This is generally true, but Windows is the standard for far more SMBs than larger enterprise customers, and in that context it’s not nearly so straightforward.

This is generally true, but Windows is the standard for far more SMBs than larger enterprise customers, and in that context it’s not nearly so straightforward. I have a client, a health insurance benefits broker for other local businesses. They do very well for themselves, but it’s just 2-3 full-time people, so there’s never been much cause for a full-on domain with GPO policies to maintain a strict, stable state across their equipment. Traditionally, off-the-shelf systems with SMB-targeted software had been more than sufficient. When Microsoft decided to push a feature upgrade last year that automatically enabled OneDrive backups for their home directories, it technically violated HIPAA by moving electronic patient health information contained within their scanned files folder onto OneDrive servers without any prior consent or authorization. They literally called me when they were unable to find their files, Microsoft had (laughably, if it weren’t so serious) placed a text file on the desktop titled “Where Did My Files Go.txt”, and then directed them to the OneDrive folders where it had moved their desktops, documents, and pictures without their knowledge or approval. I have since moved them to Microsoft 365 accounts where I can apply GPO, but my clients were understandably unhappy about having a new annual subscription that didn’t add any tangible benefit, rather they’re now on the hook for a couple hundred bucks a year for what’s essentially a shake down. Pay for the new service that adds nothing meaningful to their experience, or else face the consequences of Microsoft ruining your business on a whim.