477 - Windows 10 Upgrade

This project aims to consider the implications of the upgrade to Windows 10 and then to plan the upgrades of all Managed Desktop machines.

Project Documentation

The Informatics Windows 10 OU is: ed.ac.uk/UoEX/SDX/ISSD/IS_DaaS/CSE/INF

Significant Changes

  • No roaming profile by default
  • No AFS client
    • All admin home directories were migrated to DataStore before upgrading to Windows 10.
    • AFS group space has also been moved to DataStore, with the exception of ISS.
    • Auristor has been manually downloaded onto each ISS machine - it requires admin rights to install. We have simplified the process of obtaining credentials with a batch file users keep on their Desktop, however this sometimes breaks - defaulting to MY.REALM instead of INF.ED.AC.UK so most users are familiar now with manually running kinit+aklog.

Issues

  • Acrobat Reader missing --- pdf reader available in Edge
  • Thunderbird missing --- no longer an issue since all admin staff now using Outlook 2016 or Office365 webmail
  • eFinancials and eRecruitment require installation from the Software Centre by the user of an IS supplied plug-in (eRecruitment and eFinancials Java Configuration).
  • Several older Win7 machines needed a few tweaks to the BIOS to allow new UEFI build, and or re-partitioning using DISKPART depending on which Task Sequence Error was thrown up.
  • Was good practice to backup the Win7 BitLocker recovery key before deleting the old entry from AD, as BitLocker sometimes prevented booting from the Win10 USB stick.

Laptops

  • The build works on laptops too, with one additional step - to add it to the local AREA SDX Mobile Desktop security group via AD. This is important so that DirectAccess can kick in when working remotely which will map the user's datastore home drive (M:\) without the need to be on Uni VPN. Instructions on how to do this is on the support wiki page for setting up MDPs.

BitLocker

  • Only newly built supported laptops will attempt to encrypt their hard drive and store the keys in Active Directory.
  • For desktops this does not happen automatically and BitLocker must be manually enabled, by right-clicking on the C:\ drive and following the Wizard default settings.

-- JenniferOxley - 04 May 2020

Topic revision: r12 - 21 May 2020 - 15:16:14 - AlisonDownie
 
This site is powered by the TWiki collaboration platformCopyright © by the contributing authors. All material on this collaboration platform is the property of the contributing authors.
Ideas, requests, problems regarding TWiki? Send feedback
This Wiki uses Cookies