User Profile
Karl-WE
MVP
Joined Feb 22, 2019
User Widgets
Recent Discussions
BLOG: Microsoft 365 Family - A nine steps plan for security and savings
Table of Contents Introduction What Is Microsoft 365 Family? Benefits Over Office LTSC 2024 Microsoft 365 Copilot at Home OneDrive: Storage, Sync, and Mobile Device Optimisation Protecting Your Microsoft Account (Passwordless Sign‑in) Why OneDrive Is Not a Backup Streamlining Microsoft 365 Apps for Home Users (Removing Unused Components) Outlook, Publisher, and Future Changes Upcoming Blog: Migrating and Syncing Contacts and Calendars and effective sync across devices with Outlook New Final Recommendations 1. Introduction Microsoft 365 Family offers a modern, flexible, and secure digital environment for households. This post explains how to streamline your setup, protect your data, and keep your devices organised with minimal effort. Microsoft 365 Family is a subscription designed for households that need up‑to‑date productivity tools, secure cloud storage, and seamless use across Windows, macOS, iOS, and Android. This article explains why Microsoft 365 Family is a better long‑term choice than Office LTSC 2024, how to streamline the installation by removing unused apps, how to protect your Microsoft Account with passwordless sign‑in, and how to combine OneDrive with Macrium Reflect for proper backup. It also includes recommendations for reducing local storage usage and outlines the role of Copilot for home productivity. 2. What Is Microsoft 365 Family? Microsoft 365 Family is a subscription service for up to six people. Each user receives: Their own private Microsoft apps • 1 TB of OneDrive cloud storage • Email, productivity, and security services • Cross‑device access (Windows, macOS, iOS, Android, Web) Latest changes require all members to become part of a family group, but each users data remains independently. So as long every Microsoft Account member birthday is of age 18 or older (Account > Birthday setting), there is no issue. Mind the licensing terms: you may only share M365 Family with family members. You may not use it for any business use, incl. micro-businesses. $$$ Savings: Consolidate costs for other Cloud storages, such as Google Drive. I believe Google Photos is very nasty keep prompting users for cloud backups of their pictures, even when they declined multiple times. OneDrive will not do this. Try to disable the recurring billing. Amazon has great offers or bundles - don't get trapped for Security suites, Defender is more than enough. Caveat for Amazon based Subscriptions: You can use them but keep in mind that they become activated and effective immediately after purchase. In contradition to the "activate" buttons that exist, the remainder of the subscription time is set at purchase date. Amazon cannot change it. Microsoft Support won't fix it either. Means that hoarding activation keys from Black Friday is no longer possible :/ If you bought a subscription too early, you can return it by calling Amazon Hotline / Callback > Digital Services. 3. Benefits Over Office LTSC 2024 In comparison to Office LTSC 2024, Microsoft 365 Family provides: Continuous feature updates The new Outlook with an ad‑free experience Full Copilot support and experience, even with benefits beyond Office Applications PST read/write support Premium Word, Excel, PowerPoint features (Online Version is available for free). Cloud integration and collaboration tools Better value over time Multi‑device use without extra licences, mobile, tablet and PC Office LTSC 2024 is static, does not support Copilot, and receives only security fixes. $$$ Savings: Office LTSC is the most cost efficient solution with no subscription attached. OneDrive is Limited to 5 GB per Microsoft Account. If you do not need much space and no AI this is for you. Outlook New is still usable, with few ads, but no PST support. 4. Microsoft 365 Copilot at Home Copilot helps you: Summarise long documents Draft messages or essays Organise tasks Extract information quickly Improve language and translation Coding (PowerShell and other lanugages), with Visual Studio Code integration Learn more: https://www.microsoft.com/copilot Consider to install the M356 Copilot app to get the most out of it. On your phone (iOS / Android) you can also use this app, along with Edge Browser and OneDrive for a seamless experience. Microsoft Outlook on Android / iOS has not the same featureset as Outlook New, very unfortunately. $$$ Savings: M365 Family includes Copilot and expands it to everywhere: Edge Browser, M365 Apps. Spare a seperate Copilot or GPT plan. 5. OneDrive: Storage, Sync, and Mobile Device Optimisation Each user gets 1 TB of cloud storage. Key features: Automatic sync across devices • iOS and Android photo upload • Files On‑Demand to reduce disk usage • Access to all files from any device • Easy sharing and version history on all devices, including PC. Stop saving Document version 1, Document version 1.2 :) Trust the XML based Office files and power of OneDrive, which is a bit similar to enterprise trusted SharePoint features. To reduce smartphone storage usage: • Enable camera upload • Keep files online‑only when possible • Store large media primarily in OneDrive On Android Phones, within OneDrive > Settings > Free up Space on your device - you can delete uploaded pictures from your phone, at your own pace with a fingertip. iOS does not have this cleanup feature. Mind you have to use OneDrive or pin - means download caching - files as on PC, if you want to have them accessible when there is no internet connection or your data plan is limited. You can share or download pictures to apps like Whatsapp without manual download. OneDrive now supports optional AI based face recognition which makes it a blast sorting pictures of people. Very unfortunately it does not work with cats. I would love to see OneDrive organizing all cat pictures into a virtual collection, too. Collections made on the Phone or in Windows 11 will seamless sync with Windows Photo App. This makes organizing digital pictures and videos so much easier. Protip: If you trust your partner / friend / family member to the fullest, you can share the OneDrive Picture Upload into one single account across phones. So both share the same pictures, picture of the day / week. Also this makes it obsolete to "can you send me over the photo that you took..." $$$ Savings: Save big on required phone capacity. With OneDrive at hand, you'll never need 128,256 or even 512 GB phone storage, you'll find use for a 64 GB phone again, even more that the HW crisis, thanks or no thanks to AI made flash memory super expensive. :/ - let's not talk about other resources like water, energy and CO2e. 6. Protecting Your Microsoft Account (Passwordless Sign‑in) All Windows 10/11 users are strongly advised to protect their Microsoft Account. Passwordless sign‑in reduces risk and enhances convenience. I recommend this especially when you store files in OneDrive. Windows Hello PIN, Passkeys and Microsoft Passwordless Accounts have not been compromised in my bubble, opposite to Microsoft Accounts without MFA protection or traditional passwords and Windows local users (Password spraying, NTLM attacks). Setup guidance: https://support.microsoft.com/office/passwordless $$$ Savings: Save you mind and sleepless nights that you'd have after an successful hack. The danger is real, and there is no exclusion to home users - even if they pretend there have "nothing to hide", an argument I hear quite often when it comes to account security and password management. 7. Why OneDrive Is Not a Backup OneDrive synchronises files. If you delete a file locally, the deletion syncs to OneDrive. same goes for encryption attacks on your device, especially PCs For real resilience, you need an offline or image‑based backup. To build a safe and simple backup system: Move your OneDrive folder to a dedicated physical drive or partition (not C:) but O:. I recommend a 5400 rpm Harddisk or SATA SSD, as the performance requirements are negible. Disconnect OneDrive and login again, choosing a folder on Drive O: Let OneDrive do the initial sync. Then Configure OneDrive to download all files locally. Use Macrium Reflect X to create an image of that partition (Drive O: - OneDrive). Update the image regularly. If you need super speed > Use external NVMe case from UGreen or Sabrent, and a cheap but reliable NVMe like Samsung, Crucial (as long as available). Note: Macrium Reflect 8 support ends on 27 February 2026, this means it will not receive any updates. In addition I found it is not compatible with SecureBoot certificate 2023 updates. Why I recommend Macrium Reflect X lightweight, no bloat like Acronis nowadays and tons of services one of the few fully x64 apps in the home market supports synthentic full backups, esp. great on SSD or NVMe easy UI, works on Server Core (for business use) Does Backup and Recovery with excelleny, but serves also as Partitioning and Cloning Tool Neat Windows RE integration One of the first to support Secure Boot with CA2023 certificates super fast esp. on NVMe or external NVMe (compared to other products) multi-language support Hyper-V Boot support (with Windows 11 Pro) meaningful and regular application updates, influenced by a strong and active community excellent support agents and quality $$$ Savings: No savings here in terms of money but peace of mind. The cloud is not a backup. Period. I have seen people loosing their digital life. 8. Streamlining Microsoft 365 Apps for Home users (Removing Unused Components) Many home users do not need the full suite of Microsoft 365 You could remove: Access – rarely needed privately • Publisher – discontinued in 2024, will change to read-only access for pub files. Alternatives: Migrate your pub files content to Word or PowerPoint or 3rd party App by copy paste. • Legacy Outlook – supported until ~2029 • Teams (Classic), if unused - -Teams often comes preinstalled in Windows 11 anyway. • OneDrive – comes preinstalled in Windows 11. With Microsoft 365: You receive the new Outlook • Copilot is enabled • You benefit from an ad‑free inbox. • PST files are fully supported / Attach - read - write ODT allows you to install Microsoft 365 with a custom configuration. Do not use the default OfficeSetup.exe in this case, that you would receive from your invitation or Microsoft Account page Typical use cases for ODT at home: Install only Word, Excel, PowerPoint, Outlook Exclude Access, Publisher, and Teams Reduce disk footprint and complexity How-to deploy customized M365 Family: Download ODT to your download folder Extract ODT / execute setup in your download folder Create a config file to your needs at config.office.com - no login required - choose M365 for a while Export & Save the file to your download folder named YourOfficeConfig.xml, Choose Office Format or ODT, depending on your preference. Run PowerShell Windows Key + X > Terminal (Admin) Change to your download folder e.g. cd c:\users\username\downloads Download Microsoft 365 Family .\setup.exe /download c:\users\username\downloads\YourOfficeConfig.xml Install Microsoft 365 Family customized .\setup.exe /configure c:\users\username\downloads\YourOfficeConfig.xml $$$ Savings: Save valuable space on the OS drive (C:). Save monthly update size and time. Benefit from a smaller attack surface. Here is an example for a working officeconfig.xml that will download office without the forementioned features. <Configuration ID="d1fde4ee-5072-4e95-b319-9c0682773668"> <Add OfficeClientEdition="64" Channel="Current" MigrateArch="TRUE"> <Product ID="O365HomePremRetail"> <Language ID="de-de" /> <Language ID="MatchOS" /> <Language ID="MatchPreviousMSI" /> <ExcludeApp ID="Access" /> <ExcludeApp ID="Groove" /> <ExcludeApp ID="Lync" /> <ExcludeApp ID="OneDrive" /> <ExcludeApp ID="Outlook" /> <ExcludeApp ID="Publisher" /> </Product> <Product ID="ProofingTools"> <Language ID="en-gb" /> </Product> </Add> <Property Name="SharedComputerLicensing" Value="0" /> <Property Name="FORCEAPPSHUTDOWN" Value="TRUE" /> <Property Name="DeviceBasedLicensing" Value="0" /> <Property Name="SCLCacheOverride" Value="0" /> <Updates Enabled="TRUE" /> <RemoveMSI /> <AppSettings> <User Key="software\microsoft\office\16.0\excel\options" Name="defaultformat" Value="51" Type="REG_DWORD" App="excel16" Id="L_SaveExcelfilesas" /> <User Key="software\microsoft\office\16.0\powerpoint\options" Name="defaultformat" Value="27" Type="REG_DWORD" App="ppt16" Id="L_SavePowerPointfilesas" /> <User Key="software\microsoft\office\16.0\word\options" Name="defaultformat" Value="" Type="REG_SZ" App="word16" Id="L_SaveWordfilesas" /> </AppSettings> <Display Level="Full" AcceptEULA="TRUE" /> </Configuration> Bonus: If you think this Office customisation isn't giving enough of savings on the OS drive, try this: #windows key + X > Terminal (Admin) #Powershell #PS C:\Users\username> powercfg /h off #saves a bunch of space, if you are not using hibernation / standby (suspend to RAM/ to file). The more RAM installed, the more your savings. powercfg /h off 9. Outlook, Publisher, and Future Changes Publisher will be removed from the Office product family by October 2026. Or change to Read-Only mode when installed, both for security reasons. See announcement • Legacy Outlook will reach its end around 2029. • The new Outlook supports modern sync, Gmail integration, iCloud Integration and PST files support and sophisticated anti-spam and other Exchange Online like security features. $$$ Savings: Nothing to see here. Move on. 10. Upcoming Blog: Migrating and Syncing Contacts and Calendars and effective sync across devices with Outlook New In a follow‑up blog I will cover: Migrating IMAP contacts and calendars to iCloud Why the iCloud Windows app is no longer functional Why Outlook‑for‑Gmail no longer works New approach: add your Google Account directly to the new Outlook 11. Final Recommendations Use Microsoft 365 Family for a modern, secure, up‑to‑date system. • Streamline the suite to what you actually need using ODT. • Protect your device with passwordless sign‑in. • Store data in OneDrive, but use Macrium Reflect for real backup. • Keep an eye on upcoming changes to Outlook and PublisherRe: Locked Out of Global Admin – Lost Authenticator – Case 2602060010000939 – Need Escalation
if you do not have an Azure Support Plan or other support contract this is how it goes. you can only open a SR through Azure Support and insist it is routing to Entra / Identity Team. Prio cannot raised without support plan. if you had one you need to give them the data like tenant ID, subscription ID with that support plan. Depending on the plan you can request escalation to B or A. For the future consider a break glass account https://blog.merill.net/p/service-principal-as-a-plan-b-emergency https://learn.microsoft.com/en-us/entra/identity/role-based-access-control/security-emergency-access97Views0likes0CommentsBLOG: Determine and modernize Filesystem Deduplication
Version history - 1.6 Added references / links - 1.5 Added insights from Steven Ekren. Many thanks! / Added ReFS Docs link and added clarification about drawbacks. - 1.4 revised script so ReFS volumes with classic dedup will be identified, added more eligibly checks and error handling - 1.3 added point #4 in migration guidance - 1.2 revised script - 1.1 formatting This blog explains the two Windows deduplication modes classic Windows Data Deduplication (ReFS or NTFS) and ReFS Deduplication (ReFS). It covers how they differ, why you should consider upgrading to Windows Server 2025 to leverage the new ReFS dedup engine, and clear warnings about scenarios where ReFS is not recommended. Practical migration guidance and detection commands are included. Differences between classic dedup and ReFS dedup File system: Classic dedup runs on NTFS or ReFS; ReFS dedup runs on ReFS and Windows Server 2025 or later, only. Implementation: They are separate engines with different metadata formats and management cmdlets. Management: Classic dedup uses the Dedup PowerShell module (Get‑DedupVolume, Start‑DedupJob, Disable‑DedupVolume). ReFS dedup uses its own ReFS dedup cmdlets (Get‑ReFSDedupStatus, Enable‑ReFSDedup). Conversion: There is no in‑place conversion between the two; metadata and chunk formats are incompatible. Improvements: the new in-line ReFS Deduplication leverages the advantages of ReFS files system. This makes deduplication more efficient and less CPU intensive. The new ReFS Deduplication can also compress data in-line using L1Z algorithm. This makes it up to par with enterprise solutions, often found in SAN storage or Linux appliances. Compression needs to be set per volume, and optional. Edit: Steven Ekren, a former Senior Product Manager for Hyper-V shared valuable insights on how both engines operate in a comment on LinkedIn: [...] the basic conceptual difference between WS Deduplication and ReFS deduplication is that the Windows Server [dedup] version takes the duplicate file data and moves it to a repository and puts a reparse point in the file system from each point that references the data. This involves data movement and therefore not recommended for workloads that are changing it's data often, but best for more static data like documents and picture/videos. ReFS is a file system that uses links natively for all the objects so leaving the data in place and managing the links is much more efficient and doesn't involve the data copy and managing a repository. Effectively it's built into the file system. As the blog notes, there are some situations not recommended for this version of dedupe, but generally it's lower performance and storage I/O impact. Why upgrade to Windows Server 2025 Improved version of ReFS Filesystem Improved ReFS in-line deduplication + optional L1Z compression: Server 2025 includes enhancements to ReFS dedup performance, scalability, and integration with modern storage features. Support and fixes: Windows Server 2016 and 2019 are past mainstream support, increasing the likelihood of costly support cases and delayed fixes; upgrading reduces operational risk and ensures access to ongoing improvements. Future compatibility: Newer OS releases receive optimizations and bug fixes for ReFS and dedup scenarios that older releases will not. SMB compression: for reasonably faster data transfer at minimal CPU when transferring data through the networks. Feature and security related improvements refer to availabile Microsoft Windows Server 2025 Summit content on techcommunity.microsoft.com Scenarios where ReFS is not recommended ReFS on SAN in clustered CSV environments: Avoid placing ReFS dedup on top of SAN‑backed Cluster Shared Volumes (CSVFS) in production clusters; clustered SAN/CSV scenarios causing severe performance issues in practice. Please refer to the ReFS documentation. (personal opinion and experience, not endorsed by Microsoft): Many small, fast‑changing files: Workloads with frequent small writes, such as user profiles, folder redirection of AppData folders, or applications that churn small config files (for example, Lotus Notes config files) can cause locks, performance degradation, or unexpected behavior on ReFS. Exclude these disks from dedup or keep them on NTFS. Note: Restrictions on high churn rate, like lockups or high RAM consumption, deadlocks / BSOD might have been addressed in Windows Server 2025 and the ReFS Dedup, see comment of Steven Ekren. Improving reliability and performance is a top goal for ReFS, to improve the adoption and feature parity with NTFS. For information about feature parity please refer to the ReFS documentation. Migration guidance The following instructions describe a high level and supported migration path from Windows deduplication using the NTFS file system to native ReFS Deduplication. Note: Step #3, data migration is not required when already using ReFS with Data Deduplication. In this case it's enough to execute step #1 and #2. Note: Validate on non‑production data first. Plan for rehydration time and network/storage throughput. Ensure backups are current before starting. Make sure to have a full backup before upgrading Server OS or making changes. 1. Disable classic dedup on the NTFS source: Disable-DedupVolume -Volume YourDriveLetter: 2. Rehydrate (un‑deduplicate) the data: Start-DedupJob -Volume YourDriveLetter: -Type Unoptimization 3. Copy or move data to a ReFS volume (new target): For straightforward NTFS→ReFS copies, robocopy is recommended. A GUI and job based alternative to this is the File Server Migration Feature (uses robocopy) in Windows Admin Center. For complex scenarios, open files long path names very large datasets (< 5 TB) or many small files restructuring, GUI (including Windows Server Core) automation, improved logging cloud/hybrid migrations I recommend the usage of GS RichCopy Enterprise by GuruSquad for higher speed (up to 40%) and reliability, compared to robocopy. 4. Optionally remove the Windows Server feature When there is no old deduplication in use consider to remove the feature. Your advantages of doing so: removes an unneccessary service. removes the file system filter driver for dedup, which causes performance impacts, even when not in use. removes the PowerShell commandlets for the old dedup, so they cannot mistakenly used by existing scripts, unaware admins etc. When migrating files over network: SMB compression: consider both source and target run Windows Server 2025 and leverage SMB compression. SMB Compression is available in Microsoft xcopy, Microsoft robocopy and Gurusquad GScopy Enterprise. Balancing and Teaming with SMB: SMB does not require LFBO or SET Teaming. It automagically detects network links and actively balances on its own on Windows Server 2016 and later. Using teaming, depending the configuration, can negatively affect transfer speed. Quick detection and diagnostic commands Check file systems: Get-Volume | Select DriveLetter, FileSystem Check classic dedup feature: Get-WindowsFeature -Name FS-Data-Deduplication Get-DedupVolume Get-DedupStatus Check ReFS dedup: Get-Command -Module Microsoft.ReFsDedup.Commands Get-ReFSDedupStatus -Volume YourDriveLetter: Diagnostic script to detect both: <# .SYNOPSIS Detects classic NTFS Data Deduplication and ReFS Deduplication across local volumes. .DESCRIPTION - Reports NTFS volumes with classic Data Dedup enabled. - Lists ReFS volumes present on the host. - If the ReFS dedup cmdlet exists AND OS build >= 26100, checks ReFS dedup status per ReFS volume. - Color coding: * Classic dedup enabled → Yellow * Classic dedup not enabled → Cyan * ReFS dedup enabled → Green * ReFS dedup not enabled → Cyan .NOTES Version: 1.7 Author: Karl Wester-Ebbinghaus + Copilot Requirements: Elevated PowerShell session, PowerShell 5.1 or newer Supported OS: Windows Server 2025, Azure Stack HCI 24H2 or newer Unsupported OS: Windows 10, Windows 11 (script terminates) #> #region Initialization Write-Verbose "Initializing variables and environment..." $Volumes = $null $Volume = $null $DedupVolumesList = $null $DedupReFSVolumesList = $null $DedupReFSVolumesListLetters = $null $DedupReFSStatus = $null $refsCmd = $null $OSBuild = $null $runReFSDedupChecks = $null #endregion Initialization #region Volume Discovery Clear-Host Write-Verbose "Querying NTFS and ReFS volumes..." $Volumes = Get-Volume | Where-Object FileSystem -in 'NTFS','ReFS' #endregion Volume Discovery #region ReFS Dedup Cmdlet, OS Build and OS SKU Detection Write-Verbose "Checking for ReFS deduplication cmdlet..." $refsCmd = Get-Command -Name Get-ReFSDedupStatus -ErrorAction SilentlyContinue Write-Verbose "Reading OS build number..." try { $OSBuild = [int](Get-ItemProperty -Path 'HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion' -Name CurrentBuildNumber).CurrentBuildNumber } catch { Write-Verbose "Registry read for OS build failed. Falling back to Environment OSVersion." $OSBuild = [int][Environment]::OSVersion.Version.Build } # end try/catch for OS build detection Write-Verbose "Checking OS InstallationType and EditionID..." $CurrentVersionKey = Get-ItemProperty -Path 'HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion' $InstallationType = $CurrentVersionKey.InstallationType # "Client" or "Server" $EditionID = $CurrentVersionKey.EditionID # e.g. "AzureStackHCI", "ServerStandard", etc. Write-Verbose "Detected InstallationType: $InstallationType" Write-Verbose "Detected EditionID: $EditionID" Write-Verbose "Detected OSBuild: $OSBuild" # Block Windows 10/11 (Client OS) if ($InstallationType -eq 'Client') { Write-Error "Unsupported OS detected: Windows Client (Windows 10/11). Only Windows Server or Azure Stack HCI are supported. Script will terminate." exit } # Allow Azure Stack HCI explicitly if ($EditionID -eq 'AzureStackHCI') { Write-Verbose "Azure Stack HCI detected. Supported platform." } else { # Must be Windows Server if ($InstallationType -ne 'Server') { Write-Error "Unsupported OS detected. Only Windows Server or Azure Stack HCI are supported. Script will terminate." exit } Write-Verbose "Windows Server detected (EditionID: $EditionID). Supported platform." } Write-Verbose "Evaluating ReFS dedup eligibility based on cmdlet presence and build >= 26100..." $runReFSDedupChecks = $false if ($refsCmd -and ($OSBuild -ge 26100)) { $runReFSDedupChecks = $true Write-Verbose "ReFS dedup checks ENABLED (cmdlet present and OS build >= 26100)." } else { Write-Verbose "ReFS dedup checks DISABLED (cmdlet missing or OS build < 26100)." } #endregion ReFS Dedup Cmdlet, OS Build and OS SKU Detection #region Main Loop foreach ($Volume in $Volumes) { # begin foreach volume loop Write-Host "Volume $($Volume.DriveLetter): ($($Volume.FileSystem))" Write-Verbose "Processing volume $($Volume.DriveLetter)..." #region Classic Dedup + ReFS Volume Listing if ($Volume.FileSystem -eq 'NTFS' -or $Volume.FileSystem -eq 'ReFS') { Write-Verbose "Checking classic deduplication status for volume $($Volume.DriveLetter)..." $DedupVolumesList = Get-DedupVolume -Volume $Volume.DriveLetter -ErrorAction SilentlyContinue if ($DedupVolumesList) { Write-Host " → Classic Data Dedup ENABLED on $($Volume.DriveLetter), $($Volume.FileSystem)" -ForegroundColor Yellow } else { Write-Host " → Classic Data Dedup NOT enabled on $($Volume.DriveLetter),$($Volume.FileSystem)" -ForegroundColor Cyan } # end if classic dedup enabled Write-Verbose "Listing ReFS volumes on host..." $DedupReFSVolumesList = Get-Volume | Where-Object FileSystem -eq 'ReFS' if ($DedupReFSVolumesList) { $DedupReFSVolumesListLetters = ($DedupReFSVolumesList | ForEach-Object { $_.DriveLetter }) -join ',' Write-Host " → ReFS volumes present on host: $DedupReFSVolumesListLetters" } else { Write-Host " → No ReFS volumes detected on host" } # end if ReFS volumes present } # end NTFS/ReFS block #endregion Classic Dedup + ReFS Volume Listing #region ReFS Dedup Status if ($Volume.FileSystem -eq 'ReFS') { if ($runReFSDedupChecks) { Write-Verbose "Checking ReFS deduplication status for volume $($Volume.DriveLetter)..." $DedupReFSStatus = Get-ReFSDedupStatus -Volume $Volume.DriveLetter -ErrorAction SilentlyContinue if ($DedupReFSStatus) { Write-Host " → ReFS Dedup ENABLED on $($Volume.DriveLetter), $($Volume.FileSystem)" -ForegroundColor Green } else { Write-Host " → ReFS Dedup NOT enabled on $($Volume.DriveLetter), $($Volume.FileSystem)" -ForegroundColor Cyan } # end if ReFS dedup enabled } else { if (-not $refsCmd) { Write-Error " → Skipping ReFS dedup check: Get-ReFSDedupStatus cmdlet not present" -ForegroundColor Cyan } else { Write-Error " → Skipping ReFS dedup check: OS build $OSBuild < required 26100" -ForegroundColor Cyan } # end reason for skipping ReFS dedup check } # end if runReFSDedupChecks } # end if ReFS filesystem block #endregion ReFS Dedup Status Write-Host "" } # end foreach volume loop #endregion Main Loop #region End Write-Verbose "Script completed." #endregion End Recommendations and next steps Inventory: Identify volumes using NTFS dedup and ReFS dedup, and map workloads that create many small or rapidly changing files. Plan: Schedule rehydration and migration windows; test ReFS dedup on representative datasets. Upgrade: Prioritize upgrading servers still on 2016/2019 (End of Mainstream Support) to reduce support risk and gain the latest ReFS dedup improvements. Kindly consider reading my Windows Server Installation Guidance and Windows Server Upgrade Guidance Exclude: Keep user profiles, AppData, and other high‑churn small‑file paths off ReFS dedup or on NTFS. Consider ReFS Dedup with Compression: Enable compression optionally. Mind ReFS dedup compression is not the same as compress files integration in File Explorer or File Explorer properties (Windows 9x). It's transparent to the application Make smart decisions: Avoid using dedup when the dataset is changing fast or your dedup + compression rate is below 20%. Usually you can expect 40% or more savings, and up to 80% in specific use cases like VDI VHDX with ReFS Dedup + Compression. Plan your dedup jobs: Ensure of making use of the planning features for dedup jobs through PowerShell or Windows Admin Center (WAC) when using ReFS dedup on more than one volume per Server. Otherwise they might all run at the same time and impact your storage performance (esp. spinning rust) and consumption of RAM and CPU. Share and Educate: Inform your infrastructure team about the changes so they avoid using the traditional dedup on ReFS. Related blogposts: https://splitbrain.com/windows-data-deduplication-vs-refs-deduplication/ , Thanks Darryl van der Peijl and team. https://www.veeam.com/kb2023 Veeam best practices about Windows Deduplication and ReFS Deduplication.Re: BLOG: Determine and modernize Filesystem Deduplication
"Map workloads that create many small or rapidly changing files" Q: I have a received the question: How can I identify the workload size and inventory? A: On Windows Server / Windows Server Core I trust using a third-party solution named JAMSoftware TreeSize. Please consider the license terms for business use. You can install Treesize on a management host (privileged access workstation) to remotely access the file systems of different servers. Treesize provides swift reports and diagrams. It provides detailed information on the number of files, sizes, potential space hogs and unexpected archives, as well as parameters such as the last access date and last change. A free version is available through the Winget repository and the Microsoft Store. PS C:\Users\username> winget search treesize Name Id Version Source -------------------------------------------------------- TreeSize Free XP9M26RSCLNT88 Unknown msstore TreeSize XPDDXV3SD1SB5K Unknown msstore TreeSize JAMSoftware.TreeSize 9.6.2 winget TreeSize Free JAMSoftware.TreeSize.Free 4.8.1 winget Of course one can achieve similar via PowerShell, yet I found the GUI output and reports overly helpful.54Views0likes0CommentsRe: WINGET is not recognized as a commandlet on win 2k19 server fresh setup
It's only supported on Windows Server 2025 Salam_ELIAS For unsupported operation on Windows Server 2022 and Windows Server 2019 I can fully recommend https://github.com/asheroto/winget-installhttps://github.com/asheroto/winget-install139Views0likes0CommentsRe: AAD join Server 2025
Hi Brentfor any news on this Feature Request? I would be a huge shift for security and convenience either way if Windows Server vNext would support the same technology for sign-in and Entra Join (not necessarily hybrid please), as Windows 11 24H2 / 25H2 does. Some customers do not need any Kerberos but still need Windows Server.772Views0likes1CommentRe: Server 2025 Core ADDS DC, Network Profile Showing as "Public" and not as "DomainAuthenticated"
can anyone confirm this fixed with latest LCUs? I am not seeing this anymore. Thanks for trying and removing your workaround, temporarily, to reassure this. when validating please use the latest ISO or unmodified deployed version (registry etc).1.1KViews0likes0CommentsRe: In-place upgrade possibility planned for Windows Server 2025 Datacenter Azure Edition ?
+1 on this this is a huge gap, to fill this please consider offering IPU to 2022 Azure Edition via Windows Update. It is technically possible. There is a reason why we do not have ISO images anymore but just marketplace images.180Views0likes0CommentsRe: vNVMe on Hyper-V to unlock PCIe 5.0 NVMe performance
Hi all, I agree that using VMware NVMe Controller in a VM delivers better performance compared to VMware default SCSI Emulation and I suspect the same would happen to Windows Hyper-V I can even tell this NVMe controller delivers better perf. when using SAN that is not using a single NVMe or SSD but traditional HDD. This might be due to the protocol stack. There are improvements in NVMe storage driver that might not be seen in the SCSI emulation but only the WS Storage and Hyper-V Team could help here. What would be cool but hard to test is a direct comparison of same HW with VMware and Hyper-V Windows Server 2025. Please keep in mind to use the latest Diskmark as this has an updated and optimized diskspd.exe.222Views1like1CommentWindows Admin Center (Modernized Gateway)
Hi everyone, just to avoid confusion. The product of "Windows Admin Center" listed in the Windows Server Insider webpage is obsolete. Please use aka.ms/wacdownload to obtain the latest. There is no public preview at the time of writing. https://www.microsoft.com/en-us/software-download/windowsinsiderpreviewserver149Views2likes0CommentsRe: Release of Windows Server 2025 Datacenter Azure Edition
Do we have documentation about the improvements or unique features of this release? Sorry, I cannot find anything. Comparing WS 2022 DC Azure Edition vs WS 2025 DC Azure Edition. Comparing WS 2025 DC vs WS 2025 DC Azure Edition.172Views0likes0CommentsRelease of Windows Server 2025 Datacenter Azure Edition
Hi all, I am happy to see there are still Insider versions of Windows Server Datacenter Azure Edition vNext Is there any ETA for a release for the next iteration after 2022? What are the feature benefits that justify Azure Edition "2025" to be ahead of WS 2025 Thank you for your help!465Views0likes3CommentsRe: Windows 11 Insider Preview 10.0.26200.5516 (ge_release_upr) installing Failure
That is not much todo with AI. Windows 11 is most modular. If you need a very compact version then consider GitHub Tiny11.ps1. You can also upgrade your rig with a larger SSD, they are not expensive. NVMe (via sabrent PCI-E to NVMe Adapter) would be an option but since you have two 980, the PCI-E slots are blocked. Is there a specific reason why using the Insider version? It has more experimental features and eventually debug code.350Views0likes0Comments
Recent Blog Articles
No content to show