimes recover the data using a utility called repair-bde. To use this command, you will need a destination drive to which the recovered data can be written, as well as your BitLocker recovery key or recovery password. The basic syntax for this command is:

repair-bde <source> <destination> -rk | rp <source>

You must specify the source drive, the destination drive, and either the rk (recovery key) or the rp (recovery password) switch, along with the path to the recovery key or the recovery password. Here are two examples of how to use this utility:

repair-bde c: d: -rk e:\recovery.bek
repair-bde c: d: -rp 111111-111111-111111-111111-111111-111111

9: Tasklist

The tasklist command is designed to provide information about the tasks that are running on a Windows 7 system. At its most basic, you can enter the following command:

tasklist

The tasklist command has numerous optional switches, but there are a couple I want to mention. One is the -m switch, which causes tasklist to display all the DLL modules associated with a task. The other is the -svc switch, which lists the services that support each task. Here’s how they look:

tasklist -m
tasklist -svc

10: Taskkill

The taskkill command terminates a task, either by name (which is referred to as the image name) or by process ID. The syntax for this command is simple. You must follow the taskkill command with -pid (process ID) or -im (image name) and the name or process ID of the task that you want to terminate. Here are two examples of how this command works:

taskkill -pid 4104
taskkill -im iexplore.exe

Have questions?

Get answers from Microsofts Cloud Solutions Partner!
Call us at: 856-745-9990 or visit: https://southjerseytechies.net/

South Jersey Techies, LL C is a full Managed Web and Technology Services Company providing IT Services, Website Design ServicesServer SupportNetwork ConsultingInternet PhonesCloud Solutions Provider and much more. Contact for More Information.

To read this article in its entirety click here.

10+ Windows 7 services you may not need

If you evaluate your organization’s need for certain Windows 7 services, you may find that a number of them can be safely disabled.

Every version of Windows has shipped with a core set of system services that must run so that the system can perform basic operations. However, your organization may not necessarily need to have all the services running, and disabling unnecessary services can enhance performance and security. We’ve put together a list of 13 services you can disable on your Windows 7 systems that will probably not negatively affect your business operations at all.

Before you take drastic action, such as disabling a service on every PC in your organization, make sure that the service you’re disabling is not actually in use. This article makes a couple of broad assumptions: that your company doesn’t need to share Windows Media files and doesn’t use Windows 7’s HomeGroup features.

This is not a definitive list of services that can be disabled; these are just some obvious ones. Read carefully and make sure you test changes before deploying them across your organization.

1: IP Helper

Windows description: Provides tunnel connectivity using IPv6 transition technologies (6to4, ISATAP, Port Proxy, and Teredo) and IP-HTTPS. If this service is stopped, the computer will not have the enhanced connectivity benefits that these technologies offer. Why this can be disabled:Many organizations haven’t even started testing IPv6, much less fully deployed it. As indicated in the service description, the IP Helper service is leveraged in IPv4-to-IPv6 transitions.

2: Offline Files

Windows description: The Offline Files service performs maintenance activities on the Offline Files cache, responds to user logon and logoff events, implements the internals of the public API, and dispatches interesting events to those interested in Offline Files activities and changes in cache state. Why this can be disabled: If your organization doesn’t use the Offline Files feature found in both Windows client and server products, this service can be safely disabled. Obviously, if you are synchronizing files across the network, you shouldn’t disable this service.

3: Network Access Protection Agent

Windows description: The Network Access Protection (NAP) agent service collects and manages health information for client computers on a network. Information collected by the NAP agent is used to make sure that the client computer has the required software and settings. If a client computer is not compliant with health policy, it can be provided with restricted network access until its configuration is updated. Depending on the configuration of health policy, client computers might be automatically updated so that users quickly regain full network access without having to manually update their computer. Why this can be disabled: If you’re not doing network-based remediation or if you’re doing remediation with a third-party tool that doesn’t leverage the NAP client, this service can be disabled.

4: Parental Controls

Windows description: This service is a stub for Windows Parental Control functionality that existed in Vista. It is provided for backward compatibility only. Why this can be disabled:Corporate networks rarely used Vista’s Parental Control functionality. Further, this is a legacy service from Windows Vista.

5: Smart Card

Windows description: Manages access to smart cards read by this computer. If this service is stopped, this computer will be unable to read smart cards. If this service is disabled, any services that explicitly depend on it will fail to start. Why this can be disabled: If your organization does not use smart cards for authentication purposes, you can safely disable this service.

6: Smart Card Removal Policy

Windows description: Allows the system to be configured to lock the user desktop upon smart card removal. Why this can be disabled: If your organization does not use smart cards for authentication purposes, you can safely disable this service.

7: Windows Media Center Receiver Service

Windows description: Windows Media Center Service for TV and FM broadcast reception. Why this can be disabled: In most corporate environments, TV and FM broadcast reception on desktop computers is not considered a “business critical” item that needs support, and it’s often not allowed anyway. You can disable this service to save some resources.

8: Windows Media Center Scheduler Service

Windows description: Starts and stops recording of TV programs within Windows Media Center.Why this can be disabled: Likewise, there’s no need to record TV programs in a corporate environment.

9: Windows Media Player Network Sharing Service

Windows description: Shares Windows Media Player libraries to other networked players and media devices using Universal Plug and Play. Why this can be disabled: On a corporate network, Windows Media Player doesn’t have nearly the place it might have on a home network. Disabling this service will have no impact on business activities.

10: Fax

Windows description: Enables you to send and receive faxes, utilizing fax resources available on this computer or on the network. Why this can be disabled: If your organization is not using a network-based faxing service, disabling this service will have no business impact.

11: HomeGroup Listener

Windows description: Makes local computer changes associated with configuration and maintenance of the homegroup-joined computer. If this service is stopped or disabled, your computer will not work properly in a homegroup and your homegroup might not work properly. It is recommended that you keep this service running. Why this can be disabled: It’s highly unlikely that a business organization — except a very small one — is using HomeGroups as a way to share resources on a network. It’s almost always safe to disable this service in a business setting.

12: HomeGroup Provider

Windows description: Performs networking tasks associated with configuration and maintenance of homegroups. If this service is stopped or disabled, your computer will be unable to detect other homegroups and your homegroup might not work properly. It is recommended that you keep this service running. Why this can be disabled: As noted above: Only very small organizations are likely to use HomeGroups to share resources on a network, so it’s almost always safe to disable this service in a business setting.

13: Tablet PC Input Service

Windows description: Enables Tablet PC pen and ink functionality. Why this can be disabled: The vast majority of PCs that are deployed to users do not have hardware that can leverage tablet-like capability. This service simply uses system resources with no possible benefit.

Have questions?

Get answers from Microsofts Cloud Solutions Partner!
Call us at: 856-745-9990 or visit: https://southjerseytechies.net/

South Jersey Techies, LL C is a full Managed Web and Technology Services Company providing IT Services, Website Design ServicesServer SupportNetwork ConsultingInternet PhonesCloud Solutions Provider and much more. Contact for More Information.

To read this article in its entirety click here.

Microsoft 365 Business: Get Office + Windows 10 in one SMB-friendly subscription

Will preview $20/month software-as-a-service plan Aug. 2

Earlier this week, Microsoft introduced two additional software-as-a-service subscription plans to the partners who will try to sell them.

The pair join an increasing number of subscription deals that the Redmond, Wash. company has modeled on the Office 365 pattern. The new plans even carry the “365” label, which Microsoft sees as a unifying identifier.

Microsoft 365 is, as CEO Satya Nadella introduced it Monday, “a fundamental departure in how we think about product creation,” composed of, initially at least, two plans. The more expensive, Microsoft 365 Enterprise, is simply a new name for a year-old, two-tier product titled “Secure Productive Enterprise E3” and “Secure Productive Enterprise E5.” Those SKUs (stock-keeping units) were introduced at Microsoft’s 2016 partner conference. Like SPE, M365 Enterprise tosses Windows 10 Enterprise, Office 365 and Enterprise Mobility + Security into a bucket.

But “Microsoft 365 Business,” or M365 Business for short, is the more interesting of the two plans because it is actually new. Nadella thought the same. “I’m so excited about the product innovation that you will see today around small and medium-sized businesses,” he said during a two-hour keynote before partners.

So, what’s Microsoft 365 Business?

That’s the new deal Microsoft will push later this year after an unspecified time in preview, which will start Aug. 2.

M365 Business includes:

Office 365 Business Premium, a software-and-service plan that includes all the Office applications, hosted Exchange email, OneDrive storage service and more. Alone, Office 365 Business Premium costs $12.50 per user per month when billed on an annual basis.

Windows 10 Pro: Devices currently running Windows 7 Professional or Windows 8.1 Pro may be upgraded to Windows 10 Pro under M365 Business.

Windows 10 Business: According to Microsoft, “Windows 10 Business is a set of cloud-[based] services and device management capabilities that complement Windows 10 Pro and enable the centralized management and security controls of Microsoft 365 Business.” The services and tools include a subset of those from Intune, Microsoft’s enterprise mobility management (EMM) platform, as well as Windows AutoPilot, an automated deployment service bundled with Windows 10’s March 2017 feature upgrade, aka 1703 and Creators Update.

How much does M365 Business cost?

$20 per user per month when it launches later this year.

That’s $7.50 per user per month more than Office 365 Business Premium, or an extra $90 per user annually. For that amount, customers receive the difference between the two plans: the upgrade to Windows 10 Pro and the various management service components.

Who is Microsoft 365 Business for?

According to Microsoft, the plan is “built for small and midsize customers that have little to no IT resources on staff.”

Although companies of any size can purchase M365 Business licenses, any one customer can buy no more than 300 subscriptions, another signal that it aims at small and medium-sized organizations.

The limited management tools also play to that theme. They’re designed to be easy to use and offer only basic functionality, and are accessed via simple control panels similar to what they may have already used for Office 365.

What’s the Windows 10 upgrade all about in M365 Business?

Microsoft’s descriptions of this component are sketchy thus far. An extensive company Q&A on the subscription plan had the most information, saying, “If you have devices that are licensed for Windows 7, 8 and 8.1 Professional, Microsoft 365 Business provides an upgrade to Windows 10 Pro.” (The “Professional” label holds for Windows 7, but 8 and 8.1 are dubbed “Pro” instead, as is Windows 10.)

Computerworld was unable to unearth additional details of the upgrade, specifically what happens when a customer cancels a M365 Business subscription or lets one expire. Do devices that were upgraded from Windows 7 Professional to Windows 10 Pro retain the latter license? Or is the Windows 10 license revoked, forcing customers to reinstall the previous OS?

Microsoft declined to answer questions about that scenario, and analysts who had been briefed by the company said that licensing issues were not discussed in Microsoft’s presentation.

The matter of expiring subscriptions requires context. Generally, when customers exit a subscription, say, Office 365, the applications and services will retreat into a reduced functionality mode or stop working entirely. Something similar happens after a subscription to Windows 10 Enterprise E3 or E5 lapses. “When a subscription license expires … the Windows 10 Enterprise device seamlessly steps back down to Windows 10 Pro,” Microsoft states in a support document.

In other instances, Microsoft doesn’t strip away an upgrade. Customers who have subscribed to Windows 10 Enterprise E3 or E5 may upgrade devices equipped with Windows 7 Professional or 8.1 Pro, to Windows 10 Pro; if they later depart the E3 or E5 plan, the Windows 10 license permanently remains in place.

Which of these options remains — cancellation or retention — is what’s unclear in the case of M365 Business.

What management tools does M365 Business include?

Enough, says Microsoft, to adequately serve small and mid-sized businesses.

What Microsoft calls “a simplified management console” controls device and user management functions. The tools bundled in M365 Business include:

  • Auto-install (and easy uninstall) Office
  • Wipe company data from devices, both company- and employee-owned
  • Enforce user settings on devices, including access to Windows Store or use of Cortana
  • Force users to save all work to OneDrive for Business
  • Configure new PCs as well as existing systems running Windows 10 Pro 1703 (Creators Update) or later using AutoPilot
  • Automatically update and upgrade Windows 10 PCs using Windows Update for Business

We heard there’s a preview of M365 Business. What’s that deal?

Yes, there will be a preview available starting, Microsoft’s said, on Wednesday, Aug. 2. The preview will be accessible from this website. Users may, in fact, sign up now for the preview on that page.

Although there is no charge for the preview, Microsoft recommended that potential customers contact their preferred Microsoft Partner — or locate one — to handle the M365 Business deployment.

Interestingly, Microsoft said, “Devices running Windows 7 [Professional] or 8.1 Pro are eligible for an upgrade to Windows 10 Pro within the Microsoft 365 Business preview.” It was unclear whether that upgrade would be retained or retracted at the end of the preview.

What does M365 Business require?

According to Microsoft, Windows 7 Professional PCs “likely meet the minimum requirements.” However, only Windows 10 devices can be managed in M365 Business, a powerful motivator for equipping as many systems as possible with the newer OS.

The other major precondition for the subscription — Azure Active Directory (AAD) — is necessary to enforce user and device policies set in the management console, and for other tasks, such as AutoPilot set-up. Microsoft acknowledged that on-premises Active Directory works with M365 Business, but “it is not recommended.”

Have questions?

Get answers from Microsofts Cloud Solutions Partner!
Call us at: 856-745-9990 or visit: https://southjerseytechies.net/

South Jersey Techies, LL C is a full Managed Web and Technology Services Company providing IT Services, Website Design ServicesServer SupportNetwork ConsultingInternet PhonesCloud Solutions Provider and much more. Contact for More Information.

To read this article in its entirety click here.