Mike Shellenberger's blog

How To Guide: Deploying Windows Update for Business Reports

Overview Windows Update for Business reports provides detailed patch compliance information for your Windows endpoints. The unique feature of this solution versus alternatives from Microsoft, is that it’s free and that it can be used with any Windows patch management deployment solution. In other words, it works regardless of whether you are using Windows Update…
(Multi-part) How to Guide: Migrate from Microsoft LAPS (legacy) to Windows LAPS in a Hybrid Environment – Migration Planning (Part 1)

Microsoft LAPS (Local Administrator Password Solution) is solution for managing the automatic rotation and storage of local administrator account passwords for Windows endpoints joined to a Windows Server Active Directory domain. It’s main limitation up to this point has been that the solution only supports Windows Server AD joined Windows endpoints. For organizations that are…
(Multi-part) How to Guide: Migrate from Microsoft LAPS (legacy) to Windows LAPS in a Hybrid Environment – Hybrid Client Migration (Part 3)

Migrate Azure Active Directory Hybrid Joined Devices If we look at the previous visual representation of my test devices, we are focused only on the devices outlined in red here: With all the Windows Server Active Directory only joined clients now switched to Windows LAPS, it’s time to focus on the hybrid joined devices. Ideally,…
(Multi-part) How to Guide: Migrate from Microsoft LAPS (legacy) to Windows LAPS in a Hybrid Environment – Windows Server AD Client Migration (Part 2)

Migrating Windows Server Active Directory Clients If we look at the previous visual representation of my test devices, we are focused only on the devices outlined in red here: In my current Microsoft LAPS (legacy) configuration, I have two group policy objects targeting both servers and client devices. Before I start migrating to Windows LAPS,…
(Multi-part) How to Guide: Migrate from Microsoft LAPS (legacy) to Windows LAPS in a Hybrid Environment – Cloud-Managed Client Deployment (Part 4)

Windows LAPS policy for Microsoft Intune managed clients If we look at the previous visual representation of my test devices, we are focused only on the devices outlined in red here: The last step in our hybrid enterprise migration to Windows LAPS is to apply a Windows LAPS policy to the endpoints that are managed…
Deploy the Edge Adobe Viewer in your Enterprise: How To Guide

Microsoft has been gradually switching consumer versions of the Edge browser to using the new Adobe Reader render engine, instead of the native Edge viewer, since March 2023. For enterprise IT, you have the option of waiting until September of 2023, when the new PDF viewer will become the default, or you can begin to…