Skip to content

New imaging process available

Managed Workstation has a new process available for imaging a workstation called Operation System Deployment (OSD). The old process, called Litetouch or MDT, will remain available until October 31, 2019.

Why should I use this new process?

There are a number of enhancements immediately available via OSD including:

  • Computer is automatically joined to the domain as part of the process
  • You can choose to enable Bitlocker1 as part of the process
  • The computer name by default is the serial number (you can override)
  • You can choose a custom image, if you’ve previously requested creation of a custom image that meets your needs

1 Bitlocker encrypts the hard disk so that if the computer is stolen, the data is protected

How do I use this new process?

To use the new OSD imaging process: https://it.uw.edu/wares/mws/hardware/osd-image-installation/.

Can you tell me more about the custom image option?

Use this form to request a new computer image from the Managed Workstation service.

One of the enhancements possible with our new imaging process is the ability to easily create a custom image that builds on top of the standard MWS image. You may have a set of computers that need a specific set of applications installed. We can create a custom image that installs those applications as part of the imaging process, so that you don’t have to manually install them after imaging. Because your custom image is built on top of our standard image, it will be kept up to date with the latest Windows version.

How do I get local administrator privileges using this new image option?

When you ask for a computer account to be created via the Enable a computer for Managed Workstation services form, you can specify which users should be added to the local administrator group. In most cases, this should happen nearly immediately after the image completes, but in some cases, it may take up to 30 minutes.

What if I have more questions?

Please send email to help@uw.edu with a subject of “MWS OSD imaging process” with any additional questions.

Brian Arkills
Managed Workstation service manager & owner
UW-IT

MWS file service maintenance

On January 14th, 2019 starting at 7pm, maintenance will be performed on the MWS file service. This maintenance period will end on January 15th at 5am.

During this period, users may not be able to access their files.

After this period, if you experience problems accessing your files, please logout and log back in–this should clear the issue.

New desktop icon

What changed

Yesterday, we prematurely delivered a new desktop icon as a planned enhancement–please accept our apologies for any surprises this caused.

This new desktop icon is named ‘Upgrade Windows to current version‘. Depending on screen resolution and font choices on your computer, this name may be shortened. If you don’t see this icon, you likely will in the near future.

New feature

This icon allows any managed workstation which is not running the latest Windows 10 release, to upgrade to the latest Windows 10 release. It is very similar to the icon we delivered in January 2017, for upgrade from Windows 7 to Windows 10, but it allows you to manually initiate an update from one Windows 10 feature release to the latest.

We are still working on another desired feature of this icon–that it only appear on computers which are not already running the latest Windows 10 release. The intention being that you will know you aren’t on the latest version when you see the icon appear. That feature has not yet been completed, but we’ll continue to work on that.

This feature is part of an overhaul of our approach to keeping Windows updated. We’ll have more to share about that in the near future.

What to expect

If you manually upgrade, you should be prepared for some interruption of service. Windows 10 feature upgrades are not as lengthy as the upgrade from Windows 7. When the computer restarts, there will be a period of time when your computer is not usable. That period is generally 10-30 minutes on current computers, but could be longer.

 

Brian Arkills
Managed Workstation service owner and manager
UW-IT

Antivirus update within Managed Workstation

The antivirus solution and process within Managed Workstation has changed.

What and When

During the month of August, we slowly replaced the prior Sophos product with an entirely new Sophos product with two components. The new product is called Sophos Intercept X.

This change was initially made to all Windows 7 computers to help support our efforts to upgrade them to Windows 10, because the older Sophos product was identified as blocking upgrades in some cases. As we gained trust that it demonstrated no problems with larger numbers of computers, we deployed it across all of the Managed Workstation service.

Note: With a service of this size, any broad change we make takes a long time to be complete. So at this time only 83% of all managed workstations have the new solution–primarily because those remaining have not been on the UW network to receive the update. So you may not have this change.

What this means for you

There are a couple improvements with this new solution:

  • When you leave the UW network, your computer is now able to report infections and get new virus updates
  • We have additional insight on the specific origin of an infection. We’re still analyzing how we might provide that information to you.
  • Our process for addressing infections has shifted so that for most infections you are not required to take action–we take actions when it does not threaten your data. Where data might be destroyed, we will still contact customers before we take action–your data is important to us.

More Info

Some customer units which have IT support have noted that the new solution does not allow for local control or configuration changes. This is by design because this solution is part of what you pay Managed Workstation for each month.

Brian Arkills
Managed Workstation service owner and manager
UW-IT

MWS Training Room End of Life

As of 10/1/2018, the Managed Workstation training room in Roosevelt Commons is no longer available.

There is not enough use for us to continue to provide this resource.

We are sorry for any inconvenience this may cause.

Brian Arkills
Managed Workstation service owner and manager
UW-IT

Managed Workstation to stop supporting Windows 7 on 8/31

Managed Workstation will drop OS support for Windows 7 SP1 on 8/31/2018. This will reduce costs and improve security & capabilities, enabling a more useful, up-to-date, functioning workstation.

To meet this goal, several steps will be taken:

  • July 19: Begin weekly notifications to customer account contacts of their remaining Windows 7 managed workstations
  • August 1: Contact primary user of remaining Windows 7 computers
  • August 8: Contact primary user of remaining Windows 7 computers
  • August 15: Initiate automatic upgrades for remaining Windows 7 managed workstations
  • August 31: Windows 7 computers removed from Managed Workstation service

Since January 2017, a self-service mechanism to upgrade Windows 7 computers to Windows 10 has been available, and customer are encouraged to leverage it. MWS assistance with upgrades is also available, and we will help customers address any issues encountered.

Brian Arkills
Managed Workstation service owner/manager
UW-IT

LastPass for Managed Workstation customers

Managed Workstation is deploying LastPass Enterprise, a password management system, which is now available on an opt-in basis.

What & Why

Managed Workstation has purchased LastPass Enterprise for all Managed Workstation users. LastPass helps improve password management practices by:

  • securely storing and generating complex passwords,
  • providing secure sharing mechanisms for passwords, both individually between users and via UW Groups
  • automatically entering usernames and passwords on most websites, including the UW web login interfaces,
  • providing warnings about password entry on malicious websites, or about at-risk or compromised passwords

We believe these security features are valuable to all users. LastPass is approved by the UW Office of the Chief Information Security Officer.

How

Adoption of LastPass is a self-service action taken by each individual user. We are not planning to send email to every MWS user to notify them of this new capability.

You are welcome to notify users in your unit and we encourage that. If you’d like help notifying your users, let us know.

Interested users will need the above information, along with the information documented at https://it.uw.edu/wares/mws/mgmt/lastpass/adoption/ on how to get a LastPass Enterprise account created and setup.

More Info

It’s important to note that:

  • unlike most Managed Workstation services, customer account contacts will not be able to control whether their users get a LastPass account or not,
  • we cannot recover or reset lost or forgotten LastPass master passwords; lost or forgotten master passwords will result in the complete loss of all stored passwords that aren’t in a Shared Folder.

Our support for LastPass will be limited. We have some critical information documented and provide very basic assistance. Because this is a vendor provided solution and their documentation is excellent, we expect users to leverage the vendor resources for primary support. The LastPass Help Center is an excellent place to start.

Our documentation is available at https://it.uw.edu/wares/mws/mgmt/lastpass/.

Thank you,

Brian Arkills
Managed Workstation Service Owner and Manager
UW-IT
help@uw.edu
206-221-5000

Windows 10 1709/Fall Creators Update is now our Baseline OS

We’ve moved Windows 10 1709, also known as the Fall Creators Update, to Baseline and will start upgrading Windows 10 computers running an older version this week.

What and when

Over the next several weeks, we will be upgrading all computers running Windows 10 to version 1709, which is also known as the Fall Creators Update.  We are moving to this version ahead of the normal schedule, to enable new security functionality.  This upgrade is mandatory.

The upgrade will be done automatically in the evenings, requires no user interaction, and will not impact any user settings or files.  The upgrades will mostly run on the weekends, but if a computer is not on, the upgrade will not start on Monday morning.

While we cannot provide a specific date of when any given computer will be upgraded, individual users can choose to start the process any time using the ‘Software Center’ or via the shortcut on their desktop..

What you need to do

There is no action required.

If you have any questions or concerns, send an email to help@uw.edu and with ‘MWS – 1709 Upgrade’ in the subject line.

MWS trends for October 2017

Below are graphical metrics since the last newsletter. A takeaway statement follows each graph to summarize the critical points of data.

 

Client Operating System Counts

Takeaways: -200 Total, +700 Windows 10 (2240 today), -260 Windows 8.1 (0 today), -800 Windows 7 (870 today). Overall losses were due to cleanup activities that happened during domain migration where many unused systems were retired. A big shift to Windows 10 continues. In future newsletters, we’ll differentiate between versions of Windows 10.

Support Requests and Incidents

Takeaways: Support requests and incidents are generally down about 15%. Spikes in both requests and incidents correspond to the significant workstation migration change activity.

Managed Workstation Newsletter (October 2017)

What’s new?

Customer survey – In the next month, Managed Workstation will send out a survey for feedback on our service. We are looking for ways to improve our service and would like to know what experiences you have had with our team.

Keeping current – Microsoft continues to march forward with its product support lifecycle, and we continue to innovate to provide great management capabilities. We keep you current with Windows and Office with a minimum of hassle. Ideally, you don’t need to keep track of what version you are running and whether it is supported or insecure. If you do like to know those details, we’ve updated our OS lifecycle support document to better reflect what can be supported. Here are a few key upcoming dates:

  • Windows 10 1607 will no longer be supported in 3/2018.
  • Windows 7 SP1 will no longer be supported in 5/2018.

We’ll automatically upgrade any managed workstation still running an unsupported version to the current baseline Windows OS. Alternatively, you can control when an upgrade happens by using an icon on your desktop to upgrade. We recommend starting any such upgrade at the end of the day.

Security improvements – Security improvements don’t get a lot of attention because often they silently protect you, but every once in awhile it’s worth calling them out.

New FY18 Rates and service boundary changes –

 

The Managed Workstation service boundaries have changed. We still provide the same core capabilities, but we are providing a few more things under the monthly workstation rate.

Requesting help streamlined – A new document outlines how to get help, and includes links to a variety of forms for common requests. These forms collect the minimum information needed to fulfill your request, so save everyone time.

Spotlights

Chris Fairfield 

What does a day in your life at work look like? My day consists of helping Managed Workstation customers with their computer issues and needs. Most days I work from my desk, but frequently I’ll need to head out across campus to help people in-person.

What particular skills or talents are most essential to be effective in your job? The two main skills required to be effective in my job are communication and problem solving. The former is how we get the information we need to utilize the latter, and problem solving is the largest part of our job.

What do you like about working at the University of Washington? I like working for a large, diverse organization that offers plenty of opportunities for growth and advancement—both personally and professionally.

What are some of your hobbies? I’m currently running a couple of Dungeons and Dragons campaigns. I also enjoy film-making and escape rooms

What is a quote or saying you live by? “This above all, to thine own self be true.”

What is your favorite TV show? It’s impossible to pick just one, but let’s go with the criminally underrated Crazy Ex-Girlfriend

What are some of your favorite foods? The biscuits at Morsel. Sushi. A good Chicago Dog.

Staffing Changes –  Tobin Wood’s last day with Managed Workstation was in September 2017.

Rebecca Galloway’s last day with Managed Workstation was in October 2017.

We are sad to see them move on. We will attempt to replace these invaluable staff, and in the meantime we appreciate your understanding as we try to do the same amount of work with fewer people.

Computers moving between domains – We recently moved all MWS workstations from NEBULA2 to the NETID domain. Our original plan didn’t work out, with several unforeseeable complications due to configuration drift in managed workstations. We are extremely grateful for your partnership in getting workstations migrated to the NETID domain. This work reduces the overall cost of providing the service and enables us to leverage improvements that are funded centrally.

Manage Workstation Training Room – The training room has recently undergone an equipment refresh. In addition to the equipment refresh the training room will be available to any UW department, and the rate is $60 per hour.  You can learn more about the training room changes at https://itconnect-test.uw.edu/wares/mws/training-room/

What’s next

Our objectives for the next six months include:

  • Password Manager: We have purchased LastPass Enterprise licensing for Managed Workstation users. Using this software can improve your password management practices. We’ll share more when we’re ready to roll it out.
    Note: email communication to every user will be part of the implementation.
  • Local administrator management: Our approach to local administrator privilege management will shift to leverage the Group’s Service to provide:
    • A single place to determine local administrator privs for managed workstations
    • More transparency
    • Self-service delegation; you’ll be able to add local admins
  • Windows File Services: We’ll update the server providing these services, transitioning to an offering that can handle confidential data with the ability to encrypt data at-rest by default.
  • Hiring new staff to fill our existing large gap in staffing. This includes a computer specialist and a software engineer.

Trends

You can review key metrics since the last newsletter.

Your Feedback

Supporting your needs for Managed Workstation capabilities is our priority, so we welcome feedback on how we can make the Managed Workstation service more valuable to you. The mws-announce and mws-discuss mailing lists are good sources of information. We recommend that each customer have at least one individual join the mws-announce mailing list.

You can voice your support for future objectives to help us rank priorities, ask for things that aren’t yet on our radar, or simply contact us via help@uw.edu.