News Microsoft eliminates workaround that circumvents Microsoft account requirement during Windows 11 installation

[X8XFoundries]

Microsoft pushes harder to ‘ensure that all users exit setup with internet connectivity and a Microsoft Account.’

Microsoft eliminates workaround that circumvents Microsoft account requirement during Windows 11 installation : Read more

Isn't it something like only 11% of users moved over to W11? Why would they want to shove it this hard?

 

[Heat_Fan89]

Every day, Microsoft helps us move one step closer to a Linux future.

Linux still isn't for everyone tbh, says the person who converted two personal laptops from W11 to Ubuntu and PopOS. Linux has come a long, long way but Linux still breaks a lot easier than commercial operating systems like Windows and macOS. The macOS and Windows communities are much larger than Linux and answers are easier to come by. I prefer Ubuntu because to me it is the most stable Linux distro without having to install a slimmed down version of Linux and add to it.

For the basics such as web browsing, online banking etc, Linux is pretty good, it's when problems arise that can make Linux a hassle, especially if a person is a senior and is technically challenged.

I happen to be proud senior (67 later this year) but i've been around computers and worked for two computer mfgs since the early 80's (NCR and WANG Labs) as a computer field tech.

I do find it interesting how with certain configs, Windows has trouble detecting certain hardware upon a fresh install but Linux can usually find everything including WiFi connections.

 

[kerberos_20]

in oobe:
Shift + F10
start ms-cxh:localonly

it opens prompt to create local account, clicking next bypasses rest of setup

 

[isamuelson]

in oobe:
Shift + F10
start ms-cxh:localonly

it opens prompt to create local account, clicking next bypasses rest of setup

Thanks for posting this. I was going to until I saw you already did.

I saw this today on Chris Titus' YouTube channel this morning where he posted this solution. So much cleaner and no need to reboot, turn off your internet, etc.

 

[Sh4veD4ve]

This is a great article. Thanks for the part on Rufus and the ability to use a downloaded ISO to create new media (and with the customizations!).
I am one of those who installs windows (or re-installs) frequently and this article just improved my process significantly. Thank you again!

 

[jp7189]

Wow! That's a sea of negative comments on this. I'd like to offer a counterpoint.

It is a generally accepted best practice to enable full disk encryption on portable devices (and frankly non-portable too), and it is the default posture for Windows now. If you're MS how would you go about doing that in a way that is convenient to users and still secure? Answer: tie the unlock to an MFA protected account. Also, full disk encryption (bitlocker) won't enable unless it has a secure place to store a recovery key. You can't keep that locally on the encrypted disk.. where else are you gonna put that (for an average consumer)?

Lastly, the #1 helpdesk call is forgotten passwords. MS online accounts have self service password reset. Without that, what is the average consumer going to do if they forget the password of the only local account? Take it to a shop to have it wiped and rebuilt... or have it hacked which is child's play on an unencrypted device with a local account. Swap cmd.exe for utilman.exe and you get a system level command prompt before the login screen. How do you stop that? Full disk encryption tied to an online account.

I'm not saying they can't also do the evil corp things some of these comments suggest, but i am saying the path they chose for improving security is the best available option for average consumers.

 

[rambo919]

Wow! That's a sea of negative comments on this. I'd like to offer a counterpoint.
snip

Yes, best practice is to turn your whole operating system into turnkey randomware.....

 

[rambo919]

That is the entire point of requiring a registered account in the first place. You don't mind your phone being turned into an data mining / advertising revenue generation machine and Microsoft wants to get a piece of that google money.

Difference is I barely do anything important on my phone..... there is almost nothing on there to spy on.

Or to hold ransom for that matter.

 

[palladin9479]

It is a generally accepted best practice to enable full disk encryption on portable devices (and frankly non-portable too), and it is the default posture for Windows now. If you're MS how would you go about doing that in a way that is convenient to users and still secure? Answer: tie the unlock to an MFA protected account. Also, full disk encryption (bitlocker) won't enable unless it has a secure place to store a recovery key. You can't keep that locally on the encrypted disk.. where else are you gonna put that (for an average consumer)?

Bitlocker is security theatre for home users. Corporate entities can at least opt to keep the backup of the encryption key in their own controlled vault that they control access to.

If you are serious about doing encryption that actually protects you then use veracrypt.

https://www.veracrypt.fr/en/Home.html

No backdoor keys, no third party involvement, just you, your disk and whatever secure passphrase you create. Without that passphrase not even god can access that data.

 

[snemarch]

I'm not saying they can't also do the evil corp things some of these comments suggest, but i am saying the path they chose for improving security is the best available option for average consumers.

That's a naïve take.

"Improving security and helping forgetful users" would be 100% covered by making it the default, and letting power users create local accounts through by clicking "advanced setup options". Removing that as an method is hostile – chipping away at the remaining options, that are in the "you have to press this magic key combo at the right type, then type an obscure command" category should remove any shred of doubt...

 

[jp7189]

Bitlocker is security theatre for home users. Corporate entities can at least opt to keep the backup of the encryption key in their own controlled vault that they control access to.

If you are serious about doing encryption that actually protects you then use veracrypt.

https://www.veracrypt.fr/en/Home.html

No backdoor keys, no third party involvement, just you, your disk and whatever secure passphrase you create. Without that passphrase not even god can access that data.

Like anything.. the right solution for the right problem. Veracrypt is beyond 99% of users who don't know or don't care enough. For you and the other 1% there are other solutions that meet your requirements better.