Thursday, November 29, 2018

Servicing Stack Update - what it is and when you need it!

From time to time it is necessary to fix the Windows Setup itself. This is the so called "Component Base Setup" CBS. This you will also find the setup logs. For several reasons it might be necessary to do an update!

Here you will find the latest Servicing Stack Updates:

(Sometimes they have even something to do with security fixes.)
You will find this also in my "Important Links" list.

So what is it in detail?

The "servicing stack" is the code that installs other operating system updates. Additionally, it contains the "component-based servicing stack" (CBS), which is a key underlying component for several elements of Windows deployment, such as DISM, SFC, changing Windows features or roles, and repairing components. The CBS is a small component that typically does not have updates released every month.

For more information please refer to:

When and how to apply?

Best is to add it via DISM right after applying the image in a Task Sequence in SCCM. So you ensure it is already updated before Windows Setup starts its tasks. e.g. with this command during an task sequence where your are still offline but C:\Windows exists due to the fact that you applied the image first and then you run this command in a SCCM package:

dism /Image:C:\ /Add-Package /PackagePath=windows10.0-kb00001-x64.msu /LogPath=C:\Windows\logs\dism-add-stackservicingpackage.log
Write them in one line! Word wrapping is just for better readability in my blog!

The missing path to the MSU file is by purpose. The command always get executed in the same directory as the command is invoked by the Task sequence SCCM package. 

Also image directory in offline mode (Windows PE) is C:\

You have also the option to mount the Vanila WIM Image (it is important that is is NOT a built and capture image for upgrade scenarios!) and add the servicing stack update directly there. So it becomes out of the box part of the WIM file.

But keep in mind if you are using the WIM image for Windows 10 inplace upgrade (7 to 10 or 10 old to 10 newer) then your are only allowed to do a very limited set of image modifications. Built and capture is absolutelly forbidden in this scenario.

You can add the following to the WIM used for upgrades:

1. Latest servicing stack update (for your particular Windows version!)1. Latest cummulative update (for your particular Windows version!)
2. Latest cumulative update (for your particular Windows version!)
3. Additional feature on demand packages (keep in mind you need to look for the right Feature on demand DVD that fits to this version of windows!)
4. Language packs (also need to fit to the right version of Windows!)

NEVER mix up versions!

Kudos to Manuel for sending me the link of the repo! ;-)

Thursday, November 22, 2018

Network connection from public to private with Powershell

Sometimes the Windows 10 network connection will be classified automatically as public or private and it is not in the way as it should be. As this will affect firewall rules you sometimes get by a domain group policy. The effect is that your software cant communicate anymore when this was done wrong.

How to fix this?

Very simple with PowerShell!

1. Open an Admin PowerShell Command Prompt.
2. Type in: Get-NetConnectionProfile
3. Check the name from your network connection. Keep in mind when you have Security features like credential guard and/or HyperV enabled you will see more "Unidentified networks". You can safely ignore them. Here in my example the network is called "CAP".
4. Type in: Set-NetConnectionProfile -Name "CAP" -NetworkCategory Private

Your setting will be active immediately!

Wednesday, November 21, 2018

Azure AD - DSRegCMD output checked in Powershell

Sometimes you have to deal with DSREGCMD Output.

Means the interesting output of DSREGCMD need to be further analyzed in PowerShell.

Here a useful example I found. 

Keep in mind the array (@) is just containing 4 examples.
May be you need to extend it for further. 

$template = @'
        AzureAdJoined : {AzureAdJoined*:YES}
     EnterpriseJoined : {EnterpriseJoined:NO}
        AzureAdJoined : {AzureAdJoined*:NO}
     EnterpriseJoined : {EnterpriseJoined:YES}
        AzureAdJoined : {AzureAdJoined*:NO}
     EnterpriseJoined : {EnterpriseJoined:NO}

        AzureAdJoined : {AzureAdJoined*:YES}
     EnterpriseJoined : {EnterpriseJoined:YES}

PS C:\> dsregcmd /status | ConvertFrom-String -TemplateContent $template

AzureAdJoined EnterpriseJoined
------------- ----------------
NO            NO

Tuesday, November 20, 2018

Windows 10 - 1809 whats new

Windows 10 - Version 1809
Build 10.0.17763.1


  • Start now supports the always visible scrollbar setting
  • Folders can now be named

Cortana + search

  • Search now supports previews from apps, documents and other media
  • Search will now show a wider UI by default
  • Search will now show your recent activities
  • File location, last modified and author metadata is now shown in search results
  • When searching for downloads of Windows software, start can now directly link the download button
  • Design improvements to the home screen when Cortana isn't enabled or supported

Taskbar + Action center

  • Notifications in the Action center will now fade in when opening the Action center
  • The blurry app-toasts will now be dismissed to the Action center instead of disappearing completely
  • The brightness Quick Action has been removed from the battery fly-out
  • Timeline will now blur the background with acrylic
  • Screen snip has been added as a new quick action
  • The "Start" tooltip has been added when hovering over the start button
  • Edge tabs will now be shown as individual windows in Task View

User Interface

  • Any type of activity can now be restored instead of only documents
  • Inbox text controls now use the CommandBarFlyout control allowing you to cut, copy and paste with touch, and to bolden, italicize, etc. fonts in rich text surfaces with new animations and more Fluent Design
  • The Ease of Access flyout on the login screen has been updated to show Narrator with an on/off-toggle
  • Dropdowns will now have a drop shadow
  • Task View no longer has an acrylic background
  • The embedded handwriting panel is now enabled by default

File Explorer

  • HEIF files can now be rotated in File Explorer
  • Metadata for HEIF files can now be edited
  • The File-button will now follow your accent color
  • File Explorer now supports the dark theme
  • "Open Linux Shell here" has been added to the context menu in explorer
  • The dark theme for File Explorer has been updated to use a lighter grey for the content area and the Ribbon's tab bar
  • The "Sorting by file size" size requirements have been updated: Tiny, Small, Medium, Large, Huge and Gigantic are now defined as 0 – 16KB, 16KB – 1MB, 1 MB to 128 MB, 128 MB – 1 GB, 1 GB – 4 GB, and > 4 GB
  • Updated "Remove access" and "Advanced security" icon

Microsoft Edge 18


  • The Books-section in the Hub now supports pull-to-refresh
  • Books pinned to the Start screen will now show a live tile that cycles through the cover and your progress
  • Support for same-site cookies has been added
  • The ellipses menu will now show icons for every item
  • New tab, Reading list, Books, History and Downloads have been added to the ellipses menu
  • The jumplist for Edge will now show your top sites
  • Right-clicking on a folder now allows you to "Show in folder" and "Copy link"
  • Hovering over the sound-icon in a tab playing sound will now result in the icon lighting up
  • Pressing F1 will now bring you to Microsoft Edge support instead of Microsoft Edge tips
  • Edge now has a beta-icon in Insider Previews
  • Shadows have been added to the address bar and tabs
  • The ellipses menu has been reordered with icons for its options
  • You can now hide Hub, Notes and Share icons in the Edge address bar
  • You can now show the Reading list, Books, History and Downloads icons in the Edge address bar
  • Edge settings have been reorganized into 4 categories, with a design similar to the Hub
  • Under ... > Settings > Advanced, you can now control how media should start playing
  • PDF-files now have an icon with a red ribbon and no Edge logo
  • You can now mute a tab even if it isn't playing audio yet
  • Book data can no longer be exported
  • The permission dialogs have been updated with a new design and strings
  • The Hub now has a smaller design matching the look of the new Settings panel
  • The highlighted reading list item has now its design from pre-1803 again
  • AutoPlay permissions can now be controlled for each site individually
  • Keyboard shortcuts have been added to the ellipses menu
  • You can now select and copy certificate details
  • A set of new Group Policies and MDM settings for IT administrators has been added
  • XSS Filter has been removed
  • Support for assigned access (kiosk mode) has been added
  • Books can now be shared from their context menu in the Hub
  • Improvements related to HTTP/2 and CUBIC support


  • Printing PDFs now allows you to choose the scale of the print
  • Local files like PDFs will now appear in your browser history
  • Reading tools now has an extended set of themes
  • Highlighting now supports one, three or five lines
  • The PDF toolbar will now appear when your cursor comes near the top of the window
  • Some of the buttons in the PDF toolbar now have text
  • You can now look up definitions for words
  • The PDF toolbar can now be pinned to remain visible
  • Improved rendering performance for PDFs
  • Opening PDFs in Edge is now also remembered as an activity in Timeline


  • Support for .setDragItem has been added
  • relList is now supported on anchor elements
  • CSS3 Overflow wrap now works with overflow-wrap
  • CSS overscroll-behavior is now supported
  • Support for CSS Masks has been implemented partially
  • The srcdoc attribute is now supported for iframes
  • The Web Authentication API is now supported
  • The WebDriver implementation has been updated to match the Recommendation specification


  • "Enable CSS Masking" is now enabled by default
  • "Enable CSS background-blend-mode property" has been added as a flag



  • Screen snip has been added as a new option to enable a quick action in Action center
  • Focus Assist will now disable all notifications when any game is playing full screen by default with "When I'm playing a game" added as a new option
  • "Free up space now" will no longer allow you to remove the previous Windows version
  • The previous Windows version can now be removed from "Change how we free up space automatically" by enabling "Delete previous versions of Windows" and clicking "Clean now"
  • You can now disable Edge tabs showing as individual tabs in Alt + Tab
  • Clipboard has been added as a new page and allows you to enable saving multiple items on the clipboard instead of just 1 and to sync the clipboard across devices
  • Under "Change how we free up space automatically" a new setting has been added to make files in Files On-Demand online-only after not using them for a while
  • You can now set clipboard to sync everything automatically or require you to choose what to sync
  • Windows HD Color has been added as a subpage under Display if you have an HDR-enabled display


  • Bluetoothdevices will now show their battery level
  • Clicking once on the pen tail button can now be set to make a screen snippet
  • You can now set the Print Screen button to make a screen snippet instead of a print screen
  • You can now name your audio device and set the preferred spatial audio format
  • You can now set your pen to behave like a mouse instead of scrolling and panning
  • When a Bluetooth device is low on battery power, you will get a notification
  • Typing insights has been added under "Typing" showing you statistics about how often Windows autocorrected spelling mistakes, predictions of the next word, word suggestions and the number of words typed by using gestures

Network & Internet

  • "Data usage" now shows how much data you've used while roaming


  • WebDriver has been added as a Feature on Demand
  • "Adjust video based on lighting" has been improved for devices with a light censor


  • Setting up a new kiosk has been improved
  • Kiosk accounts can now sign in when a device starts

Time & language

  • The Language & Region page has been split into a Language and Region page
  • Region now allows you to overwrite the regional format settings that comes with the region set by the user
  • The calendar localization, first day of the week, short date and long date notation, short time and long time notation and currency can now be changed from Region
  • A link to the Microsoft Store has been added to Language to allow you to download Local Experience Packs
  • Improved performance when loading the Language settings page


  • The Game DVR page has been renamed to Captures

Ease of Access

  • You can now keep the mouse centered on the screen in full-screen mode in Magnifier
  • 5% and 10% are added as new zoom increments
  • You can now make text bigger under "Display" with the "Make everything bigger" setting
  • Narrator's default keyboard layout has been updated
  • Dialog boxes are now automatically dictated by Narrator
  • Narrator can now search for text with Find
  • Narrator can now list links, headings and landmarks in applications or content
  • Results for landmarks can now be narrowed by typing in the list or the text field of the window
  • Pressing down in Scan Mode will now stop when the item is an interactive element
  • Starting Narrator will now trigger a Narrator Quickstart dialog
  • The Narrator Standard Keyboard now have the scan mode secondary action command and Spell current selection command

Cortana & Search

  • "Cortana" has been renamed "Cortana & Search"


  • The "Speech, Inking & typing" page has been split into "Speech" and "Inking & typing"

Update & Security

  • Delivery Optimization Settings have been moved to be its own page in Update & Security
  • Windows is now better at predicting if you have left your PC for a long time before a restart is triggered to update
  • When an update is ready to install, Insiders will now see similar prompts like retail

Mixed Reality

  • Under "Audio", a setting has been added to mirror headset audio to desktop


  • Settings will now show FAQ's in the sidebar for English markets
  • Settings will now show tips on its home screen
  • New keywords have been added to better find settings

Ink Workspace

  • Screen Sketch has been split off to be a standalone app (similar to Stickies)


  • When recording a game clip, the audio should now be of a higher quality


  • The networking stack has been revamped with the Net Adapter Framework
  • A clean install will now show an option to enable activity history sync
  • The Windows Security Center service now requires antivirus products to use a protected process to register
  • Support for IPv6 has been added to KDNET
  • The MBB USB NetDriver is now the default driver
  • Fonts can now be installed for the current user without admin permissions
  • The post-update experience may now show a screen asking you to configure new settings that might have been added since you device was set up
  • DTS:X has been added to the list of spatial audio technologies that can be used
  • Windows Hello is now supported for remote sessions with Azure Active Directory and Active Directory
  • Support for Web Sign-in has been added to Windows for ADFS and other profiders that support the WS-Fed protocol
  • Shared Windows PCs now support "Fast Sign-in"
  • Support for Unicode 11, including 157 new emoji, has been added as wel as updates to older emoji
  • Support for leap seconds has been added
  • Support for the Precision Time Protocol has been added
  • Software Timestamping has been added to eliminate the software delay caused by the Windows networking stack


  • Scan mode in Narrator now supports selecting content on most text surfaces
  • Narrator has a number of reliability improvements
  • Scan Mode has been improved with better reading and navigation
  • Feedback can now be send with the Narrator + Alt + F keystroke
  • The view type mode will now be called out reliably
  • Move to beginning of text now works with Narrator + B, Move to end of text now is Narrator + E

Language and input

  • When people emojis are in view, the skin colors will now be shown in a row instead of as a button
  • The handwriting panel now show the delete button in the top level menu, switching languages can now be done from the ellipses menu
  • Languages will now show which language is used as the default app language
  • SwiftKey is now used for English (United States), English (United Kingdom), French (France), German (Germany), Italian (Italy), Spanish (Spain), Portuguese (Brazil), or Russian
  • The clipboard button is now always visible in the on-screen keyboard's candidate pane
  • English (Australia) now upports shape writing
  • The emoji panel search function has been updated to support the Emoji 11.0 set

Input Method Editor

  • The IME toolbar has been redesigned to support the dark theme and more
  • The IMEs taskbar icon now has an extended context menu
  • The emoji panel now also works within the IME


Control Panel

  • Settings to manipulate the screen brightness have been removed

Diagnostic Data Viewer

  • Problem Reports has been added to the Data Viewer
  • The UI of the Diagnostic Data Viewer has been improved with a better search bar

Game bar

  • Game bar has now been added to the start menu
  • Game bar has been updated with audio controls to change the output device, mute the volume or adjust the volume for running apps and games
  • Game bar now shows framerates, CPU usage, GPU VRAM usage and system RAM usage
  • "Dedicate resources" has been added as a new option to Game bar

Internet Explorer 11

  • Support for same-site cookies has been added

Mixed Reality Portal

  • Sound can now be streamed to both the headset and PC
  • Some errors have been made clearer


  • Notepad now supports UNIX line endings and Macintosh line endings
  • You can now search your selecting with Bing by pressing Ctrl + B or navigating to "Search with Bing..."
  • Support for wrap-around find and replace has been added
  • You can now zoom in and out
  • Line and column numbers are now supported when word-wrap is enabled
  • Improved performance when opening large files
  • Ctrl + Backspace is now supported to delete the previous word
  • Arrow keys now unselect text first and then move the cursor as you would expect
  • The line an column number will no longer reset upon saving a file
  • Notepad will now render lines that don't fit entirely on the screen correctly

Registry Editor

  • The address bar can now suggest paths

Screen Sketch

  • Screen Sketch has been added as a default app
  • Rectangular snipping is now the default snipping tool instead of full screen
  • Win + Shift + S will now show the snipping toolbar
  • Making a screenshot with Win + Shift + S will now trigger a notification to open Screen Sketch
  • The Screen Sketch toolbar will now follow the user theme

Snipping Tool

  • Snipping Tool will now show a message asking you to try Screen Sketch

Task Manager

  • The leaf-icon now has a tooltip
  • Suspended UWP apps will no longer show memory used by the app to reflect OS behavior
  • Both old and new memory columns can be enabled in details
  • The "Power usage" and "Power usage trend" columns have been added to "Processes"

Windows Mixed Reality

  • When using an Immersive Application you'll now have access to Quick Actions to go home, launch the capture tools, etc.
  • Flashlight can now be used to open a "portal" to view the real world with the camera

Windows Security

  • Windows Defender Security Center has been renamed Windows Security
  • Windows Security will now show threats more clearly
  • The rail now has an acrylic background
  • The options on the start page now scale according to the window width, similar to Settings
  • "Current threats" has been improved to show all threats that require an action
  • "Virus & threat protection now shows a list of recently blocked apps
  • IF the time-syncing service is disabled and the device's time is not synced with the time on Microsoft's servers, the "Device performance & health" page will show an option to turn syncing back on
  • "Security providers" has been added to Settings to view all your antivirus, firewall and web protections
  • Standalone users no longer need to change Registry key settings to configure Windows Defender Application Guard
  • Accounts managed by enterprise policies can now see how their device is configured for Windows Defender Application Guard

Windows Subsystem for Linux

  • You can now copy and paste with Ctrl + Shift + C and Ctrl + Shift + V

Windows Mail

  • Links will now always open in Microsoft Edge

Other features

  • Microsoft WebDriver has been added as a Feature on Demand
  • Windows Defender Firewall now supports Windows Subsystem for Linux Processes
  • Windows will now sync your clipboard across devices
  • Win + V will now open the clipboard
  • A wireless projection will now show a control banner at the top of the screen
  • The Remote Server Administration Tools are now part of Feature-on-Demand
  • When an app needs access to your microphone but it is not allowed so by the privacy settings, a notification will be shown
  • Mixed Reality no longer requires a monitor to be connected when running
  • The Camera Capture UI API is now available to apps in Mixed Reality
  • Improved video capture experience in Mixed Reality
  • When clipboard history is not enabled, you'll now be able to enable it from Win + V
  • You can now clean your clipboard history with the "Clear all" button

And further

  • After an upgrade, Windows might ask you to go over some setup settings that you may have missed due to features not being available during setup
  • The People flyout has been updated to use the new Microsoft Store icon
  • Improved scaling logic for apps when the screen DPI changes
  • Your Phone is now pinned to your desktop
  • Improves the amount of CPU cdpusersvc uses
Known issues
  • Task Manager is not reporting accurate CPU usage.
  • Arrows to expand “Background processes” in Task Manager are blinking constantly and weirdly.

Kudos to ChangeWindows Team!

Friday, November 16, 2018

SCCM Driver handling by model

All the time you have to add driver packages to the task sequence in SystemCenter Configuration Manager (SCCM). Therfore it is simple to use the builtin TS variable called "Model".

But to compare this you will need the correct model string to compare from your system.

Use the WMI Console command to get this very easy.
1. Start WMIC in admin window
2. type in: Computersystem get model

And below Model you will see exactly the string you need for the task sequence variable you need to compare with.

And here is exactly the place you can use this: