What to do if App-V Sequencer is missing from Windows 10 ADK 1607

When installing Windows 10 ADK 1607, the App-V Sequencer component may be missing. This depending on the Operating System you're installing Windows ADK on. When you need to install the App-V Sequencer from Windows 10 ADK 1607, make sure you install it on Windows 10 1607 as well. Otherwise use the Microsoft Desktop Optimization Pack (MDOP) Setup Media instead.

When running on Windows 10 1511/1507, Windows 8.x, Windows 7 or Windows Server 2012 R2, App-V Sequencer is missing.

When running on Windows 1607, App-V Sequencer will be back again :-) Other components are available then as well.

Hope it helps!

More on App-V in Windows 10 can be found here: Both App-V and UE-V integrated in Windows 10 Enterprise now!

Enable the Upgrades classification in ConfigMgr Current Branch (again)

Recently I was troubleshooting an environment where Windows 10 upgrades didn't came in. I did check if hotfixes were installed, which was the situation indeed.
-KB3095113: Update to enable WSUS support for Windows 10 feature upgrades (Server 2012 and 2012R2)
-KB3127032: Windows 10 upgrades are not downloaded in System Center Configuration Manager (CM1511 only)

I decided to remove the Upgrade checkbox, too put it on at later time. Then a new pop-up was displayed: Additionally, to service Windows 10 Version 1607 and later, you must install and configure KB3159706 using the guidance. Oops, I missed that one! Installed it a the WSUS/SUP and other Site server(s) and did have a look at additional steps too. This because of the following post on Microsoft TechNet: WSUS Breaks after KB3159706, released 5/5/2016

It mentions: Manual steps required to complete the installation of this update:
1. Install the hotfix and restart the WSUS/SUP server!
2. Open an elevated Command Prompt window, and run "C:\Program Files\Update Services\Tools\wsusutil.exe postinstall /servicing" (case sensitive)
3. Select HTTP Activation under .NET Framework 4.5 Features in the Server Manager Add Roles and Features wizard.
4. Restart the WSUS service.

I skipped steps mentioned on "If SSL is enabled on the WSUS server" at first try, but they seems to be needed too!
1.Open an elevated Command Prompt window, and assign ownership of the Web.Config file to the administrators group
-takeown /f web.config /a
-icacls "C:\Program Files\Update Services\WebServices\ClientWebService\Web.config" /grant administrators:f

2. Make the following changes in the file > add the lines displayed in bold, don't make the mistake (as me) to replace those lines!

3. Add the multipleSiteBindingsEnabled="true" attribute to the bottom of the Web.Config file
4. Restart the WSUS service.

Start a Software Update sync in ConfigMgr and watch wsyncmgr.log and WCM.log closely. Everything should be fine now!

Didn't see Windows 10 Servicing working yet, but hope too see it in near future. On Microsoft Ignite there was no session or demo about it too, given the fact that it may be working.

Will be continued in a next blogpost :-)

Final findings on Microsoft Ignite 2016 (Event) recap

Back from Atlanta again, downloading sessions and slides all night. A good script to do this can be found here: Ignite 2016 Slidedeck and Video downloader. At the moment I downloaded around 85GB of content so far, and it's not done yet :-)

As mentioned last year also, I don't like the idea of one big event with focus on several products. This because of networking and community, which is hard between 23.000 attendees. And because of in-depth knowledge and deep-dive sessions, most of community members going to IT/Dev Connections and Midwest Management Summit (MMS). That's not funny if you ask me. Hope that Microsoft wil consider a specific device management event in future again.

Overall the event was better then last year, where Microsoft did a first try to bring several events together. Therefore focus on Azure/Cloud, Server/Client, System Center/Intune, SQL/Visual Studio, Exchange/ Office 365 and SharePoint could all be found on one event. This year improvement was found on transfer shuttles, food (especially lunch), communication (security people) and Wi-Fi connection. Just picking up a name badge on airport is very pleasant, no need to wait on the event for this. No overbooked sessions this year for me also.

Improvements are still possible on food (more snacks between sessions), technical level on breakouts (more in-depth knowledge and demo's, offering level 300 and 400 sessions), sockets in sessions to load devices, and multiple lunch locations (not having to walk 20 minutes to pick up a lunchbox). As a device management focused person myself, I surely missed content on it. There were many sessions for sure, but still having the idea it wasn't enough to fill-up my schedule. No MMS replacement, if that is possible?

Big question is what Microsoft is doing next year. Microsoft Ignite will be back in Orlando, on September 2017, with the same capacity I guess. Not sure if I will attend again, or choosing Nordic Infrastructure Conference, IT/Dev Connections or Midwest Management Summit instead. Like to have more networking and community, more in-depth knowledge and deep-dive sessions, more overall tech-feast feeling. When attended Microsoft Ignite yourself, please use comments to describe "your feeling on the event". Thanks!

More blogposts on Microsoft Ignite:
My findings on Microsoft Ignite 2016 day 4 (Session and Expo) recap
My findings on Microsoft Ignite 2016 day 3 (Session) recap
My findings on Microsoft Ignite 2016 day 2 (Session) recap
My findings on Microsoft Ignite 2016 day 1 (Keynote and Event) recap
My scheduled sessions and product focus on Microsoft Ignite 2016 

My findings on Microsoft Ignite 2016 day 4 (Session and Expo) recap

Day 4 in Atlanta was kind of same as day 3 (in a good way). I did breakout sessions for 75 minutes again only, with lot of great stuff. I skipped the session after lunch, because of Expo closing. Instead of the extra session I spoke to several vendors and received information. Let's see which interesting stuff has been mentioned!
 
Implement Windows as a service
-With LTSB you keep to create big images and update all of your machines every few years (same as old model).
-With CB/CBB it's lot easier where smaller packages/downloads are used, which is quicker (requires new planning).
-Windows 10 cumulative updates supersedes the older ones to increase fragmentation (one big update).
-Only Quality updates (security & critical) and Features updates (optional) are left (new naming scheme).
-Microsoft recommends to implement al Windows 10 builds, and not to skip one (for CB/CBB usage only).
 
How to make the most out of Azure, Intune, O365 and W10
-Have a look at all new Windows 10 cloud services (OneDrive, Windows Update for Business, Windows Store for Business).
-Federation services (ADFS) is though to setup but it's worth it. Most people in room uses ADFS in environment!
-Secure Productive Enterprise contains of: Office365 + EM/S + Windows10. Website
-Secure Productive Enterprise is the most trusted, secure, and productive way to work.

 

Overall the event was better then last year, where things as Wi-Fi, busses and food were better now. Many people from Microsoft to show you the way. Microsoft did a good job on organization, having a event with 23.000 attendees is not that easy.

Let's have a look at my personal pro's on the event:
-Picking up name badge and bag before the event is really handy.
-Location was great, Atlanta is a good city for an event like this.
-Expo hall was really big and a lot of interesting stuff there.
-Shuttles between hotel and conference location were easy to use.
-Food (especially lunch) on the event was better then last year.
-Security people were nicer then last year, not shouting anymore.
-No overbook sessions on this event (for me), which is fine.

Now let's have a look at my personal con's on the event:
-Technical level on sessions may be better, with more in-depth knowledge and demo's, offering Level 300 and 400 sessions. Multiple times a Level 200 session was more tech and in-depth then a Level 300 session, which is strange isn't it?
-No possibility to load devices (tablet, phone) during sessions, where you need to find a place to load them, missing a session at same time.
-No possibility to have a quick lunch also, where a 20 minutes walk was needed. Therefore missing next session, because 30 minutes time is not enough to have lunch and walk back.

Microsoft Ignite is done for this year. Next year they will be back in Orlando, September 25 - 29, 2017. Sign-up now for early registration access and have first choice of hotels in March. I have done it myself already, just to be on time for registration.
 
More blogposts on Microsoft Ignite:
My findings on Microsoft Ignite 2016 day 3 (Session) recap
My findings on Microsoft Ignite 2016 day 2 (Session) recap
My findings on Microsoft Ignite 2016 day 1 (Keynote and Event) recap
My scheduled sessions and product focus on Microsoft Ignite 2016 

My findings on Microsoft Ignite 2016 day 3 (Session) recap

Day 3 in Atlanta was best till now, with lot of great sessions. I did breakout sessions for 75 minutes again only, all on Windows 10 and Microsoft Intune. I skipped the session during lunch, to have some rest and load both Surface and Lumia devices. Two sessions in the morning and two in the afternoon is best for me. Let's see which interesting stuff has been mentioned today!
 
Windows 10 deployment experience
-MDM or Microsoft Intune does not replace Group Policy and ConfigMgr. Improvements are coming!
-Windows Defender team is world class now. Take a look at Defender and you will be surprised :-)
 
Securing Android devices and apps with Microsoft Intune
-Android fragmentation challenges: 24.000 distinct devices within 1.294 brands!
-Android for work, Requires Android 6.0+ devices Website
-Android is missing some key features, Android security is lacking, Android device fragmentation
-Samsung KNOX extends native Android in a number of areas, 28 additional settings exposed by Samsung API's.
-Android for Work is Generally Available starting in October service release.
-Android for Work is filling the gap with managing Android or Samsung KNOX devices, given new policies and a business store!
 
Manage and secure iOS and Mac devices with Microsoft Intune
-Microsoft Intune with Apple DEP looks great, but it's a pain to get the certificate from resellers sometimes?
-Lots of information today on Android and iOS management with Microsoft Intune. It's getting better and better!

-Mac OS management with Microsoft Intune, seems to be a great solution!
-It doesn't care which iOS apps are installed by users, you can hide them with Microsoft Intune (in supervised mode)
-Coming up: Azure based console, Device based VPP, Multi-token support, iOS education features, Lost mode, More restrictions

-Azure based Intune console (looks great to me!)

Windows 10 security with ConfigMgr and Microsoft Intune
-Running your ConfigMgr environment on Azure is an Infrastructures as a Service (IaaS) solution
-Windows Store for Business integration in Microsoft Intune or ConfigMgr console is nice add-on for publishing apps!
-Google Play for Work looks and works same as Windows Store for Business Website
-Lot's of (new) dashboards in ConfigMgr console: Health Attestation, Software Updates and Windows Defender ATP

-What's new in Windows Update for Business (WUfB)
-WUfB Is the way to update devices in ConfigMgr in a controlled way

-Coming soon: Windows Upgrade Analytics in ConfigMgr console
 
Hope you like my findings so far! Stay tuned for more session findings later this week. Microsoft Ignite is rocking bigtime!

More blogposts on Microsoft Ignite:
My findings on Microsoft Ignite 2016 day 2 (Session) recap
My findings on Microsoft Ignite 2016 day 1 (Keynote and Event) recap
My scheduled sessions and product focus on Microsoft Ignite 2016 

My findings on Microsoft Ignite 2016 day 2 (Session) recap

Day 2 in Atlanta was better overall, where I did breakout sessions for 75 minutes only. No theater or other short sessions for me. Because of long walk between the sessions, you want to give your legs and feet some rest, and sit for a while. Problem again was the battery load on both Surface and Lumia device. When you use your device a lot for tweeting too (like me), you must load your battery during the day. Unfortunately you must really search for that, where it's not possible to load during the sessions.

Therefore I skipped a session partly during the day, to load both devices. Other point of complaining is lunch, which is a 15-20 minute walk, depends on where you are. Where spare time between sessions is around 30 minutes, you don't have time to walk to food service, eat your lunch, and be on time for the next session. Everything you need to do must be in a rush, which I do not prefer. Today I did 5 breakout sessions, with mixed feelings. Some where great, some moderate. It depends per session, but you can't walk out for another one, because of timeframe between other locations.

The following interesting stuff I heard (in first session):
-When you need to go fast with Windows 10, you need to go fast with ConfigMgr too.

-All Windows 10 deployment methodologies possible, where servicing is advised for future upgrades!
-A new Microsoft Deployment Toolkit is coming this year named MDT and not MDT 2016, which is the latest version!
-ConfigMgr Technical Preview 1609 is released yesterday with lot of great new features. Website

-How to migrate BIOS to UEFI during OSD task sequence > multiple solutions available.
-Nested task sequences are coming in ConfigMgr, which is the most requested feature!

-Language and region support (installing language packs) and customizable end user notifications are coming too!
-Coming soon: Clients will fallback to a next distribution point in 2 minutes by default (used to be 2 hours)
-User voice: 623 submitted ideas, 60 shipped in ConfigMgr current branch. Feedback

-What's needed for Windows 10 servicing in ConfigMgr Current Branch?
-With Windows Update for Business you delegate updates to Microsoft. Handy or not?

The following interesting stuff I heard (in other sessions):
 -The Microsoft Intune portal is moving from Silverlight to Azure platform completely! Really awesome.
-The New Microsoft Intune portal in Azure is expected somewhere in Q1 2017.
-Microsoft Intune Mobile Application Management is the way to go! Really awesome functionality and possibilities
-Everything is going to the cloud: Identity, Membership, Applications, Policies, you name it.

-20,533 total tenants on ConfigMgr Current Branch worldwide! With around 50% running on the latest build (1606).

-40,497,142 million total clients managed by ConfigMgr worldwide! With around 75% on latest builds (1602, 1606)
-New ConfigMgr Current Branch release is called 1610 and offers cloud-based management and peer caching for all content.
-Identity is the new attack surface! Not firewall anymore
-Identity challenges today: organizations want greater control, users wants simple passwords, multi-factor is to complex.

Stay tuned for more on new ConfigMgr features, Windows 10 servicing and mobile device & application management.

More blogposts on Microsoft Ignite:
My findings on Microsoft Ignite 2016 day 1 (Keynote and Event) recap
My scheduled sessions and product focus on Microsoft Ignite 2016 

Now Available: Update 1609 for ConfigMgr Technical Preview

Today (September 27th) the latest ConfigMgr (preview) version is released: Update 1609 for ConfigMgr Technical Preview. Update 1609 for Technical Preview is available directly in the ConfigMgr console. If you want to install ConfigMgr Technical Preview for the first time, the installation bits (currently based on Technical Preview 1603) are available on TechNet Evaluation Center. The new version offers lots of new functionality, with several great new features.
 
This update includes the following improvements:
-Windows 10 Upgrade Analytics (assess and analyze device readiness and compatibility with Windows 10 to allow smoother upgrades)
-Office 365 Client Management Dashboard (track Office 365 updates and deployments)
-Deploy Office 365 apps to clients (Office 365 Servicing node in Software Library, deploy Office 365 apps to clients)
-Improvements for BIOS to UEFI conversion (OS deployment task sequence with a new variable, called TSUEFIDrive)
-Improvement to Endpoint Protection antimalware policy settings (specify the level to block suspicious files)
-Boundary Group Improvements (more granular control of fallback behavior, and greater clarity which DP's are used)

This update also includes new features for customers using ConfigMgr integrated with Intune (hybrid scenario):
-TouchID, ApplePay and Zoom DEP Settings (create enrollment profiles to skip initial setup screens for new iOS devices)
-Windows Store for Business (allows customers to obtain applications, purchased or free, and deploy them to users)
-Android, iOS, and Windows Additional Settings (create Windows 10 VPN profiles without using OMA-URI)
-Intune Compliance Charts (quick view of overall device compliance, and top reasons for non-compliance using new charts)

And nested task sequences will be available soon too! Just great a new (preview) version is available now! Happy installing :-)

Source: Enterprise Mobility and Security Blog
Detailed overview of new features: Microsoft TechNet

My findings on Microsoft Ignite 2016 day 1 (Keynote and Event) recap

Day 1 in Atlanta was somewhat expected but not what I hoped for. The day was starting with the keynote (part 1), where part 2 was presented end of day. With around 23.000 attendees (which is equal as last year) it was full house! Within the Philips Arena itself there was plenty of space left, which is strange because there is room for 18.000 people as mentioned on Wikipedia. My guess is there were around 10.000-12.000 people at maximum :-)

Speakers were Julia White, Satya Nadella, Scott Guthrie, Donovan Brown and Laura Jones. No names like Joe Belfiore, Gurdeep Singh Pall or Brad Anderson this time. Instead of other keynotes before, Wi-Fi was working great this time. Even during the keynote opening, which is very pleasant! Point is, there were some announcements mentioned, but no technology demo's on them. Instead of that a lot of Microsoft marketing and topics like cloud solutions and artificial intelligence were mentioned. And that's pity if you get what I mean.

Julia White on stage

Announcements were done on the following products or solutions:
-Windows Server 2016 is GA (Download)
-System Center 2016 is GA (Download)
-Azure Monitoring dashboard, for overview
-Delve Analytics Outlook add-in for email statistics 
-Surface hub stormboard app, offers new features
-Windows Defender Application Guard for Edge browser

Furthermore the following was mentioned during the first keynote:
-IT stands for Innovation and Transformation
-Azure in 34 regions now, 2 times more as Amazon AWS
-Azure platform is growing strong says Gartner
-Windows 10 running on 400 million devices now
-MS Edge is the most secure browser for enterprises
-Cortana has 133 million users, 12 billion questions

Small moment of fame

Besides of that I went to two sessions on Windows 10 functionality and deployment. Both were level 200, which is kind of marketing level with a bit of tech information. More information on that in a next blogpost. No interesting information on Windows Server 2016, System Center 2016, Enterprise Mobility and/or MS Intune at all which is odd.

The Georgia World Congress Center itself is a really huge place, with lot's of floors and escalators. Many of them were malfunction for a while too. When moving between sessions, Expo hall or Food service, it is possible that a 20-30 minutes walk is needed. When a session is overbooked, it's almost impossible to be on-time for another one. That's the downside of an event with so many attendees. Back in the days of Microsoft Management Summit (MMS), with around 5.000 attendees this was never a problem at all.

Bus transfers are great, you never have to wait for transfers to Microsoft Ignite conference or hotel. Point of discussion is there is no paper conference guide this time, it's all mobile driven now. When you use your phone a lot for tweeting too (like me), you must load your battery during the day. Unfortunately you must really search for that, where it's not possible to load during the sessions. Between the sessions there is less time in between, which given a (partly)missed session to be battery loaded again.

My overall feeling after day 1 with two keynotes is somewhat expected but not what I hoped for (as mentioned earlier). Because Microsoft is talking about Mobile-first, Cloud-first and Azure solutions only, there's no feeling with new on-premises solutions and features like Windows Server 2016 and/or System Center 2016. Count that with long walks and bad lunch, and you have a kind of superficial day. Hope that next days (with more tech sessions) will be much better!

Stay tuned for more information on this.

More blogposts on Microsoft Ignite:
My scheduled sessions and product focus on Microsoft Ignite 2016

My scheduled sessions and product focus on Microsoft Ignite 2016

Next week Microsoft Ignite is already there! As for many months, the Microsoft Ignite general attendee registration is SOLD OUT! With around 20,000 attendees in attendance (which is same as last year), it will be a great event full off Microsoft announcements and new technology. More about that can be found HERE. In this blogpost I mention my focus on products and sessions scheduled.

When we look on products first, the following have my attention:
- Microsoft Azure
- Microsoft Intune
- System Center 2016
- Windows 10
- Windows Server 2016

Most sessions will be on Mobile Device & Application Management and how to keep Windows 10 secure:
- Conditional Access 
- Credential Guard
- Device Guard
- Federation Services
- Manage Android devices
- Manage iOS devices
- Windows Defender ATP
- Windows Information Protection
- Windows Store for Business
- Windows Update for Business

Where Windows 10 is one year old now, there's a business need to keep it secure and safely. Therefore less sessions on OS deployment this year for me, but security it is :-)

Expect a lot of tweets and blogposts around Microsoft Ignite from me, and lot's of other people love sharing knowledge.

Follow me on Twitter: @HenkHoogendoorn / @SCCM2016 / @Server2016 / @SysCtr2016

Microsoft probably won't release a Band 3 this year (or later)

Where Windows Phone worldwide sales is dropped to 0.7% market share only, next point of discussion is Microsoft Band. Microsoft probably won't release a Band 3 this year (or later). Didn't find statistics on market share on this, but would be pity if both Windows Phone and Band are end of life. Where other wearables must be used with the same operating system, Microsoft Band can be used in combination with your favorite phone. There are health apps for both Android, iOS and Windows Phone available.

Besides of that current Band is cheaper now, where price is dropped with $75 (temporarily). When looking for wearables market share, Microsoft is not mentioned at all. Maybe sales on Band is as worse as Windows Phone, where Microsoft stepped in to late to make a difference! Time will tell, because Microsoft has planned a device event on October 26th already. Hope that announcements are coming on  both expired and future devices.

My personal experience on Windows Phone:
Microsoft Lumia 950 experience after 9 months (pro's and cons)
Microsoft will be ending sales of all Lumia smartphones by end of this year!

Other news on Microsoft Band 3:
Microsoft probably won't release a Band 3 this year
Don't expect a new Microsoft Band device this year (or maybe ever)
And finally: Microsoft Band to be dumped and more

Microsoft will be ending sales of all Lumia smartphones by end of this year!

Last weeks sad news is coming from many news sites. Because of bad selling of Microsoft Lumia devices, Microsoft will pull the plug and ending sales of all Lumia smartphones by the end of this year. That's not strange with 0,7% market share only in Q1 2016 (Gartner). Probably the Surface Phone fits better, but it will be no consumer device for sure. This news is killing for Lumia owners like me, where devices are half of price after release 9 months ago.

Where my Lumia 950 was €599 around 9 months ago, with another €99 for a Display Dock (which was included with 950XL only), price has now dropped down to €299 with a free Display Dock instead. That's a €399 price drop within a year, which is frankly outrageous if you ask me! Microsoft is abandon Windows Phone lovers that way really quick. No good residual value for the money here, and no one daring to buy Surface Phone at later time. My 2 cents..

Where promises were made on Continuum and Appstore support, on both Android (Project Astoria) and iOS (Project Islandwood), nothing has been released so far. Continuum was not as expected, without further app support and possibility to open a single app multiple times. Appstore support on both Android and iOS transfers has never been released, which was another reason for me to buy this flagship. No single reaction from Microsoft so far on this!

So yes, it's no secret, Microsoft is done with it's Lumia line of devices. Probably Surface Phone will be coming end of 2017, where current Lumia 950 (XL) owners will not try it again. Time will tell if Surface Phone (when released, because currently just a product that's in-development internally), is good value for money after all. Still a disappointment for me and many other Windows Phone lovers, and time to look for a new device and platform.

My personal experience on: Microsoft Lumia 950 experience after 9 months (pro's and cons)

Other news on Lumia smartphones:
-Goodbye, Microsoft Lumia. Hello New Surface Phone
-Should you wait for the Surface Phone or buy a Lumia 950 now?
-Top 4 Reasons The Microsoft Surface Phone Will Be The Best Phone To Enter The Market
-Microsoft’s rumoured ‘Surface Phone’ may not arrive until next Fall
-Microsoft Surface Phone To Replace Lumia 950 Line; Release Date Moved To 2017?

Microsoft Lumia 950 experience after 9 months (pro's and cons)

Since December last year I'm using a Microsoft Lumia 950 as my primary phone. Since start I experienced many bugs, with lot's of unexpected reboots, overheating and all kind of nasty issues. With later builds this was getting better, but still I experience lot's of bugs. Where Windows Phone 8.1 (Samsung Ativ S) did perform excellent for many years, Windows 10 Mobile still isn't at some points. Let's have a look at my experiences so far.

Pro's
-Real Microsoft phone :-)
-Windows 10 Operating System
-Resolution (2560x1440, 564 ppi)
-Lot's of updates (with Insider builds)
-20 MP Camera (good quality)
-Windows Hello (when working)
-Gorilla Glass (no scratches)
-Battery (enough for one day)
-Fast charging (Superb!)
-Glance screen (very useful)

Cons
-Continuum (less features then expected)
-Unexpected reboots (cannot count them anymore)
-Camera button not working (very annoying, reboot needed)
-Camera reacts very slow sometimes (reboot needed)
-Camera app not working (error message, reboot needed)
-Lock screen black with red light only (happens sometimes)
-Incoming call cannot answer (very annoying, reboot needed)
-Store or other apps not working (error message, reboot needed)
-Windows Hello active during the night (very annoying, happens rarely)
-Photo saved as white image (guess this is a Micro SD problem?)
-Photo (un)zoom crash (happens almost all the time, no fix found)
-Bad photos in dark environments (guess because of camera)
-Less apps available then expected (very bad and not as promised)
-Pointer on screen not accurate (during games, happens a lot)

Note: On every location which says [reboot needed], the issue is (temporarily) solved, but not gone completely.

As you can see I experience more cons then pro's after heavy usage and many updates. This because I'm using camera and photo app a lot, and both are (still) not stable. Besides of that I ordered the Lumia 950 for Windows Hello and Continuum, where both I'm not using. Windows Hello is to slow for me, and doesn't recognize me sometimes. Continuum is not as expected, with less supported apps available, and not a full PC environment as promised on start. No possibility to open apps twice either.

Windows 10 Mobile (even on 1607) is not stable all the time, where apps (even Camera and Store) can crash, the lock screen can crash, and incoming calls can crash too. The Windows store isn't updated with iOS and/or Android apps as promised earlier. Therefore I thinking about switching my device to another platform now. Guess the Lumia 950 will be my secondary phone from now on, which is pity because Microsoft could have a winner here!

Other news on Windows 10 Mobile:
-Even Microsoft's biggest fan doesn't want Windows 10 Mobile
-Mary Jo Foley becomes the latest to dump Windows Phone for Android
-Why I broke up with Windows Phone: It's not me, it's you
-Is It Last Call for Windows Mobile?
-The Great Windows Phone App Exodus of 2016 (Premium)
-Rethinking Windows Phone (Premium)
-Windows Phone market share sinks below 1 percent

Unable to promote pre-production client in ConfigMgr Current Branch

Today I did an upgrade on ConfigMgr Current Branch from version 1602 to 1606. During the upgrade I choose to validate the client package in pre-production first. After the upgrade however, there was no possiblity to promote the ConfigMgr client to the latest version. I restarted the ConfigMgr server and console, but without any luck. After that I decided to install Update Rollup 1, which was successful again, but still the same behaviour. No possibility to promote the ConfigMgr client to the latest version again.

Lucky me I found the following thread: Microsoft TechNet
It mentioned: I solved my problem. It seems to be a RBAC problem. The user I used in ConfigMgr was "Full Administrator" but assigned though an AD group and not directly assigned. When I added my user directly as a user account in the ConfigMgr console and gave him "Full Administrator" rights then I could promote the client to production.

In my case (customer location) this was the same situation. The user which did the upgrade and was logged on is part of an security group. That's a nasty situation for sure! Long story short: I added the user directly as Full Administrator in the console, and the "Promote Pre-production Client" button became available again. Hope that Microsoft will fix this for future builds, because adding users instead of groups is not the way to go. Hope it helps!

Software Center not showing applications in ConfigMgr Current Branch

Recently I had an issue at customer location where applications were not showing in ConfigMgr Current Branch. When opening Application Catalog instead all applications showing up without any problem. In the old days only software packages were displayed in Software Center, leaving the Application Catalog for applications. Apparently I was closer to the solution then expected, because I was still looking at the older Software Center, where using the new one was enabled in Client settings. Let's have a closer look.

At this location the shortcut was offered by Group Policy Preferences instead of ConfigMgr default. Microsoft did update the Software Center in ConfigMgr Current Branch, but did not replace the executable which is used. Therefore the link which is used for the old and new Software Center differs form each other:

Old location > C:\Windows\CCM\SCClient.exe

New location > C:\Windows\CCM\ClientUX\SCClient.exe

So yes, you can offer both old and new Software Center, where the old one only showing software packages, and the new one offers both software packages and applications. Long story short: after changing the shortcut in Group Policy Preferences, the issue was gone. Happy with this easy solution ;-)

Update Rollup 1 for ConfigMgr Current Branch, version 1606 available now!

Today the following ConfigMgr update is released: Update Rollup 1 for ConfigMgr Current Branch, version 1606. It fixes 16 issues and 1 additional change is included. It sounds like a cumulative update with many improvements to me :) Let's have a look at the fixes.

This update includes the following improvements:
-Administrator Console (1 fix)
-Updates and servicing (1 fix)
-Client (4 fixes)
-Software Updates (2 fixes)
-Site Systems (1 fix)
-Operating System Deployment (1 fix)
-Windows Store for Business (4 fixes)
-Software distribution and content management (1 fix)
-Endpoint Protection (1 fix)

Additional changes included in this update:
-Windows Server 2016 is now available in the supported platform list for Content Distribution, Software Update Management, and Settings Management.

This update is available for installation in the Updates and Servicing node of the ConfigMgr console. If the service connection point is in offline mode, you have to re-import the update so that it is listed in the ConfigMgr console. Refer to Install Updates for System Center Configuration Manager for details.

For more details and to view the full list of new features in this update check out our documentation on TechNet.

Create and deploy a Wi-Fi profile with pre-shared key in Microsoft Intune

Recently I wanted to deploy a Wi-Fi profile with pre-shared key in Microsoft Intune. This both on Windows 10 Enterprise (Surface Pro 3) and Mobile (Lumia 950). This is described on multiple blogposts and can be done in various ways. But after some hours digging it still didn't work. Finally I found a solution which did the trick. In this blogpost I share my thoughts about it.

Within Intune you can choose between a Custom configuration policy or Wi-Fi import (Windows 8.1 or later). With both solutions you need an XML file with the Wi-Fi configuration. This file can be created with the command: netsh wlan export profile name="ProfileName" folder="Source". When not sure which ProfileName to choose, use the command netsh wlan show profiles to see an overview of all Wi-Fi connections used before.
 
Let's have a look at both solutions now:
-Wi-Fi import: Use the Windows Wi-Fi Import Policy to import a set of Wi-Fi settings that you can then deploy to the required user or device groups. Didn't used this solution myself, because this one is without a pre-shared key. More information can be found HERE.
-Custom configuration policy: To create a Wi-Fi profile with a pre-shared key for Android or Windows, or an EAP-based Wi-Fi profile, when you create a policy choose Custom Configuration for that device platform, rather than a Wi-Fi profile. This is based on a OMA-URI setting instead of a profile. More information can be found HERE.
 
Trick is there's an typo in the solution mentioned. In the document ./Vendor/MSFT/Wi-Fi/Profile/<SSID>/Settings is mentioned, where ./Vendor/MSFT/WiFi/Profile/<SSID>/Settings must be used. Still deployment of Wi-Fi profiles didn't work out for me. Looking on another page a different OMA-URI setting was used, ./Vendor/MSFT/WiFi/Profile/MyNetwork/WlanXml. This one was working right away! Very confusing to see different solutions mentioned on Microsoft websites if you ask me. More information about that HERE.
 
Nice thing is you can add additional OMA-URI settings too. This to disable Wi-Fi sense (sharing Wi-Fi profiles) and some other cool things ;). This setting is called AllowInternetSharing and can be found HERE.

In the end the following is seen on my mobile device:

Just great if you ask me! ;)

Microsoft Azure RemoteApp will be replaced with Citrix XenApp Express

During my vacation Microsoft has announced that Azure RemoteApp (ARA) is ending/ended. The service provided the ability for mobile devices running on different platforms to get access to any corporate app. Microsoft will continue support to existing Azure RemoteApp customers on the service through August 31st, 2017, when the service will be wound down. Nobody saw this coming, I guess?
 

But the good news is: Citrix is introducing a new Citrix application virtualization service ”XenApp Express” that will serve as the next generation service for Microsoft Azure RemoteApp customers. This revolutionary new app delivery service will combine the speed of Microsoft Azure RemoteApp with many of the enterprise capabilities of Citrix XenApp to create the fastest, simplest way for you to access your app from the cloud.
 
In many ways, you can look at this "XenApp express” service as Azure RemoteApp v2.0. You can also see it as the fastest, easiest way to use XenApp in the cloud. Either way, this new service will be the next generation application virtualization and delivery service for Azure. Hope to see more about that in future!
 
Did post a few blogposts myself about Azure RemoteApp, but unfortunately the cloud solution is no more. Just have a look at the following blogposts for more information. XenApp Express will be expected somewhere in 2017.

From Microsoft:
Application remoting and the Cloud
Microsoft and Citrix Partner to Help Customers Move to the Cloud

From Citrix:
An Open Letter to Microsoft Azure RemoteApp Customers
Citrix to Introduce a Cloud Service that Delivers Secure Apps from Azure to any Device

Both App-V and UE-V integrated in Windows 10 Enterprise now!

Within Windows 10 version 1607, both App-V and UE-V are part of the Operating System as Windows features. This instead of inclusion in MDOP, which required a separate download and installation. 

With Windows 10, version 1607 and later releases, Application Virtualization (App-V) is included with Windows 10 for Enterprise and Windows 10 for Education and is no longer part of the Microsoft Desktop Optimization Pack anymore.

The changes in App-V for Windows 10, version 1607 impact already existing implementations of App-V in the following ways:
-The App-V client is installed on user devices automatically with Windows 10, version 1607, and no longer has to be deployed separately. Performing an in-place upgrade to Windows 10, version 1607, on user devices automatically installs the App-V client.
-The App-V application sequencer is available from the Windows 10 Assessment and Deployment Kit (ADK). In previous releases of App-V, the application sequencer was included in the Microsoft Desktop Optimization Pack. Although you’ll need to use the new application sequencer to create new virtualized applications, existing virtualized applications will continue to work.

App-V supports System Center 2016 and 2012 R2. See Planning for App-V Integration with Configuration Manager for information about integrating your App-V environment with ConfigMgr.

Sources:
Getting Started with App-V for Windows 10
User Experience Virtualization (UE-V) for Windows 10 overview
What’s new for IT pros in the Windows 10 Anniversary Update

New Group Policy templates and Windows ADK available!

With Windows 10 Build 1607 available, new Group Policy templates has been release too. This is needed to manage all changes and new features avaiable in the Operating System. Expect a new update on this with every new Windows 10 release. Besides of that a new Windows ADK is released too. ADK offers some additional features now too. Let's have a look at the changes so far.

Group Policy:
New Group Policy templates for Windows 10 and Windows Server 2016 can be downloaded here: Microsoft
There is a new Group Policy Settings Reference for Windows and Windows Server available too: Microsoft

The following References can be found:
-Windows 10 ADMX spreadsheet.xlsx (1511)
-Windows10andWindowsServer2016PolicySettings.xlsx (1607)
There are almost 400 lines added in the new reference!

Because both App-V and UE-V are part of Windows 10 now, a lot of settings are based on that functionality. Furthermore some settings has been moved from Pro to Enterprise described here: Blog
More on both App-V and UE-V in a future blogpost!

Windows ADK:
New Windows ADK for Windows 10, version 1607 can be downloaded here: Microsoft

The Windows ADK now includes Windows Imaging and Configuration Designer, the Windows Assessment Toolkit, the Windows Performance Toolkit, and several new and improved deployment tools that can help you automate a large-scale deployment of Windows 10.

Windows ICD in Windows 10, Version 1607, supports the following scenarios for IT administrators: Simple provisioning, Provision school devices, and Advanced provisioning, where the first two offers a new and easy wizard.

In previous versions of the Windows 10 ADK, you had to install additional features for Windows ICD to run. Starting in version 1607, you can install Windows ICD without other ADK features (as showed earlier). Much better if you have a dedicated device to create or edit provisioning packages.

Sources:
Windows ADK for Windows 10 version 1607 available for download
Provisioning packages for Windows 10