Same, though I don't run an AD domain (you can still use gpedit.msc on a local machine). I'm also considering turning off my TPM in case Microsoft screws up the

Same, though I don't run an AD domain (you can still use gpedit.msc on a local machine). I'm also considering turning off my TPM in case Microsoft screws up the roll-out, intentionally or not.