Episode 74 of The Windows Podcast with Fexingo dives into how Windows 11 is quietly making Windows Hello for Business mandatory for enterprise logins. Lucas and Luna discuss the shift from passwords to biometrics and PINs, the timeline for deprecation of traditional password authentication in Windows 11 Enterprise, and what IT admins need to do to prepare. They explore the security rationale, the deployment challenges with existing hardware, and the broader industry move toward passwordless authentication. Specific numbers include the 2024 Microsoft Digital Defense Report showing 99.9% of account compromise attacks involve password-based credentials, and the 2025 mandate for FIDO2 support in Windows 11 24H2. The hosts also touch on the role of TPM 2.0 and how this aligns with previous episodes on cloud-only identity and credential guard. A must-listen for IT professionals planning their Windows 11 rollout.

#WindowsHelloForBusiness #Passwordless #Windows11 #EnterpriseIT #Biometrics #TPM2 #FIDO2 #Security #Microsoft #ITAdmin #ZeroTrust #Authentication #Compliance #Technology #BusinessPodcast #Fexingo #FexingoBusiness #Podcast

Keep every episode free: buymeacoffee.com/fexingo

Episode 73 of The Windows Podcast explores how Windows 11 is quietly deprecating the classic Offline Files feature in favor of cloud-based file sync solutions like OneDrive Files On-Demand and Azure File Sync. Lucas explains the timeline: Offline Files is still supported but will enter a 'maintenance-only' phase starting with the Windows 11 2025 update, driving enterprises to migrate before 2028. Luna brings data from a recent survey showing 45% of enterprises still rely on Offline Files for branch offices or disconnected scenarios. Together they examine the migration paths, from Group Policy changes to third-party sync tools, and the hidden costs of interoperability with legacy on-premises file servers. The hosts also discuss the security rationale: cloud sync enables continuous access evaluation and conditional access policies that Offline Files cannot support. A practical episode for IT pros facing this quiet retirement.

#Windows11 #Microsoft #EnterpriseIT #FileSync #OfflineFiles #OneDrive #AzureFileSync #GroupPolicy #CloudMigration #ITPro #WindowsEnterprise #FileServers #BranchOffice #ConditionalAccess #ContinuousAccessEvaluation #Technology #FexingoBusiness #BusinessPodcast

Keep every episode free: buymeacoffee.com/fexingo

Episode 72 of The Windows Podcast digs into a change that has been flying under the radar for many IT admins: Windows 11 is quietly making PowerShell script signing mandatory for enterprise devices enrolled in Intune or subject to baseline security policies. Lucas and Luna walk through Microsoft's phased deprecation of unsigned script execution, the connection to Device Guard and WDAC policies, and what this means for existing automation workflows. They focus on the real-world impact: thousands of existing scripts that will stop running unless they are signed with a trusted certificate. The episode includes practical advice on cert management, code signing workflows, and how this aligns with Microsoft's broader push toward a hardware-rooted trust model. No alarmism, just what to expect and how to prepare.

#PowerShell #ScriptSigning #Windows11 #EnterpriseIT #Intune #DeviceGuard #WDAC #CodeSigning #SecurityBaseline #Microsoft #ZeroTrust #Automation #ITAdmin #TechPodcast #Technology #FexingoBusiness #BusinessPodcast #TheWindowsPodcast

Keep every episode free: buymeacoffee.com/fexingo

Episode 71 of The Windows Podcast with Fexingo digs into Microsoft's quiet mandate for hardware root of trust on enterprise PCs running Windows 11. Lucas explains how the Windows Hardware Compatibility Program now requires platform boot time measurements and PCR7 configuration for new certified devices, effectively locking out older machines from full security compliance. Luna questions whether this is a genuine security win or a covert hardware refresh cycle. The episode covers how IT admins can audit their fleet, what PCR7 binding means for BitLocker, and why even TPM 2.0 isn't enough without proper firmware measurement. Specific numbers include the timeline for enforcement and the percentage of enterprise PCs currently non-compliant. A concrete guide for IT teams to check Win32_Tpm or BitLocker readiness.

#Windows11 #HardwareRootOfTrust #EnterpriseIT #BitLocker #TPM20 #PCR7 #WindowsHardwareCompatibility #Microsoft #FirmwareSecurity #DeviceAttestation #WindowsPodcast #FexingoBusiness #BusinessPodcast #Technology #ITSecurity #Compliance #LucasAndLuna #BootSecurity

Keep every episode free: buymeacoffee.com/fexingo

Episode 70 dives into a little-known but significant change: Microsoft is quietly mandating device attestation for enterprise VPN connections in Windows 11. Lucas and Luna unpack how the Remote Access server role now requires TPM-backed health certificates—affecting tens of thousands of IT departments still using password-based VPNs. With a June 2026 deadline looming, they explain what attestation checks are, why Microsoft is pushing this, and how enterprises that have resisted modern authentication are suddenly scrambling. The episode walks through the real-world case of a mid-sized manufacturer that failed a security audit because its legacy VPN setup didn't support attestation. No alarmism—just the practical implications for IT teams managing Windows 11 endpoints.

#Windows11 #EnterpriseIT #DeviceAttestation #VPN #Microsoft #TPM20 #NetworkSecurity #RemoteAccess #HealthCertificate #ITCompliance #Authentication #SecurityPolicy #EndpointManagement #ZeroTrust #Technology #FexingoBusiness #BusinessPodcast #WindowsPodcast

Keep every episode free: buymeacoffee.com/fexingo

Microsoft is making Virtualization-Based Security and Credential Guard mandatory for new Windows 11 enterprise deployments starting with the 2025 feature update. Lucas and Luna break down what VBS and Credential Guard actually do under the hood, why they break common enterprise drivers and peripheral software, and what IT admins need to test before the deadline hits. They also cover the performance trade-off — about 5 to 10 percent CPU overhead — and which specific hardware configurations (Intel vPro, AMD Ryzen Pro) handle it best. If your organization still relies on legacy printer drivers or custom input-device utilities, this episode is your early warning system.

#Windows11 #VirtualizationBasedSecurity #CredentialGuard #EnterpriseIT #Microsoft #SecurityBaselines #ITAdmin #VBS #ZeroTrust #HardwareSecurity #IntelvPro #AMDRyzenPro #TPM20 #DriverCompatibility #WindowsSecurity #TechPodcast #FexingoBusiness #BusinessPodcast

Keep every episode free: buymeacoffee.com/fexingo

Microsoft is finally enforcing certificate-based authentication at the enterprise level with Windows 11, and it's about to break your legacy on-premises infrastructure. Lucas walks through the timeline: starting with the 24H2 update, devices joined to Azure AD or hybrid Azure AD will require certificate auto-enrollment via ADCS or a third-party PKI. Luna digs into the real-world pain: IT teams still using self-signed certs or manual enrollment for VPN, Wi-Fi, and email S/MIME will face failed connections. They cover the three biggest impact areas: network access, email encryption, and application authentication. Lucas shares a concrete example from a mid-size healthcare firm that discovered 40% of their laptops were still using password-based Wi-Fi profiles. The episode closes with a practical checklist: audit your PKI, validate your auto-enrollment GPO, and test with a Windows 11 pilot group. No alarmism here — just a clear map of what's coming and how to prepare before the 24H2 rollout hits your fleet.

#Windows11 #EnterpriseIT #CertificateAutoEnrollment #PKI #ADCS #Microsoft #CyberSecurity #ITInfrastructure #WiFiSecurity #VPN #S/MIME #AzureAD #HybridIdentity #Technology #MicrosoftEnterprise #NetworkSecurity #FexingoBusiness #BusinessPodcast

Keep every episode free: buymeacoffee.com/fexingo

Episode 67 explores Microsoft's quiet push toward cloud-only identity for Windows 11 Enterprise. Lucas and Luna break down the deprecation of on-premises Active Directory federation services, the shift to Azure AD-only join, and what it means for IT departments still running hybrid environments. They cite Microsoft's 2025 announcement that new Windows 11 Enterprise features will require cloud authentication, and discuss the real-world timeline: if your org hasn't migrated by mid-2026, you're already behind. Specific numbers include the 40 percent of Fortune 500 companies still using hybrid identity, and the hidden cost of legacy sync tools. A practical guide to the forced migration.

#Windows11 #Enterprise #CloudIdentity #AzureAD #ActiveDirectory #Microsoft365 #HybridIdentity #ITInfrastructure #IdentityManagement #CloudMigration #FexingoBusiness #BusinessPodcast #WindowsPodcast #Technology #ITStrategy #EntraID #ZeroTrust #DigitalTransformation

Keep every episode free: buymeacoffee.com/fexingo

Episode 66 of The Windows Podcast with Fexingo dives into a quiet but seismic shift in Windows 11: the deprecation of Group Policy Preferences (GPP), a feature enterprises have relied on for over a decade to map drives, set registry values, and manage printers. Lucas explains how Microsoft is steering IT admins toward Policy Analytics and MDM, while Luna notes the real-world crunch—one Fortune 500 admin told her his team spent 400 hours rewriting GPP-based drive mappings into CSPs. They break down the timeline, the fallout for legacy shops, and why this signals a deeper move to cloud-first management. If today gave you something useful, the show stays ad-free via listener support at buy me a coffee dot com slash fexingo.

#Windows11 #GroupPolicyPreferences #EnterpriseIT #MDM #Intune #CSP #ITAdmin #Microsoft #TechPodcast #WindowsPodcast #PolicyAnalytics #LegacyTech #EndpointManagement #CloudFirst #Enterprises #FexingoBusiness #BusinessPodcast #Technology

Keep every episode free: buymeacoffee.com/fexingo

Episode 65 of The Windows Podcast with Fexingo dives into a quiet but significant change: Windows 11 is deprecating the classic mapped network drive approach for enterprise environments. Lucas and Luna explore how Microsoft is pushing organizations toward UNC paths, shortcuts, and cloud-based storage like OneDrive, with real examples from enterprise IT migrations. They discuss the impact on legacy batch scripts, group policy preferences, and user experience, offering practical advice for IT admins preparing for the shift. A focused 10-minute conversation for Windows professionals managing enterprise desktops.

#Windows11 #EnterpriseIT #NetworkDrives #Microsoft #UNC #GroupPolicy #OneDrive #ITAdmin #FileSharing #Deprecation #BatchScripts #Technology #FexingoBusiness #BusinessPodcast #WindowsPodcast #EnterpriseWindows #LucasAndLuna #ITMigration

Keep every episode free: buymeacoffee.com/fexingo