Avant de passer à 2017, quelques nouveautés arrivées fin 2016 côté Power BI Online https://aka.ms/bqoy79 et Power BI Desktop https://aka.ms/rls0wd.

Want to trial our telephony services for organisation? Get in touch to see if you’re able to get a months free trial. Whether you face increasing threats from fast moving and disruptive competitors, or the pressure to match innovation with changes in market demand, you must constantly come up with new ideas. Contact us today to see if you can get 25 users on board for 30 days to PSTN calling and see how your organisation will benefit.

Connect people everywhere to achieve more, together. Skype for Business brings together
the familiar experience of Skype that users love with the security, compliance and control that
you’ve come to expect from Microsoft to drive positive and effective collaboration among
diverse and distributed stakeholders.

No matter WHAT kind of feature you need, WHO you are, WHERE you are, or WHICH device
you use, Skype for Business client portfolio is aimed to help people BE and DO better together.

Modern voice with Cloud PBX
In the modern workplace, your employees are always connected and always moving.
Our Cloud PBX solution—delivered through Skype for Business and Office 365—can
support your needs with ubiquitous collaboration, increased agility, and consolidated
call management.

Key benefits of Skype for Business Cloud PBX

Improve interoperability of existing assets, eliminate separate PBX systems, and gain an integrated
productivity experience with Skype for Business Cloud PBX.

Enhanced connectivity with PSTN
With public switched telephone network (PSTN) and Skype for Business, Warburtons can
deliver enterprise-grade connectivity to facilitate secure communication and collaboration
across your organisation, while saving on telephony costs.
PSTN connectivity

PSTN is an add-on to Cloud PBX that provides domestic and international calling services directly from Office 365.
Instead of contracting with a traditional telephony carrier and using an on-premises IP-PBX, organizations may
integrate PSTN calling with their current Skype for Business and Cloud PBX subscription for a complete enterprise
telephony experience.

Ali Serhan Çetin, System Engineer, Yapı Kredi

Unify and save with Skype for Business modern voice capabilities
New voice infrastructure and calling plans delivered through Skype for Business can help Warburtons to reduce your Total Cost of Ownership (TCO) for telecommunications.

Skype for Business voice pricing advantages
Cost comparisons for 10,000 seats show how adopting Skype for Business and Office 365 can add up to significant
telephony savings each year.

Contact us today to see if you can get 25 users on board for 30 days to PSTN calling and see how your organisation will benefit.

Vi afholder næsten ugentligt kurser i hele Danmark, hvor vi træner undervisere, ledere og elever til at gribe de digitale muligheder for kollaboration og kreativitet.

OneNote er et ekstremt populært værktøj, som flere og flere bruger i hverdagen, både til undervisning og til personlige notater.

Derfor indkalder vi til OneNote-kursus i Aarhus torsdag den 9. februar, hvor du helt gratis kan blive klædt på til at bruge OneNote i undervisningen.

Målgruppen er primært it-vejledere og lignende roller fra alle trin i uddannelsesverdenen.

Læs mere og tilmeld dig her.

Howdy everyone,

Hope you all had a nice holiday and wish you a happy and successful new year .

This is one of my “Simple Understanding” articles to provide an easy way to understand how ICE “Interactive Connectivity Establishment” protocol is used in Lync and Skype for Business to find available media path for an audio, video, desktop sharing sessions to overcome the Firewall / NAT obstacle in an infrastructure.

This article was really hard to write as I found myself too many times getting into too much details which lead into deleting or cutting paragraphs in it, and finally after 2 weeks I got this, so let’s start.

Understanding ICE

ICE is a protocol that is used to find & establish media path in a call, simply like with SIP, we have a SIP server “your Lync / Skype for Business Frontend” and a SIP client “Lync / Skype for Business client”, also with ICE we have an ICE server “Lync / Skype for Business Edge” and an ICE Client “Lync / Skype for Business client”

ICE uses two other Protocols to find and establish a suitable media path for a call, those Protocols are:

• STUN (Session Traversal Utilities for NAT)
• TURN (Traversal Using Relays around NAT)

because this is a simple understanding article and not a deep dive, I won’t go into details about the mechanism of STUN and TURN, a simple search online will gives tons of articles about that. but we need to understand the difference between those two is simply:

• STUN: the media travels directly between both endpoints in a call (the NAT device is considered an endpoint)
• TURN: the media will be proxied using the TURN server between both endpoints in a  call

understanding this will help when we talk about the scenarios later in this article

in a Lync / Skype for Business deployment, STUN server or TURN server is always the Lync / Skype for Business Edge server (A/V Server)

Candidates List

what is a Candidates list?

It is simply a list of IP-addresse(S), ports and protocols (wither UDP or TCP) that is shared between the call endpoints to tell each other what is the possible media path that can be used in this call, the candidates list is sent in the INVITE message inside the SDP part of the message.

in a SIP Stack file it look like this

a little deeper look, the Candidates list is composed of:

• Host Candidates: the local IP address and ports of all active network cards on the client machine (most preferred by Lync / Skype for Business).

• Reflexive Candidates (STUN): list of IP-address & ports allocated by a NAT device (second preferred candidate in Lync)

• Relay Candidates (TURN): list of IP-addresses & ports of the TURN servers (used when STUN cannot be used)

the Lync / Skype for Business client test each of those candidates till it find a suitable media path for the session (will talk more about that later in the article)

Media establishment mechanism

so how does it actually work?, I divided the mechanism of finding a suitable media path into 3 main stages

1. Register and locate the media relay server.
2. Create the Candidate list.
3. Connect & Establish a media session.

I created a simple traffic animated video describing each one of the steps, after all they say a picture worth thousand words, what about a video then?

1. Register & Locate the media relay server

The animated video can be found here

Deeper Look

1. External client does a SRV lookup to find the Edge server to register
2. External client send a REGISTER request to the frontend via the Edge access services
3. Frontend register the client and send back a SIP 200/OK telling the client there is an Edge server for Media relay
4. client sends a SERVICE request with its location (External or Internal) to the Frontend.
5. Frontend authenticate with the Edge server on behalf of the client (MRAS Request)
6. Edge Server creates credentials (valid for 8 hours) for the client using the private key in the “Public SSL Certificate” installed on the A/V services and send them to Frontend (MRAS Response)
7. Frontend sends a SIP 200/OK to the initial SERVICE request from the client with the name of the Edge server & credentials the client should use for Media relay

HINT: if you wondering about step 6 and 7, those take place because Edge server is not joined to the domain and cannot authenticate users, it create the credentials using the Private Key associated with the public SSL certificate installed on the A/V services and that’s why it is required to use the same SSL certificate with private key on all the Lync / Skype for Business Edge servers in the same Edge pool in case one node goes down.

2. Create the Candidates list

the video can be found here

Deeper Look

in this stage the client go through some steps to create the candidate list explained previously in this article, so let’s say client_1 (located in home office) is inviting client_2 (located in the HQ) for an audio call.

1. Client discover Local Host candidate which is the local IP-address of every active network card on the machine, which is using only UDP as it is peer-to-peer connection.
2. Client connect to media relay server (the Edge server) and discover STUN Candidates whish are:
   • UDP candidates equal to the IP-address that the Edge server sees the client coming from.
   • TCP candidate equal to the IP-address that the Edge server sees the client coming from.
3. Client connect to media relay server (the Edge server) and discover TURN Candidates which are:
   • UDP candidate equal to the IP-address of TURN server (the Edge server)
   • TCP candidate equal to the IP-address of TURN server (the Edge server)
4. Client_1 send INVITE request with its Candidates list to Client_2
5. Client_2 does the same and discover its own Candidate list
6. Client_2 reply to the INVITE with 183 Session Progress with its own Candidates list

3. Connect & Establish a media session

the video can be found here

Deeper Look

in our scenario:

1. Client_1 will try to connect using the local candidate first, which will fail because both are in different networks
2. Then it will try the STUN candidates as it is the preferred by Lync
3. If for some reason STUN fail, client will failback to TURN/UDP
4. If TURN/UDP did not work, client will try TURN/TCP

so in SIP stack traffic it happens on 5 steps (not always, just to make it simple) as described in this video

• Client_1 send SIP INVITE with its Candidates lists to Client_2

• Client_2 reply with SIP 183 Session Progress with its own Candidate list to Client_1

• Client_2 send SIP 200 OK with best Candidates to Client_1

• Client_1 choose STUN candidate as the best suitable path for Media and send a re-INVITE to Client_2 telling it that

• Client_2 choose TURN candidate as the best suitable path for Media and send a SIP 200 OK to Client_1 telling it that

• call established and now both clients knows how they can send media to each other

Summary

so that’s how it works:

• The Client will use the Lync / Skype for Business Edge server to create its Candidates list
• Client will INVITE another to a call while providing its Candidate list
• Both clients test the candidates list and choose the best suitable media path
• inform each other with the chosen candidate
• establish the call

till next time

You may find that after installing the Microsoft ADK 10 1607 on System Center Configuration Manager Current Branch 1602 (or later), the Apply Driver Package task will start failing when installing one of the drivers in the Driver Package. The failure is random and may not occur on the same driver every time, and occasionally the Apply Driver Package task may succeed.

If you encounter this problem, Microsoft Senior Support Escalation Engineer Frank Rojas has a great article that describes a few of the workarounds available. You can find Frank’s article here.

J.C. Hornbeck, Solution Asset PM
Microsoft Enterprise Cloud Group

ConfigMgr CB ConfigMgr 1602

Die Zeit rast vorbei und schon wieder ist das neue Jahr ein paar Tage alt. Damit sind es nur noch zwei Wochen bis zur nächsten Microsoft Tech Conference.

Das folgende trifft auf Euch zu?

• Ihr liebt die neuesten Technologien?
• Ihr wünscht Euch technische Vorträge?
• Marketing Slides findet Ihr zwar schön aber viel lieber seht Ihr Live-Demos?
• Ihr seid auf der Suche nach qualitativen Updates zu einem Weihnachtlichen-Spezial-Preis?

Ihr sagt JA, JA, JA und nochmals JA?

Dann meldet Euch  jetzt an zur:

Jetzt heißt es also schnell handeln um sich noch eines der begehrten Tickets zu sichern! Am 19. Jänner ist es zu spät!

Die Trainer- und Vortragenden rund um die Tech Conf haben sich auf jeden Fall schon mal eingegrooved und arbeiten für Euch an mehreren Dutzend Vorträgen von Windows Server 2016 bis hin zu Sharepoint 2016 und Office 365!

Für IT-Professionals und Infrastruktur-Experten stehen Vorträge und Hands-on Trainings zu Themen wie Industrialisierung 4.0, Windows Server 2016, Security, Exchange 2016, Skype4Business, Mobility Management, SharePoint 2016 in der Agenda – und natürlich beleuchten wir auch Chancen und Möglichkeiten von Lösungen in den Bereichen Public-Private-Hybrid Cloud, Microsoft Azure, Office 365, System Center, Big Data, SQL Server und mehr.

Software-Entwickler werden hingegen mit Sessions zu Themen wie .NET, ASP.NET, Azure Development und SharePoint voll auf ihre Kosten kommen.

Die einzelnen Sessions findet Ihr auf www.techconference.at

Die Microsoft Tech Conference bietet Euch den perfekten Start in das neue Jahr. Zum Preis von nur € 399.- erhaltet Ihr perfekte Tech Sessions zum absoluten Senationspreis! Also schnell anmelden bevor alle Plätze weg sind!

Jeff Stoffel

Happy New Year everyone! Kick off the New Year with a BANG! Join your local Microsoft US team for the SMB Partner Insider call Friday, January 6, 2017. You’ll get valuable, actionable information to help your Microsoft business grow. Presenters on these calls include the Microsoft Regional General Manager, and sales, technical, and marketing experts: Partner Sales Executives, Partner Channel Development Managers, and Partner Technology Strategists.

What to expect during the SMB Partner Insider calls?

• The presentation will be available for download throughout the call
• Links will be posted during the presentation that correspond to the current slide in the chat window
• You can ask questions in the chat window at any time during the call, and we’ll do our best to answer them

A copy of the presentation, call recording, and transcript will be shared the following week via email.

Register for your January 2017 Regional Insider call

East Region – Friday, January 6 at 9:00AM Eastern Time

If you haven’t already registered, sign up for the January East Region call.

Next, download and save this handy calendar reminder for the East Region Insider call series through June 2017.

The East Region will cover:

• Partner Insider Scoop: Key upcoming events that you don’t want to miss, plus offers in market and key resources
• Increase Leads with Social Media:
  • LinkedIn | Learn to create impactful profiles and get the most from Sales Navigator
  • rFactr | Learn social selling best practices and get actionable next steps
• Business insights from Tom Harshbarger, Senior Partner Sales Manager, East Region

Central Region – Friday, January 6 at 10:00AM Central Time

If you haven’t already registered, sign up for the January Central Region call.

Next, download and save this handy calendar reminder for the Central Region Insider call series through June 2017.

The Central Region will cover:

• Partner Insider Scoop: Key upcoming events that you don’t want to miss, plus offers in market and key resources
• Enterprise Mobility + Security: SMB Partner Opportunity: Learn how to increase your profitability and why you want to sell EMS to your SMB customers
• Business insights from Brent Combest, Regional General Manager, US SMB Central Region

West Region – Friday, January 6 at 10:00AM Pacific Time

If you haven’t already registered, sign up for the January West Region call.

Next, download and save this handy calendar reminder for the West Region Insider call series through June 2017.

The West Region will cover:

• Partner Insider Scoop: Key upcoming events that you don’t want to miss, plus offers in market and key resources
• NetEnrich: Learn best practices for Azure assessment and migration services to incorporate as part of your Azure cloud offerings
• Business insights from Eugene Chi, Regional General Manager, US SMB West Region

STAY IN THE KNOW

• Cut the clutter. Become an Insider @ https:/aka.ms/JoinSMBInsider
• Follow Insider Joe on Twitter: http://twitter.com/smbinsiderjoe
• Insider Joe is now on LinkedIn: https://www.linkedin.com/in/us-smb-insider-joe
• Join the Insider Yammer group
• Bookmark the US SMB Partner Center: https://aka.ms/SMBPartnerCenter

December’s call recordings, presentations & transcripts

• East Region | Presentation | On-demand recording | Transcript
• Central Region | Presentation | On-demand recording | Transcript
• West Region | Presentation | On-demand recording | Transcript

We look forward to you joining us Friday, January 6, 2017 on your regional Insider call!

Lipinczyk’s Leaders

The MIE Spotlight welcomes Megan Lipinczyk, a 5^th grade educator from Tampa, Florida. Megan uses OneNote to foster both expression, collaboration, peer-to-peer, and even peer-to-adult teaching with her students.

Hi, everyone! I’m SO excited to be a guest for the MIE Spotlight.

Let’s start with a little background about myself: Born in Tampa, I grew up outside of Chicago and played Division 1 Women’s Softball at the University of Kentucky (go Big Blue) while earning a Bachelor’s Degree in Elementary Education. I am currently in my 9^th year as an educator, teaching 5^th grade, and will be graduating in June 2017 with a Master’s in Educational Leadership.

I have been incorporating some sort of technology within my lessons for several years but, as we all know, it’s always changing. What I did a few years ago with my students is WAY different than what I am doing now. As of last Spring, my classroom became 1-to-1 with Microsoft Surfaces. That is, every student in my class would have access to their OWN Microsoft Surface.

The way Ss verbalize their learning & technology skills has been amazing to witness tonight @TurnerBartelsK8 for #TechOutTBK8 pic.twitter.com/xmAourYUXV

— Jenna Dawson (@JennaDawson28) November 4, 2016

… What?! Is this real life? That, right there, was a total game changer. Possibilities: endless.

Fast forward to this school year. I looped with the majority of my 4^th graders from last year to 5^th grade this year. When this school year started, we were able to jump right into using the devices and pick up where we left off last year. The result? Pure awesomeness.

When you step into our Room 627 on any given day, you will see students using OneNote to:

• Read text digitally and use digital ink to mark up that text, to help them better understand and comprehend what they are reading.
• Solve problems.
• Take pictures of handwritten work and insert the picture anywhere in their OneNote.
• Screen clip articles found from research and insert the clippings into a specific section.
• Take quick notes in class or during a Mystery Skype session.
• Show what they have learned after a lesson.
• Customize their sections and pages.
• Fit their own individual needs.This is what it means to be an MIE Educator: giving my students opportunities to apply 21^st century skills, DAILY, period.

They’re at it again! In this #OneNote demo #MIEExpert @LipEdTBK8’s students teach how to create subpages: https://t.co/LlSgA6Vbeb #elearning pic.twitter.com/e1FI1oZHNV

— @OneNoteEDU (@OneNoteEDU) December 12, 2016

So, how did I empower my students to take control of their own learning? For starters, I had to take a step back and let them take over. They could explore, fail, explore, fail, explore … and finally succeed.  One of the hardest parts, at first, was to let go and to hand over control to my students. But I HAD to create ways to make them responsible for their own learning. Giving them control allowed them to do so.

Yes, I can still set the stage for them at times. Yes, I can plant “seeds” but, ultimately, they do the work. And guess what? They LEARN. They become ENGAGED in learning because I am creating experiences for them. In turn, THEY are creating their own experiences, in control of their own learning.

From there, my students started to teach each other easier ways to do things and share their discoveries, especially within their OneNote Class Notebook. (Insert happy teacher dance here). Witnessing my students teach each other tips and tricks within OneNote, unprompted, was amazing.

The first technique they wanted to create and share with other students was how to screen clip. They thought it was the coolest thing to take anything on their screen, clip it, and insert it into their OneNote.

I am BEYOND proud of my students and feel extremely privileged to teach such a special group. Not only do they genuinely care about each other, but they also have a true love of learning. They have a hunger for everything and anything involving technology – where their learning is enhanced, not replaced. It is my responsibility to continue fueling their love of learning and I would not have it any other way.

Hello everyone, my name is David Loder, long-time reader, first-time PFE blogger, based out of Detroit, Michigan. And I have a confession to make. I hate servers. Or more precisely I hate logging in to servers.

If you’ve been administering Windows Server for any length of time, you’re hopefully aware of the Remote Server Administration Tools (RSAT) package. RSAT provides the server management tools for the Windows client Operating Systems like Windows 7 or Windows 10 so that you don’t have to RDP into a Domain Controller just to run the Active Directory Users and Computers GUI.

The RSAT package is OS specific. There is a different package for each client OS that corresponds to the matching server OS. There are links to each of the packages from the main RSAT Knowledge Base article at https://support.microsoft.com/en-us/kb/2693643.

If you are a typical enterprise customer you’ve most likely been running Windows 7 as your client, and are just now starting to explore Windows 10.

Because of the OS specifics, RSAT for Windows 10 is tied to Windows Server 2016. The Tech Previews all had a preview version of RSAT available for them. Since Windows Server released, only the RTM version of RSAT for Windows 10 is available for download. On the download page, you’ll currently see it as v1.2 with the WindowsTH-RSAT_WS2016-x64.msu name or WindowsTH-RSAT_WS2016-x86.msu if you’re planning on running 32-bit Windows 10 for some reason. I’m personally surprised we’re still making x86 versions of RSAT available.

The first caveat you’ll hit is that Windows Server 2016 RTM corresponds to Windows 10 build 1607, also known as the Anniversary Update. If you are running one of the earlier releases of Windows 10 (builds 1511 or 1507), many of the RSAT tools from the current v1.2 download will not work. For example, if you open Active Directory Users and Computers and look at the properties of a user, most of the tabs will be missing, including the General tab. Instead you’ll get a view that looks like this.

Or if you open the newer Active Directory Administrative Center, then try to open a user’s properties, the console will crash.

To avoid these problems, you must be on Windows 10 build 1607.

When you upgrade from an earlier build to 1607, RSAT will not remain installed. You’ll have to reinstall after upgrading. And you’ll be treated to the expected results within ADAC and ADUC.

One nice thing about RSAT for Windows 10 is that you no longer have to enable the tools after installing the package. All the tools are automatically enabled. Windows 7 required installing RSAT and then remembering where to find the GUI to enable the tools. This behavior is back to how Windows 2000/3 worked. It was re-introduced with RSAT for Windows 8, but I can count on one hand the number of admins I’ve seen running that platform in the field.

Here is the full list of GUI tools that are added to the Start Menu Windows Administrative Tools folder:

Active Directory Administrative Center

Active Directory Domains and Trusts

Active Directory Module for Windows PowerShell

Active Directory Users and Computers

Certification Authority

Cluster-Aware Updating

DFS Management

DHCP

DNS

Failover Cluster Manager

File Server Resource Manager

Group Policy Management

Microsoft Azure Services

Network Load Balancing Manager

Online Responder Management

Remote Access Management

Remote Desktop Gateway Manager

Remote Desktop Licensing Diagnoser

Remote Desktop Licensing Manager

Routing and Remote Access

Server Manager

Shielding Data File Wizard

Template Disk Wizard

Volume Activation Tools

Windows Server Update Services

The full list of features that are enabled are:

Feature Administration Tools

BitLocker Password Recovery Viewer

DCB LLDP-Agent Management Tools

Failover Clustering Tools

Group Policy Management Tools

IP Address Management (IPMA) Client

Network Controller Tools

Network Load Balancing Tools

NIC Teaming Tools

Shielded VM Tools

Role Administration Tools

Active Directory Certificate Services Tools

Certification Authority Tools

Online Responder Tools

AD DS and AD LDS Tools

Active Directory Module for Windows PowerShell

AD DS Tools

Active Directory Administrative Center

AD DS Snap-ins and Command-line Tools

DHCP Server Tools

DNS Server Tools

File Services Tools

Distributed File System Tools

FSRM Management

NFS Administrative Tools

Storage Replica Administrative Tools

Remote Access Management Tools

DirectAccess Server Management Tools

Remote Access module for Windows PowerShell

Remote Desktop Services Tools

        Remote Desktop Gateway Tools

        Remote Desktop Licensing Diagnoser Tools

        Remote Desktop Licensing Tools

        Volume Activation Tools

Windows Server Update Services Tools

API and PowerShell cmdlets

User Interface Management Console

Server Manager

You may notice a few differences from previous iterations of RSAT. Hyper-V is now built in to Windows 10, so the Hyper-V tools are their own features to be turned on or off and are not part of RSAT anymore. The DCB LLDP-Agent Management Tools includes the NetLldpAgent PowerShell Cmdlets. The Shielded VM Tools includes the Provisioning Data File Wizard and the Template Disk Wizard. To find out more about how these tools help create Shielded VMs you can read Dean Wells’ blog post on Creating Shielded VMs Step by Step. Finally, the Microsoft Azure Services tool is simply a link to get you started with understanding the Operations Management Suite.

If you’ve gotten your RSAT fix for now, and are wondering what’s next, you might want to spend some time reading up on Microsoft’s next generation of server management tools. We now provide an Azure-hosted management portal called Server Management Tools. It uses a gateway located on-premise to proxy between your on-premise servers and Azure so that you can securely administer your servers from anywhere on any device. Look through their blog at https://blogs.technet.microsoft.com/servermanagement if you want to know more.

Thanks for spending a little bit of your time with me.

-Dave

#proudmicrosoftemployee

In the past year, we’ve hosted dozens of webcasts to help you grow your cloud hosting business. So many webcasts, in fact, that it became a bit cumbersome to sort through the list to find webcasts of interest.
This week, we updated the look and feel of the Cloud Channel Network to make it much easier to browse the catalog and watch webcasts that interest you.  Stop by and explore what’s new:
• Browse webcasts by topic, all on one page: upcoming live webcasts, event sessions, and business, technical, and licensing readiness.
• No sign-in required to access the catalog. Simply bookmark and visit the Cloud Channel Network regularly, and sign in to watch specific webcasts that interest you.
• Want to attend an upcoming webcast? Quickly register with your email address to receive a reminder before the live event.
• Dozens of recently-added expert-led webcasts to help stay current on updates, trends and training for Hosting & Managed Service Providers.

Catch up on 2016 webcasts

As we wind down 2016, we extend our thanks to everyone who tuned in to our live webcasts. Your questions and input during the events is why we host these events, in addition to the info-packed presentations of our guest experts .

If you missed a webcast, be sure to check out our new catalog for topics that interest you. We’ve compiled a few of the many 2016 highlights to help you get started.

Licensing Readiness webcasts
Don’t miss the most recent Quarterly Licensing Briefing for Service Providers and Resellers. This essential viewing is packed with licensing updates to the SPLA & CSP programs, including need-to-know updates to Volume Licensing programs.

Also be sure to check out our recent webcast on Compliance Conversation Starters for SPLA resellers and service providers. It’s a great overview of ways to stay in compliance with the SPLA license program, providing common licensing pitfalls that service providers can avoid as well as other compliance best practices.

Technical Readiness

This year’s series kept you up-to-date with technical updates, tutorials, and training on Microsoft cloud and hosting products and services. Catch up on our SQL Server 2016 technical overview and selling points, plus insights to lower TCO for your customers by migrating them to a modern SQL Server Database efficiently. [link to msft sql server database migration].

We hosted a number of webcasts to help you take full advantage of the explosive growth in demand for Microsoft Azure in 2016. Learn about training to develop critical Azure and multi-cloud skills to succeed in this changing technology landscape. Plus, discover why and how you can begin leveraging Azure Backup and Site Recovery to expand your service offerings.

In October, we rolled out Windows Server 2016 and System Center 2016 media and assets to the hosting community. Discover what’s new, including the new platform for IaaS (Hyper-V 2016, Storage Spaces Direct, SDNv2)
and security enhancements.

Business Readiness

By popular demand, we boosted the number of webcasts that help you grow and market your services. In August, we hosted a two-part series to help you build a more profitable cloud business with the Microsoft Cloud Solution Provider (CSP) program. For those just getting started, find out what you need to know to become a CSP partner. 

To help you profit from 2016’s major cloud product releases, we hosted webcasts to help you transform your services with Azure, SQL Server 2016, Skype for Business, and Office 365 Enterprise E5 suite.

…with more on the way…

Visit the new Cloud Channel Network  to catch up on webcasts you’ve missed, and set reminders for our line-up of live engaging, informative webcasts in 2017.

Hello, my name is Ritesh Sinha and I am a Support Escalation Engineer on the Windows team.  Today’s blog will cover “Why Bitlocker takes longer to complete the encryption in Windows 10 as compared to Windows 7”.

A brief summary of Bitlocker is: Bitlocker is a disk encryption system provided by Microsoft with the Windows operating system. Bitlocker uses a set of protectors (both hardware and software) to encrypt the data on the drive which makes sure that the data is accessible to only the authorized person, and only on the authorized machine.

Recently, we heard from our customers that they are noticing a significant increase in time for the encryption to complete on Windows 10 machines compared to Windows 7 machines.

To understand why Bitlocker takes longer to complete the encryption in Windows 10 as compared to Windows 7, we need to understand the points listed below.

1. BitLocker in Windows 10 has been made to run less aggressive for its background conversion. This makes sure that you are not experiencing slow performance of the machine while the encryption is in progress.
2. This is compensated by the fact that this new conversion model BitLocker now uses (on all client SKUs and any internal drives) ensures that any new writes are always encrypted regardless of where on the disk they land (which was not the case for the original BitLocker watermark-based conversion model).
3. The new conversion mechanism, called Encrypt-On-Write, immediately guarantees the protection (encryption) of all writes to disk AS SOON AS BitLocker is enabled on the OS or fixed (internal) volumes.  Removable drives work in the older mode for backwards compatibility.
4. The pre-Windows 10 conversion mechanism could only make such a claim AFTER the conversion reached 100%.
5. If one thinks about it, #2 and 3 are very significant because:
   • Regardless of the version of Windows used, without Bitlocker enabled and the drive fully encrypted, you could not guarantee that data wasn’t already compromised or stolen.
   • Therefore, those serious about any such compliance claims would have to wait for the older BitLocker conversion process to reach 100% before placing any sensitive data on drive.  This means possibly waiting a long time if the drive is large.
   • With the new method, they could safely copy sensitive data as soon as BitLocker is enabled and the volume is in the encrypting state.
6. Due to achieving compliance status for all writes immediately upon enabling BitLocker, the pressure of reaching 100% conversion status is less and converting all pre-existing data happens at a slower rate (further lessening the impact on interactive user).

Apart from this reason, there are several new feature enhancements which have been made to Bitlocker since Windows 7.  Some of these enhancements are:

· New encryption algorithm XTS-AES.  The new algorithm provides additional protection from a class of attacks on encryption that rely on manipulating cipher text to cause predictable changes in plain text.

• This is also FIPS-compliant, which is a set of United States Government standards that provide a benchmark for implementing cryptographic software.
• Bitlocker can be administered through various means such as BitLocker Wizard, Manage-BDE, Group Policy, MDM policy, Windows PowerShell, or WMI to manage it on devices
• Integration with Azure Active Directory for easier online Bitlocker key recovery.
• DMA port protection using MDM policies to block the DMA ports and secure the device during its startup.
• Bitlocker Network Unlock
• Support for Encrypted Hard Drive for faster encryption time.
• Support for classes of HDD/SSD hybrid disks (small SSD used as a non-volatile cache in front of slower spinning HDD, known as Intel RST technology).

To get these enhancements, the whole product has gone through a major design change to make sure that Bitlocker is more secure, the machine stays much more responsive during the encryption process and we provide the latest feature and manageability to the users.

Because Window 10 and Windows Server 2016 share the same kernel base, these changes are applicable to Windows Server 2016 as well.

You may notice significant improvement in Windows 10 Bitlocker encryption time after installing the Windows 10 Creators Update which is expected to release in 2017 but encryption time is also dependent on the hardware you are using as well as the workload on the machine.

I hope this article will help everyone understand that Bitlocker is better than before even though it may seem like it is slower when encrypting existing data on a hard drive.

Ritesh Sinha
Support Escalation Engineer
Microsoft Enterprise Platforms Support

241.     Jak odebrat pozadí u obrázku?

242.     Jak vložit číslo snímku?

243.     Jak vložit do prezentace video ze souboru?

 

244.     Jak vložit do prezentace video z YouTube?

 

245.     Jak vložit úvodní snímek videa?

This article may help you to understand the client behavior when adding extension in skype for business 2016 contact card. I have installed SFB 2016 version 16.0.4266.1001 and SFB 2015 CU3 as backend.

I have added a line URI with extension in following format in Active directory. I do have normalization rules to translate the number to E164 format. Updated user database and address book manually to update the new changes

I have added ShowExtensionInFormattedDisplayString in the global policy. Below command is taken from Ken’s blog , thanks for the great information.

$x = New-CsClientPolicyEntry -Name “ShowExtensionInFormattedDisplayString” -Value “True”
$y = Get-CsClientPolicy -Identity Global
$y.PolicyEntry.Add($x)
Set-CsClientPolicy -Instance $y

I have successfully added the string in to SFB global policy.

User has been assigned the same line URI with 4 digit extension.

Later , updated client address book and tested the behavior in SFB 2016 client. I was able to see line URI with extension for NA numbers.

Also tested a UK number to confirm the behavior and it was showing the extension as expected. I do see a duplicate number for call via work. It may not be related, it could be due to some other issue.

I hope above information may be helpful for others if they wants to publish the line URI with extension in Lync contact card.

Jan

4

Script Download:
The script is available for download from https://gallery.technet.microsoft.com/How-to-start-PowerShell-7b94535f.

The sample code demonstrates how to start PowerShell from Windows Explorer by VBScript.

You can find more All-In-One Script Framework script samples at http://aka.ms/onescriptingallery