Episode 65 of The Windows Podcast with Fexingo dives into a quiet but significant change: Windows 11 is deprecating the classic mapped network drive approach for enterprise environments. Lucas and Luna explore how Microsoft is pushing organizations toward UNC paths, shortcuts, and cloud-based storage like OneDrive, with real examples from enterprise IT migrations. They discuss the impact on legacy batch scripts, group policy preferences, and user experience, offering practical advice for IT admins preparing for the shift. A focused 10-minute conversation for Windows professionals managing enterprise desktops.

#Windows11 #EnterpriseIT #NetworkDrives #Microsoft #UNC #GroupPolicy #OneDrive #ITAdmin #FileSharing #Deprecation #BatchScripts #Technology #FexingoBusiness #BusinessPodcast #WindowsPodcast #EnterpriseWindows #LucasAndLuna #ITMigration

Keep every episode free: buymeacoffee.com/fexingo

Microsoft is turning its Security Baseline recommendations into enforced defaults for Windows 11 Enterprise devices enrolled in Intune and Windows Update for Business. Starting with the 2026 H1 feature update, devices that fall below the baseline will see compliance warnings and, after 30 days, automatic remediation. Lucas and Luna unpack the policy shift, what it means for IT admins who have custom security configurations, and how this departs from the legacy Group Policy approach where baselines were merely advisory. They walk through the specific settings being enforced—Credential Guard, BitLocker with TPM+PIN, WDAC with default base policy—and the real-world friction this creates for labs, legacy app test environments, and high-performance computing clusters that previously ran with reduced security for performance reasons. The conversation also covers the new RBAC controls that let finance and legal teams override certain enforcements without full admin rights, and the exit hatch: a ten-day compliance grace period toggle that can be extended via a new Defender for Cloud Apps connector. The show closes by asking whether Microsoft's trust-but-verify model is actually trust-and-enforce, and whether IT teams should be preparing exemption requests now.

#Windows11 #EnterpriseSecurity #Microsoft #Intune #SecurityBaseline #WDAC #BitLocker #CredentialGuard #CloudApps #ITAdmin #Compliance #ZeroTrust #WindowsUpdateForBusiness #GroupPolicy #RBAC #Technology #FexingoBusiness #BusinessPodcast

Keep every episode free: buymeacoffee.com/fexingo

Microsoft is gradually disabling NTLM authentication in Windows 11, forcing enterprises to migrate to Kerberos or modern authentication protocols. Lucas and Luna break down why NTLM is being retired, the impact on legacy apps and file sharing, and what IT admins need to do now. Specific changes in Windows 11 24H2 and upcoming 2026 releases are discussed, including the fallback behavior for NTLMv2. Practical migration steps include enabling Kerberos auditing, setting up Service Principal Names, and using Group Policy to disable NTLM on a pilot group first. The episode also covers how this affects Linux file servers and third-party devices in mixed environments.

#Windows11 #NTLM #Kerberos #EnterpriseIT #Authentication #Microsoft #Security #ActiveDirectory #GroupPolicy #LegacyMigration #NetworkSecurity #Tech #InformationTechnology #WindowsPodcast #FexingoBusiness #BusinessPodcast #ITManagement #ProtocolDeprecation

Keep every episode free: buymeacoffee.com/fexingo

Episode 62 of The Windows Podcast with Fexingo. Lucas and Luna reveal how Microsoft's quiet deprecation of legacy font rendering in Windows 11 is breaking enterprise document workflows, from legal filings to branded reports. They explore the shift from GDI fonts to DirectWrite, the risk of rendering discrepancies across Office apps, and why IT teams need to audit font dependencies now. Plus, a candid moment on why this show stays ad-free and how listeners can support it.

#Windows11 #EnterpriseIT #FontRendering #DirectWrite #GDI #Microsoft #ITCompliance #DocumentWorkflow #LegalTech #Branding #Typography #ITAudit #WindowsUpdate #LegacySoftware #EnterpriseTech #Technology #FexingoBusiness #BusinessPodcast

Keep every episode free: buymeacoffee.com/fexingo

Episode 61 of The Windows Podcast with Fexingo digs into Microsoft's ongoing but under-the-radar campaign to kill SMB1 in enterprise environments. Lucas and Luna explain why SMB1 — the nearly 40-year-old network file-sharing protocol — is still lurking in thousands of corporate networks, often enabled by legacy printers, medical devices, or old NAS appliances. They break down the security cost: SMB1 was the vector for WannaCry and NotPetya, and Microsoft has been trying to kill it since Windows 10. Now Windows 11 is making SMB1 opt-in only during installation, with no fallback. But the real pain point for IT teams is finding and replacing the devices that still depend on it. Lucas walks through a real-world case: a mid-size manufacturer that spent six months hunting down SMB1 dependencies — including an HVAC controller running Windows XP Embedded. They cover detection tools, the Group Policy route, and where Microsoft is drawing the line. No clickbait, no panic — just the practical timeline every enterprise IT pro should know.

#Windows11 #SMB1 #EnterpriseIT #NetworkSecurity #Microsoft #FileSharing #LegacyProtocols #WannaCry #NotPetya #ITInfrastructure #GroupPolicy #WindowsPodcast #Fexingo #FexingoBusiness #BusinessPodcast #TechPodcast #WindowsEnterprise #ProtocolRetirement

Keep every episode free: buymeacoffee.com/fexingo

Microsoft's latest Windows 11 24H2 update introduces a hidden requirement for enterprise PCs: USB4 retimer chips must pass Microsoft's certification or the system won't boot with certain docks and monitors. Lucas and Luna break down what a retimer actually does, why Microsoft is cracking down now, and how IT admins should audit their hardware before the next hardware refresh cycle. With USB4 adoption accelerating in 2026, this is a sleeper issue that could stall deployment for thousands of enterprise devices if ignored. Specific numbers on compliance timelines, the role of Intel's Barlow Ridge controllers, and practical steps for IT teams to avoid surprise failures in the field.

#USB4 #Windows11 #EnterpriseIT #Microsoft #Retimer #HardwareCertification #24H2 #ITAdmin #PCDeployment #DockingStations #Thunderbolt #IntelBarlowRidge #CorporateTech #DeviceCompliance #TechUpdates #WindowsPodcast #FexingoBusiness #BusinessPodcast

Keep every episode free: buymeacoffee.com/fexingo

Windows 11's networking stack now defaults to Wi-Fi 7 when available, but most enterprise access points still run Wi-Fi 6 or older. In this episode, Lucas and Luna unpack why Microsoft is pushing the upgrade, how it affects legacy device compatibility, and what IT teams need to know about the 6 GHz band and multi-link operation. They cite Intel's BE200 module deadlines and Microsoft's updated hardware certification requirements for Windows 11 24H2. If you manage enterprise wireless, this episode walks through the concrete choices you'll face by Q4 2026.

#Windows11 #WiFi7 #EnterpriseIT #WirelessNetworking #Microsoft #IntelBE200 #6GHzBand #MultiLinkOperation #ITInfrastructure #NetworkUpgrade #HardwareCertification #Windows1124H2 #EnterpriseTechnology #Technology #ITStrategy #FexingoBusiness #BusinessPodcast #TechPodcast

Keep every episode free: buymeacoffee.com/fexingo

Lucas and Luna unpack Microsoft's strict TPM 2.0 requirement in Windows 11 and how it's reshaping enterprise hardware lifecycle planning. They focus on a specific pain point: the estimated 20 percent of enterprise PCs still running TPM 1.2 as of early 2026. Using a mid-size manufacturer as an example, they walk through the cost implications—roughly $150 per machine for motherboard swaps or upgrades—and the security trade-offs that have IT teams rethinking their refresh cycles. They also touch on why Microsoft is holding the line despite pushback from legacy hardware vendors. A pragmatic conversation about a quiet but massive infrastructure shift.

#TPM20 #Windows11 #EnterpriseIT #HardwareSecurity #Microsoft #LucasAndLuna #FexingoBusiness #BusinessPodcast #Technology #ITInfrastructure #PCRefresh #SecurityChip #BitLocker #Firmware #Compliance #HardwareLifecycle #SupplyChain #ZeroTrust

Keep every episode free: buymeacoffee.com/fexingo

In this episode, Lucas and Luna dive into how Windows 11 is quietly overhauling enterprise Wi-Fi profile management. The shift from legacy WPA2-Enterprise to WPA3 and the deprecation of EAP methods like PEAP are forcing IT teams to rethink their wireless strategies. Lucas explains why Microsoft's move to enforce modern authentication in Wi-Fi profiles — similar to the shift to passwordless in other areas — is creating headaches for organizations still relying on 802.1X with old RADIUS servers. They discuss the new Windows 11 Wi-Fi settings CSP (Configuration Service Provider), how it replaces Group Policy for wireless, and why enterprises that don't update their network infrastructure risk connectivity failures after the next feature update. Specific examples include the mandatory use of TLS 1.2 for EAP-TLS and the removal of TKIP support. Luna brings up real-world cases of companies scrambling to recertify their network access control (NAC) solutions. The conversation also touches on how this intersects with Windows 11's broader push toward cloud-managed endpoints via Microsoft Intune. A concrete takeaway: IT admins should audit Wi-Fi profiles now and ensure their supplicant settings use the new 'Wifi-CSP' rather than legacy GPOs. The episode closes with a practical checklist for enterprises to avoid disruptions when Windows 11 24H2 rolls out.

#Windows11 #EnterpriseWiFi #WPA3 #EAPTLS #NetworkSecurity #MicrosoftIntune #CSP #GroupPolicy #ITAdmin #WiFiProfiles #8021X #TLS12 #TKIP #NAC #RADIUS #Technology #FexingoBusiness #BusinessPodcast

Keep every episode free: buymeacoffee.com/fexingo

Episode 56 of The Windows Podcast dives into an overlooked but critical shift: how Windows 11 is deprecating classic screen reader APIs like MSAA, forcing enterprises to migrate to UIA. Lucas and Luna unpack the impact on accessibility software vendors like JAWS and NVDA, the hard 2027 deadline, and what IT administrators need to do now to avoid compliance nightmares. They also explore the tension between Microsoft's vision and the real-world deployment delays in regulated industries. A must-listen for enterprise IT pros managing assistive technology.

#Windows11 #EnterpriseIT #Accessibility #ScreenReader #JAWS #NVDA #MSAA #UIA #Microsoft #AssistiveTechnology #ITCompliance #EnterpriseSoftware #TechPodcast #WindowsPodcast #FexingoBusiness #BusinessPodcast #Technology #AccessibilityAPI

Keep every episode free: buymeacoffee.com/fexingo