First of all, sorry my poor English. Recently my customer bought two Windows Server 2016 Standard and I have a general group policy to disable autoplay and autorun in all computers in this network. Of course, I have an Active Directory implemented with two DCs, one with W2K8R2 and another with W2K12R2. I´ve downloaded the new ADMX files for Windows Server 2016 and Windows 10 "www.microsoft.com/en-us/download/details.aspx?id=53430" and created a Central Store and I made all steps recomended by Microsoft. This Group Policy works well in all versions of Windows 2012/8.1 and below, but doesn´t work in Windows version 2016/10. I reaserched in the Internet for a similiar problem and I didn´t find anything about this. Does anybody have a clue for this problem??? Thanks for any help.

I have a conceptual idea of how to secure all the communication, files, and computing resources without the regards where the resources are located. Basically, this would allow to control access to any file on the accessible network or a cloud using the infrastructure/code idea that I have in mind.

I had several conversation with the business owners about the security of the data (files and etc) when it comes to employees parting with the companies or trying to sabotage the resources. Business owners need total control of the data and preclude those leaving the company to copy the data and carry the data to outside of the company. My solution addresses this. Expending this idea, it is possible to preclude many insider threats form happening by tightly controlling what resources or data items area accessed.

If interested, get in touch with me. (however, I do not thing this will get anywhere - I do not think this is being read by humans)

Aleksey Kramer, Ph.D.

Cross-posted from Technet forums:

I think we've identified a bug in Server 2016. Long story short:
1. Open lusrmgr.msc
2. Set an active users' properties to require password change at next logon
3. Reboot (or just logout, haven't tried that)
4. Press Ctrl+Alt+Del to logon, enter user's current password
5. Press Cancel when informed you need to change your password
6. Press Ctrl+Alt+Del again, enter user's current password, proceed 7. with password change (notice username is blank at this point)
8. Password gets changed but you are returned to the change password screen with no way to go back or proceed
9. Forced reboot appears to be the only way out but you can logon normally after this

We discovered this when running through the sysprep process and had bypassed the standard OOBE set password screen. Windows Server still wants the password set at first logon so we end up setting the password in the standard password change method instead of via OOBE. I realized this wasn't just a problem with our OOBE process though because just checking the box in user properties will make it happen. Tested this on the built-in Administrator account and a standard account I created after the fact.

Obviously most people won't hit the cancel button here, but we did it just playing around and discovered this.

Ich habe ein paar Ideen um Windows 10 und Windows 10 Mobil noch besser zu machen.

1. Das größte Problem im Windows 10 und Windows 10 Mobil ist das automatische Update ohne Angabe der Dateigröße und der Zeit für die Installation. Update von Build oder App-Update legt Rechner für Stunden lahm!

2. Windows 10 Mobil hängt sich auf und das Smartphone sollte zurückgesetzt werden. Alle Daten auf dem Smartphone sind weg, sowas geht nicht in der Arbeitswelt.

3. Die Sicherheit ist bei Firmen sehr wichtig, darum muss klar sein wo die Daten liegen und teilweise kommt eine Cloudlösung nicht in Frage, weil die Daten nichts auf einem fremden System zu suchen haben. Man kann durch einen Hackerangriff oder Mitarbeiterzugriff alle Daten zentral finden, was unerwünscht ist! Auch die Datenleitungen werden massiv benutzt da die Daten immer von der Cloud abgefragt werden müßen!

4. Was unterscheidet der Microsoft Mobil von Apple, Samsung usw. Da muss schon eine tolle App daher, der Dock-PC ist hier schon ein gute Idee, aber wieso nur mit Office-Produkte usw...

Für diese Punkte usw. hätte ich ein paar Ideen für Microsoft :-)

Mit freundlichen Grüßen

I do believe that servers do not need a GUI and probably should not have one for performance and security reasons. With Windows Server 2016, the default installation is Server Core, and I do think this is a very good thing.

However, there are scenarios when a GUI can be handy, particularly for small business with limited IT resources (for example, for the Essentials role). In this scenario, instead of installing a GUI on the server (with calculator, Explorer, Internet Explorer, etc.) the user should be able to access and configure the server from a webpage just like most routers or many other appliances.

A hotfix was created by Microsoft to prevent further leaked redirected printers from accumulating in the registry. https://support.microsoft.com/en-us/kb/2620656
Unfortunately, according to the script provided in that KB article the hotfix only deals with the redirected printers that have "session" in the name. The issue is that Microsoft changed this a long time ago to now have "redirected" in the name instead as well as the format of the name being different.
This means that the redirected printers with the new name format are still being leaked in the registry causing the same issue. Note that this is also proven simply by reviewing the affected registry keys after logging in and out a few times.
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Devices
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\PrinterPorts

Note that although the KB article applies to Windows 7, Windows Server 2008 R2, Windows Vista, and Windows Server 2008, it still happens in Windows Server 2012 and Windows Server 2012 R2 and likely also in Windows 8 through Windows 10.

Please stop the leaked printer names to eliminate the problem with many software products out there.

Thank you.

Hallo liebes Microsoft Team
Ich habe oft darüber nachgedacht was der Menschheit fehlt die Geschäftlich oder auch Privat oft unterwegs sind. Stellen Sie sich einmal vor jemand der beruflich oft Reist, nie an einem Punkt ist hat so gut wie immer sein Notebook oder Laptop dabei. Jetzt muss der jenige was ausdrucken, aber wo ? Wie währe die Idee mit einem Laptop mit integriertem Drucker.
Oder ein ALL IN ONE Rechner mit integriertem Drucker. Vielleicht hat man nicht soviel Platz zuhause oder man will sich etwas kaufen wo alles mit drinnen ist.

Ich würde mich über eure Meinung interessieren wie ihr das sieht