3 ms·

If you sell it as "only allowing authorized applications to run on domain-joined computers" it doesn't sound so bad.

• Silhouette 11y ago
  Perhaps, but the next question any sysadmin is going to ask is "Authorized by whom?" and the conversation is likely to end shortly after the answer to that one. Microsoft have spent much of the past two years training everyone that their advice on new or updated software simply can't be trusted any more. They'll recommend updates even when you have actively indicated you don't want them. They'll override those indications and offer the same thing again anyway. They'll even shove things out and call them security updates when they have nothing to do with security. I expect they'll get away with that, up to a point, with home users. I've seen plenty of people who think it's wonderful that they've got a free upgrade to Windows 10, even if they don't know why they should like it, because it's newer and so must be better, right? Within that market, Microsoft is still a big brand with a lot of weight. But professional sysadmins and "power users" aren't nearly as easily convinced. I doubt MS would get away with the kind of half-truth you mentioned for more than a moment within that community, because it would be all over every online forum within 24 hours just like the GWX control panel, the policies to set on domain machines to block Windows 10, the warnings about the IE security update that also introduced the ad, and so on.