Microsoft Ignite – Day 04 – 29-09-2016

Today I met Jeffrey Snover and had a lot of conversations with new IT Pro’s. That’s what I like about Ignite: connecting with Microsoft Experts and other IT Pro’s! Tonight is the Attendee Celebration at the Olympic Park. Tomorrow is the last day at Ignite and the conference will end at 14:00.

Below are the sessions I can recommend and followed today:

  • Understand Credential Security by Paula Januszkiewicz
    • If you can attend a session of Paula, always do it because she has interesting sessions about security.
    • She will demo how cached credentials work and will show you how to get the users credentials with Classic Data Protection API.
    • Paula will demo how to decrypt KeePass if you use Windows User Authentication with the Data Protection API.
    • Paula will show you how to extract credentials from a Windows service. You need access to the registry for this hack.
    • She will show you how you get access to the password in a SID-protected PFX certificate file and how to access Windows with smart card authentication turned on, without a smart card.
    • ProTip from the session: know and limit your domain admins! Domain admins can also do tricks as other users from the domain.
  • Conduct a successful pilot deployment of Microsoft Intune
    • You’ll learn how to start a successful pilot and get tips from the field.

Follow me on Twitter for live news from Ignite!

Microsoft Ignite – Day 03 – 28-09-2016

Yes, a new day at the Microsoft Ignite conference! All the sessions are spread across 3 buildings (A, B, C) and I must say that this keeps you fit during the conference. On Monday, my iPhone showed me the following stats for the day:

ignite-health-stats

18.8 kilometers is around 11.6 miles!

Today I really enjoyed the session with Jeffrey Snover and Don Jones about PowerShell. I don’t know if it was recorded and will be available later, but I can highly recommend it. In the afternoon I met Jason Helmick, which is a really great guy who learned me (with Jeffrey Snover) what PowerShell is and how it can be used. One of the greatest courses you can find on the internet today, is an MVA course with Jeffrey and Jason.

Continue reading

Dell UltraSharp U3415W 34″ Curved

Dell U3415W MonitorThis week I received my new monitor, the Dell UltraSharp U3415W Curved as a replacement for my Dell UltraSharp U2312HM Triple Screen setup. My workplace is going to be part of my living room this year, so I don’t want a triple screen setup there. After I placed the screen on my desk, I had a “WOW” moment. Absolutely beautiful screen and design of the Dell screen. Don’t expect a full review here, but just some things you should know before you buy this monitor.

Continue reading

Microsoft Surface Pro – An enterprise device?

Microsoft is pushing everything to an “As a Service” model. I think that’s great because of – for example – staying in control of licenses and costs. Microsoft recently announced the “Windows 10 as a Service” and “Surface as a Service” services. The Surface Pro 4 is a fantastic device, but in my opinion lacks a couple of essential features to classify it as an Enterprise Device. I worked with large organizations and the first 2 check boxes on the acceptance list are:

  • The device needs a Kensington lock
  • The user needs to provide the BitLocker PIN to start the device

I think those points are really necessary for an enterprise device. Without a Kensington lock, a device can be easily stolen during a short break. (Or do you take your Surface with you when going to the toilet?!) Most organizations require that a BitLocker PIN is needed to unlock the device. It’s possible to use an on screen keyboard during the preboot screen, but I don’t see any business using this. Mark Morowczynski from Microsoft says that this is because an attacker can connect to the machine using DMA or retrieve the secrets from memory. The Surface Pro 4 DMA connector is soldered on the motherboard, but the memory can still be easily stolen without a Kensington lock!

So what do you think? Should Microsoft add the Kensington lock to the Surface Pro 5?