Conference 2017 Learning to Live with Windows 10 What weve - - PowerPoint PPT Presentation

▶
conference 2017
SMART_READER_LITE
LIVE PREVIEW

Conference 2017 Learning to Live with Windows 10 What weve - - PowerPoint PPT Presentation

Oct 08, 2022 151 likes •369 views

Conference 2017 Learning to Live with Windows 10 What weve learned at UVic Where the journey started Early adopters of Windows 10 in Fall 2015 Limited deployment in Spring 2016 with version 1511 Moved to Windows 10 on all

slide-1
SLIDE 1

Conference 2017

Learning to Live with Windows 10

What we’ve learned at UVic

slide-2
SLIDE 2

Conference 2017

Where the journey started

  • Early adopters of Windows 10 in Fall 2015
  • Limited deployment in Spring 2016 with version

1511

  • Moved to Windows 10 on all standard

computers purchased after June 2016

2 Learning to Live with Windows 10

slide-3
SLIDE 3

Conference 2017

Where we are today

  • All standard computers deployed with version

1607

  • 1/3 of our managed fleet are using Windows 10

Learning to Live with Windows 10 3

slide-4
SLIDE 4

Conference 2017

A few common terms first

Learning to Live with Windows 10 4

Term Description Upgrade A new Windows 10 release that contains additional features and capabilities, released two to three times per year. Update Packages of security fixes, reliability fixes, and other bug fixes that are released periodically, typically once a month on Update Tuesday (sometimes referred to as Patch Tuesday). With Windows 10, these are cumulative in nature. Branch The windows servicing branch is one of four choices: Windows Insider, Current Branch, Current Branch for Business, or Long-Term Servicing

  • Branch. Branches are determined by the frequency with which the

computer is configured to receive feature updates. Ring A ring is a groups of PCs that are all on the same branch and have the same update settings. Rings can be used internally by organizations to better control the upgrade rollout process.

Source: https://technet.microsoft.com/de-de/itpro/windows/manage/introduction-to-windows-10-servicing

slide-5
SLIDE 5

Conference 2017

What did we learn

  • Don’t try to remove all modern apps
  • Modern apps are sensitive to sysprep and

image capture

  • User and computer settings are reset in

upgrades

  • Local policy and group policy considerations
  • Watch insider discussions
  • What is broken in one version is usually fixed in the

next cumulative update

Learning to Live with Windows 10 5

During the build process

slide-6
SLIDE 6

Conference 2017

What did we learn

  • Manage default applications using XML

export/import

  • Set a default other than Edge
  • Resource:

https://technet.microsoft.com/en-ca/library/hh825038.aspx

Learning to Live with Windows 10 6

During the build process

slide-7
SLIDE 7

Conference 2017

What did we learn

  • Policies per feature release (1511, 1607, 1703)
  • WMI filters to apply the right GPOs to the right

version

  • Different GPOs manage same settings/keys in a

conflicting way

  • Descriptions inconsistent; some policies do not

work as described (eg – upgrade deferral)

  • Test all GPOs
  • Undocumented changes (eg – wireless auth’n)

Learning to Live with Windows 10 7

Group Policy management

slide-8
SLIDE 8

Conference 2017

What did we learn

  • Microsoft Customer Experience GPO
  • Prevents “fun” applications
  • Prevents advertising within operating system

Learning to Live with Windows 10 8

Group Policy management

slide-9
SLIDE 9

Conference 2017

What did we learn

  • Privacy and security settings:
  • Cortana and Windows Search
  • Telemetry
  • Wifi sense
  • Modern app access to data
  • Resource:

https://blogs.technet.microsoft.com/secguide/2016/10/17/security- baseline-for-windows-10-v1607-anniversary-edition-and-windows-server- 2016/

Learning to Live with Windows 10 9

Group Policy management

slide-10
SLIDE 10

Conference 2017

What did we learn

  • Build environment requires update for every

version upgrade

  • What appears to work may have subtle impacts you

don’t immediately notice (eg – dism)

  • Test capture/deployment on your fleet for each

version upgrade

  • Driver incompatibility that only occurs during

deployment (eg – USB on Optiplex 3040)

Learning to Live with Windows 10 10

Deployment process

slide-11
SLIDE 11

Conference 2017

What did we learn

  • Version upgrades require updates of all

support resources

  • WDS
  • SCCM
  • ADMX GPO templates

Learning to Live with Windows 10 11

Ongoing support

slide-12
SLIDE 12

Conference 2017

What did we learn

  • Basic support added in SCCM 2012 R2 SP1

CU3

  • Windows Servicing features added to better

manage version upgrades

  • SCCM current branch, 1610
  • Updates add workflows for specific versions of

Windows 10

Learning to Live with Windows 10 12

SCCM

slide-13
SLIDE 13

Conference 2017

What did we learn

  • Feature upgrades are more like a fresh install

than a service pack

  • 1607 upgrade boots to PE and reinstalls Windows
  • Version upgrades can be deferred for 180 days

in 1607, 365 days in 1703

  • Even if using WSUS/SCCM, feature upgrades

cannot be deferred indefinitely

Learning to Live with Windows 10 13

Windows update

slide-14
SLIDE 14

Conference 2017

What did we learn

  • Feature upgrades are more like a fresh install

than a service pack

  • 1607 upgrade boots to PE and reinstalls Windows
  • Version upgrades can be deferred for 180 days

in 1607, 365 days in 1703

  • Even if using WSUS/SCCM, feature upgrades

cannot be deferred indefinitely

Learning to Live with Windows 10 14

Windows update

slide-15
SLIDE 15

Conference 2017

What did we learn

Learning to Live with Windows 10 15

Windows update

Source: https://technet.microsoft.com/de-de/itpro/windows/manage/introduction-to-windows-10-servicing

slide-16
SLIDE 16

Conference 2017

What did we learn

  • Identify a few machines for the Insider Program
  • Current Branch immediately when released
  • Don’t forget about the end of the deferral

window

  • Prepare and plan for version upgrades as you

would for a new release of Windows

Learning to Live with Windows 10 16

Ongoing lifecycle

slide-17
SLIDE 17

Conference 2017

What did we learn

  • Antivirus compatibility
  • Symantec Endpoint Protection at UVic
  • Version compatibility will prevent upgrades but

Windows support lifecycle marches forward

  • Version upgrades are immense
  • 1607 upgrade was ~6.6GB

Learning to Live with Windows 10 17

Roadblocks to version upgrades

slide-18
SLIDE 18

Conference 2017

Next step opportunities

  • User State Migration Tool to assist with

upgrades

  • Update cycle for SCCM
  • More important to remain at current branch
  • Plan for regular update cadence of Windows

as well as baseline software

Learning to Live with Windows 10 18

slide-19
SLIDE 19

Conference 2017

Our 1607 upgrade

Learning to Live with Windows 10 19

  • Learn from our mistakes!

Source: https://www.youtube.com/watch?v=5-CYF2Oy9GU

slide-20
SLIDE 20

Conference 2017

For discussion

  • Versions of Windows 10:

Education vs Enterprise

  • Success stories from the room:
  • Successful version upgrades?
  • Experience with Windows Servicing?
  • Other resources that you have found helpful?

Learning to Live with Windows 10 20