the most expected step back in the history of step backs, people were calling this day one hour one of seeing the W11 requirements, and knowing the vast majority of users were not going to simply "buy another machine" for the honor of running the latest copy of windows when windows 10 works perfectly well lol
choo choo the microsoft enshitification train has left the station boys, it's only major fuckup then triage from here on out for the rest of time, all aboard, choo choo
Honestly, the user is the biggest security risk in the first place. People run all kinds of malware and put their passwords into phishing sites all the time. One thing a TPM is used for is secure boot, which prevents malware from inserting its own bootloader to take over the OS.
The user of a hammer is the only one who can destroy the hammer. Humans on the planet's surface are the only ones who can destroy the planet... we should definitely separate the human user from his rights and freedom, shouldn't we?
I'm not using disk encryption. It's a desktop and if it's every stolen I've got bigger problems.
Also, I presume that disk encryption makes it so you can't just pop the drive in an adapter and pull stuff off it, which I sometimes need to do with old, retired drives.
veracrypt is a thing, encrypting drives does not need TPM.
Just boot using the good old Master Boot Record for a clean solution (The Veracrypt documentation gives a good overview). Veracrypt works with EFI too, but the EFI partition itself cannot be encrypted. You can even create a hidden OS, if you are forced to give out your password, theres still plausible deniability.
I found it was pretty easy to get rid of the nag. I installed a different OS. For my development stuff that needs windows and I can't run with wine (very few tools) - I have a VM running a windows version with 0 Internet access. Fuck that company sideways.
I've run I run the IoT version of 10 on everything - laptop, desktop, VM's, etc, it's great because it only does updates 2x/year, no feature updates by default.
Licensing is handled by the scripts from Microsoft. If you're a large enough business, it would be worth the cost of the Enterprise licensing just in reduced support issues.
Basically, it's Windows without the bloat, which seems like a good thing. I can use whatever apps I want for photo viewer, etc, and no garbage on the system.
There’s a registry key (sorry I’m on mobile right now) that you can actually add during a clean setup of current non-LTSC versions that remove the requirement for vTPM and SecureBoot. That install should easily be able to be live migrated. We were doing that when first playing with Windows 11
If anything, it should be optional for personal use, and mandatory for enterprise. Not that they would come to this conclusion either way, granted that half of the workforce is busy putting ads into the start menu, and the other half are probably not doing any work whatsoever