Windows 10

[Seeker47]

You don't have to do that (use Legacy). I directly manage ~150 machines, and indirectly ~1500 more, and ALL of them are UEFI, and many of them have been reimaged using external boot media. Real simple.
For most stock installations of Windows10, UEFI is set and so is "Secure Boot" enabled. Unless an admin bios password had already been applied, you can disable SecureBoot, reimage, and then re-enable once you're finished. This keeps those machines secure from those who might want to bypass security by booting their own media. Btw, once done, then is a good time to apply that bios admin pwd.
We use Dell machines for Windows here on campus, and it is EASY to apply a script that does all the above, reboots, allows for reimaging, and then tidies up again at the end...without having to manually change settings in bios at all!

Scott

Still very interested in seeing example(s) of such scripts. (Probably would not matter if geared towards a particular imaging program, as long as this could be adapted for another.)

[El Heggunte]

"Windows 10's package manager flooded with duplicate, malformed apps."

https://www.bleepingcomputer.com/news/security/windows-10s-package-manager-flooded-wit...alformed-apps/

[Seeker47]

<BUMP to Post #421, above: Crickets . . . ?>
============================

Vanishing Folders | Win-10 Moves in Mysterious Ways:

Update 20H2 trashed a few installed items here -- games most evidently -- shoving them into a folder section with the heading Windows_Old. Now, there is not trace of this folder anymore. Whatever got relocated there appears to be gone. (A good search utility failed to turn up anything, on keyword searches.) There is now just a folder entitled "Windows10Upgrade", that does not contain what I was looking for. Had I known this might happen, I would have backed up that Windows_Old section before it could disappear. Leaves you wondering what future Win Updates may zap. Best to keep a close watch on this possibility.

[EDIT: in a couple cases, I was able to open install archives with a utility, extract and reinstate necessary files that must have gotten moved into the now vanished 'Windows_Old' section, as a workaround for restoring said programs. Reinstalling them from scratch might have worked as well, but I wanted to test out that method using the extractor.]

[El Heggunte]

Windows 10 ""News and Interests"" is the new Active Desktop

"Windows 10 News and Interests enabled for everyone in latest update."

https://www.bleepingcomputer.com/news/microsoft/windows-10-news-and-interests-enabled-...latest-update/

[Seeker47]

Windows 10 ""News and Interests"" is the new Active Desktop

"Windows 10 News and Interests enabled for everyone in latest update."

https://www.bleepingcomputer.com/news/microsoft/windows-10-news-and-interests-enabled-...latest-update/

Yikes, here we go again ! Just like Dracula kept returning for numerous Hammer sequels, they keep coming up with more ways to "Cortana" us with telemetry snooping, data mining, and serving up ads -- even after we've put a stake through Cortana etc. down in the basement.

Well, my digging for a solution has only begun, but already there is this

https://www.ghacks.net/2021/06/11/how-to-disable-the-weather-widget-from-the-windows-10-taskbar/

which includes various links in the article responses. Hopefully one of those will prove effective, without causing significant damage. I'm gonna start with a Registry-based one, then move on to tossing the new EDGE overboard. Won't miss that at all. A pity we apparently can't tank 21H1 altogether, without also disposing of the latest security fixes in the process.

[EDIT: and this: https://www.askvg.com/tip-completely-disable-and-remove-news-and-interests-feature-in-windows-10/ ]

[Seeker47]

Have now ditched this intrusive and unwanted "feature", using the method presented in the AskVG article linked above. (It had also had the effect of squeezing out the available space for pinned items on your taskbar.) This was just the latest privacy invading, data mining inroad slipped in my MS . . . and it surely won't be the last.

Meanwhile,

https://www.theverge.com/2021/6/14/22533018/microsoft-windows-10-end-support-date

[p_l]

Updating and running ShutUp10 got rid of it for me.

https://www.majorgeeks.com/files/details/oo_shutup10.html

[lordsmurf]

Updating and running ShutUp10 got rid of it for me.

https://www.majorgeeks.com/files/details/oo_shutup10.html

Thanks for this tip.

That last updates screwed up my tablet, had to roll back, still not working properly. I didn't update it, it just did it to itself. Sucks.

[Seeker47]

Updating and running ShutUp10 got rid of it for me.

https://www.majorgeeks.com/files/details/oo_shutup10.html

Majorgeeks is probably o.k., but I prefer getting these things from the developer's own page.
I had checked that, but I guess it must have been right before the latest version had dropped.
O&O had to be aware of this, was hoping they would get right on it. Turning it Off in Windows
might not be sufficient; I'd rather zap it in the Registry. Even that probably won't stop them from re-enabling it with a future update.

[p_l]

Majorgeeks also provides a download link directly from the developer's site, if that's what you prefer.

[Seeker47]

I mostly run older hardware anyway -- by choice, for several reasons -- but this would be where I get off the bus anyway, in regard to any possible use of Win 11:

https://www.techradar.com/news/forget-tpm-chips-for-windows-11-thats-not-even-the-half-of-it

Screw you, Microsquish ! How many average users are going to go skidding from this huge banana peel ? Added security, my ass !

[Seeker47]

And some bad news for AMD users:

https://www.youtube.com/watch?v=Mg5xJtmCZbI

[Seeker47]

Nice ! Here's a real "turkey" for ya', a day early:

https://www.tomsguide.com/news/windows-installer-file-takeover-flaw?utm_source=notification

[sum_guy]

The key part of the article makes this zero day less scary:

"There's some defense in the fact that the attack has to start with a user who's already logged into the system. But the attacker doesn't have to be a human — malware that made it onto the machine by other means could just as easily exploit this flaw."

[usually_quiet]

Microsoft won't retire Windows 10 until October 14, 2025. Those who have systems that are incapable of running Windows 11 and can't be made compatible have 3 years and 11 months left before support for Windows 10 ends. By then, there is a good chance that much of the incompatible older hardware currently running Windows 10 will need to be replaced for other reasons. That being said I chose to replace the incompatible motherboard for my computer with an 8th gen Intel processor with a motherboard that supported TPM 2.0 so I could continue using it a little longer.

[Seeker47]

Microsoft won't retire Windows 10 until October 14, 2025. Those who have systems that are incapable of running Windows 11 and can't be made compatible have 3 years and 11 months left before support for Windows 10 ends. By then, there is a good chance that much of the incompatible older hardware currently running Windows 10 will need to be replaced for other reasons. That being said I chose to replace the incompatible motherboard for my computer with an 8th gen Intel processor with a motherboard that supported TPM 2.0 so I could continue using it a little longer.

Haven't had time to run this down just yet, but I saw an article (in Tomsguide, maybe ?) which said that a moderately techie bypass hack had been published, enabling running Win 11 on older, otherwise non-compliant hardware, which had been able to run Win-10. That MS itself might have even come out with a paper on this subject, but wasn't calling attention to its existence. If so, could be worth a look.

[usually_quiet]

Haven't had time to run this down just yet, but I saw an article (in Tomsguide, maybe ?) which said that a moderately techie bypass hack had been published, enabling running Win 11 on older, otherwise non-compliant hardware, which had been able to run Win-10. That MS itself might have even come out with a paper on this subject, but wasn't calling attention to its existence. If so, could be worth a look.

Yes. See https://www.howtogeek.com/759925/how-to-install-windows-11-on-an-unsupported-pc/ However, Microsoft warns that it may eventually stop providing security updates for unsupported PCs running Windows 11. I haven't seen anything regarding support for feature updates or quality updates for unsupported computers.

I have been looking at new laptops. It is possible to get one with Windows 10 but many now come with Windows 11 pre-installed.

[Seeker47]

Haven't had time to run this down just yet, but I saw an article (in Tomsguide, maybe ?) which said that a moderately techie bypass hack had been published, enabling running Win 11 on older, otherwise non-compliant hardware, which had been able to run Win-10. That MS itself might have even come out with a paper on this subject, but wasn't calling attention to its existence. If so, could be worth a look.

Yes. See https://www.howtogeek.com/759925/how-to-install-windows-11-on-an-unsupported-pc/ However, Microsoft warns that it may eventually stop providing security updates for unsupported PCs running Windows 11. I haven't seen anything regarding support for feature updates or quality updates for unsupported computers.

I have been looking at new laptops. It is possible to get one with Windows 10 but many now come with Windows 11 pre-installed.

I think I'd take a long hard look at the latest Ubuntu, Linux Mint, or Zorin, before I'd surrender to any dictates of MS re Win-11. As for those updates, security or otherwise, there are other places to obtain them than from MS. Not without some risk, and the need to check out those packages . . . but there have been risks associated with the official updates themselves.

[Gregg]

Still don't have any need to go to Win 10. All software I need works under Win 7.

[Seeker47]

Still don't have any need to go to Win 10. All software I need works under Win 7.

Some will drone on about tremendously increased malware / exploit risks that go with running the older Win OSes, long after their EOL dates and the security fixes have ceased. I don't really know to what extent this added risk may be exaggerated -- particularly if you are also running decent, current antivirus software. (And doing periodic boot partition imaging, as is advisable.) But if you follow these things, you find that even current Windows falls prey to new exploits, until and unless a fix gets released. I watched a YT video that was probably a joke . . . but I'm not sure. It was extolling the virtues of installing -- can't recall whether it was XP or even maybe Win-98 -- as your OS of choice to run now. This was primarily from a clean, very accessible, un-troublesome UI point of view. I've heard some claim that the bad actors have since moved so far on that from a security considerations standpoint the old OS is forgotten or overlooked, so you needn't worry about it being attacked. I think that may just be wishful thinking, but have to wonder what the people on Wilders forum might have to say about that ?

[El Heggunte]

Microsoft to stop selling Windows 10 licenses by the end of January.

If you're looking to buy a Windows 10 license online, you might want to hurry up — by the end of this month, Microsoft will officially stop offering Windows 10 licenses on its website.

https://www.pcworld.com/article/1477078/microsoft-will-stop-selling-windows-10-license...-few-days.html

[El Heggunte]

Windows 10 21H2 End-Of-Service is coming.

source: https://mspoweruser.com/microsoft-windows-10-21h2-eos-reminder/

Microsoft reminded its customers today of the impending Windows 10 21H2 end-of-service (EOS) on June 13, 2023. It will affect the editions released in November 2021, such as Windows 10 Home, version 21H2; Windows 10 Pro, version 21H2; Windows 10 Pro Education, version 21H2; and Windows 10 Pro for Workstations, version 21H2.

“These editions will no longer receive security updates after June 13, 2023,” reminds Microsoft in its latest announcement. “Customers who contact Microsoft Support after this date will be directed to update their device to the latest version of Windows 10 or upgrade to Windows 11 to remain supported.”

Microsoft noted that the June 2023 security update of Windows 10 21H2 will be the last one it will receive. This EOS signals the stop of updates for version 21H2, especially the security and monthly quality updates. This could expose users to possible issues without necessary future security patches and bug fixes. With this, the Redmond company encourages users to get Windows 10 22H2 (Windows 10 2022 Update) or upgrade to Windows 11. The former has been available since November 2022 for users running Windows 10 20H2 or later via Windows Update. Microsoft said it would also push the update to consumer and non-managed business devices running Windows 10 20H2.

“To help keep you protected and productive, Windows Update will automatically initiate a feature update for Windows 10 consumer devices and non-managed business devices that are at, or within several months of reaching end of servicing. This keeps your device supported and receiving monthly updates that are critical to security and ecosystem health.”

[El Heggunte]

Windows 10 is dead (AGAIN) -_-

https://www.windowscentral.com/software-apps/windows-10/microsoft-gives-a-subtle-remin...-of-windows-10

[El Heggunte]

Windows 10 nags users with full-screen end-of-life and Get Windows 11 banners.

🤬

https://www.windowslatest.com/2024/06/03/windows-10-nags-users-with-full-screen-end-of...ws-11-banners/

[Baldrick]

Nice. I guess it's time to switch to Ubuntu.

[El Heggunte]

Windows 10 goes the Schrödinger way
(dead and alive at the same time 😵)

Microsoft says it wants to add new features to Windows 10.

Microsoft has reopened the beta channel of the Windows 10 Insider Program to test new features and ideas before introducing them to the general public.

https://www.windowslatest.com/2024/06/05/microsoft-says-it-wants-to-add-new-features-to-windows-10/

[Seeker47]

Nice. I guess it's time to switch to Ubuntu.

We're probably of like mind. I made a dual for-testing install of Zorin 17 and Linux Mint 23.x, both of which are Ubuntu based. These were my top 2 contenders from Linux-ville. Somewhat steep learning curve ahead there, I suppose. Mint has what looks to be a pretty good Help forum online.

My basic assumption was that a lot of the software so nicely available from VH may not run -- or run properly -- under Linux -- even with support from WINE, Parallels, or whatever. I held out some hope for VirtualBox VMs coming to the rescue there, but have run into tech issues with that beyond my present ability, and will need to summon some tech cavalry for that.

OTOH, I stumbled across the existence of a specifically Linux version of Da Vinci Resolve, so who knows ? Maybe the general tide is starting to turn ?

Worst case scenario, for that time of no more security updates coming: I can take the Win-10 boxes offline, dedicated to Videohelp type matters, and let the Linux box cover web surfing, email, and some other basic things.

[El Heggunte]

The new Seven XP will remain alive for some more years.

Windows 10 will get five years of additional support thanks to 0patch.

SOURCE: https://www.neowin.net/news/windows-10-will-get-five-years-of-additional-support-thanks-to-0patch/

0patch, a service that provides micro security patches without disruptions, announced today that it plans to offer security patches for Windows 10 for at least five years after its official end of life, giving customers a chance to stick to their current devices without significant security compromises. In fact, analysts predict that the end of Windows 10 will trigger a wave of PC upgrades.

0patch is no stranger to providing security updates for now-unsupported products. They still offer patches for Windows 7 and Server 2008, Microsoft Office products, and more. Technically, 0patch is already servicing Windows 10 (six of its discontinued versions, to be precise), but customers have the option to update to version 22H2 and receive updates from Microsoft for free. In October 2025, that privilege will be taken away, and that is when 0patch will step in.

With 0patch, Windows 10 users will be getting fixes for critical security vulnerabilities discovered after October 14, 2025 (that is when Windows 10 will receive its final free update). These patches are small, tiny sets of CPU instructions injected into running processes in your PC's memory. The approach allows for quick and easy patching without touching any of the original binaries or restarts. 0patch can also quickly undo changes if they cause issues.

It is worth noting that Windows 10 customers who do not want or cannot upgrade their systems to Windows 11 after Windows 10's end of life will have two extra options: pay Microsoft for the Extended Security Program (three years, available for businesses and home users) or do nothing and stick to the unsupported OS with no updates.

Like the Extended Security Program from Microsoft, 0patch is not a free service. However, it promises much longer support and additional benefits, such as faster and less disrupting patching (the DogWalk vulnerability was fixed two months before Microsoft), fixes for vulnerabilities that were left untouched by manufacturers, and patches for non-Microsoft products.

0patch is a yearly subscription that costs 24.95 EUR (~$27) per computer for individuals and small businesses. There is also an enterprise tier for medium and large organizations, which costs 34.95 EUR (~$37) per device. Microsoft has yet to announce prices of the Extended Security Updates program for home users. For reference, for commercial customers, the ESU program costs $61 per year for one device.

You can learn more about Windows 10 support by 0patch in a post on the official blog.