Episode 47 of The Windows Podcast with Fexingo dives into a quiet but critical change in Windows 11 24H2: automatic SSL certificate rotation for enterprise-bound devices. Lucas explains how Microsoft is deprecating long-lived certificates in favor of 90-day auto-renewed certificates via Intune or AD CS, and why this breaks legacy apps, VPNs, and internal web servers that hardcode certificate thumbprints. Luna brings a real example of a healthcare provider that saw 12,000 certificate validation failures overnight after the update. They discuss the IT admin workflow changes, the security trade-offs, and how to test for compatibility before the deadline. If your enterprise still uses five-year certificates, this episode is your early warning.

#Windows11 #EnterpriseIT #CertificateRotation #SSL #Intune #ActiveDirectory #Security #Microsoft #ITAdmin #PKI #Compliance #TechPodcast #FexingoBusiness #BusinessPodcast #WindowsPodcast #LucasAndLuna #CertificateManagement #ZeroTrust

Keep every episode free: buymeacoffee.com/fexingo

Microsoft has quietly deprecated the Certificate Auto-Enrollment protocol in Windows 11, forcing enterprises to adopt modern certificate management via Intune or third-party tools. This episode digs into the technical change, the timeline, and the real-world impact on IT teams that still rely on legacy Group Policy-driven auto-enrollment for Wi-Fi, VPN, and smart-card authentication. Lucas and Luna walk through a concrete example from a mid-sized healthcare organization that had to scramble when Windows 11 24H2 broke their certificate renewal pipeline. They discuss Microsoft's stated rationale — security hardening — and whether the trade-off in administrative overhead is worth it. The episode also touches on how this fits into Microsoft's broader strategy of deprecating on-premises identity management in favor of cloud-first Entra ID workflows.

#Windows11 #EnterpriseIT #CertificateAutoEnrollment #Microsoft #Intune #EntraID #GroupPolicy #PKI #SecurityHardening #ITAdmin #HealthcareIT #WiFiAuthentication #VPN #SmartCard #TechPodcast #FexingoBusiness #BusinessPodcast #WindowsPodcast

Keep every episode free: buymeacoffee.com/fexingo

Episode 45 of The Windows Podcast with Fexingo dives into a quietly disruptive change in Windows 11: the gradual deprecation of PowerShell for enterprise automation. Lucas and Luna break down why Microsoft is pushing enterprises toward PowerShell 7 and away from the legacy Windows PowerShell 5.1 that most IT departments still rely on. They look at the specific pain points: incompatibility with old scripts, the loss of default module loading, and the shift to an open-source execution model that changes how companies manage security policies. The episode walks through a real-world example at a mid-sized manufacturing firm where a routine patch-management script broke after a Windows 11 update, forcing the IT team to rewrite hundreds of lines of code. Lucas explains the technical differences — from the new execution policy requirements to the deprecation of the PowerShell Workflow engine — and Luna questions whether Microsoft is moving too fast for enterprises that still run mission-critical scripts on Server 2019. They also discuss why this feels like part of a broader pattern: Microsoft forcing modernization on its own timeline, not the customer's. A focused conversation on what the end of PowerShell 5.1 means for enterprise IT, and what teams should be doing now to avoid script failures in the next Windows 11 feature update.

#Windows11 #PowerShell #EnterpriseIT #Microsoft #Scripting #Automation #ITManagement #PowerShell7 #WindowsPowerShell #ScriptMigration #EnterpriseAutomation #TechPodcast #Microsoft365 #WindowsUpdate #ITSecurity #FexingoBusiness #BusinessPodcast #TheWindowsPodcast

Keep every episode free: buymeacoffee.com/fexingo

Microsoft has been quietly signaling a shift away from traditional Group Policy in Windows 11, and on June 11, 2026, the message is clear: Group Policy is being deprecated in favor of cloud-based device management via Microsoft Intune and Configuration Service Provider (CSP) settings. In this episode, Lucas and Luna drill into the specific numbers — over 60 percent of enterprise Windows devices are now managed by Intune — and the real-world case of a mid-sized financial services firm that migrated 5,000 endpoints from on-premises Group Policy to cloud policy in just under four months. They discuss the key differences: Group Policy applies at the domain level and is tied to Active Directory, while CSP settings are per-device and managed via cloud or on-premises MDM. The hosts break down why the shift matters for IT admins, what the 2027 end-of-life rumors mean, and how enterprises can start testing now with the Group Policy Analytics tool in Intune. Plus, a practical tip: Windows 11 includes a built-in Group Policy to CSP mapping tool that most admins don't know exists.

#Windows11 #GroupPolicy #MicrosoftIntune #CSP #EnterpriseIT #DeviceManagement #CloudMigration #MDM #ActiveDirectory #WindowsPodcast #FexingoBusiness #BusinessPodcast #Technology #ITAdmin #PolicyMigration #GroupPolicyAnalytics #WindowsManagement #CloudPolicy

Keep every episode free: buymeacoffee.com/fexingo

Episode 43 dives into a quiet but disruptive change in Windows 11: how the built-in Microsoft Print to PDF feature is breaking enterprise document workflows that relied on legacy PDF printers and Adobe Acrobat. Lucas and Luna discuss why IT admins are seeing unexpected file-size bloat, missing form fields, and broken digital signatures when users switch from third-party PDF creators to the native Windows option. They examine a real case from a mid-sized insurance firm that had to roll back a Windows 11 deployment after customer-facing PDF quotes became unreadable. The episode also covers workarounds — registry tweaks, group policy settings, and why Microsoft hasn't fixed the compatibility issue. No alarmism, just a specific headache for enterprise IT and what to do about it.

#Windows11 #EnterpriseIT #PDFWorkflows #MicrosoftPrintToPDF #AdobeAcrobat #ITAdmin #DocumentManagement #DigitalSignatures #GroupPolicy #RegistryHacks #FileSizeBlow #FormFields #CompatibilityIssue #Rollback #InsuranceIT #Technology #FexingoBusiness #BusinessPodcast

Keep every episode free: buymeacoffee.com/fexingo

Episode 42 of The Windows Podcast with Fexingo digs into a surprising enterprise headache: Windows 11's mandatory Bluetooth pairing on new PCs. Lucas and Luna break down how the shift from Bluetooth 5.0 to 5.2, coupled with Microsoft's push for Swift Pair, has created a vulnerability surface that IT teams weren't expecting. They walk through a real incident at a mid-sized logistics firm where a rogue keyboard spoofed a connection and exfiltrated keystrokes. The conversation covers why legacy Bluetooth stacks are being deprecated, how Windows 11's new Bluetooth LE Audio requirement forces hardware upgrades, and what enterprise admins can do right now—like disabling Swift Pair via Group Policy and auditing paired devices. No scare tactics, just a concrete look at a quiet but growing threat.

#Windows11 #BluetoothSecurity #EnterpriseIT #Microsoft #BluetoothLEAudio #SwiftPair #GroupPolicy #EndpointSecurity #BlueBorne #CyberSecurity #PCManagement #ITAdmin #FexingoBusiness #BusinessPodcast #Technology #WindowsPodcast #LucasAndLuna #EnterpriseWorkflow

Keep every episode free: buymeacoffee.com/fexingo

Episode 41 of The Windows Podcast breaks down why Microsoft is pushing enterprises to adopt passwordless authentication in Windows 11—and what that means for IT admins and end users. Lucas explains the shift away from passwords via Windows Hello for Business, focusing on how it uses biometrics and PIN tied to the device's TPM chip. Luna questions the security trade-offs and the reality of deploying FIDO2 security keys across a large workforce. The hosts discuss the timeline Microsoft has set for credential-free login, the impact on legacy systems, and whether the enterprise is ready to finally kill the password. Specific reference is made to Microsoft's announcement that 92% of enterprise identity attacks start with compromised passwords, and how Windows 11 makes passwordless the default through phishing-resistant authentication. A concrete case: how a mid-size consulting firm moved 2,000 employees to passwordless in six months.

#Windows11 #Passwordless #WindowsHelloForBusiness #FIDO2 #EnterpriseIT #Microsoft #Cybersecurity #BiometricLogin #TPM #ITAdmin #PhishingResistant #ZeroTrust #Authentication #TechPodcast #BusinessPodcast #FexingoBusiness #Technology #WindowsPodcast

Keep every episode free: buymeacoffee.com/fexingo

Episode 40 of The Windows Podcast dives into how Microsoft 365 Copilot is quietly reshaping enterprise workflows beyond the headline hype. Lucas and Luna unpack a specific case: how Copilot's integration into Word, Excel, and Teams is forcing IT departments to rethink data governance, licensing costs, and user training. They cite Microsoft's own adoption data — 60% of Fortune 100 companies are piloting Copilot as of Q1 2026 — and walk through the real friction points: per-seat pricing at $30 per user per month, the tension between productivity gains and security risks, and why some enterprises are hitting pause. The hosts also touch on the quiet war between Copilot and third-party AI tools, and what Windows administrators need to know about tenant-level controls. A grounded, skeptical look at the biggest enterprise AI deployment since Windows itself.

#Microsoft365Copilot #EnterpriseAI #WindowsPodcast #BusinessProductivity #CopilotAdoption #ITGovernance #DataSecurity #AILicensing #Microsoft365 #EnterpriseTech #Technology #BusinessPodcast #FexingoBusiness #CloudProductivity #AIIntegration #WorkplaceAutomation #EnterpriseSoftware #WindowsEnterprise

Keep every episode free: buymeacoffee.com/fexingo

Episode 39 of The Windows Podcast examines how Windows 11's stricter USB-C and Thunderbolt 4 requirements are forcing enterprises to replace their entire fleet of docking stations. Lucas and Luna break down the technical reasons — from USB4 controller certification to DisplayPort alternate mode handshake changes — and explain why many 2023-era docks simply won't work with Windows 11 24H2. They look at how Dell, Lenovo, and HP are responding with proprietary dock firmware updates, and why IT departments face a ticking clock as Windows 10 end-of-life approaches in October 2025. The conversation covers real-world testing from enterprise labs, the cost of per-seat dock upgrades (estimated at $200–$400 per user), and a surprising workaround involving Thunderbolt 4 cable length limits. If today's tech conversation gave you something usable, listener support at buy me a coffee dot com slash fexingo keeps these episodes ad-free.

#Windows11 #USBC #Thunderbolt4 #EnterpriseIT #DockingStations #USB4 #DisplayPort #ITInfrastructure #HardwareCompatibility #Dell #Lenovo #HP #Windows10EOL #FirmwareUpdates #PCRefresh #Technology #FexingoBusiness #BusinessPodcast

Keep every episode free: buymeacoffee.com/fexingo

Microsoft's Windows 11 24H2 update introduces a mandatory driver certification process that is breaking enterprise GPU deployments. Lucas and Luna explain how the new Windows Hardware Quality Labs (WHQL) requirements are causing IT departments to recertify thousands of graphics drivers, why this matters for CAD, medical imaging, and financial trading workstations, and what enterprises can do to prepare. Specific focus on the June 2025 deadline for driver signing and the impact on NVIDIA RTX and AMD Radeon Pro enterprise GPUs.

#Windows11 #Enterprise #GraphicsDrivers #WHQL #Microsoft #NVIDIA #AMD #RadeonPro #RTX #ITManagement #DriverCertification #Technology #BusinessPodcast #FexingoBusiness #PC #EnterpriseWindows #GPU #WindowsUpdate

Keep every episode free: buymeacoffee.com/fexingo