Windows

Winsage
July 29, 2026
A Linux user, @Puzzleheaded-Sky2284, switched to Windows 11 for practical reasons, citing better compatibility with essential applications like Microsoft Office and Autodesk software. He emphasized that his decision was based on functionality rather than ideological preferences. The discussion highlighted that while Windows 11 has improved in addressing issues related to fragmentation and updates, criticisms remain regarding resource management and Microsoft's policies. Linux continues to attract users due to its high level of control and customization, although it can be less accessible due to fragmentation within the community. Ultimately, the choice between operating systems depends on individual workflows rather than brand loyalty.
Winsage
July 29, 2026
Microsoft's Surface Pro is currently available with discounts at various retailers, including a notable 21% off the model featuring the Snapdragon X2 Elite processor, 16GB of RAM, and 1TB of storage. The device is equipped with advanced Snapdragon X2 Plus and Snapdragon X2 Elite processors, offering over a 50% improvement in graphics performance compared to previous generations. The Surface Pro features a built-in kickstand for easy positioning and is complemented by the Surface Pro Flex Keyboard, which is also on sale and compatible with the new model. The Surface Pro has seen a price increase over the past year, but current promotions provide an opportunity for buyers.
Winsage
July 29, 2026
Microsoft is requiring the use of TPM 2.0 security modules for Key Management Service (KMS) activation servers to combat unlicensed software and corporate piracy. KMS, used by organizations for mass activation of devices, has been targeted by hackers who create counterfeit servers. The new protocol mandates that KMS hosts validate their hardware credentials through the TPM 2.0 chip before activating client devices. This initiative will mainly affect illegal infrastructures in the corporate sector, while legitimate PC users will not be impacted. Starting in August 2026, Windows Server 2025 will introduce hardware readiness alerts to help system administrators prepare for these changes. TPM 2.0 has been required for Windows 11 since 2021, and its application is being expanded to address vulnerabilities in volume licensing.
Winsage
July 29, 2026
The optional update KB5101684 introduces updated Secure Boot certificates for a broader range of computers, enhancing system security. It is available for manual installation through the Microsoft Update Catalog and will be released to all users during the upcoming Patch Tuesday in August. After installation, Windows 11 25H2 will have a build number of 26200.8973, and Windows 11 24H2 will have a build number of 26100.8973.
Winsage
July 29, 2026
BitLocker is an encryption tool in Windows that secures data using a system of keys, with some keys stored in the motherboard's Trusted Platform Module (TPM) and others on the storage drive. Users must save a recovery key to prevent data loss, which can be stored on a removable disk, printed, or uploaded to the cloud. For Home license users, the recovery key usually defaults to cloud storage. Recently, vulnerabilities in BitLocker, including the "YellowKey" flaw, have been discovered, allowing individuals with physical access to bypass encryption. A second vulnerability was identified in June, also exploiting physical access to circumvent BitLocker's security.
Winsage
July 29, 2026
Microsoft's July Intune update includes enhancements for IT administrators, such as real-time monitoring of Windows device sync progress, custom compliance settings for macOS, and improved firmware update management for Samsung devices. The Intune admin center now allows real-time monitoring of sync progress for Windows devices, enabling simultaneous updates across various management aspects. Custom compliance settings for macOS enable organizations to define specific compliance requirements beyond Apple's standard checks, allowing for a unified compliance management experience across Windows, Linux, and macOS. The update also enhances Samsung Galaxy firmware management through Samsung Knox E-FOTA, allowing administrators to control firmware version deployment and update schedules. Additionally, the update clarifies that newer Windows Autopilot methods allow provisioning of Windows 11 devices without prior registration.
Winsage
July 29, 2026
Microsoft reassured Windows 11 and Windows 10 users that their PCs will continue to boot normally and receive updates even if they have not yet received the new Secure Boot 2023 certificates. The rollout of these certificates is expected to continue over the upcoming months. The initial Secure Boot certificate expired on June 24, 2026, and Microsoft has been replacing older 2011 certificates since 2024. The latest update, KB5101650, transitioned Windows 11 to OS builds 26200.8875 and 26100.8875 for versions 25H2 and 24H2, respectively. The 2023 certificates replace older certificates with modern cryptographic standards, allowing Microsoft to deliver DBX revocation updates without interruption. Devices using the 2011 KEK can only receive DBX updates signed with that key, which is no longer valid after June 24. Microsoft has been rolling out the 2023 certificates for the past two years, and many devices remained in a yellow or red status by the June deadline. To check Secure Boot status, users can navigate to Windows Security > Device Security. A green checkmark indicates successful application of the certificates, while yellow and red alerts indicate compatibility issues or firmware incompatibility. PCs that are older or operating in Legacy BIOS mode will not receive the updates. Windows 10 also receives Secure Boot updates, but enrollment in Extended Security Updates (ESU) is required.
Winsage
July 29, 2026
Microsoft's Trusted Platform Module (TPM) 2.0 has been integral to Windows 11's security since its launch in 2021. TPM is now standard in most CPUs, allowing Microsoft to enhance device activation security. The current Key Management Service (KMS) model has vulnerabilities that hackers exploit, prompting the need for stronger device identity and activation integrity assurances. TPM provides a hardware-level security mechanism for the activation process, where KMS hosts must present TPM credentials to validate their hardware identity and confirm they are uncompromised. Starting with upcoming Windows Server releases, KMS hosts will be required to prove they run on verified hardware before activating clients. By August 2026, Windows Server 2025 will help administrators prepare for these changes.
Search