Group Policy
Get Started with Windows Update for Business (WUfB)
· β˜• 6 min read
You may have seen the option to use Windows Update for Business and wondering what it brings to the table when compared to WSUS and SCCM. Windows Update for Business (WUfB) is a good way of simplifying and automating the deployment of Windows Updates without using any on-premises infrastructure. The downside is that you do loose some control, but the benefits outweigh the drawbacks. As I always say, it does depend on your infrastructure and environment though.

Quick PoSH: User Logon Auditing
· β˜• 1 min read
Here’s a quick and dirty user logon/logoff auditing script that has been helpful in educational institutions. The script is available to download from GitHub. Usage Open the Group Policy Object at the top most level of your domain(s) and add the script to the PowerShell scripts area. On log on, add the -logon parameter, and on log off add the -logoff parameter. Create a hidden share somewhere on your network, and give ‘Authenticated Users’ Full Control share and file permissions.

Managing Windows Updates with Group Policy
· β˜• 12 min read
In this post I’ll walk through how I manage and test the delivery of Windows Updates to all my clients and servers. I’ll also go through how I manage essential servers like Domain Controllers, Hyper-V hosts and I’ll touch on getting started with Cluster-Aware Updating. We’re going to group our machines into Clients and Servers, and then group each of those groups into Ring 1 and Ring 2. If you want, you can create more rings for more control, but generally I find two rings are sufficient.

Windows 10 1903/1909 (19H1/19H2) Changes, Tips and Tricks
· β˜• 3 min read
Here’s a couple of helpful tips and tricks I’ve found from Windows 10 1909/1903 and previous versions. Let’s get into them! Search and Cortana Are Separated In 1903/1909 A good change IMO and my first impressions of the new search is that it’s back to being as good as Windows 7’s. The search bar on the Taskbar is now just search and has nothing to do with Cortana. By default the search bar is expanded on the Taskbar and Cortana is just an icon.

Installing and Configuring Windows Server Update Services with Windows Server 2016 Core
· β˜• 9 min read
Windows Server Update Services (WSUS) can use a lot of resources, so why not use Windows Server Core and make the most of the resources you have. In this post I’ll go through the initial steps on how to deploy and configure a WSUS server using command line and PowerShell. Important note: If you need the to boot Windows Server 2016 ISO from a USB flash drive, use the Windows USB/DVD ToolΒ available to download direct from Microsoft.

Upgrading to Windows 10 1703 (Creators Update) with WSUS
· β˜• 7 min read
As Windows is now delivered ‘as-a-service’ withΒ major updates being released biannually, you may want to push out these major updates using WSUS. In previous posts I’ve covered deploying Windows 10 1703 (Creators Update) as a clean install with Microsoft Deployment Toolkit and also how to perform an upgrade to Windows 10 1703 using MDT. In this post, I’ll walk through the process of pushing out the upgrade to Windows 10 1703 using WSUS.

Delving Into Disabling OneDrive
· β˜• 3 min read
UPDATE 2017-11-07: After testing the method below on Windows 10 1703, I found that it wasn’t working as it did with 1607. To disable One Drive and remove the One Drive folder from the Navigation Pane of Windows Explorer, enable the group policy item: Computer Configuration/Policies/Administrative Templates/Windows Components/OneDrive/Prevent Usage of OneDrive for file storage and also set the following registry key from 1 to 0: 1 2 HKEY\_CLASSES\_ROOT\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6} "System.IsPinnedToNameSpaceTree"=dword:00000000 Please note that the registry key must be set on a per user basis.

Customising the Start Menu and Taskbar with Windows 10 all versions incl. 1903/1909
· β˜• 3 min read
This week I’ve gone pretty deep down the rabbit hole of automating the Start Menu and Taskbar layouts during an MDT Task Sequence. Update 2017-05-02:Β This also works with Windows 10 1703 (Creators Update) As every device I’m deploying will have the same customisation I wanted to automate it during the build or deploy Task Sequence, rather than applying it via domain Group Policy to reduce limited network bandwidth, keep Group Policy as light as possible and reduce login times as much as possible.

Windows 10 1607 (Anniversary Update) opens msn.com at login and how to stop it.
· β˜• 5 min read
I thought about trying to find a better name for this post and this issue, but this is all I could come up with. Update 2017-10-16: A few people have contacted me and made me aware that doing the reg hack below can prevent users from using Microsoft Office Clipart, so you should be aware of that before proceeding. Additionally, I’ve found that with Windows 10 1703Β (Creators Update), allowing access to http://www.

Installing WSUS from scratch!
· β˜• 9 min read
Update 2018-04-20: I’ve rolled the information in this post, and updated it, into a new post about setting up a WSUS server from scratch on Windows Server 2016 Core. The post is also suitable for a regular Windows Server 2016 server with a GUI. You can read it here. Update: I’ve tested and updated this post for Windows Server 2016. In this post, I’m going to walk through setting up a WSUS server from scratch on Windows Server 2012 R2 or Windows Server 2016.