Microsoft No Longer Allows Admins To Block Windows Store Access In Windows 10 Pro (zdnet.com)
If you're an administrator, you will no longer be able to block Windows 10 Pro users on your watch from accessing the Windows Store. Mary Jo Foley reports for ZDNet: Up until a month ago, admins could use Group Policy to shut off employees' access to Windows Store if they were running Windows 10 Pro. Controlling this access is a requirement for some businesses. But last month, Microsoft changed that option, claiming that Store access was required for all versions of Windows 10 except Enterprise and Education "by design." Admins still can use AppLocker or Group Policy to block access to the Windows Store if their employees (or students) are running Enterprise or Education.
This company SUCKS.
You don't own your computer. redmond does.
Microsoft, can you please stop f**king up? You had one job.
This time, I can actually believe it.
There is a reason now to switch.
We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
Why are they continuing to aggressively push invasive, paternalistic, and generally super-assholey "features" that make me never want to go back to a Microsoft OS?
Nothing posted to
There's probably technical reasons for this but I am sure they also don't mind the ability to get greater visibility of the store and additional revenue.
...who the customer is.
Cheers, Glen
Since the number of good apps in store is next to nothing, employees will have nothing to find to distract them.
Forced "upgrades", removing features after the fact, spyware you can't disable.
Please Microsoft, keep pissing off users and administrators. Soon since everything will be "in the cloud" and all apps will be web based we won't have a reason to use your shitty OS anymore.
Candy Crush Pro Business
I've been using Windows 7 for a long time and i haven't seen much of a compelling reason to upgrade to 10. I mostly use my computer for gaming so i'm worried about the the future of gaming on a windows 7 machine.
Anyone on here have any advice for me? Is it worth the upgrade? I'm really comfortable using Win 7 and I basically hate change.
Does it add anything over 7 and if I do upgrade is it possible to make it look similar to windows 7 because I don't like the touchscreen square icons for a desktop.
Thanks in advance.
I'm not your normal /. "#$%! Microsoft" kinda guy. I've been an MS guy my whole life, only dabbling in other OSs briefly.
Often you see people (here) chanting about #@$%^ Microsoft or "are you surprised" or any other snarky remark, I traditionally dismiss these as the extreme tinfoil people who would hate whatever they do, regardless.
That being said, Microsofts moves with Windows 10 have gone from "hmm ok that's questionable, but I can see past it" and "this looks desperate, it's kinda shitty, but oh well" and "well that's definitely dumb, but I'm sure some great nerd will hack up an awesome all-in-one little 'fixit' tool for Windows 10 to take out all the crap"
It's now at a point where it's outright sounding BAD. Like proper, bad. The things they keep doing are worse and worse, more and more intrusive. I thought the pushy installer was rough but ok, once it's on, they aren't going to abuse it too much, they are getting their data, from most people who aren't clever enough to turn stuff off.
Nope! It's getting SO bad, I'm really thinking of sticking with 7 as long as humanly possible. Maybe I really will end up a Mac guy after all, or something?
Super unimpressed at this point.
i just block the outgoing connection with my firewall.
Yes, blame Microsoft. They don't have to do this just because Apple did.
Administrators control the network between Microsoft's servers and end user workstations. This will simply turn into another example of "They think they're going to dictate what, again?" where Microsoft's store app on the PC finds itself unable to talk to anything back at the mother ship due to firewall or URL restrictions.
Linux has no Linux Store. I need to be protected by the garden walls. I need to feel safe. I need to be loved. Microsoft provides me with all these.
Sorry but it's a royal PITA to have to contend with Candy Crush, XBox and misc stupid shit in Win10 on a corporate environment. Still fucking hate 10.. >:(
If you're an administrator, you will no longer be able to block Windows 10 Pro users on your watch from accessing the Windows Store.
Works just fine with some firewall rules on the core router in the office.
Do not look at laser with remaining good eye.
What competent windows administrator hasn't already blocked the telemetry, live tile, and play store IP addresses at the corporate firewall already?
This is a dick move for sure by microsoft (not that apple didn't do this years ago), but seriously folks... Maybe for certain elements you use the domain policy to disable features and whatnot, but blocking access to other computers is EXACTLY why we have firewalls.
I'm not a very good windows admin, just a programmer for a small consulting company. And the very FIRST thing we did after installing a test Windows 10 box on a isolated test network is determine all the IP addresses to block, and which ones to not block to let update and search still work.
'cause it definitely looks so. Why does Microsoft ruin the whatever small goodwill they managed to acquire in the last few years?
Just as I am getting tempted to try windows again for my next P.C build, I read stories like this.
It is not that this would necessary affect me in a negative way either - I just don't want to support a product that (overtly) treats me more like a commodity than anything else.
Thankfully delivered from evil.
. .
Don't trust policy settings. Drop those packets instead.
It will at least work until updates have to come from their marketing site.
FUCK MICROSOFT!! (*somebody* had to say it.. the fanbois never will...)
THANK YOU, Edward Snowden!! Americans owe you a debt of gratitude (whether they know it or not..)
This should piss off all the sysadmins that keep pushing windows/Microsoft infrastructure down our throats at work.
a so called "pro" user, who by his own choice, buys windows(or any m$ product), or needs it to do anything, or depends on it for anything, is no pro user, but an rank uninformed idiot.
same btw goes for anyone buying, needing, or depending, in any apple product.
You don't seem to have any idea how professional people actually use computers.
In the free world the media isn't government run; the government is media run.
Migrate to a different OS that allows you to tweak everything and do proper user and rights management. For legacy related software use, create a walled garden and tell people insisting they can't use anything but windows that perhaps they should be looking for a new job.
MS, ALS, Aphasia ? http://globability.org - Me http://einarpetersen.com
Given how often the store crashes on Windows 10 right now a good portion of Windows user can't access it anyway.
Did you know 80 to 90% of the moderators on slashdot wouldn't recognize a troll even if one dragged them under a bridge.
It's not just that they make horrible technical and UI decisions. Now it's also apparent that they make them for reasons which are openly hostile towards their customers. That company has lost it. Their inertia buys them lots of time, but I have no faith that they'll turn around.
Yep, systemd is a bummer. Them EEE tactics. But Gentoo and Slackware have not succumbed. Currently trying out Void Linux.
Windows 10 is designed as the final version of Windows, and Microsoft are working hard to ensure it.
Did you even RTFS? They've just removed a feature that is something that enterprise users want. Home users don't care about group policy controls, they're solely an enterprise feature and they've just removed it from the version of Windows 10 targeted at enterprise customers.
I am TheRaven on Soylent News
Many companies deploy Windows pro as they get the license OEM'd. This is just a mark up trick to sell more Enterprise and/or get more people into their ghost town shop.
According to TFS, they removed the feature from Windows Pro only, not Enterprise. Home users don't care about group policy and enterprise users are already using Enterrpise; this move is to get small / medium businesses to move to the more expensive Enterprise version as well.
If construction was anything like programming, an incorrectly fitted lock would bring down the entire building...
Or "Windows Pro" does in fact mean that in reality, it wasn't thought for professional users to begin with.
"The only difference to an enterprise user is that the enterprise might have a centralized IT support."
No. The main difference is that the enterprise coughs up the money for "Enterprise" licensing. I don't know what the market for "Professional" licensing is supposed to be anymore. That flavor has lost its meaning.
Eloi are stupid, throw morlocks at them!
No, millions of small business just buy computers with Windows Professional installed and join them to a small domain. Only big companies pay again for the Enterprise edition. Those small business are being f...ed removing this policy.
There is a reason now to switch.
That's exactly what people said when Windows XP came out and Microsoft introduced the "activation" process that's required.
And many did switch, and they did with Win Vista, and many are switching today because of Win10. However, this is not the YOLOD which will never happen, thank goodness. The YOLOD would be like the Eternal September on the Internet.
* YOLOD : Year of Linux on Desktops - can't we make this acronym official?
Didn't they try this stunt with IE - stating that it was required for the OS to run properly? And weren't they shot down hard by the European courts?
Access to an application store should not be required for an operating system to run. Actually access to the internet shouldn't be required at all. If your OS can't run without checking home then your OS doesn't belong in the enterprise much less in the wild.
I agree with other posters that they will attempt to quietly roll back this change when enterprise customers tell them that they're not going to upgrade and start looking for alternatives. I can see the US government putting out a statement that they won't be upgrading due to security concerns and that will start the ball rolling.
If they put out a special edition for 'secure installations' then they'll have invalidated their whole spiel for making it necessary in the first place.
It goes beyond the arrogance of trying to force the upgrade down the user's throats now. They've done something that will enrage their core business - the enterprise. Really great marketing move there.
As someone who has been deploying Windows 8.1 for a while, it's pretty easy to remove apps you don't want from your system images. You can even do it on a running system:
I'm still using 7 Pro on personal & company-issued laptops. I have no experience with 10. Could I use local (machine)or home router based firewall rules to block specific updates?
The Russians have won. They have made the world a cesspool of distrust, greed, fear and hate.
powershell -> Remove-AppXPackage Microsoft.WindowsStore_.... still works for me. Of course they'll patch it but the community at large will come up with a mechanism, just like Office Cloud Upload which is #AAF
Harrison's Postulate - "For every action there is an equal and opposite criticism"
The Enterprise editions of Windows have only been available with Software Assurance, which is a subscription-like add-on to standard Windows licenses.
Acquiring SA grants access to additional support, enterprise tools, and some additional use rights. There is a cost-avoidance consideration since licenses with SA are upgraded to new versions of Windows (provided the SA is maintained through the date the new version is released).
Many enterprises---including my employer---bought SA on its own merits because the program benefits were worth it. However, some companies have decided that SA is not worth the price.
This move pushes businesses who need to disable access to the Windows Store to buy SA. Any admin can easily add/remove the Store feature from the OS, so if you are required to block it then you now need to pay for it.
Only Home and Professional editions are eligible for the free upgrade to Windows 10, so this ensures that businesses will be paying one way or another---enterprise customers will have to pay for the upgrade even if Microsoft decides to offer Enterprise without SA.
This is 100% about soaking enterprise customers for more money. If it happens to inconvenience some home users, well, that's just too bad.
---
According to the latest ruleset, this post should be modded as Vorpal Flamebait +5.
Yep, and too bad. That's what they get for making themselves reliant on Microsoft. Hopefully MS will make life even more miserable for these SMBs soon with more policies like this. I really enjoy seeing MS screw over their customers, and their customers continue to bend over for them. It's amusing, in a dark way.
The edition naming still has a point---Professional is the lowest version that can join a domain. Pretty much every organization steps up to Professional when it outgrows the "mom and pop" market.
Many mid-sized organizations do not go up to Enterprise.
If you have a thousands of employees, it's almost certainly worth it---but it doesn't start looking attractive unless you have a large IT footprint, above-average security requirements, or both.
This move forces businesses with security requirements to pay for Enterprise. I know for a fact that security requirements in the finance and defense industries will prohibit the Windows Store on most of their computers. I suspect HIPAA will force companies in healthcare to deploy Enterprise as well.
Now Professional is setup as the basic small-business version of Windows, and Enterprise will be necessary for most medium and large businesses. Microsoft will probably push this trend even further. They tweaked the features and licensing of their Server products when 2012 launched.
---
According to the latest ruleset, this post should be modded as Vorpal Flamebait +5.
Right, and OEMs are not allowed to sell machines with Windows 10 Enterprise. So companies have to license enterprise at it's full retail price, which is about 500 dollars a unit. This puts Enterprise outside the price range for most small/medium businesses.
Microsoft is essentially doubling down on an already dangerous precident: You either buy Microsoft's ridiculously inflated prices for the Enterprise version, or you allow Microsoft to dictate how you deploy and manage your computers. First with the telemetry, and now with the app store.
What's the quote? "I have altered our agreement. Pray I do not alter it any further."
As a sysadmin, the computers under my care are MY responsibility. That means *I* control what happens to them, and I will not be forced to almost double our upgrade costs just to satisfy Satya Nadella's "What's mine is mine and what's yours is mine" freak fetish.
We've experimented with a couple of machines running Windows 10, but at this point it's become painfully clear that I will never upgrade our machines to Windows 10 because Microsoft has has demonstrated that despite all their hand wavy "I got better!" bullshit, they're still just as monopolistic and ruthless as ever.
Windows Store is defective by design in an enterprise environment. EVERY user download the same provisioned apps all over again in the domain, therefore consuming tons of space and bandwidth. And now as an admin i can't even block the store in our group policy? I will stop deployment to Windows 10 in our company unless this stupid decision is reversed
Open Source Java Web Forum with LDAP authentication
Naw, MS is obviously really nice guys. That's why it's news when they remove useful, desirable features from a product you already paid for.
This comment is fully compliant with RFC 527.
Not a 'non-issue'. Large companies with assurance licencing may have enterprise.... but all the small companies with 10-200 employees order PCs with an OEM windows PRO lic on it.
The main difference is the availability of LTSB and Remote App, and then, to a lesser extent, AppLocker, BrancheCache, Credential Guard, Device Guard, DirectAccess, and better policy management choices, like...the Windows Store.
Home users don't care about group policy
Unless they're users of Google Chrome on Windows who want to use a particular Chrome app or Chrome extension that Google has not approved. The official solution from Google to use extensions or apps not available from the Chrome Web Store is to use Group Policy to whitelist particular extensions. But this doesn't work on Home, which is missing the Group Policy Editor. Chrome does have a developer mode, but extensions installed in developer mode disappear when Chrome is restarted.
Small companies should use Microsoft for updates and software distribution so Pro is fine and store access isn't an issue. Large companies should use Enterprise exclusively. No exceptions. Updates and software distribution should be done via System Center or a similar solution where IT is controlling this. Enterprise users don't really need store access. It's a non-issue really.
There is always the possibility that you may have an edge case with your hardware that may cause you issues.
The current batch of 10 inch laptops, which are really 10 inch tablets with an included keyboard dock, are more likely to be edge cases because Intel refuses to fix bugs related to their Atom Bay Trail CPUs. The ASUS Transformer Book T100TA has a bunch of stuff missing, broken, or needing a proprietary driver that the Debian project cannot distribute. As of today, this includes suspend (broken), hibernation (broken), backlight power level (no driver exists), Bluetooth (broken), Wi-Fi (no free firmware exists), sound (no free firmware exists; no firmware at all exists for Linux 4.5 and later), and camera (no driver exists).
Or maybe I'm missing something. I don't do windows myself any more.
Birds are not dinosaur descendants;birds are dinosaurs, for all useful meanings of "birds", "are" and "dinosaurs"
They will never stop you from loading non-app store apps on Windows. They will however stop supporting Win32 APIs, as focus shifts to UWP. UWP is getting new features first, and eventually Win32 (and Win32 development) will be suffocated. This is how they kill Steam (or at least your Win32 steam library, putting them on equal footing), this is how they have DRM top to bottom for Hollywood, this is how they get you in a walled garden.
Twinstiq, game news
So what do you think a "pro" would have to use? A Solaris desktop?