Gigarefurb Refurbished Laptops News

Microsoft has offered a miniscule concession to users determined to install Windows 11 on PCs that don’t meet its minimum hardware requirements: you will be able to do it, but on your own head be it should things go wrong.

The apparent moderation of its previously hardline upgrade policy appeared on a support page update which lists the numerous disadvantages of pressing ahead with a Windows 11 on an unsupported system.

These include unspecified compatibility problems, and a watermark noting a PC’s non-compliant status that will appear on the Windows 11 desktop. More significantly, it states:

“If you proceed with installing Windows 11, your PC will no longer be supported and won’t be entitled to receive updates.”

This is unambiguous – no security updates. And that’s in addition to the rather alarming warning that any “damages to your PC due to a lack of compatibility aren’t covered under the manufacturer warranty.”

Those are serious gotchas, the same ones Microsoft has been warning about for some time. Only a week ago, a blog by Microsoft senior program manager Steven Hosking described the most important element of the Windows 11 requirements, support for Trusted Platform Module (TPM) 2.0, as “non-negotiable.” That remains the case.

Not sugarcoating it

What has changed? Despite some optimistic news reporting on this issue, nothing. Microsoft doesn’t want users to upgrade to Windows 11 on unsupported hardware, but is now acknowledging that some people will push ahead regardless. That being so, it wants to tell them what might happen, so they can’t say they weren’t warned.

The date Windows 10 is due to stop receiving updates, Oct. 14, 2025, remains the same. Upgrading to Windows 11 without meeting the hardware requirements won’t change the negative consequences of this. Nor does the update explain how users can bypass the minimum requirements, should they choose to do so.

Importantly, users who regret upgrading will only have ten days to revert to Windows 10. After that, the files enabling this function will be deleted to save disk space, and the “go back” button in Recovery options will disappear.

Microsoft also doesn’t elaborate on what it means by Windows 11 “compatibility issues,” so this is a matter of guesswork. However, it’s possible to imagine that new features that assume a TPM is available could cause instability on a machine lacking this facility. It could also affect drivers for older hardware no longer supported in Windows 11, although this would be likely to be an issue over the longer term.

Meet the TPM

Microsoft’s minimum requirements for Windows 11 cover several hardware components, including having enough RAM and a powerful enough microprocessor. But the most contentious issue is whether a PC contains or supports a Trusted Platform Module (TPM), specifically version 2.0, released in 2014.

A TPM is a secure enclave for storing data such as cryptographic keys, certificates, and biometric information fundamental for the security of a PC, including those required for low level PC checks such as Secure Boot, or for the use of Microsoft’s BitLocker in its more secure mode. Having one is somewhere between a good idea and essential, as more and more software systems going forward assume one will be there at the root of trust. For a summary of the arguments in favor of upgrading to a system with TPM 2.0, Hosking’s blog is a good place to start.

When it comes to TPMs and Windows, PCs divide into three categories, the first of which supports the functionality using a TPM 2.0 chip installed on the motherboard. The second doesn’t have a TPM chip, but can either have one installed using a chip upgrade kit from the motherboard vendor or can have TPM enabled through firmware at UEFI level. The third are PCs that don’t support either option, which means they can’t be upgraded to Windows 11 without a registry hack.

Intel and AMD PCs from about 2017 onwards should support a hardware or software TPM 2.0, while earlier ones going back to Intel’s Skylake 6^th generation in 2015 might do so, depending on the specific processor and support at motherboard and UEFI level.

Extended support

For anyone who doesn’t want the risk of a Windows 11 upgrade on unsupported hardware, or just prefers Windows 10, after October 2025 the most secure option will be to pay for an Extended Security Updates (ESU) subscription at an unconfirmed cost of $30 per annum for individuals. That way, updates won’t disappear abruptly, putting the PC in peril as vulnerabilities pile up over time.

Not surprisingly, a lot of users are happy with the status quo and don’t feel they should be forced to upgrade to Windows 11 or to pay to remain on Windows 10. This, arguably, is Microsoft’s fault. It hasn’t always clearly explained the benefits of its minimum requirement. That, unfortunately, includes explaining why TPM 2.0 is a good idea, and how its software increasingly depends on it for security.

Apple has introduced significant improvements for enterprise IT admins in the newly-released iOS 18.2, including the power to manage the latest salvo of additional Apple Intelligence features and more.  Here’s a swift look at what’s new.

Giving you control of Apple Intelligence

Apple’s approach to generative AI (genAI) is all about combining convenience with privacy. That means it has built large language models (LLMs) that work on the device, supplemented by highly secure cloud-based models that use highly secure Apple servers in data centers, and partnerships with third-party services to handle tasks the company’s own models can’t accommodate.

That last thing — use of third-party services — is where some Apple customers might need reassurance. That’s because people might at times share what should be confidential data with these services, which could place companies or individuals at risk of running afoul of data protection laws. Apple has only one genAI partner at this time, OpenAI, and to help mitigate such issues the ChatGPT developer says it does not keep private information pertaining to a request. With cloud queries heavily encrypted, Apple keeps no information at all, which is part of the attraction of using its own LLM models, and users can choose not to work with ChatGPT at all, if they prefer.

But what about unauthorized use of ChatGPT? Or even Apple’s own genAI models? Is there any way a data security-conscious company can try to protect its data against unauthorized sharing?

Now, there is. Starting in iOS 18.2, Apple has, as promised, introduced tools that let Mobile Device Management (MDM) services manage all the latest Apple Intelligence integrations, including ChatGPT, which itself includes search.

What this means is that IT admins can permit use of some, none, or all of the available Apple Intelligence tools, including the capacity to generate images in Image Playground. How this control is made available will likely differ between MDM providers, but you should see tools to manage iOS 18.2’s newly-added Apple Intelligence features arrive in your management console soon. Apple introduced MDM controls for Writing tools, Mail summarization, phone call recoding, and hiding apps in iOS 18.1.

Setting a default browser

While it took time to be convinced, Apple is beginning to allow people to use more browsers than before, potentially opening up competition in the browser industry. The thing is, not all browsers are created equal and it’s possible that some companies might require employees to use a specific browser on a managed device. This has now been made possible with an MDM tool that lets admins set a default browser and prevent users from modifying that browser, or choosing an alternative. (This should help companies maintain specified browser security policies, for example.)

What else is new?

These additions supplement an earlier wave of enterprise-focused admin enhancements introduced with iOS 18.1. 

• Hardware-based MFA in Safari is now more reliable when used with security keys.
• You can disable RCS messages on managed devices — essential, given the standard doesn’t yet support encryption.
• It is possible to prevent users from deactivating VPN use on a per-app basis.
• Admins can prevent apps from being locked or hidden by users.
• Service discovery in enrollment can request well-known resources from alternative locations specified by MDM 

Tell it from the rooftops

Each time Apple makes one of these iterative enhancements for enterprise deployments of its devices, it shows the extent to which it now deeply supports enterprise markets. If I’m honest, the company should try to make more out of this, particularly as its approach toward building an ecosystem for trusted AI marries so well and so deeply with its existing reputation around security, ease-of-use, customer satisfaction, employee loyalty and TCO advantages in contrast to other platforms. 

But for most admins, the critical piece in the company’s most recent MDM updates will likely be the control it gives them over Apple Intelligence, which should reassure business users that limited deployment of these tools can be accomplished in a deliberate and responsible manner.

You can follow me on social media! Join me on BlueSky,  LinkedIn, Mastodon, and MeWe.