Skip to content

New desktop icon

What changed

Yesterday, we prematurely delivered a new desktop icon as a planned enhancement–please accept our apologies for any surprises this caused.

This new desktop icon is named ‘Upgrade Windows to current version‘. Depending on screen resolution and font choices on your computer, this name may be shortened. If you don’t see this icon, you likely will in the near future.

New feature

This icon allows any managed workstation which is not running the latest Windows 10 release, to upgrade to the latest Windows 10 release. It is very similar to the icon we delivered in January 2017, for upgrade from Windows 7 to Windows 10, but it allows you to manually initiate an update from one Windows 10 feature release to the latest.

We are still working on another desired feature of this icon–that it only appear on computers which are not already running the latest Windows 10 release. The intention being that you will know you aren’t on the latest version when you see the icon appear. That feature has not yet been completed, but we’ll continue to work on that.

This feature is part of an overhaul of our approach to keeping Windows updated. We’ll have more to share about that in the near future.

What to expect

If you manually upgrade, you should be prepared for some interruption of service. Windows 10 feature upgrades are not as lengthy as the upgrade from Windows 7. When the computer restarts, there will be a period of time when your computer is not usable. That period is generally 10-30 minutes on current computers, but could be longer.

 

Brian Arkills
Managed Workstation service owner and manager
UW-IT

Antivirus update within Managed Workstation

The antivirus solution and process within Managed Workstation has changed.

What and When

During the month of August, we slowly replaced the prior Sophos product with an entirely new Sophos product with two components. The new product is called Sophos Intercept X.

This change was initially made to all Windows 7 computers to help support our efforts to upgrade them to Windows 10, because the older Sophos product was identified as blocking upgrades in some cases. As we gained trust that it demonstrated no problems with larger numbers of computers, we deployed it across all of the Managed Workstation service.

Note: With a service of this size, any broad change we make takes a long time to be complete. So at this time only 83% of all managed workstations have the new solution–primarily because those remaining have not been on the UW network to receive the update. So you may not have this change.

What this means for you

There are a couple improvements with this new solution:

  • When you leave the UW network, your computer is now able to report infections and get new virus updates
  • We have additional insight on the specific origin of an infection. We’re still analyzing how we might provide that information to you.
  • Our process for addressing infections has shifted so that for most infections you are not required to take action–we take actions when it does not threaten your data. Where data might be destroyed, we will still contact customers before we take action–your data is important to us.

More Info

Some customer units which have IT support have noted that the new solution does not allow for local control or configuration changes. This is by design because this solution is part of what you pay Managed Workstation for each month.

Brian Arkills
Managed Workstation service owner and manager
UW-IT

MWS Training Room End of Life

As of 10/1/2018, the Managed Workstation training room in Roosevelt Commons is no longer available.

There is not enough use for us to continue to provide this resource.

We are sorry for any inconvenience this may cause.

Brian Arkills
Managed Workstation service owner and manager
UW-IT

Managed Workstation to stop supporting Windows 7 on 8/31

Managed Workstation will drop OS support for Windows 7 SP1 on 8/31/2018. This will reduce costs and improve security & capabilities, enabling a more useful, up-to-date, functioning workstation.

To meet this goal, several steps will be taken:

  • July 19: Begin weekly notifications to customer account contacts of their remaining Windows 7 managed workstations
  • August 1: Contact primary user of remaining Windows 7 computers
  • August 8: Contact primary user of remaining Windows 7 computers
  • August 15: Initiate automatic upgrades for remaining Windows 7 managed workstations
  • August 31: Windows 7 computers removed from Managed Workstation service

Since January 2017, a self-service mechanism to upgrade Windows 7 computers to Windows 10 has been available, and customer are encouraged to leverage it. MWS assistance with upgrades is also available, and we will help customers address any issues encountered.

Brian Arkills
Managed Workstation service owner/manager
UW-IT

LastPass for Managed Workstation customers

Managed Workstation is deploying LastPass Enterprise, a password management system, which is now available on an opt-in basis.

What & Why

Managed Workstation has purchased LastPass Enterprise for all Managed Workstation users. LastPass helps improve password management practices by:

  • securely storing and generating complex passwords,
  • providing secure sharing mechanisms for passwords, both individually between users and via UW Groups
  • automatically entering usernames and passwords on most websites, including the UW web login interfaces,
  • providing warnings about password entry on malicious websites, or about at-risk or compromised passwords

We believe these security features are valuable to all users. LastPass is approved by the UW Office of the Chief Information Security Officer.

How

Adoption of LastPass is a self-service action taken by each individual user. We are not planning to send email to every MWS user to notify them of this new capability.

You are welcome to notify users in your unit and we encourage that. If you’d like help notifying your users, let us know.

Interested users will need the above information, along with the information documented at https://it.uw.edu/wares/mws/mgmt/lastpass/adoption/ on how to get a LastPass Enterprise account created and setup.

More Info

It’s important to note that:

  • unlike most Managed Workstation services, customer account contacts will not be able to control whether their users get a LastPass account or not,
  • we cannot recover or reset lost or forgotten LastPass master passwords; lost or forgotten master passwords will result in the complete loss of all stored passwords that aren’t in a Shared Folder.

Our support for LastPass will be limited. We have some critical information documented and provide very basic assistance. Because this is a vendor provided solution and their documentation is excellent, we expect users to leverage the vendor resources for primary support. The LastPass Help Center is an excellent place to start.

Our documentation is available at https://it.uw.edu/wares/mws/mgmt/lastpass/.

Thank you,

Brian Arkills
Managed Workstation Service Owner and Manager
UW-IT
help@uw.edu
206-221-5000

Windows 10 1709/Fall Creators Update is now our Baseline OS

We’ve moved Windows 10 1709, also known as the Fall Creators Update, to Baseline and will start upgrading Windows 10 computers running an older version this week.

What and when

Over the next several weeks, we will be upgrading all computers running Windows 10 to version 1709, which is also known as the Fall Creators Update.  We are moving to this version ahead of the normal schedule, to enable new security functionality.  This upgrade is mandatory.

The upgrade will be done automatically in the evenings, requires no user interaction, and will not impact any user settings or files.  The upgrades will mostly run on the weekends, but if a computer is not on, the upgrade will not start on Monday morning.

While we cannot provide a specific date of when any given computer will be upgraded, individual users can choose to start the process any time using the ‘Software Center’ or via the shortcut on their desktop..

What you need to do

There is no action required.

If you have any questions or concerns, send an email to help@uw.edu and with ‘MWS – 1709 Upgrade’ in the subject line.

MWS trends for October 2017

Below are graphical metrics since the last newsletter. A takeaway statement follows each graph to summarize the critical points of data.

 

Client Operating System Counts

Takeaways: -200 Total, +700 Windows 10 (2240 today), -260 Windows 8.1 (0 today), -800 Windows 7 (870 today). Overall losses were due to cleanup activities that happened during domain migration where many unused systems were retired. A big shift to Windows 10 continues. In future newsletters, we’ll differentiate between versions of Windows 10.

Support Requests and Incidents

Takeaways: Support requests and incidents are generally down about 15%. Spikes in both requests and incidents correspond to the significant workstation migration change activity.

Managed Workstation Newsletter (October 2017)

What’s new?

Customer survey – In the next month, Managed Workstation will send out a survey for feedback on our service. We are looking for ways to improve our service and would like to know what experiences you have had with our team.

Keeping current – Microsoft continues to march forward with its product support lifecycle, and we continue to innovate to provide great management capabilities. We keep you current with Windows and Office with a minimum of hassle. Ideally, you don’t need to keep track of what version you are running and whether it is supported or insecure. If you do like to know those details, we’ve updated our OS lifecycle support document to better reflect what can be supported. Here are a few key upcoming dates:

  • Windows 10 1607 will no longer be supported in 3/2018.
  • Windows 7 SP1 will no longer be supported in 5/2018.

We’ll automatically upgrade any managed workstation still running an unsupported version to the current baseline Windows OS. Alternatively, you can control when an upgrade happens by using an icon on your desktop to upgrade. We recommend starting any such upgrade at the end of the day.

Security improvements – Security improvements don’t get a lot of attention because often they silently protect you, but every once in awhile it’s worth calling them out.

New FY18 Rates and service boundary changes –

 

The Managed Workstation service boundaries have changed. We still provide the same core capabilities, but we are providing a few more things under the monthly workstation rate.

Requesting help streamlined – A new document outlines how to get help, and includes links to a variety of forms for common requests. These forms collect the minimum information needed to fulfill your request, so save everyone time.

Spotlights

Chris Fairfield 

What does a day in your life at work look like? My day consists of helping Managed Workstation customers with their computer issues and needs. Most days I work from my desk, but frequently I’ll need to head out across campus to help people in-person.

What particular skills or talents are most essential to be effective in your job? The two main skills required to be effective in my job are communication and problem solving. The former is how we get the information we need to utilize the latter, and problem solving is the largest part of our job.

What do you like about working at the University of Washington? I like working for a large, diverse organization that offers plenty of opportunities for growth and advancement—both personally and professionally.

What are some of your hobbies? I’m currently running a couple of Dungeons and Dragons campaigns. I also enjoy film-making and escape rooms

What is a quote or saying you live by? “This above all, to thine own self be true.”

What is your favorite TV show? It’s impossible to pick just one, but let’s go with the criminally underrated Crazy Ex-Girlfriend

What are some of your favorite foods? The biscuits at Morsel. Sushi. A good Chicago Dog.

Staffing Changes –  Tobin Wood’s last day with Managed Workstation was in September 2017.

Rebecca Galloway’s last day with Managed Workstation was in October 2017.

We are sad to see them move on. We will attempt to replace these invaluable staff, and in the meantime we appreciate your understanding as we try to do the same amount of work with fewer people.

Computers moving between domains – We recently moved all MWS workstations from NEBULA2 to the NETID domain. Our original plan didn’t work out, with several unforeseeable complications due to configuration drift in managed workstations. We are extremely grateful for your partnership in getting workstations migrated to the NETID domain. This work reduces the overall cost of providing the service and enables us to leverage improvements that are funded centrally.

Manage Workstation Training Room – The training room has recently undergone an equipment refresh. In addition to the equipment refresh the training room will be available to any UW department, and the rate is $60 per hour.  You can learn more about the training room changes at https://itconnect-test.uw.edu/wares/mws/training-room/

What’s next

Our objectives for the next six months include:

  • Password Manager: We have purchased LastPass Enterprise licensing for Managed Workstation users. Using this software can improve your password management practices. We’ll share more when we’re ready to roll it out.
    Note: email communication to every user will be part of the implementation.
  • Local administrator management: Our approach to local administrator privilege management will shift to leverage the Group’s Service to provide:
    • A single place to determine local administrator privs for managed workstations
    • More transparency
    • Self-service delegation; you’ll be able to add local admins
  • Windows File Services: We’ll update the server providing these services, transitioning to an offering that can handle confidential data with the ability to encrypt data at-rest by default.
  • Hiring new staff to fill our existing large gap in staffing. This includes a computer specialist and a software engineer.

Trends

You can review key metrics since the last newsletter.

Your Feedback

Supporting your needs for Managed Workstation capabilities is our priority, so we welcome feedback on how we can make the Managed Workstation service more valuable to you. The mws-announce and mws-discuss mailing lists are good sources of information. We recommend that each customer have at least one individual join the mws-announce mailing list.

You can voice your support for future objectives to help us rank priorities, ask for things that aren’t yet on our radar, or simply contact us via help@uw.edu.

Managed Workstation service boundary changes

Service boundaries have changed slightly. See below for details.

What and When

Beginning with adoption of the new FY18 rates (10/1/2017), the Managed Workstation service boundaries have changed. We still provide the same core capabilities, but down in the details, there are a few changes.

MWS rate changes:

  • Now includes 1 hour of complimentary hardware recommendation advice for each customer account. We’ll help find an appropriate computer model that meets your needs.
  • Now includes 1 hour of complimentary business needs IT consulting for each customer account. In other words, we’ll sit down with you to listen to the kinds of unmet needs you experience within your department. Based on listening to you, we’ll provide some recommendations about IT solutions that may help. We will use these engagements to discover additional capabilities this service needs to provide.
  • Now includes re-imaging a managed workstation that has been compromised with the current standard image.
    Note: If data transfer, additional application installation, special configuration, or travel to your site is required, that continues to be billable via the MWS Consulting rate.
  • Application packaging in most scenarios is now included.
    • If your application is appropriate for distribution to everyone at the UW, we’ll create the package for you at no additional cost.
    • In all other cases, we’ll provide the 1st hour of package creation at no additional cost. For most applications, this is sufficient.

Note: all application packages are subject to our documented application package support practices. If a released application package falls out of support, it will need to be refreshed or removed. Refreshing a previous application package is treated like a new application package.

 

MWS Consulting rate changes:

  • This rate can now be used to get assistance with computers which are not Managed Workstations. To qualify, these computers must run an operating system within our support boundaries (i.e. emerging, baseline, or containment). This assistance has a minimum charge of 30 minutes.
  • We’ve clarified our printer support boundaries. We will assist customers who need assistance setting up printer drivers or making a connection to a working printer. We do not provide assistance setting up printers or troubleshooting printers; we recommend UW Print Services for that.
  • We do not provide group management, nor are the subject matter experts on that topic, so do not provide this assistance; we recommend you work with the Groups Service.
    Note: this isn’t a change, but given past practices we believe it is worth restating.
  • We do not provide computer hardware repair, but we are willing to broker and facilitate repair services with your hardware vendor on your behalf.
  • We do not provide request fulfillment for IT services that are outside the Managed Workstation service or other services in the UW-IT portfolio. For example, we will not help you manage email services that are not provided by UW-IT. Other UW-IT consulting services may provide this type of assistance.

 

MWS File services rate changes:

  • Assistance troubleshooting access issues to your shared files within MWS file services is now included. Previously, this required the MWS Consulting rate.
  • Providing recommendations on permissions to your shared directory within MWS file services

 

More Info

You can review a detailed description of service boundaries at https://it.uw.edu/wares/mws/design/what-does-the-managed-workstation-rate-include/.

 

Brian Arkills

Managed Workstation service owner