Preparing a new computer for personal use

There are certain steps I always follow when I get a new computer so I decided to write them down for everyone else to know as well.

I just received my new Dell Precision M3800. It’s got a 16 GB of RAM which is sad… Doesn’t it just suck that Intel doesn’t support 16GB modules of RAM with the i7-processors? AMD does but I wouldn’t buy a laptop with an AMD processor for other reasons.. So before Intel starts to support 16GB modules as well we are kind of stuck with 16GB Ultrabooks ..

Luckily drives on the other hand are getting bigger in capacity and smaller in size. So before I’m gonna take my Dell to production I’m going to change the mSata drive to a 1 TB sized Samsung one and the actual 2.5” SSD to another 1TB Samsung drive. Then what I’ll do is run Windows and programs on the mSata drive as well as store ISO files etc on it. Then I’ll steal the Dedup bits from the Windows Server 2012 R2 and use the 2.5” drive as a dedupped drive for my Hyper-V virtual machines. That’s the plan.

And what about my settings? I use UE-V, OneDrive and Folder Redirections (with Windows 8.1 having “Always offline mode” http://technet.microsoft.com/en-us/library/hh968298.aspx I love it!) so I’m not that worried. It’s usually a case of installing a few pieces of software, reinstalling my modern apps, settings up a new Outlook profile as UE-V doesn’t sync it and I’m ready to go. With the addition of the concept of primary computers I’m really in a struggling between using UE-V or Roaming profiles as the latter would sync the Outlook settings and taskbar better http://technet.microsoft.com/en-us/library/jj649076.aspx

While working with two computers for a while I love my new Logitech Ultrathin Touch Mouse T630 as it has two BlueTooth ID’s so I can change it from one computer to another with the press of a button.

What do I always to when I get a new computer?

1. Unpack
2. Finish off the installation for the preinstalled OS
3. Make sure you have a working Internet Connection
4. Update all drivers etc. in any way which is the easiest
5. Open up C:\Windows\System32\DriverStore\FileRepository\
6. Copy every folder that is newer than 22.8.2013 (in the case of Windows 8.1) to a USB stick
7. (change hard drives etc)
8. Install Windows 8.1 Enterprise with Update
9. Reinstall all device drivers from the USB stick
1. for /r %i in (*.inf) do pnputil.exe –i –a “%i”
1. Need to be run in the folder where you copied your DriverStore\FileRepository contents to
2. If Device Manager still shows something not working then install drivers manually
10. Some minor tweaking as always

Wioski 2.1 Out Now!

I’ve finally released Wioski 2.1 out to production. Changes are minor or big depending on perspective. Head to http://www.wioski.com/

Changes:
- New and better Windows PE used for the installation

- Support for Windows 8.1 (update) added

- Changed the minimum disk size to 40GB instead of the old 20GB

ATTENTION!! For fully automated installation the WIM-file used as the install.wim for Wioski can only have one image. If you have many images you should use the following DISM command to export the image to a new WIM-file:

dism /export-image /sourceimagefile:install.wim /sourceindex:1 /destinationimagefile:install2.wim

Remember to rename the wim-file to install.wim before copying it to the Wioski installation folder.

If you don’t know how many images a wim-file has use the below syntax to figure it out:

dism /get-imageinfo /imagefile:install.wim

Sami

TechEd North America 2014 results are in!

The results are in and this couldn’t have gone better for me

Some stats about TehcEd:

• 10000 attendees
• over 400 speakers
• 658 different sessions

My BlackBelt Troubleshooting Windows 8.1 was evaluated as the best session of TechEd NA 2014 and my BitLocker session was on shared #5 spot.

In speaker evals my both sessions were on the shared #1 spot!

If you haven’t seen the sessions you can watch them on Channel 9:

• http://channel9.msdn.com/events/TechEd/NorthAmerica/2014/WIN-B345#fbid=
• http://channel9.msdn.com/events/TechEd/NorthAmerica/2014/WIN-B314#fbid=

On my own Windows track I was number #1 and #2 on all scores!

A short story of my TechEd’s so far: I’ve been trying to get in to TechEd for years but as most of my publications have been in Finnish it has been almost impossible. Last year was my first ever TechEd and it started out great. In the US I was #19, in TechEd Europe I was the best external speaker losing only to Mark Russinovich and TechEd Australia 2013 I won in all categories. This year I hope to go to TechEd Europe and maybe New Zealand at least.

Thanks for all who made this happen, saw the sessions and gave evaluations! And as this is the closest I probably get to an Oscar speech I would like to first thank my Wife for all the support and pushing me to new levels and my Dad for giving me this profession.

Sami

BitLocker strengthening at TechEd North America

I promised my viewers that I’d give the presented GPO-settings as a prebuilt Group Policy object so here you go!

Download BitLocker-policy

Enabling vPro for full KVM (quick and dirty method on a Dell workstation)

I get asked this question so often I thought I’d better write it down for future reference.

I always buy computers that have Intel vPro. It costs me more but I can debug BIOS/UEFI issues and blue screen as I have total control of my machines with a hardware based KVM on all workstations as well as servers. This has been the case for servers for long but only for the past few years has it been available for workstations and laptops as well.

The machine I’m using for demonstrations is a Dell Optiplex 7010. I’ve ordered it with vPro and made sure it’s compatible with the latest KVM-mode. You can find info and the software I’m using from here: http://realvnc.com/products/viewerplus/

NOTE! This is a very simple and small environment so it’s super Quick&Dirty approach. You can use certificates and stuff for an Enterprise environment to make it more automated and secure.

- To get it up and running boot up your new machine and press F10 to get to the boot menu:

- Choose the Intel Management Engine BIOS Extension (MEBx)

- Now Login using the default password admin

(that might be different on other systems though) 

- Change the password to what you want and make sure you remember it!

- Now choose AMT Configuration

- Choose Network setup

- Choose Network name settings

- Give the computer a name

This can be the same as your Windows’ computer name. I use the same name but a different suffix.

- Give the Domain Suffix

I use a different DNS Zone that accepts Dynamic Updates without authentication. Makes it easy to find my vPro enabled machines and doesn’t require the encryption, authentication and certificates that I would use in a more enterprise environment.

- Next enable Dynamic Updates

- The last thing is to remember to active the Network Access!

There you go! Now on you can access your vPro chip with a browser by typing in the address: http://computername.elaiho.vpro:16992/ The username is Admin.

And in my case I mostly only use the VNC Viewer Plus. Here you can see a few pictures on how it looks like in both ends:

And this is what it looks like at the client end by default. You can see the the red/yellow lines that tell the client it’s been remote controlled:

I love it! Makes my life so much easier!

Sami

New Group Policy settings in Windows 8.1 Update

As there’s no official list yet here’s my own. I dug it from the ADMX-files.

Let users turn on and use Enterprise Mode from the Tools menu
        This policy setting lets you decide whether users can turn on Enterprise Mode for websites with compatibility issues. Optionally, this policy also lets you specify where to get reports (through post messages) about the websites for which users turn on Enterprise Mode using the Tools menu. If you turn this setting on, users can see and use the Enterprise Mode option from the Tools menu. If you turn this setting on, but don't specify a report location, Enterprise Mode will still be available to your users, but you won't get any reports.If you disable or don't configure this policy setting, the menu option won't appear and users won't be able to run websites in Enterprise Mode.
     
Use the Enterprise Mode IE website list
        This policy setting lets you specify where to find the list of websites you want opened using Enterprise Mode IE, instead of Standard mode, because of compatibility issues. Users can't edit this list.If you enable this policy setting, Internet Explorer downloads the website list from your location (HKCU or HKLM\Software\policies\Microsoft\Internet Explorer\Main\EnterpriseMode), opening all listed websites using Enterprise Mode IE.If you disable or don't configure this policy setting, Internet Explorer opens all websites using Standards mode.
     
Prevent the usage of OneDrive for file storage
        This policy setting lets you prevent apps and features from working with files on OneDrive.If you enable this policy setting:* Users can’t access OneDrive from the OneDrive app and file picker.* Windows Store apps can’t access OneDrive using the WinRT API.* OneDrive doesn’t appear in the navigation pane in File Explorer.* OneDrive files aren’t kept in sync with the cloud.* Users can’t automatically upload photos and videos from the camera roll folder.If you disable or do not configure this policy setting, apps and features can work with OneDrive file storage.
     
Prevent OneDrive files from syncing over metered connections
        This policy setting allows configuration of OneDrive file sync behavior on metered connections.

Save documents to OneDrive by default
        This policy setting lets you disable OneDrive as the default save location. It does not prevent apps and users from saving files on OneDrive. If you disable this policy setting, files will be saved locally by default. Users will still be able to change the value of this setting to save to OneDrive by default. They will also be able to open and save files on OneDrive using the OneDrive app and file picker, and Windows Store apps will still be able to access OneDrive using the WinRT API. If you enable or do not configure this policy setting, users with a connected account will save documents to OneDrive by default.
     
Show Windows Store apps on the taskbar
        This policy setting allows users to see Windows Store apps on the taskbar.If you enable this policy setting, users will see Windows Store apps on the taskbar.If you disable this policy setting, users won’t see Windows Store apps on the taskbar.If you don’t configure this policy setting, the default setting for the user’s device will be used, and the user can choose to change it.

PS. There are some policies related to Japanese language that are not here…

Running my VM’s and using external drivebays – TIP

Hello everyone and cheers from Build in San Francisco!

I always have a backup plan but it’s still always horrifying when your hardware fails just before an important presentation.

I was going to speak at the Pacific ITPros user group meeting on Tuesday and about an hour before starting my presentation I lost all my demo VM’s! I wouldn’t writing this if this wasn’t the third time this has happened for the same reason… I’m super happy about running my VM’s now on my current machine. I have a Samsung 9 Series 15” ultrabook and I’m having still hard time on finding anything better on the market although I’d like to buy a new on already. If you know some other competitor at the same size and weight with the following key specs please let me know:

• i7 processor
• 16GB RAM
• 1GBit ethernet + 3 USB ports
• VGA and HDMI ports

This combined with an external USB3 harddisk bay with an SSD harddisk and (the stolen) Disk Dedup from Server 2012 R2 makes a superbly high performance, light and modular demo machine to carry with you on an airplane.

Everything else works fine but the external disk bay. This one I know had until Tuesday was the third one that has broken. And what’s even more annoying is that it’s always the USB3 connector braking. Luckily I have an extra one that has yet failed or even shown signs of failing. It makes replacing the cable a bit harder but the simple tip I have to give is to always use drive bays that have the same interface model that you computer has!

So never this one again:

But always this one: