The Windows Podcast with Fexingo: Microsoft, PC, and Enterprise Windows Conversations

Episode 79 of The Windows Podcast with Fexingo dives into Microsoft's quiet enforcement of Secure Boot as a mandatory requirement for all Windows 11 enterprise devices. Lucas and Luna unpack the technical details: how Secure Boot verifies bootloader signatures, why this matters for firmware security, and the real-world impact on IT departments managing legacy hardware. They discuss the timeline—ma...

Microsoft's Windows 11 24H2 update makes a fundamental change to how enterprise printers work: every third-party printer driver must now run in an isolated container, separate from the Windows print spooler. Lucas and Luna break down what driver isolation actually does, why it breaks nearly every departmental and production printer on a typical corporate network, and how IT teams can test compatib...

Episode 77 of The Windows Podcast digs into a change that IT admins are only now starting to feel: Windows 11 is quietly requiring printer drivers to run in isolated mode. Lucas explains why this breaks legacy drivers, how Microsoft's print architecture shift cuts down on blue screens, and what a 'stop 0x00000050' crash taught one enterprise. Luna asks about the pain of migrating from vendor-speci...

Microsoft is making Virtualization-Based Security (VBS) mandatory for all Windows 11 Enterprise devices starting with the 2026 feature update. Lucas breaks down what VBS actually does—hardware-enforced isolation of critical system processes—and why it's a big deal for IT admins. He explains the performance trade-off (about 5-10 percent CPU overhead) and the security payoff: credential theft become...

Episode 75 of The Windows Podcast with Fexingo reveals how Windows 11 is quietly mandating App Control for Business in enterprise environments. Lucas and Luna unpack Microsoft's shift from optional WDAC policies to enforced baseline profiles starting with the 24H2 feature update. They discuss how this affects legacy line-of-business applications, the role of signed PowerShell scripts, and real-wor...

Episode 74 of The Windows Podcast with Fexingo dives into how Windows 11 is quietly making Windows Hello for Business mandatory for enterprise logins. Lucas and Luna discuss the shift from passwords to biometrics and PINs, the timeline for deprecation of traditional password authentication in Windows 11 Enterprise, and what IT admins need to do to prepare. They explore the security rationale, the...

Episode 73 of The Windows Podcast explores how Windows 11 is quietly deprecating the classic Offline Files feature in favor of cloud-based file sync solutions like OneDrive Files On-Demand and Azure File Sync. Lucas explains the timeline: Offline Files is still supported but will enter a 'maintenance-only' phase starting with the Windows 11 2025 update, driving enterprises to migrate before 2028....

Episode 72 of The Windows Podcast digs into a change that has been flying under the radar for many IT admins: Windows 11 is quietly making PowerShell script signing mandatory for enterprise devices enrolled in Intune or subject to baseline security policies. Lucas and Luna walk through Microsoft's phased deprecation of unsigned script execution, the connection to Device Guard and WDAC policies, an...

Episode 71 of The Windows Podcast with Fexingo digs into Microsoft's quiet mandate for hardware root of trust on enterprise PCs running Windows 11. Lucas explains how the Windows Hardware Compatibility Program now requires platform boot time measurements and PCR7 configuration for new certified devices, effectively locking out older machines from full security compliance. Luna questions whether th...

Episode 70 dives into a little-known but significant change: Microsoft is quietly mandating device attestation for enterprise VPN connections in Windows 11. Lucas and Luna unpack how the Remote Access server role now requires TPM-backed health certificates—affecting tens of thousands of IT departments still using password-based VPNs. With a June 2026 deadline looming, they explain what attestation...

Microsoft is making Virtualization-Based Security and Credential Guard mandatory for new Windows 11 enterprise deployments starting with the 2025 feature update. Lucas and Luna break down what VBS and Credential Guard actually do under the hood, why they break common enterprise drivers and peripheral software, and what IT admins need to test before the deadline hits. They also cover the performanc...

Microsoft is finally enforcing certificate-based authentication at the enterprise level with Windows 11, and it's about to break your legacy on-premises infrastructure. Lucas walks through the timeline: starting with the 24H2 update, devices joined to Azure AD or hybrid Azure AD will require certificate auto-enrollment via ADCS or a third-party PKI. Luna digs into the real-world pain: IT teams sti...

Episode 67 explores Microsoft's quiet push toward cloud-only identity for Windows 11 Enterprise. Lucas and Luna break down the deprecation of on-premises Active Directory federation services, the shift to Azure AD-only join, and what it means for IT departments still running hybrid environments. They cite Microsoft's 2025 announcement that new Windows 11 Enterprise features will require cloud auth...

Episode 66 of The Windows Podcast with Fexingo dives into a quiet but seismic shift in Windows 11: the deprecation of Group Policy Preferences (GPP), a feature enterprises have relied on for over a decade to map drives, set registry values, and manage printers. Lucas explains how Microsoft is steering IT admins toward Policy Analytics and MDM, while Luna notes the real-world crunch—one Fortune 500...

Episode 65 of The Windows Podcast with Fexingo dives into a quiet but significant change: Windows 11 is deprecating the classic mapped network drive approach for enterprise environments. Lucas and Luna explore how Microsoft is pushing organizations toward UNC paths, shortcuts, and cloud-based storage like OneDrive, with real examples from enterprise IT migrations. They discuss the impact on legacy...

Microsoft is turning its Security Baseline recommendations into enforced defaults for Windows 11 Enterprise devices enrolled in Intune and Windows Update for Business. Starting with the 2026 H1 feature update, devices that fall below the baseline will see compliance warnings and, after 30 days, automatic remediation. Lucas and Luna unpack the policy shift, what it means for IT admins who have cust...

Microsoft is gradually disabling NTLM authentication in Windows 11, forcing enterprises to migrate to Kerberos or modern authentication protocols. Lucas and Luna break down why NTLM is being retired, the impact on legacy apps and file sharing, and what IT admins need to do now. Specific changes in Windows 11 24H2 and upcoming 2026 releases are discussed, including the fallback behavior for NTLMv2....

Episode 62 of The Windows Podcast with Fexingo. Lucas and Luna reveal how Microsoft's quiet deprecation of legacy font rendering in Windows 11 is breaking enterprise document workflows, from legal filings to branded reports. They explore the shift from GDI fonts to DirectWrite, the risk of rendering discrepancies across Office apps, and why IT teams need to audit font dependencies now. Plus, a can...

Episode 61 of The Windows Podcast with Fexingo digs into Microsoft's ongoing but under-the-radar campaign to kill SMB1 in enterprise environments. Lucas and Luna explain why SMB1 — the nearly 40-year-old network file-sharing protocol — is still lurking in thousands of corporate networks, often enabled by legacy printers, medical devices, or old NAS appliances. They break down the security cost: SM...

Microsoft's latest Windows 11 24H2 update introduces a hidden requirement for enterprise PCs: USB4 retimer chips must pass Microsoft's certification or the system won't boot with certain docks and monitors. Lucas and Luna break down what a retimer actually does, why Microsoft is cracking down now, and how IT admins should audit their hardware before the next hardware refresh cycle. With USB4 adopt...

Windows 11's networking stack now defaults to Wi-Fi 7 when available, but most enterprise access points still run Wi-Fi 6 or older. In this episode, Lucas and Luna unpack why Microsoft is pushing the upgrade, how it affects legacy device compatibility, and what IT teams need to know about the 6 GHz band and multi-link operation. They cite Intel's BE200 module deadlines and Microsoft's updated hard...

Lucas and Luna unpack Microsoft's strict TPM 2.0 requirement in Windows 11 and how it's reshaping enterprise hardware lifecycle planning. They focus on a specific pain point: the estimated 20 percent of enterprise PCs still running TPM 1.2 as of early 2026. Using a mid-size manufacturer as an example, they walk through the cost implications—roughly $150 per machine for motherboard swaps or upgrade...

In this episode, Lucas and Luna dive into how Windows 11 is quietly overhauling enterprise Wi-Fi profile management. The shift from legacy WPA2-Enterprise to WPA3 and the deprecation of EAP methods like PEAP are forcing IT teams to rethink their wireless strategies. Lucas explains why Microsoft's move to enforce modern authentication in Wi-Fi profiles — similar to the shift to passwordless in othe...

Episode 56 of The Windows Podcast dives into an overlooked but critical shift: how Windows 11 is deprecating classic screen reader APIs like MSAA, forcing enterprises to migrate to UIA. Lucas and Luna unpack the impact on accessibility software vendors like JAWS and NVDA, the hard 2027 deadline, and what IT administrators need to do now to avoid compliance nightmares. They also explore the tension...

Episode 55 of The Windows Podcast with Fexingo dives into how Windows 11 is quietly forcing enterprises to abandon decades-old printer driver models. Lucas and Luna explore Microsoft's shift to the Microsoft IPP Class Driver and Universal Print, the real-world impact on IT departments running legacy print servers, and what this means for support costs and security. With specific examples like HP's...