Not so fast, some of us need EMET

On February 6, 2016, in news, by susan

http://www.zdnet.com/article/microsoft-windows-10-edge-so-secure-they-dont-need-our-emet-anti-zero-day-shield/

Posts like these make me angry.  Don’t get me wrong there are some key things I like about Windows 10.  The security enhancements are key.  But what makes me angry is that the key features they are pointing out here – Device Guard and Applocker are not available on the Pro or Home skus.  They are only available on the Enterprise sku.  Then if you want to use group policy to limit access to Windows store, a feature that used to be able to be controlled with Windows 8 pro, now you have to have Enterprise in order for the group policy to be enforced.
https://support.microsoft.com/en-us/kb/3135657

These decisions disappoint me.

 

One Response to Not so fast, some of us need EMET

  1. JR says:

    Why do they still insist on not including a WDS MMC console in RSAT? What’s the reasoning behind that? They still say that if you want to run a GUI management console, you have to install it on a server. RSAT for Windows 10 (Server 2016 TP4) doesn’t change this either. You can’t install the PC client backup role in Essentials, follow best practises to remove GUI consoles from servers, and expect some middling IT fellow to run PowerShell to manage it. It JUST. DOESN’T. WORK.

    I get that they have more tech-head engineers working at Microsoft now, but command-line remote management just doesn’t cut it for the SMB space where IT management has to be quick and easy (command-lines are NOT quick). WDS is actually very simple to grasp and makes flattening a machine a simple process, but it’s always overlooked by far more complex products like MDT and System Center (one of the guys in Microsoft had a video blog on Windows deployment and said that WDS wasn’t even worth using – like, WHAT?!).

    Oh, and I’d like to see any company with Server Essentials using the new Azure management web console….