Update Connectivity – You are just not updating it right

The title of this post is tongue in cheek. Last week Microsoft has posted an article about Update Connectivity value and what role it plays in PC’s ability to install updates in a timely manner. Post made some waves on various IT news sites and also garnered critical response from systems administrators.

I cannot check if this parameter correlates with problems with updates (we use 3d party tools for updates). But, if you use Intune, maybe you can test this theory and find some useful insights. Although Microsoft provided rather vague explanation on how much time is actually required for PC to successfully update:

Specifically, data shows that devices need a minimum of two continuous connected hours, and six total connected hours after an update is released to reliably update.

Does this mean that only 2 continuous hours needed to initiate update, but the rest 4 can be divided in chunks, but still 6 in total needed to complete? So, if PC is online just 2 hours every day it will take 3 days to update? They need to clarify this part. By the way, this means being connected to Windows Update service, not just being online. But can update itself be interrupted? If not, then why they not say 6 continuous hours. Download already can be resumed next day and shouldn’t be that long anyway. Lots of confusion and questions here as it seems that you kind of need to keep it online for 6-8 hours to make it to update for sure. Which is not optimal. And this probably came from all the smart things introduced in Windows 10 gradually (active hours, Windows trying to find time to update when you are not actively using it). Updates got so big and they need so much time to install that it became a problem for users (being interrupted with updates). But Microsoft’s solution for this was not installing updates at all. Which is bad for security and a headache for administrators. And response from Microsoft is – Windows 11 has smaller and faster updates. Right. Though Windows 10 is not going away yet. And it was “last Windows” version and was intended to be polished and improved all the time. Why not improve update process in it instead of as usual touting better things for new and shiny versions? Who knows, maybe updates will not require a restart. In Windows 65 🙂

Cloud managed Edge IE Mode site list [EN]

In my last article regarding IE Mode i have griped that MS allowed to host site list file in the cloud, but there was no option to actually modify and publish it using M365 console. Well, this is now fixed. Microsoft presented a new section in M365 Admin Console called Microsoft Edge site list, which allows to manage multiple site lists, add URLs, save versions and publish them. There is also an option to import xml file with a list. Then you can copy ID of such site list and use it in Intune device profile to push that site list and a setting to use it to selected groups of devices. Alternatively you can use ConfigMgr or regular group policies. Although it is not clear how you can use just ID with group policies. I think it still requires a path to the file. But if you are in Intune camp completely, then this is a nice way to get rid of hosting files manually in Azure and a nice way to have different rings of devices with different sets of sites that has to be opened with IE mode. More information in this article on MS Tech Community.

Windows 10 November 2021 Update (21H2) [LT]

Šį pirmadienį, lapkričio 16, Microsoft išleido eilinį Windows 10 funkcinį atnaujinimą (feature update). Kuris po Windows 11 pasirodymo sulauks ne tiek daug dėmesio. Ypač turint omeny, kad paskutiniai Windows 10 atnaujinimai beveik neturi vartotojams skirtų naujovių. 21H2 ne išimtis. Praktiškai visi pokyčiai yra saugumo ar veikimo patobulinimai “under the hood”. Tuo metu Windows 11 kas savaitę sulaukia Insider versijų su naujomis opcijomis ar vartotojo sąsajos pakeitimais, atnaujintomis programomis (Photos, Paint, t.t.). Todėl nebuvo staigmena išgirsti, kad nuo šiol Windows 10 sulauks tik vieno funkcinio atnaujinimo per metus. Taigi pavasarį nebebus 22H1 versijos, o rudenį sulauksime 22H2, tikriausiai. Taip jie suvienodina palaikymo modelį su Windows 11. O kartu tai rodo, kad Windows 10 yra saulėlydžio fazėje.

Read More

Fixing Japanese and Chinese IME problem [EN]

From my understanding the “Japanese IME is not ready yet.” (or Chinese) error started appearing sometime around 1903 was released. There are tons of articles and questions on internet regarding this issue with not many working solutions. Especially for restricted corporate environment. We have started seeing reports about this error while pushing 20H2 version. But it seems such problems were also observed after 1903 update (or maybe even earlier) and some IT staff was “fixing” it by copying IME files from older version into new essentially replacing it. This doesn’t work with latest Windows 10 versions. Not to say this is not a pretty solution anyway. I had to involve Microsoft support recently to tackle this and below are my findings and kind of a solution for this.

Read More

Windows 11 oficialiai išleista (21H2) [LT]

Šią savaitę Microsoft išleido pirmą Windows 11 oficialią versiją su pakeista Start meniu, užduočių juostos ir kitų komponentų išvaizda ir funkcionalumu, papildomais saugumo reikalavimais. Apie būsimas naujoves rašiau po pirmojo pristatymo birželį. Taip pat apie pagrindinius akcentus galima perskaityt išleidimo straipsnyje MS bloge. Per kelis mėnesius nuo paskelbimo buvo kažkiek aptaisytos klaidos ir nušlifuotos įvairios vietos. Tačiau ši Windows versija kaip jau įprasta yra išleidžiama su sąrašu oficialiai žinomų problemų, o iškart po išleidimo vartotojai pradėjo viešint įvairias kitas klaidas. Šis įrašas yra trumpas rinkinys techninės informacijos ir nuorodų į pagalbinius Microsoft straipsnius ir susijusias naujienas.

Read More

Fixing Windows Defender RCE vulnerability in mpengine.dll [EN]

In this post I will share my experience with fixing a vulnerability related to built-in Windows/Microsoft Defender antivirus (not to confuse with Microsoft Defender for Endpoint service). This is an integral part of Windows 10 and is still present on the system in some form even when you use a third-party AV solution. In that case it should be dormant and can be used for just a simple scan. But sometimes it can be not the case.

Read More

SMTP Server As a Relay to Exchange Online [EN]

With Microsoft hammering down on Basic Auth support in Exchange Online many systems admins are wondering what to do about email function in multi function printers and scanners and other internal systems that have to send emails (SharePoint and similar). Although it seems that SMTP Auth might stay available a bit longer even after the final date in October of 2022. Still, there could be better options to avoid problems when Basic Auth is gone and MFPs cannot send emails directly to Exchange Online using just email and password. I am not 100% sure below provided setup will work all the time, but it was recommended by our MS partners and listed on Microsoft support page. Read More

Vis dar ne paskutinė – Windows 11 [LT]

Daugelis technologijų pasaulyje jau turbūt girdėjo apie paskelbtą naują Windows versiją. Taigi Microsoft “OS-as-a-service” ir “really last Windows version” pažadas buvo kiek jų pačių primirštas. Na, pirma dalis gal ir nesikeičia, nes Windows 11 yra didžiąja dalimi vis dar kuriama Windows 10 pagrindu ir atnaujinimas nemokamas, taigi tik šiek tiek keičiasi išvaizda ir versijos skaičiukas. Man atrodo, kad šis žingsnis buvo padarytas dėl kelių priežasčių. Microsoft suprato, kad amžiams turėti tik vieną versiją nėra įdomu publikai, o feature atnaujinimai jau seniai pasidarė nuobodūs ir nesukuria pakankamai šurmulio entuziastų gretose. Kitas aspektas – noras gana pastebimai pakeisti įprastą sąsają (užduočių juostą, Start meniu). Tikriausiai Windows 10 naudotojams tai būtų pernelyg didelis pokytis, jeigu tai būtų eilinis tos pačios versijos atnaujinimas.

Read More

Mozilla Firefox 89.0 – Proton Redesign [EN]

This will be my last post about new Firefox versions and this time in English. I started posting release notes in Lithuanian here a few years ago as i was posting them in a local forum, so i figured i will post this in my blog and then copy to that forum. Which is nearly dead now. As well as my interest in posting such things 🙂

It feels like only yesterday i was writing about my concerns about Quantum update (with its Photon UI). It killed a lot of things i liked about Firefox (customization and ability to extend various features). I have adjusted to that and to the loss of many extensions, although i still miss some of them and more robust tabs handling (multi rows, tabs opening position, etc.). I didn’t like the UI changes as well, but it was easier to get used to.

Seems that redesigns and UI changes happen more often in Firefox now. Maybe this is an attempt to stay relevant (even bad press is still press). Some will hear negative comments and will be curious to try to see is it really that bad. But i believe that influx of new users is not as high as exodus of long time users.

Read More

Windows 10 May 2021 Update (21H1) [LT]

Gegužės 18 dieną Microsoft oficialiai išleido May 2021 Update atnaujinimą skirtą Windows 10 sistemai (21H1 versijos numeris). Kai buvo išleistas 20H2 smalsavau ar kada nors Enablement Package atnaujinimo mechanizmas bus pritaikytas ir pavasario versijoms (iki šiol tai buvo daroma tik su rudens versijomis). Ir šį kartą toks paketas yra teikiamas 21H1 versijai. Įdomiausia, kad su juo greitai atsinaujint galima ne tik iš prieš tai išleistos 20H2 versijos, bet ir iš 2004. Tai yra naujovė. Enablement Package pirmą kartą atsirado pasirodžius 1909 versijai ir leido labai greitai atnaujint 1903 versiją turinčią sistemą. Kadangi visos naujos funkcijos jau būna įrašytos su eiliniais mėnesio atnaujinimas, bet išjungtoje būsenoje. O Enablement Package jas įjungia. Toks paketas parsiunčiamas ir įdiegiamas per kelias minutes ir prireikia tik vieno trumpo perkrovimo. Tai, kad į 21H1 greitai atsinaujint galima net iš dviejų versijų kalba ir apie Microsoft daromą pažangą. O kartu galbūt ir apie naujovių trukumą. 21H1 yra gana nuobodus atnaujinimas su mažu kiekiu įdomių naujovių. Buvo panaudota ta pati bazė kaip 2004/20H2 versijose ir tai leido pritaikyti Enablement Package mechanizmą.

Read More