Microsoft to Ban Unsupported Machines from Windows 11 Updates

[R-T-B]

The encryption scheme microsoft is employing doesn't work without SecureBoot. Tada!

...

It can. You need to set some gpedit keys but yeah.

Still confused.

 

[simlife]

W7 for me.

are you ok with cyber crime higher t hen its eever been to be on super super old tech... also why win 7 not 8 or 10 like billions have done if you have a flip phone then i understand why 2009 tech otherwise huh??,,

 

[lexluthermiester]

It can.

Sure it can, but that's not what they're aiming for.

Still confused.

Ok, what are you confused about?

are you ok with cyber crime higher t hen its eever been to be on super super old tech... also why win 7 not 8 or 10 like billions have done if you have a flip phone then i understand why 2009 tech otherwise huh??,,

Windows 7 is not insecure just because microsoft isn't supporting it. Let's not do that fearmongering crap.

 

[R-T-B]

Ok, what are you confused about

How we got from my comment about TPM being used for DRM, to whatever point this is we are aparently trying to make.

 

[Shrek]

I wonder if TPM 1.2 will be enough

 

[lexluthermiester]

I wonder if TPM 1.2 will be enough

That is what microsoft defined as the "hard floor" for TPM.

 

[ValenOne]

That's not exactly what TPM was designed for, but you're right, I don't see any reason why it can't be adapted.

If that were true, an attacker could easily disable TPM & SecureBoot, boot a USB drive, alter or steal data from the host drive, reboot and reenable the TPM & SecureBoot and act like it's not there. This would work because the keys in the TPM module were not replaced. And if we were talking about TPM 1.x it would work flawlessly. However, with TPM2.0 the dynamic changes...

...and here it is. YOUR use-case-scenario is NOT what microsoft is doing.

Don't believe me? Install Windows 11 on a compliant system with everything enabled. Then, without changing any settings, try to boot a EBD like Hirens. When that fails, disable SecureBoot and try again. Let's see what happens when you get into the WinPE desktop... Yeah, have fun!


Stop being childish.

It's Secure Boot, TPM, and Bitlocker with TCG/Opal V2.0/IEEE1667 chain. Having just Secure Boot and TPM wouldn't complete the data security for corporate use.

 

[ThrashZone]

are you ok with cyber crime higher t hen its eever been to be on super super old tech... also why win 7 not 8 or 10 like billions have done if you have a flip phone then i understand why 2009 tech otherwise huh??,,

Hi,
lol yeah I use win-7 daily on a few machines and the sky has not fallen and the world hasn't ended as so many have said it will
I'm not even using this updates crack either I see no more updates as a long deserved holiday from MS trying to break win-7 every month lol

7 ESU Bypass

 

[Deleted member 212040]

Microsoft's latest practices have actually pushed me to go Linux. Currently using EndeavourOS, couldn't be happier.

 

[Deleted member 177333]

You can choose to enable Bitlocker or not, you're not forced to use it.

Thanks!

 

[plastiscɧ]

Windows 11 General Discussion

Is it just my impression or does Windows 11 fill more RAM than Windows 10?

www.techpowerup.com

nothing is eaten as hot as it has been cooked....

 

[GrumpyOtaku]

Good side of this is their system might stop trying to send MSWin11 updates to my MSWin10 Tech Preview test machine.

I looked through my systems, and NONE of them are supported under MSW11. My work laptop could, but that runs Linux as is right and proper.

So MSW10 is supported up through late 2025? Fedora 42 should be even more kick-ass by then, so you won't need MSWin anymore.

 

[chrcoluk]

Am I the only one thinking some people will be looking for ways to emulate not having a TPM so they are released from forced updates?

 

[windwhirl]

Am I the only one thinking some people will be looking for ways to emulate not having a TPM so they are released from forced updates?

It's already happening, probably

 

[ThrashZone]

Thanks!

Hi,
Ran into this yesterday to make sure
Turn off crap bitlocker features in 11

fsutil behavior set disableencryption 1
cipher /d /s:C:\
reg add "HKLM\Software\Policies\Microsoft\Windows\EnhancedStorageDevices" /v "TCGSecurityActivationDisabled" /t REG_DWORD /d "1" /f
sc config BDESVC start= disabled
sc config "EFS" start= disabled

 

[lexluthermiester]

Am I the only one thinking some people will be looking for ways to emulate not having a TPM so they are released from forced updates?

There will be many other reasons for bypassing the limitations..

 

[micropage7]

i guess that's the reason my pentium laptop with 12gb ram not got updated and crappy i3 with 4gb got update

 

[ThrashZone]

Am I the only one thinking some people will be looking for ways to emulate not having a TPM so they are released from forced updates?

Hi,
Using Virtual machine with hyper-v or kvm there is already a emulator for uefi & tpm that I've read
Kind of a lame way to use an os to me though.

 

[Ernest1ca]

Microsoft, you make us a favour. By being naughty, you push us to use alternative OS-es, hence you losing than you gaining. Bravo! User-friendly attitude.

 

[DrCR]

Microsoft, you make us a favour. By being naughty, you push us to use alternative OS-es, hence you losing than you gaining. Bravo! User-friendly attitude.

Way back when, my experience with WinME was a major factor in me getting into Linux.

 

[lexluthermiester]

Way back when, my experience with WinME was a major factor in me getting into Linux.

Really? I found Windows ME was great after being dialed in and properly configured, which was MUCH easier than dialing in Linux at that point in time..
I find your lack of "Win" disturbing.

 

[DrCR]

Really? I found Windows ME was great after being dialed in and properly configured, which was MUCH easier than dialing in Linux at that point in time..
I find your lack of "Win" disturbing.

I used WinME as a daily driver on my non-work machines for quite a number of years. iirc I used it until AMD Venice and WinXP, so for about 5 years I guess. Got to know it like the back of my hand e.g. what routes would make it predictably crash and what routes would be fine. It was actually my OS of choice, instead of Win98 SE, for my GF4 AGP + V5 5500 PCI legacy gaming box, just because I'm so familiar with it. What I enjoyed with Slackware 9 back then when I started tinkering with it vs WinOSes (desktop admin professionally during that time) was that I never had to worry about SW deciding to throw a wrench in my dialed in setup (which is also why I tend to like a distro like Slackware vs other more bleeding edge distros for my boring daily driving). And Linux simply caught my interest as something else to learn since WinOSes were my expertise professionally. Eventually I got to the point where I am now that setting up and maintaining a good Win 10/11 Ent config to my personal standard doesn't provide interest and utility sufficient for me to bother outside of a professional capcacity. I'll likely unlazy though and put Win 11 Ent on a personal machine once I do a new build in 2022-2023. Maybe. Sounds like a bus man's holiday.

 

[lexluthermiester]

I used WinME as a daily driver on my non-work machines for quite a number of years. iirc I used it until AMD Venice and WinXP, so for about 5 years I guess. Got to know it like the back of my hand e.g. what routes would make it predictably crash and what routes would be fine. It was actually my OS of choice, instead of Win98 SE, for my GF4 AGP + V5 5500 PCI legacy gaming box, just because I'm so familiar with it. What I enjoyed with Slackware 9 back then when I started tinkering with it vs WinOSes (desktop admin professionally during that time) was that I never had to worry about SW deciding to throw a wrench in my dialed in setup (which is also why I tend to like a distro like Slackware vs other more bleeding edge distros for my boring daily driving). And Linux simply caught my interest as something else to learn since WinOSes were my expertise professionally. Eventually I got to the point where I am now that setting up and maintaining a good Win 10/11 Ent config to my personal standard doesn't provide interest and utility sufficient for me to bother outside of a professional capcacity. I'll likely unlazy though and put Win 11 Ent on a personal machine once I do a new build in 2022-2023. Maybe. Sounds like a bus man's holiday.

That's fair. I was also a Windows ME user for many years until XP SP2 was released. At that point XP was more stable and better. Never had problems with WinME like seemingly everyone else had. But then again, I disabled or deleted things that caused instabilities and used alternatives, which may have been why.

 

[ValenOne]

I wonder if TPM 1.2 will be enough

I installed Windows 11 on Intel Ivybridge Core i7-3770K based PC without TPM.

 

[Shrek]

I installed Windows 11 on Intel Ivybridge Core i7-3770K based PC without TPM.

Without needing any tricks?