Comment by _Understated_ | Hacker News Reader

Comment by _Understated_ | Hacker News Reader

Parent Full thread

Try disabling Windows update...

Also, almost every patch has issues these days: that hardly ever used to happen. Their quality has taken a dive.

I am not saying that is isn't the perfect tool for many people: it has been for many years. The issue is that when I wanted to change things and leave them changed, I used to be able to do that. Now, they are doing their best to remove that ability! That makes no sense! Let me break it if I want! I have no warranty anyway!

Disable Windows update and it comes back on due to the Windows Update Medic Service. Ok, disable that then! Oops, you're not allowed. Ok, I can circumvent this by changing permissions on the dll and then deleting it. I'll then run updates later at a time of my choosing. Now I run updates. Oops, it's back again! Microsoft knows best.

By all means make it easy for the "typical" user. But I wish they'd stop taking away the underlying power-user stuff because they think they know best!

Update disabling is still there - gated behind more expensive editions and enterprise policy settings, because Microsoft likely had gotten a bad reputation in the past for systems with updates disabled becoming botnet nodes due to vulnerabilities.

In a way, the restrictions which used to be exclusive to Home are now part of Pro, the more expensive Pro for Workstations is what Pro used to be and Enterprise (also available through a per-user subscription model instead of a per-machine model, cheaper in a way for individuals with 5 PCs nobody else uses) also has some extra toggles not removed.

I think the subscription versions also include an Intune license which is the only supported way (other than installing third-party AV) to disable Windows Defender permanently, as well.

Now, MDM-managed Apple phones still come with a number of core restrictions, though I believe there's more loose side loading on there - however you have to register Apple hardware into MDM at purchase time as only authorized resellers can grant this access to a serial number.

Question, how does an individual go about acquiring an Enterprise license? For the exact reasons you mentioned (features, per-user licensing) I’ve tried in the past to get setup with a license and not had any luck.

These days there's a self-service panel on the Microsoft 365 sign-up/admin page once you've set up a tenant. I've not been asked for any formal business registration numbers via that process, but the old days of needing to acquire these licenses via a partner seem to be somewhat gone.

Reply on news.ycombinator.com