Windows 10 upgrade ending soon!

Hi all,

As you know, Windows 10 has a free upgrade if you have Windows 7 or 8.1 deployed… but not forever. The free upgrade offer to Windows 10 will end on July 29, 2016!

Check that page:

https://blogs.windows.com/windowsexperience/2016/05/05/windows-10-now-on-300-million-active-devices-free-upgrade-offer-to-end-soon/

FAQ for Windows 10 upgrade:

https://support.microsoft.com/en-us/help/12435/windows-10-upgrade-faq

Regards!

Disable install certificates on a desktop computer for users

Hi!

Below I put how to block that a user cannot install certificates on a desktop.

Regards!

In a new GPO on User config configure the following settings to block a user for can not install certificates with internet explorer or use the certificates snapin:

Imagen

The next step is to block by GPP than a user cannot install cert doing double click on the cert. The path to configure this is Computer Configuration\Windows Settings\Security Settings\File System

Imagen

There we add the following exe´s:

%SystemRoot%\system32\certutil.exe

%SystemRoot%\system32\CertEnrollCtrl.exe

%SystemRoot%\system32\certmgr.msc

%SystemRoot%\system32\certreq.exe

%SystemRoot%\system32\cryptext.dll

Imagen

And add a new user group denying permissions.

Imagen

When user will do double click will appear the following message.

Imagen

Regards

How to increase MaxTokenSize

Hi,

When users pertain a lot of groups or sid history has a lot of passwords this do that the token size to be increased too much. To solve this error you have two options, reduce the user group membership, reduce password history or increase the token size, (How interact a token when a user go to authenticate: http://technet.microsoft.com/en-us/library/cc783557(v=ws.10).aspx)

For the second option you can do the following reconfiguration on the workstations:

Key:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\Kerberos\Parameters

Entry: MaxTokenSize
Data type: REG_DWORD
Value: 48000

By GPO do the following configurations:

http://support.microsoft.com/kb/938118/en-us

Regards!

FREE eBook: Windows 8 An Overview for IT Pros

Hi!

Is ready for download the free book from MSPress, Windows 8 An Overview for IT Pros.

http://blogs.technet.com/b/keithmayer/archive/2012/11/02/free-ebook-windows-8-for-it-pros.aspx#.UKKid4ezKSo

Inside you can find:

  • Hardware Innovations

Touch; Long battery life; Thiner, lighter, faster; Sensors and security; New Form Factors

  • Experiencing Windows 8

Walk-through the new UI and key improvements to Task Manager and File Explorer.

  • Customizing and Configuring Windows 8

Profile customization, Tile configuration, PC Settings, Redesigned NTFS

  • Networking Enhancements

BranchCache, DirectAccess, Mobile broadband, IPv6

  • Deploying Windows 8

Windows 8 SKUs, Application Compatibility, User State Migration, Deployment and Imaging,      Windows PE, Volume Activation Management Tool, Windows-to-Go

  • Delivering Windows Apps

Windows app lifecycle, Distributing via Windows Store, Distributing with an Enterprise

  • Windows 8 Recovery

File History, Refresh and Reset, Windows Recovery Environment, DaRT, Advanced Options

  • Windows 8 Management

PowerShell 3.0, Group Policy Improvements, System Center 2012 Configuration Manager, Windows   Intune

  • Windows 8 Security

Secure boot, SmartScreen, Vulnerability mitigation and sandboxing, BitLocker, Virtual smart cards, Dynamic Access Control

  • Internet Explorer 10

New features, Group Policies for IE 10

  • Windows 8 Virtualization

Client Hyper-V, Virtual Desktop Infrastructure, Application virtualization, User state virtualization

This year is time to hand on lab!!

Regards

Marc