ITBlog.no

Sømløs brukeropplevelse mot skybaserte- og tradisjonelle applikasjoner?

Wed, 15 Jun 2016 05:06:00 +0000

Er Windows 10 verktøyet som tar BYOD fra hype til hyllevare?

Bring-Your-Own-Device har blitt snakket om lenge, men er mindre utbredd enn man skulle tro ut fra markedsføringen. Dette kan nå begynne å endre seg med de mulighetene som Windows 10 gir, samt at verktøyene for å kontrollere og konfigurere enhetene har blitt mer modne. I dette innlegget vil jeg prøve å gi et kort innblikk i nye muligheter: Hvordan de kan gi en god brukeropplevelse og hvordan IT-avdelingen kan redusere manuelle tidkrevende prosesser.

Azure AD Join

Denne integrerte funksjonen i Windows 10 gir gode brukeropplevelser og benyttes for å koble maskinen mot Azure AD. Azure AD kan enten være en forlengelse av bedriftens interne Active Directory eller et helt eget separat AD levert fra Azure. Når man kobler en maskin mot Azure AD kan man automatisk registrere den i et verktøy for å utføre administrasjon og kontroll av mobile enheter (MDM eller Mobile Device Management). Kundene kan velge mellom ulike aktører, for eksempel Citrix XenMobile eller Vmware AirWatch. Microsoft leverer dette også selv via Microsoft Intune. Microsoft Intune blir brukt som eksempel her.

Fler-faktor autentisering og selvbetjening

Med lisenser for Azure AD Premium eller Enterprise Mobility Suite (EMS) følger tilgang på en rekke andre funksjoner som fler-faktor autentisering (MFA), selvbetjening av passord reset/change/unlock, selvbetjent gruppe styring samt analyse av pålogginger for å oppdage og hindre uvedkommende. Alle leveres som skytjenester og krever ikke oppsett av intern infrastruktur.

Mobile Device Management

Når en maskin er registrert i Intune kan en sende ut innstillinger, retningslinjer (Policy) til enheten, tilgjengeliggjøre eller utføre installasjon av programvare og lignende. Eksempel på retningslinjer kan være at maskinen skal være kryptert med BitLocker, ha oppdatert antivirus, krav til passord, m.m.

Her er en kort video av hvordan en sluttbruker selv setter opp en ny Windows 10 maskin på 5 minutter ferdig konfigurert. It-avdelingen kan være trygg på at deres krav til sikkerhet er oppfylt og sluttbrukeren får en sømløs pålogging (Single-Sign-On (SSO)) til alle sine tjenester.

Video 1:23 min: Oppsett av en ny Windows 10 PC via Azure AD Join. Førstegangspålogging, avsluttes med at bruker må godta bedriftens policy.

Tradisjonelle applikasjoner

I dag skal it-avdelingen ikke bare støtte både tradisjonelle applikasjoner, enten installert direkte på maskinen eller publisert ut via terminal server, men også tilby nye skybaserte applikasjoner fra sitt eget datasenter eller kjøpt som en SaaS-tjeneste. Hybride tilnærminger blir trolig normen i god tid fremover

Ny funksjonalitet fra både Citrix og VMware løser denne utfordringen ved å publisere applikasjoner fra bedriftens interne terminal og VDI tjenester og gi SSO hele veien.

Video 0:58: Innlogging på en Windows 10, Single-Sign-On mot intern Citrix portal og oppstart av en applikasjon uten flere spørsmål om brukernavn og passord.

Den virkelig gode brukeropplevelsen

Her har jeg vist et eksempel på hvordan en sluttbruker selv kan sette opp en ny Windows 10 maskin, og oppnå en god brukeropplevelse. Det fine er at en trenger ikke ta i bruk alle funksjonene. Hver av komponentene kan settes opp separat.

Windows Store for Business

Video 0:20: Windows Store for Business med tvungen installasjon av utvalgte applikasjoner via Intune

Ønsker du å høre mer rundt Windows 10, Azure AD, Bring-You-Own eller Single-Sign-On og hvordan du kan utnytte deg av mulighetene i ditt miljø? Firstpoint har flere konsulenter som jobber med dette området - ta kontakt med Knut Magne, Ole Idar, Magnar eller Frode

Rerun Runbook Activities with status In Progress

Mon, 08 Feb 2016 04:02:10 +0000

After an incident with the Orchestrator server, several runbook activities in Service Manager did not complete and ended up in status of In Progress but nothing happens.

To rerun all runbook activities that had this status, I wrote a small PowerShell script that found all runbook activities with status In Progress and where LastModified date where older than a day.

Send-MailMessage command with conditional Cc and Bcc arguments

Fri, 07 Aug 2015 02:08:42 +0000

This is an example of how you could write a PowerShell script sending mail message using the Send-MailMessage command with conditional Cc and Bcc arguments.

Sometime my script will define Cc and Bcc mail addresses based on a condition earlier in the script. Instead of creating a long IF statement checking the variables and then running a different set of argument on the command, I use the example below to have the Cc and Bcc argument added to the Send-MailMessage arguments set only if they exist.

AutoCAD and Distributed file system | PowerShell GUI restoring deleted files

Sat, 25 Apr 2015 02:04:06 +0000

Problem

PeerLink has the ability to keep Lock on files while the file is replicated, if interested se also their solution for CAD File Collaboration

A client of mine uses Windows Server 2008 R2 file servers with Distributed files service (Dfs) for their AutoCAD Project. For several years, it worked without problems. After adding a new Windows Server 2012 R2 file server to the solution, some .dwg files went missing right after the project where saved.

Autodesk DOES NOT support Distributed File System (Dfs), so no help there. After searching the web, I found other facing the same problem. However, no satisfied solution.

Possible solutions (not tested by me)

a) Forcing all clients and servers to use the same version of SMB.

Windows Server 2012 R2: Which version of the SMB protocol (SMB 1.0, SMB 2.0, SMB 2.1, SMB 3.0 or SMB 3.02) are you using?
Disabling SMB3 would also disable SMB2, as they both use the same stack, forcing everything to go back to the Stone Age using only SMB1.
How to enable and disable SMBv1, SMBv2, and SMBv3 in Windows Vista, Windows Server 2008, Windows 7, Windows Server 2008 R2, Windows 8, and Windows Server 2012

b) Downgrade to Windows Server 2008 R2.

While this probably would work, there is the issue that Windows Server 2008 R2 Mainstream support ended January 13 2015.

Workaround (while further troubleshooting)

A simple PowerShell GUI script for easy file restore from the DfsrPrivate\ConflictAndDeleted folder.

The script has two parameters, ComputerName and Filter. By default it use the computer name of the computer you start the script on, and *.dwg as filter.

First, it gets all the Replicated Folders on the server, then goes through the conflictanddeletedmanifest.xml of each replicated folder and display it all in a grid view.

Selecting one or several files and clicking OK, starts a copy-item (with –confirm) job on each selected item.

Solution

UPDATED: June 2. 2016

I talked to Peer Software about the problem as they had several products that should be able to fix the problem.

I briefly tested their Trial version of PeerLock for Microsoft DFS and it seem to fix the problem in my Lab environment. But as Peer Software would not recommend that product for our use (high latency and unstable VPN connection to other location), we did not go forward with that solution.

Peer Software had another product PeerLink that would fit our requirement.

PeerLink has the ability to keep Lock on files while the file is replicated, if interested see also their solution for CAD File Collaboration

Curiosity

Dfs vs DFS

Switch between Hyper-V and VMware on Windows

Tue, 14 Apr 2015 02:04:01 +0000

Do you already use Hyper-V in Windows 8, and need to run other virtualization solutions?

You are not able to install other hypervisors when the Hyper-V feature is installed. You could uninstall the Hyper-V feature or dual booting between an installation with Hyper-V and one without. Taking up double the disk space, and the extra effort keeping two operating system up-to-date.

A better solution could be to use BCDEdit to create two boot options, one with Hyper-V and one where the Hyper-V hypervisor is turned off. Giving you the ability to install VMware, Virtual Box or other visualization solution without the Hyper-V feature giving your problem.

To create the Boot Options with BCDEdit run the following commands in an elevated command prompt.

bcdedit /copy {current} /d "Hyper-V"

bcdedit /set {current} hypervisorlaunchtype off

Next time you reboot you will see a Boot Menu. If you do not select anything, after 30 seconds, Windows 8.1 will boot up with the Hyper-V feature disabled.

You can configure the default boot options by going to Control Panel\System and Security\System, select “Advanced system settings” from the left side, go to Advanced pane and click the Settings button within the Setup and Recovery section. Here you can select with operation system would be your default operating system, configure the amount of second to wait for input etc.

Silently deploy TeamViewer 10 Host

Wed, 08 Apr 2015 09:04:56 +0000

Logon on to TeamViewer.com and create a custom module.
Download the TeamViewer_Host-idcXXXXXXX.msi (or just rename the one you already have, remember to add -idc before your 7 character ConfigurationID).
Install the TeamViewer Host on a computer; configure it the way you want, and export the TeamViewer_Settings.reg.
Run the TrustConfigID.ps1 script on a computer With the Active Directory PowerShell Module installed and with administrative rights to your domain. (Replace the XXXXXXX With Your ConfigurationID)

.\TrustConfigID.ps1 -Add XXXXXXX -Name TeamViewer -Path "CN=System,DC=yourdomain,DC=com"

Put both the TeamViewer_Host-idcXXXXXXX.msi and TeamViewer_Settings.reg in the same folder/share.
Run the following commands to silently install, remove desktop shortcut and hide the dialog at logon:

REG ADD HKCU\Software\TeamViewer /v HostInfoDialog /t REG_DWORD /d 0

REG ADD HKU\.DEFAULT\Software\TeamViewer /v HostInfoDialog /t REG_DWORD /d 0

start /wait MSIEXEC.EXE /i "TeamViewer_Host-idcmbwnmzt.msi" /qn

del "%Public%\Desktop\TeamViewer*.lnk"

Blog about PowerShell and Distributed File Service Replication (DFS) in Windows Server 2012 R2

Thu, 26 Feb 2015 09:02:08 +0000

DFS Replication in Windows Server 2012 R2: If You Only Knew the Power of the Dark Shell by Ned Pale

Beautiful User Interface with PowerShell

Thu, 12 Feb 2015 02:02:57 +0000

This simple sample code can be used to create beautiful user interface in your PowerShell script.

Running SP scripts utilizing WPF forms on machines with only PowerShell version 2, one has to specify the -STA argument to start the PowerShell process as Single Threaded Apartment. This is the default in version 3 of PowerShell.

powershell.exe -Version 2 -STA -Noprofile -ExecutionPolicy Bypass “.\PSWPFExample.ps1”

SCSM: Sync Computers from a InstanceGroup to Business Service's ComputersGroup

Thu, 30 Oct 2014 01:10:21 +0000

I could not find an intuitive way of adding a Dynamic Group of Computers (InstanceGroup) into the ServiceMap on a Business Service. Instead I added a regular ComputersGroup to the ServiceMap of the Business Service and utilized PowerShell to update the ComputersGroup with Objects from the InstanceGroup. This can of course be scheduled to run by Windows Scheduler, Orchestrator or SMA every hour, day or whatever.

Param( [Parameter(Mandatory=$true)] [string]$ComputerInstanceGroupDisplayName , [Parameter(Mandatory=$true)] [string]$BusinessServiceDisplayName , [Parameter(Mandatory=$true)] [string]$BusinessServiceComputerGroupDisplayName )

$BusinessServiceClass = Get-SCSMClass -Name Microsoft.SystemCenter.BusinessService $BusinessService = Get-SCSMObject -Class $BusinessServiceClass -Filter “DisplayName -eq $BusinessServiceDisplayName” $BusinessServiceComputerGroup = Get-SCSMRelatedObject $BusinessService | Where {$_.DisplayName -eq $BusinessServiceComputerGroupDisplayName} $BusinessServiceComputerGroupComputers = Get-SCSMRelatedObject $BusinessServiceComputerGroup

$InstanceGroupClass = Get-SCSMClass -Name InstanceGroup | Where {$_.DisplayName -eq $ComputerInstanceGroupDisplayName} $InstanceGroup = Get-SCSMObject -Class $InstanceGroupClass $InstanceGroupComputers = Get-SCSMRelatedObject $InstanceGroup

$Computers = Compare-Object -ReferenceObject $BusinessServiceComputerGroupComputers -DifferenceObject $InstanceGroupComputers -PassThru IF ($Computers) { $REL_ConfigItemContainsConfigItem = Get-SCSMRelationshipClass -Name System.ConfigItemContainsConfigItem Foreach ($Computer in $computers) { New-SCSMRelationshipObject -Relationship $REL_ConfigItemContainsConfigItem -Source $BusinessServiceComputerGroup -Target $Computer -Bulk } }

Service Manager Data WareHouse SQL Queries

Tue, 16 Sep 2014 11:09:06 +0000

This post list common SQL queries that I use when building reports against Service Manager Data Warehouse with SQL Server Report Builder.

List Active Business Services

SELECT Replace(Replace(Replace(DisplayName,’_’,’ ‘),’ ‘,’ ‘),’ ‘,’ ‘) As Service */ The replace of underscore and Spaces is customer spesific */ FROM ServiceDimvw WHERE DisplayName not like ‘NULL’ AND Status_ServiceStatusId = ‘6’ AND IsBusinessService = ‘1’ ORDER BY DisplayName

List Available Incident Classifications

SELECT DisplayName FROM IncidentClassificationvw

Left Join DisplayStringDimvw StringClassification ON IncidentClassificationvw.EnumTypeId = StringClassification.BaseManagedEntityId

WHERE DisplayName NOT Like ‘%(not in use)%’ */ The ‘%(not in use)%’ is customer spesific */ AND DisplayName NOT Like ‘Incident Classification’ AND LanguageCode = ‘ENU’

List Available Sources

SELECT DisplayName FROM IncidentSourcevw Left Join DisplayStringDimvw StringSource ON IncidentSourcevw.EnumTypeId = StringSource.BaseManagedEntityId WHERE DisplayName NOT Like ‘Incident Source’ AND LanguageCode = ‘ENU’

Count of Incidents by Tier by days/week/month/year

SELECT StringTierQueues.DisplayName As Tier, COUNT(Case when ( Incident.Status Not Like ‘IncidentStatusEnum.Resolved’ And Incident.Status Not Like ‘IncidentStatusEnum.Closed’ ) Then 1 end) As “Open Incidents”, COUNT(Case when ( YEAR(Incident.ResolvedDate) = YEAR(getdate()) And DATEPART(wk,Incident.ResolvedDate) = DATEPART(wk,getdate()) And DAY(Incident.ResolvedDate) = Day(getdate()) ) Then 1 End) As “Today”, COUNT(Case when ( YEAR(Incident.ResolvedDate) = YEAR(getdate()) And DATEPART(wk,Incident.ResolvedDate) = DATEPART(wk,getdate()) And DAY(Incident.ResolvedDate) = Day(DATEADD(Day,-1,getdate())) ) Then 1 End) As “Yesterday”, COUNT(Case when ( YEAR(Incident.ResolvedDate) = YEAR(getdate()) And DATEPART(wk,Incident.ResolvedDate) = DATEPART(wk,getdate()) And DAY(Incident.ResolvedDate) = Day(DATEADD(Day,-2,getdate())) ) Then 1 End) As “2 days ago”, COUNT(Case when ( YEAR(Incident.ResolvedDate) = YEAR(getdate()) And DATEPART(wk,Incident.ResolvedDate) = DATEPART(wk,getdate()) ) Then 1 End) As “This Week”, COUNT(Case when ( YEAR(Incident.ResolvedDate) = YEAR(getdate()) And DATEPART(wk,Incident.ResolvedDate) = DATEPART(wk,DATEADD(WEEK,-1,getdate())) ) Then 1 End) As “Last Week”, COUNT(Case when ( YEAR(Incident.ResolvedDate) = YEAR(getdate()) And DATEPART(wk,Incident.ResolvedDate) = DATEPART(wk,DATEADD(WEEK,-2,getdate())) ) Then 1 End) As “2 Weeks ago”, COUNT(Case when ( YEAR(Incident.ResolvedDate) = YEAR(getdate()) And MONTH(Incident.ResolvedDate) = MONTH(getdate()) ) Then 1 End) As “This Month”, COUNT(Case when ( YEAR(Incident.ResolvedDate) = YEAR(getdate()) And MONTH(Incident.ResolvedDate) = ((MONTH(getdate()))-1) ) Then 1 End) As “Last Month”, COUNT(Case when ( YEAR(Incident.ResolvedDate) = YEAR(getdate()) And MONTH(Incident.ResolvedDate) = ((MONTH(getdate()))-2) ) Then 1 End) As “2 Months ago”, COUNT(Case when ( YEAR(Incident.ResolvedDate) = YEAR(getdate()) ) Then 1 End) As “This Year”, COUNT(Case when ( YEAR(Incident.ResolvedDate) = ((YEAR(getdate()))-1) ) Then 1 End) As “Last Year”, COUNT(Case when ( YEAR(Incident.ResolvedDate) = ((YEAR(getdate()))-2) ) Then 1 End) As “2 Years Ago”

FROM IncidentDimvw AS Incident

Join IncidentClassificationvw ClassificationVW ON Incident.Classification_IncidentClassificationId = ClassificationVW.IncidentClassificationId
Join DisplayStringDimvw StringClassification ON ClassificationVW.EnumTypeId = StringClassification.BaseManagedEntityId

Join IncidentSourcevw SourceVW ON Incident.Source_IncidentSourceId = SourceVW.IncidentSourceId
Join DisplayStringDimvw StringSource ON SourceVW.EnumTypeId = StringSource.BaseManagedEntityId

Join IncidentTierQueuesvw TierQueuesVW ON Incident.TierQueue_IncidentTierQueuesId = TierQueuesVW.IncidentTierQueuesId 
Join DisplayStringDimvw StringTierQueues ON TierQueuesVW.EnumTypeId = StringTierQueues.BaseManagedEntityId

WHERE StringClassification.DisplayName IN (@Classification) AND StringSource.DisplayName IN (@Source) AND StringClassification.LanguageCode = ‘ENU’ AND StringSource.LanguageCode = ‘ENU’ AND StringTierQueues.LanguageCode = ‘ENU’

GROUP BY StringTierQueues.DisplayName