←back to thread

Microsoft Dependency Has Risks

(blog.miloslavhomer.cz)
153 points ArcHound | 4 comments | 25 Jun 25 20:08 UTC | HN request time: 0.655s | source
Show context
firesteelrain ◴[25 Jun 25 21:16 UTC] No.44381913[source]▶
For most businesses, the cost and difficulty of shifting away from Microsoft outweigh the benefits
replies(4): >>44381959 #>>44381985 #>>44382500 #>>44384846 #
smaudet ◴[25 Jun 25 21:27 UTC] No.44381985[source]▶
Maybe.

Some things go deep, true. However most businesses don't use most of Microsoft products - even the ones that do, the usage of the more complicated products is far more minuscule than imagined by e.g. CFOs, etc.

The real thing keeping many "in the fold" as it were would be authentication services.

Which are overcomplicated and probably easier to manage without...

replies(2): >>44381991 #>>44382259 #
firesteelrain ◴[25 Jun 25 21:29 UTC] No.44381991[source]▶
Right, it’s stuff like Active Directory and how everything’s tied together. Once you’re using that for auth, it’s really tough to back out without a lot of effort.

We’ve looked into FreeIPA and similar options, but honestly, nothing really holds a candle to Active Directory yet.

replies(2): >>44382060 #>>44382529 #
AnonymousPlanet ◴[25 Jun 25 21:40 UTC] No.44382060[source]▶
AD and Domain Servers are like a cancer that will grow metastases around your org, costing user and client cals all over the place, even for every desk phone if you're not careful. The only winning move is never to play their game in the first place.
replies(2): >>44382090 #>>44382279 #
1. firesteelrain ◴[25 Jun 25 21:44 UTC] No.44382090[source]▶
I'm in a situation where due to staff skillsets and ease of management then GPOs are required. Local GPOs would be insane to manage across thousands of PCs
replies(2): >>44382146 #>>44385335 #
2. thewebguyd ◴[25 Jun 25 21:53 UTC] No.44382146[source]▶
InTune/MDMs are finally eating away at the need for GPOs for most use cases. Someone already familiar with AD & Group Policy should be able to easily transition to InTune Configuration Policies. MS even has a tool now to import your GPOs.

There's still a few that don't have direct equivalents, but the list is growing smaller and smaller.

replies(1): >>44385466 #
3. AnonymousPlanet ◴[26 Jun 25 08:22 UTC] No.44385335[source]▶
Yes and that is a very common case. Windows is designed so that you barely have a chance to deal with your case without Microsoft components all the way. You would need a company with enormous resources to play catch up with the highly integrated and proprietary connections between each component.

It's a rigged monopoly and has nothing to do with a market economy. Once you have been forced to use Windows, you are doomed.

4. AnonymousPlanet ◴[26 Jun 25 08:46 UTC] No.44385466[source]▶
InTune is part of Microsoft's strategy to make everyone dependent on their cloud. It's like switching from Heroin to Fentanyl because you want to get off of your addiction.