Mirko Schnellbach
@schnellbach.de
IT infrastructure and security consultant, enjoyer of entertainment, happy husband by choice, proud father by chance
I’d say that is not “good software quality”, so there would be reservations, of course. But I’d have them even when run as a lower priv user.
Higher privs means more scrutiny, sure. But lower required privs do not equal more trust.
Higher privs means more scrutiny, sure. But lower required privs do not equal more trust.
December 13, 2025 at 10:51 PM
I’d say that is not “good software quality”, so there would be reservations, of course. But I’d have them even when run as a lower priv user.
Higher privs means more scrutiny, sure. But lower required privs do not equal more trust.
Higher privs means more scrutiny, sure. But lower required privs do not equal more trust.
A lot of commercial software runs their Windows services as SYSTEM. Nothing inherently wrong with that.
Assuming good software quality, reputable supplier, properly signed artifacts and good documentation, no reservations at all.
Assuming good software quality, reputable supplier, properly signed artifacts and good documentation, no reservations at all.
December 13, 2025 at 10:36 PM
A lot of commercial software runs their Windows services as SYSTEM. Nothing inherently wrong with that.
Assuming good software quality, reputable supplier, properly signed artifacts and good documentation, no reservations at all.
Assuming good software quality, reputable supplier, properly signed artifacts and good documentation, no reservations at all.
You can use Windows binaries in WSL. Like “cat file | clip.exe” to have the file’s contents in your clipboard.
December 10, 2025 at 8:30 PM
You can use Windows binaries in WSL. Like “cat file | clip.exe” to have the file’s contents in your clipboard.
For the type of men who are uncomfortable with talking (to) women. It’s pretty embarrassing on one hand, but also insulting to players of all genders.
November 25, 2025 at 6:16 AM
For the type of men who are uncomfortable with talking (to) women. It’s pretty embarrassing on one hand, but also insulting to players of all genders.
The DS is home to so many creative and different experiences. I did not respect rhythm games before the DS, Rhythm Heaven / Paradise changed that in a snap
November 21, 2025 at 8:24 PM
The DS is home to so many creative and different experiences. I did not respect rhythm games before the DS, Rhythm Heaven / Paradise changed that in a snap
Not 40 years back, but almost. The POSIX (and OS/2) subsystem for NT was around 30 years ago, I think.
November 21, 2025 at 12:08 PM
Not 40 years back, but almost. The POSIX (and OS/2) subsystem for NT was around 30 years ago, I think.
FF VI, Chrono Trigger and Zelda LttP are my favorites to this day. I quite liked Bahamut Lagoon and Front Mission as well. Then there is Lufia, the Marios, … the SNES is a beast.
November 21, 2025 at 11:47 AM
FF VI, Chrono Trigger and Zelda LttP are my favorites to this day. I quite liked Bahamut Lagoon and Front Mission as well. Then there is Lufia, the Marios, … the SNES is a beast.
Incubation is a lot of fun. Not so much like XCom, but more like Space Hulk. I remember it as challenging and fair, but this is from back when it came out. 😉
November 16, 2025 at 11:14 PM
Incubation is a lot of fun. Not so much like XCom, but more like Space Hulk. I remember it as challenging and fair, but this is from back when it came out. 😉
It’s included in this collection: www.gog.com/en/game/batt...
Battle Isle Platinum (includes Incubation)
Battle Isle Platinium is pure strategy combined with a compelling backstory. Consisting o
www.gog.com
November 16, 2025 at 11:07 PM
It’s included in this collection: www.gog.com/en/game/batt...
It was a recommendation by an import shop owner. Over the phone, when ordering Lungrisser (which is equally amazing), and with the promise to include a translated quick start guide. I had a JAP MD (which my unsuspecting parents got me while on vacation in Thailand), so importing was easy.
October 29, 2025 at 7:01 PM
It was a recommendation by an import shop owner. Over the phone, when ordering Lungrisser (which is equally amazing), and with the promise to include a translated quick start guide. I had a JAP MD (which my unsuspecting parents got me while on vacation in Thailand), so importing was easy.
Advanced Daisenryaku: Doitsu Dengeki Sakusen
Many of my favorites are already in the thread, but this one is quite special to me. Never expected to be able to play a proper wargame on a console back then, and I did so for many many hours.
Many of my favorites are already in the thread, but this one is quite special to me. Never expected to be able to play a proper wargame on a console back then, and I did so for many many hours.
October 29, 2025 at 2:03 PM
Advanced Daisenryaku: Doitsu Dengeki Sakusen
Many of my favorites are already in the thread, but this one is quite special to me. Never expected to be able to play a proper wargame on a console back then, and I did so for many many hours.
Many of my favorites are already in the thread, but this one is quite special to me. Never expected to be able to play a proper wargame on a console back then, and I did so for many many hours.
That logo. I always thought it symbolized “ECA” as a kid and even decades after. 😅 Still like it best.
October 26, 2025 at 9:44 PM
That logo. I always thought it symbolized “ECA” as a kid and even decades after. 😅 Still like it best.
I’d say yes. Recall is easily and fully controllable (learn.microsoft.com/en-us/window...).
Plenty AI rubbish in current MacOS, too. What’s nice about Windows is how you can configure and monitor at scale in an Enterprise environment, like the OP was stating.
Plenty AI rubbish in current MacOS, too. What’s nice about Windows is how you can configure and monitor at scale in an Enterprise environment, like the OP was stating.
Manage Recall for Windows clients
Learn how to manage Recall for commercial environments and about Recall features.
learn.microsoft.com
October 25, 2025 at 9:18 AM
I’d say yes. Recall is easily and fully controllable (learn.microsoft.com/en-us/window...).
Plenty AI rubbish in current MacOS, too. What’s nice about Windows is how you can configure and monitor at scale in an Enterprise environment, like the OP was stating.
Plenty AI rubbish in current MacOS, too. What’s nice about Windows is how you can configure and monitor at scale in an Enterprise environment, like the OP was stating.
Completely agree with the points. There could be a place for company hardware that doesn’t achieve the highest compliance level, as that might not be required for every use case. If apps and services are properly segmented, less controlled devices could be allowed in specific scenarios.
October 25, 2025 at 9:11 AM
Completely agree with the points. There could be a place for company hardware that doesn’t achieve the highest compliance level, as that might not be required for every use case. If apps and services are properly segmented, less controlled devices could be allowed in specific scenarios.
Glad to hear that, and also thanks for the suggestion. 👍
October 8, 2025 at 4:02 AM
Glad to hear that, and also thanks for the suggestion. 👍
The actual option “Require MFA”, or would “Require authentication strength” do the job as well? We have switched for a while and I’ve been wondering since. (Un-)Fortunately only low risk detections since, so…
October 8, 2025 at 1:22 AM
The actual option “Require MFA”, or would “Require authentication strength” do the job as well? We have switched for a while and I’ve been wondering since. (Un-)Fortunately only low risk detections since, so…
Just in case: Are you aware of Cloud Kerberos Trust? A Entra-joined Workstation could seamlessly authenticate to on-prem services that way, if that’s what’s keeping them.
learn.microsoft.com/en-us/window...
Anyway, good luck ☺️
learn.microsoft.com/en-us/window...
Anyway, good luck ☺️
Windows Hello for Business cloud Kerberos trust deployment guide
Learn how to deploy Windows Hello for Business in a cloud Kerberos trust scenario.
learn.microsoft.com
October 7, 2025 at 8:24 PM
Just in case: Are you aware of Cloud Kerberos Trust? A Entra-joined Workstation could seamlessly authenticate to on-prem services that way, if that’s what’s keeping them.
learn.microsoft.com/en-us/window...
Anyway, good luck ☺️
learn.microsoft.com/en-us/window...
Anyway, good luck ☺️
I don’t think you can with AD-joined workstations. Web sign-in offers what you want (learn.microsoft.com/en-us/window...) but it’s for Entra-joined devices.
Out of curiosity, why are the workstations AD-joined?
Out of curiosity, why are the workstations AD-joined?
Use Web Sign-In To Enable Passwordless Sign-In In Windows
Learn how Web sign-in in Windows works, key scenarios, and how to configure it.
learn.microsoft.com
October 7, 2025 at 7:53 PM
I don’t think you can with AD-joined workstations. Web sign-in offers what you want (learn.microsoft.com/en-us/window...) but it’s for Entra-joined devices.
Out of curiosity, why are the workstations AD-joined?
Out of curiosity, why are the workstations AD-joined?
My thoughts exactly. Kickstarter when? ☺️
October 4, 2025 at 6:53 PM
My thoughts exactly. Kickstarter when? ☺️
The option appears if you set the theme to dark. It’s not there on system default
October 4, 2025 at 2:47 PM
The option appears if you set the theme to dark. It’s not there on system default
Yes, exactly the same. Thanks for the tip ☺️
October 4, 2025 at 2:46 PM
Yes, exactly the same. Thanks for the tip ☺️
Same. It’s often called a “conspiracy tale” or “conspiracy myth” in German (Verschwörungserzählung or Verschwörungsmythos), as it should be. No false legitimacy for lunatics.
October 1, 2025 at 6:12 PM
Same. It’s often called a “conspiracy tale” or “conspiracy myth” in German (Verschwörungserzählung or Verschwörungsmythos), as it should be. No false legitimacy for lunatics.