AData governance is what it is
5We trust ms on the desktop but not the server
MIf you actually cared about your data you probably wouldn't be using windows
AIt has to do with where the servers are located
5I guess your right that's its different. Its just seems weird to not use a more secure os at scale
Mnot if you don't trust them for other things, at least
PAaaand that's why we are here in essence
ANow cloud providers like azure are doing per country and dedicated deployments
AGDPR is no joke as well
HMS uses Linux servers. that should say everything that needs to be said (This is from an old conversation and information, but i think still mostly valid)
5we also mostly use web apps anymore. We could stop using windows and still use office
MYou can setup windows servers with azure afaik
Pno you can't because broken formatting 
ALinux desktop implementations lack in security compared to win
AYou might not believe it
5I guess I have to
ALinux can be more secure than win but rn is not
Mi mean the os security itself doesn't matter much when you can just social engineer
ANobody sets it up correctly because users don't care
M:u
AStandard windows deployments have locked business VPNs, and dual layer data encryption with tpm + passkey
AThen the OS itself sandboxes stuff and has things like core isolation and no sudo priciledges
5Someone's going to forget to turn off copilot and it will be a scandal
HI have to point out that Encryption means nothing if someone can remotely access your data
AOnly your IT can do that
AWhich is also a business feature
ALike it or not lmao
AIt can also remotely wipe and lock the device
Hwell, that is all windows should have ever been, a business OS. the fact that they got into gaming really crossed lines that screwed everything up
AThere's not a solid Linux IT deployment tool but Linux supports all these features too
5I'm having a hard time reconciling recall cause its advertised as a feature to help tech illiterate people use a computer but a lot of companies would turn it off
AThere's just no way for IT to cleanly deploy them
AI think it would be disabled by default on enterprise deployments
Pthat varies majorly if it's enrolled as a company device, but users tend to be stupid and do mix devices. we've had cases where they keep all their private data on their work device and also sign in with their work account to ther home PC and phones where they enroll their PC to our tenant. very smart
Hi would really like to reboot, but i am waiting for the world to download :/ (Organic Maps)
AIf the company gives it to you it is enrolled
5We have blocks so you can only do that in company phones and devices
CArguably Nix?
AAnd they've started to limit personal devices
5Thank god. I'm not putting my work email on my phone
AThe new Portal Ms garbage partitions your phone and instAlls apps VPNs and shit
AAnd changes the password requirements of the device
Hdecades ago, when i half knew some things and worked in IT, i always insisted they give me a company phone, and computer. One even supplied a second internet connection
5I'm waiting SR-IOV so I never use a real computer again
Pwe all have or own skeletons in the closet, things were going downhill since they tried to outsorce IT completely but somehow we got through and are now revetring once it hit them in their teeth. it killed morale and most of the guys are looking to bail
5We have 1 IT guy
5We really splurged
5But hes good though
PDamn, in the pharma sector with only one guy? that's insane
5My first job IT was also the head accountant
