With October fast approaching people MUST make a decision between:
Upgrading to Windows 11 Pro Or Sticking with Windows 10’s and using Extended Security Updates.
I’m running Windows 10 Professional on all of my PC’s just for the extra security/privacy features. Linux/BSD isn’t an option for my main machines right now.
Well, we think Windows is terrible for privacy but you know that already (I’m hoping). Best you can do is follow recommended OPSEC features and running tools like O+O ShutUp or the CTT Tool to streamline your Windows among other changes you can make.
But yes, I do recommend upgrading if you wish to continue using Windows.
The point of ESU is mostly to allow businesses to tick a compliance checkbox. Not to mention the extra security features that 11 brings compared to 10 (mostly around stuff like virtualisation-based security, from memory)
Upgrading to Windows 11 is better from a security standpoint. I’m just not quite clear on how much and in what ways.
Not exactly sure what all the requirments are but you can get extended support on W10 for what looks like a year without paying. This does require logging in with a Microsoft account so privacy is bad either way.
Hey! If you want to continue using Windows 10 but with extended support, you might want to check Windows 10 LTSC (Long-Term Servicing Channel) builds. They are builds of Windows that have no bloatware and are distributed mainly to companies, with 5 to 10 years of extended support but, keep in mind they have less features than traditional Windows.
I have not tried them myself but you can download them online.
They are often rather barbaric and break random stuff. Instead just buy (or “buy”) the Enterprise edition and use the proper group policies for restricting telemetry and strengthening security.
You could look into Windows 10 IoT Enterprise LTSC 2021. It will reach the end of support on January 13, 2032. There’s a helpful article named ‘Windows 10 Updates After End-Of-Life’ on the MASSGRAVE project website
I’m less clear on the paid program. But you likely need an account to purchase the extension.
The option to sign up for extended support showed up in the Windows Update settings.
We activated it on my mother’s laptop but basically just to keep it running securely until December-ish when we plan on loading Linux, which should cover the majority of her needs (accessing a work Google account)
The key benefits to Windows Pro in my view are better control of Bitlocker and access to the policy manager which I prefer over things like registry edits as the go to method for disabling or removing things from Windows.
I’m on a similar boat as you, except I’m running the Home edition of Windows 10.
I intend to update to Windows 11 by making sure I’m not forced into an MS account that will be forever linked to my computer. However, I have a couple of challenges.
1. I don’t have the skills to avoid the MS account created.
Last time I checked, it came across as a little too complicated for me, so I will probably have to hire someone to help me. CLI is my ennemy.
2. I have Skype on my computer.
Skype was shut down earlier this year. My account was always linked to a Gmail address, but I worry that when MS bought it, I was opted into an MS account without my consent.
If that is the case, it’s not clear to me if MS would be able to detect it, and determine that I have an MS account.
3. I intend to buy a cheap Windows 11 Pro license from Rakuten
I want Windows 11 Pro to be able to encrypt my internal SSD. A long time long ago, a friend shared with me a link from Rakuten where a license could be bought for like 10 euros.
I’ve never bought a license like that before, so there’s a chance I might encounter some complications and I worry that it might not work.
I am considering upgrading to Windows 11 Home edition for free first, and if I manage to avoid the MS account, then buy the cheap Pro license and upgrade from there. However, I’m concerned that I would have to go through the whole process of avoiding an MS account again.
You should seriously consider Linux. You have no privacy at all with Windows, it’s entirely under Microsoft’s control and it’s very hard to figure out what “telemetry” is being sent to Microsoft. Windows also has a universal backdoor which allows Microsoft to remotely change the operating system at any time against your will. Apple isn’t any better despite Internet folklore asserting that Apple is a “privacy-respecting” company.
Luckily these days you can buy a machine with Linux preinstalled; even mainstream OEMs like Dell have options, so it’s easier than ever.
