Copyright TechTarget - All rights reserved https://cyber.law.harvard.edu/rss/rss.html Techtarget Feed Generator en Sun, 15 Mar 2026 22:48:31 GMT https://www.techtarget.com/searchenterprisedesktop editor@techtarget.com <p>Enterprise desktop administrators troubleshooting Windows policy conflicts must be able to identify exactly which Group Policy Objects (GPOs) apply to a workstation. The gpresult utility remains a common troubleshooting tool in Windows 10, Windows 11 and Windows Server environments where administrators rely on Group Policy to manage enterprise desktop configurations.</p> <p><a href="https://www.techtarget.com/searchwindowsserver/definition/Group-Policy">Group Policy</a> is Microsoft's Active Directory-based configuration manager. It's a simple and effective desktop administrator tool with thousands of available settings. <a href="https://www.techtarget.com/searchenterprisedesktop/tip/6-Group-Policy-best-practices-for-Windows-10-admins">Using Group Policy settings</a>, IT administrators can perform tasks such as the following:</p> <ul class="default-list"> <li>Manage the User Account Control (UAC) feature.</li> <li>Block access to the Microsoft Store.</li> <li>Configure screen lockout times.</li> <li>Permit or <a href="https://www.techtarget.com/searchsecurity/tutorial/How-to-disable-removable-media-access-with-Group-Policy">deny removable media</a>.</li> <li>Limit access to the Control Panel.</li> <li>Provide login warning banners.</li> <li>Define firewall settings.</li> <li>Deploy and manage software.</li> </ul> <p>While Group Policy is a helpful tool, it can still present challenges. To determine why a Group Policy setting is -- or is not -- in place on a user's workstation, IT can use the <code>gpresult</code> utility.</p> <section class="section main-article-chapter" data-menu-title="What is gpresult?"> <h2 class="section-title"><i class="icon" data-icon="1"></i>What is gpresult?</h2> <p>The gpresult command displays the Group Policy settings currently applied to a system. This lets IT confirm whether they're the correct settings and, if they're not, troubleshoot the configurations.</p> <p>Group Policy settings reside in the system volume (SYSVOL) directories of each domain controller. IT administrators edit the settings using the Group Policy Management Console (<a href="https://www.techtarget.com/searchwindowsserver/definition/Group-Policy-Management-Console">GPMC</a>), where they are organized into logical collections called Group Policy Objects (<a href="https://www.techtarget.com/searchwindowsserver/definition/Group-Policy-Object">GPOs</a>).</p> <p>GPOs are linked to the domain if they should apply to all systems; sites if they should apply to specific physical locations; and organizational units (<a href="https://www.techtarget.com/searchwindowsserver/definition/organizational-unit-OU">OUs</a>) if they should apply to departments or other business units (Figure 1).</p> <figure class="main-article-image full-col" data-img-fullsize="https://www.techtarget.com/rms/onlineimages/gpresult_gpos_1-h.jpg"> <img data-src="https://www.techtarget.com/rms/onlineimages/gpresult_gpos_1-h_mobile.jpg" class="lazy" data-srcset="https://www.techtarget.com/rms/onlineimages/gpresult_gpos_1-h_mobile.jpg 960w,https://www.techtarget.com/rms/onlineimages/gpresult_gpos_1-h.jpg 1280w" alt="Partial screenshot of the GPMC screen, with the cursor selecting 'Link an Existing GPO.'" data-credit="Damon Garn"> <figcaption> <i class="icon pictures" data-icon="z"></i>Figure 1. Administrators can link existing Group Policy Objects to an organizational unit in the Group Policy Management Console. </figcaption> <div class="main-article-image-enlarge"> <i class="icon" data-icon="w"></i> </div> </figure> <p>When users and computers authenticate, the domain controller sends the linked GPOs to the client system. The client system should then apply the configurations. When it doesn't, IT must begin troubleshooting.</p> <p>When troubleshooting policy conflicts, administrators must understand the configuration states available for each Group Policy setting. These settings usually have the following options:</p> <ul class="default-list"> <li><b>Not configured.</b> The configuration is not set. If an earlier-applied GPO sets this configuration, this GPO will not conflict with it.</li> <li><b>Enabled.</b> The configuration is set, enabling the setting. If an earlier-applied GPO disables the setting, this GPO conflicts and will win.</li> <li><b>Disabled.</b> The configuration is set, disabling the setting. If an earlier-applied GPO enables the setting, this GPO conflicts and will win.</li> </ul> <p>The GPMC shows what GPOs should apply to the workstation, while the <code>gpresult</code> tool shows what GPOs actually apply to the system. The two tools do not always align.</p> <p>Admins should use <code>gpresult</code> when they go directly to a user's workstation to troubleshoot why GPO settings differ from the expected configuration. The problem is usually pretty simple: A setting should be there and isn't, or it is there and shouldn't be. Either way, IT must establish which GPO defines the configuration.</p> <p>Like most Windows <a href="https://www.techtarget.com/whatis/post/CLI-commands-every-IT-pro-should-know">command-line commands</a>, gpresult includes parameters that control how policy data is displayed or exported, including the following:</p> <table class="main-article-table" style="height: 217px;"> <thead> <tr style="height: 18px;"> <td style="height: 18px; width: 155.556px;">Parameter</td> <td style="height: 18px; width: 719.542px;">Description</td> </tr> </thead> <tbody> <tr style="height: 18px;"> <td style="height: 18px; width: 155.556px;"><code>/u</code></td> <td style="height: 18px; width: 719.542px;">Runs the command with the logged-in user's credentials.</td> </tr> <tr style="height: 18px;"> <td style="height: 18px; width: 155.556px;"><code>/p</code></td> <td style="height: 18px; width: 719.542px;">Defines a password for the user when using the /u parameter.</td> </tr> <tr style="height: 18px;"> <td style="height: 18px; width: 155.556px;"><code>/s</code></td> <td style="height: 18px; width: 719.542px;">Runs the command targeting a specific computer.</td> </tr> <tr style="height: 37px;"> <td style="height: 37px; width: 155.556px;"><code>/scope {user or computer}</code></td> <td style="height: 37px; width: 719.542px;">Displays the policies applied to either the user identity or the computer identity. When trying to see both, skip the /scope option.</td> </tr> <tr style="height: 18px;"> <td style="height: 18px; width: 155.556px;"><code>/h {filename}</code></td> <td style="height: 18px; width: 719.542px;">Outputs the results to an HTML file.</td> </tr> <tr style="height: 18px;"> <td style="height: 18px; width: 155.556px;"><code>/x {filename}</code></td> <td style="height: 18px; width: 719.542px;">Outputs the results to an XML file.</td> </tr> <tr style="height: 18px;"> <td style="height: 18px; width: 155.556px;"><code>/r</code></td> <td style="height: 18px; width: 719.542px;">Summarizes the gpresult output.</td> </tr> <tr style="height: 18px;"> <td style="height: 18px; width: 155.556px;"><code>/v</code></td> <td style="height: 18px; width: 719.542px;">Displays verbose output.</td> </tr> <tr style="height: 18px;"> <td style="height: 18px; width: 155.556px;"><code>/z</code></td> <td style="height: 18px; width: 719.542px;">Displays detailed information about the Group Policy on the system.</td> </tr> <tr style="height: 18px;"> <td style="height: 18px; width: 155.556px;"><code>/?</code></td> <td style="height: 18px; width: 719.542px;">Displays help with these and other parameters.</td> </tr> </tbody> </table> <p>Open either PowerShell or the Windows Command Prompt to run the gpresult command. The process for doing so varies by Windows version, but a simple search or right-clicking on <b>Start</b> should make it available. IT must also include an output parameter with the <code>gpresult</code> command.</p> <div class="extra-info"> <div class="extra-info-inner"> <h3 class="splash-heading">Common gpresult commands for troubleshooting</h3> <p data-end="1193" data-start="1048">Administrators often start troubleshooting Group Policy issues by running a quick gpresult command to summarize which policies apply to a system.</p> <p data-end="1289" data-start="1195"><strong data-end="1210" data-start="1195">gpresult /r</strong><br data-end="1213" data-start="1210">Displays a summary of the policies applied to the current user and computer.</p> <p data-end="1376" data-start="1291"><strong data-end="1322" data-start="1291">gpresult /scope computer /r</strong><br data-end="1325" data-start="1322">Displays only the policies applied to the computer.</p> <p data-end="1471" data-start="1378"><strong data-end="1405" data-start="1378">gpresult /h report.html</strong><br data-end="1408" data-start="1405">Exports the policy results to an HTML report for easier review.</p> </div> </div> </section> <section class="section main-article-chapter" data-menu-title="Understanding how Group Policy precedence affects gpresult"> <h2 class="section-title"><i class="icon" data-icon="1"></i>Understanding how Group Policy precedence affects gpresult</h2> <p>In many cases, Group Policy problems occur due to not waiting long enough for GPOs to refresh on client systems. Another common cause is misunderstanding the order in which GPOs are applied and which settings win -- or override the others -- if there are conflicts.</p> <p>Understanding precedence enables IT to interpret and use the <code>gpresult</code> output. The term <i>precedence</i> describes the order in which GPOs are applied to workstations during the login process. This hierarchy is very deliberate on Microsoft's part. The key fact is that the last GPO applied to the system wins any conflicts.</p> <blockquote class="main-article-pullquote"> <div class="main-article-pullquote-inner"> <figure> The key fact is that the last GPO applied to the system wins any conflicts. </figure> <i class="icon" data-icon="z"></i> </div> </blockquote> <ul class="default-list"> <li><b>Site.</b> GPOs linked to the Active Directory Site are applied first.</li> <li><b>Domain.</b> GPOs linked to the Active Directory Domain are applied next, overriding any conflicting Site settings.</li> <li><b>Parent OU.</b> OU-linked GPOs apply next, and these override any conflicting Site or Domain settings.</li> <li><b>Child OU.</b> GPOs linked to OUs nested inside other OUs are applied next. These override any conflicting settings at the Site, Domain or Parent OU levels.</li> </ul> <p>OU settings, which are often set by administrators managing desktop systems, <a href="https://www.techtarget.com/searchenterprisedesktop/tip/How-to-edit-a-Domain-Group-Policy-for-a-Windows-desktop">override domain settings</a>, which are defined by domain administrators. This is because the different types of GPOs serve different purposes:</p> <ul class="default-list"> <li>Site GPOs should be limited to location-specific settings and usually the least-used links.</li> <li>Domain GPOs should set organization-wide, general configurations.</li> <li>OU GPOs should set department-specific, focused configurations, enabling department-level customization of settings such as software deployment, <a href="https://www.techtarget.com/searchenterprisedesktop/tip/6-steps-to-troubleshoot-remote-printing-via-VPN">printer configurations</a> or desktop management.</li> </ul> <p>Domain administrators can enforce GPOs to override settings made at the OU level, but they should only do this when absolutely necessary.</p> <p>If two or more GPOs contain conflicting settings and are linked at the same level, administrators must define a precedence order for them.</p> <p>No matter what, the last GPO applied wins. Therefore, when desktop support teams troubleshoot unexpected settings, one of the most important things to figure out is which GPO was applied last. This will show which policy applied the setting, giving IT the chance to edit the policy or rearrange the precedence order to achieve the desired result.</p> </section> <section class="section main-article-chapter" data-menu-title="When should desktop administrators use gpresult?"> <h2 class="section-title"><i class="icon" data-icon="1"></i>When should desktop administrators use gpresult?</h2> <p>The critical use for <code>gpresult</code> is to discover which GPOs have been applied to the system. This lets desktop troubleshooters determine which GPO defined the setting in question. From there, admins can adjust the GPOs, changing their precedence levels or the order to apply them in.</p> <p>To understand more specific scenarios in which <code>gpresult</code> can be useful in troubleshooting or reporting, consider the following examples.</p> <h3>Example 1: Features are enabled that shouldn't be</h3> <p>A GPO linked at the domain level <a target="_blank" href="https://learn.microsoft.com/en-us/windows/security/application-security/application-control/user-account-control/settings-and-configuration?tabs=intune" rel="noopener">enables</a> specific UAC settings, but a GPO linked to an OU disables the features. The user is confused about their experience with the UAC.</p> <p>The <code>gpresult</code> command lets IT determine which policies are applied to the user's system. Armed with that knowledge, admins can check the settings in the applied GPOs, looking for conflicts. It's also possible to display just the user or computer scope (Figure 2). IT should then type the following code to display settings in the computer scope.</p> <p><code>gpresult /scope computer /r</code></p> <figure class="main-article-image full-col" data-img-fullsize="https://www.techtarget.com/rms/onlineimages/gpresult_gpos_2-f.jpg"> <img data-src="https://www.techtarget.com/rms/onlineimages/gpresult_gpos_2-f_mobile.jpg" class="lazy" data-srcset="https://www.techtarget.com/rms/onlineimages/gpresult_gpos_2-f_mobile.jpg 960w,https://www.techtarget.com/rms/onlineimages/gpresult_gpos_2-f.jpg 1280w" alt="Partial screenshot of the gpresult summary." data-credit="Damon Garn" height="566" width="559"> <figcaption> <i class="icon pictures" data-icon="z"></i>Figure 2. IT can look at just the user or computer scope for GPO conflicts. </figcaption> <div class="main-article-image-enlarge"> <i class="icon" data-icon="w"></i> </div> </figure> <p>In this case, three GPOs have been applied in the computer scope: Firewall Settings -- Dev Dept, UAC Settings -- Dev Dept and Default Domain Policy. It appears the next step is to check the UAC Settings GPO.</p> <h3>Example 2: Required settings don't appear</h3> <p>A remote location has stringent security requirements. The location is an Active Directory site, and a GPO is linked to it that manages UAC configurations. A GPO is linked to a computer's OU to define UAC settings. A system at the location does not appear to have the expected settings.</p> <p>When troubleshooting this <a href="https://www.techtarget.com/searchsecurity/news/252518366/CISA-calls-out-security-misconfigurations-common-mistakes">security misconfiguration</a>, the <code>gpresult</code> command displays the OU-linked GPO, indicating this GPO is the source of the problem. IT can see the exact settings by adding the verbose switch. To do so, type <code>gpresult /scope computer /v</code>. A subset of the output shows the three UAC settings (Figure 3).</p> <figure class="main-article-image full-col" data-img-fullsize="https://www.techtarget.com/rms/onlineimages/gpresult_gpos_3-f.jpg"> <img data-src="https://www.techtarget.com/rms/onlineimages/gpresult_gpos_3-f_mobile.jpg" class="lazy" data-srcset="https://www.techtarget.com/rms/onlineimages/gpresult_gpos_3-f_mobile.jpg 960w,https://www.techtarget.com/rms/onlineimages/gpresult_gpos_3-f.jpg 1280w" alt="Partial screenshot of the verbose gpresult output." data-credit="Damon Garn" height="149" width="559"> <figcaption> <i class="icon pictures" data-icon="z"></i>Figure 3. The verbose output shows the actual Group Policy settings. </figcaption> <div class="main-article-image-enlarge"> <i class="icon" data-icon="w"></i> </div> </figure> <h3>Example 3: Security audits</h3> <p>Security auditors have asked an admin to demonstrate exactly what security settings exist on a given workstation. Using <code>gpresult /h audit.html</code>, the admin can generate a detailed report in HTML or XML format that shows which settings are in place and which GPOs deliver those settings (Figure 4).</p> <figure class="main-article-image full-col" data-img-fullsize="https://www.techtarget.com/rms/onlineimages/gpresult_gpos_4-f.jpg"> <img data-src="https://www.techtarget.com/rms/onlineimages/gpresult_gpos_4-f_mobile.jpg" class="lazy" data-srcset="https://www.techtarget.com/rms/onlineimages/gpresult_gpos_4-f_mobile.jpg 960w,https://www.techtarget.com/rms/onlineimages/gpresult_gpos_4-f.jpg 1280w" alt="The summary from the HTML report generated by gpresult." data-credit="Damon Garn" height="374" width="560"> <figcaption> <i class="icon pictures" data-icon="z"></i>Figure 4. IT can generate a detailed settings report in HTML or XML format. </figcaption> <div class="main-article-image-enlarge"> <i class="icon" data-icon="w"></i> </div> </figure> <p>To learn more about specific settings, browse to the Applied GPO level. IT can do the same for Denied GPOs, which helps when troubleshooting permissions or filtering issues.</p> <p>Suppose an admin just linked the GPO that manages UAC settings to an OU, but when they visit a workstation contained in the OU, there's no indication that the GPO is applied. The Group Policy client on the workstation only checks for new settings periodically. If the new GPO is not yet applied, the admin should consider using the <code>gpupdate</code> command to cause the system to check for new policies.</p> </section> <section class="section main-article-chapter" data-menu-title="Using Resultant Set of Policy as an alternative to gpresult"> <h2 class="section-title"><i class="icon" data-icon="1"></i>Using Resultant Set of Policy as an alternative to gpresult</h2> <p>It's also possible to gather much of this information using a GUI tool called Resultant Set of Policy (<a href="https://www.techtarget.com/searchwindowsserver/definition/RSoP-Resultant-Set-of-Policy">RSoP</a>). Type<code> rsop.msc</code> in the Search bar to access the utility.</p> <p>The utility launches and audits the system to determine the applied GPOs. The inventory takes less than a minute. Once the audit is complete, the RSoP output looks similar to the editing interface in the GPMC. From there, IT can browse through the settings (Figure 5).</p> <figure class="main-article-image full-col" data-img-fullsize="https://www.techtarget.com/rms/onlineimages/gpresult_gpos_5-f.jpg"> <img data-src="https://www.techtarget.com/rms/onlineimages/gpresult_gpos_5-f_mobile.jpg" class="lazy" data-srcset="https://www.techtarget.com/rms/onlineimages/gpresult_gpos_5-f_mobile.jpg 960w,https://www.techtarget.com/rms/onlineimages/gpresult_gpos_5-f.jpg 1280w" alt="Partial screenshot of the RSoP report." data-credit="Damon Garn" height="200" width="558"> <figcaption> <i class="icon pictures" data-icon="z"></i>Figure 5. The RSoP report resembles the GPMC. </figcaption> <div class="main-article-image-enlarge"> <i class="icon" data-icon="w"></i> </div> </figure> <p>The biggest practical issue with RSoP is knowing what to look for and where to find it. There are thousands of Group Policy settings, and it can be difficult to recall exactly which node houses a given configuration. After digging down to a particular setting, the console will display the Source GPO (Figure 6).</p> <figure class="main-article-image full-col" data-img-fullsize="https://www.techtarget.com/rms/onlineimages/gpresult_gpos_6-f.jpg"> <img data-src="https://www.techtarget.com/rms/onlineimages/gpresult_gpos_6-f_mobile.jpg" class="lazy" data-srcset="https://www.techtarget.com/rms/onlineimages/gpresult_gpos_6-f_mobile.jpg 960w,https://www.techtarget.com/rms/onlineimages/gpresult_gpos_6-f.jpg 1280w" alt="Policies under the 'Security Options' tab in the RSoP console." data-credit="Damon Garn" height="249" width="559"> <figcaption> <i class="icon pictures" data-icon="z"></i>Figure 6. Admins must know what setting they're looking for to discover which GPO applied it. </figcaption> <div class="main-article-image-enlarge"> <i class="icon" data-icon="w"></i> </div> </figure> <p>For desktop administrators, <strong data-end="402" data-start="390">gpresult</strong> remains one of the most practical tools for troubleshooting Group Policy behavior in enterprise Windows environments. Whether IT teams are verifying security settings, identifying policy conflicts or confirming that new configurations have reached a device, the command helps connect expected policy behavior with what is actually happening on the system.</p> <p><em>Damon Garn owns Cogspinner Coaction and provides freelance IT writing and editing services. He has written multiple CompTIA study guides, including the Linux+, Cloud Essentials+ and Server+ guides, and contributes extensively to TechTarget Editorial and CompTIA Blogs.</em></p> </section> Desktop admins can use the gpresult command to identify which Group Policy Objects apply to a system and troubleshoot configuration conflicts in Windows environments. https://cdn.ttgtmedia.com/rms/onlineimages/code_g1078919244.jpg https://www.techtarget.com/searchenterprisedesktop/tip/How-IT-can-use-the-gpresult-command-to-check-GPOs Thu, 12 Mar 2026 11:25:00 GMT <p>Many organizations across various sectors rely on <a href="https://www.techtarget.com/searchenterprisedesktop/definition/kiosk-mode">kiosk devices</a>, but configuring and managing them can sometimes be challenging.</p> <p>Healthcare organizations, for example, use kiosks as <a href="https://www.techtarget.com/searchhealthit/tip/3-technologies-to-improve-the-patient-check-in-process">part of their check-in process</a> to confirm personal data and collect payments, while retail organizations may use them as point-of-sale devices. Kiosks are also widely used in restaurants and quick-service retail environments for self-service ordering. Kiosk configurations also help organizations secure shared devices by limiting user access to approved applications and system features.</p> <p>Organizations that want to deploy kiosk devices have several endpoint options from which to choose, including Android tablets, iPads and Windows devices. For enterprises that choose Windows devices for kiosk deployments, administrators can configure Windows 11 kiosk mode using several different management methods depending on the number of devices, management tools and security requirements involved.</p> <section class="section main-article-chapter" data-menu-title="4 methods for deploying Windows 11 kiosk mode"> <h2 class="section-title"><i class="icon" data-icon="1"></i>4 methods for deploying Windows 11 kiosk mode</h2> <p>Windows 10 was the first OS to support Kiosk mode natively, so IT pros can lock down the OS and only allow users to use one or a few applications on any Windows 10 device. In many environments, administrators configure multi-app kiosks that allow a small set of approved applications while preventing access to the rest of the operating system.</p> <p>Organizations can still deploy Windows 10 kiosks on legacy hardware, but Microsoft ended support for Windows 10 in October 2025. Most new kiosk deployments should use Windows 11 to ensure ongoing security updates and long-term support.</p> <p>Here are four distinct methods IT professionals can use when setting up Windows 11 kiosk mode.</p> <h3>Setting up Windows 11 kiosk mode from the machine's local settings</h3> <p>Kiosk mode in Windows 11, or Assigned Access, requires <a href="https://www.techtarget.com/searchenterprisedesktop/tip/Understanding-the-features-of-Windows-11-Enterprise">Windows 11 Pro</a>. Assigned Access is Microsoft's built-in feature for locking a Windows device to one or more applications in a kiosk configuration. IT should only choose this option if they plan to set up one or two Windows 11 devices in kiosk mode, as manually setting up multiple kiosks can be time-consuming and prone to human error.</p> <p>When setting up a kiosk in Windows 11, a desktop admin is also creating a kiosk user account. They must turn kiosk mode on by going into <b>Accounts </b>under the desktop settings. Then, the desktop admin must choose <b>Set up a Kiosk</b> from the <b>Other Users</b> option. Next, the admin must click <b>Get started</b>. Then they must enter a name for the new account. There's also an option to use a local standard user account already on the device.</p> <figure class="main-article-image half-col" data-img-fullsize="https://www.techtarget.com/rms/onlineimages/windowskiosk_image1-h.jpg"> <img data-src="https://www.techtarget.com/rms/onlineimages/windowskiosk_image1-h_half_column_mobile.jpg" class="lazy" data-srcset="https://www.techtarget.com/rms/onlineimages/windowskiosk_image1-h_half_column_mobile.jpg 960w,https://www.techtarget.com/rms/onlineimages/windowskiosk_image1-h.jpg 1280w" alt="Screenshot of Windows 11 Assigned Access settings showing where administrators configure kiosk applications." height="222" width="279"> <figcaption> <i class="icon pictures" data-icon="z"></i>Figure 1. Windows 11 Assigned Access settings allow administrators to choose which application runs when a kiosk user signs in. </figcaption> <div class="main-article-image-enlarge"> <i class="icon" data-icon="w"></i> </div> </figure> <p>The desktop admin must next choose the app to run when the kiosk account signs in. They can only select apps that run above the lock screen, as shown in the list of available apps. Here are some guidelines for choosing an app for a kiosk:</p> <ul class="default-list"> <li>Windows apps must be provisioned or installed for the assigned access account before a Windows admin can select them as the assigned access app.</li> <li>Updating a Windows app can sometimes change the Application User Model ID (AUMID) of the app, requiring the desktop Aadmin to update the assigned access settings to launch the updated app.</li> <li>Apps that the IT department created using the Desktop App Converter (Desktop Bridge) can't be used as kiosk apps.</li> </ul> <p>Once the admin selects an app, the desktop admin must choose <b>Close</b>.</p> <h3>Setting up Windows 11 kiosk mode with Windows PowerShell</h3> <p>The next option IT admins can choose to set up and configure kiosk mode on Windows 11 is the <a href="https://learn.microsoft.com/en-us/windows/configuration/kiosk-single-app#powershell" target="_blank" rel="noopener">PowerShell</a> cmdlets method. PowerShell cmdlets are command-line instructions that allow administrators to script kiosk deployments and apply consistent configurations across multiple devices. This method provides a flexible, scripted and repeatable approach to configure and deploy kiosk devices.</p> <figure class="main-article-image half-col" data-img-fullsize="https://www.techtarget.com/rms/onlineImages/redakiosk_02.jpg"> <img data-src="https://www.techtarget.com/rms/onlineImages/redakiosk_02_half_column_mobile.jpg" class="lazy" data-srcset="https://www.techtarget.com/rms/onlineImages/redakiosk_02_half_column_mobile.jpg 960w,https://www.techtarget.com/rms/onlineImages/redakiosk_02.jpg 1280w" alt="Screenshot showing PowerShell commands used to configure Windows kiosk mode." height="192" width="280"> <figcaption> <i class="icon pictures" data-icon="z"></i>Figure 2. PowerShell cmdlets can automate the deployment and management of Windows kiosk mode across multiple devices. </figcaption> <div class="main-article-image-enlarge"> <i class="icon" data-icon="w"></i> </div> </figure> <p>IT admins must sign into the kiosk as an administrator, then create a user account for Assigned Access. After the admin signs in as the Assigned User account, they can install the Universal Windows apps that meet the assigned access/above the lock guidelines. When the installation is complete, they sign out of Assigned User account and back in as an administrator.</p> <p>The PowerShell approach is especially effective for organizations that need to deploy several types of devices. Figure 2 shows some of the cmdlets that IT must use during the setup.</p> <blockquote class="main-article-pullquote"> <div class="main-article-pullquote-inner"> <figure> PowerShell provides a flexible, scripted and repeatable approach to configure kiosk devices. </figure> <i class="icon" data-icon="z"></i> </div> </blockquote> <p>Removing Assigned Access with PowerShell requires running the following cmdlet: Clear-AssignedAccess.</p> <h3>Use the kiosk wizard in Windows Configuration Designer</h3> <p>Microsoft offers another way to manage and configure Windows devices without having to create a base image for them: the Windows Configuration Designer application, available for free from the Microsoft Store. IT admins can more easily define a kiosk configuration with the app and deploy it to any managed device because the app's kiosk wizard is user-friendly.</p> <p>However, it's important to note that only one instance of Windows Configuration Designer can run on a computer at a time. And while it can open multiple projects, it can build only one project at a time.</p> <h3>Deploy kiosk settings from an MDM platform or Microsoft Intune</h3> <p>Another method is to use mobile device management (<a href="https://www.techtarget.com/searchmobilecomputing/definition/mobile-device-management">MDM</a>) tools to deploy and manage kiosk devices. This option works well for organizations with many kiosks in different physical locations, such as retail stores or restaurants, that require centralized IT management.</p> <p>MDM-based kiosk deployments are especially useful for organizations that manage kiosks across multiple locations and need centralized configuration, updates and security monitoring.</p> <p>Many organizations now deploy kiosk devices using automated provisioning workflows such as Windows Autopilot combined with <a href="https://www.techtarget.com/searchitchannel/definition/Microsoft-Intune">Microsoft Intune</a>&nbsp;policies, allowing administrators to configure kiosk mode remotely during device setup.</p> <p>Platforms such as <a href="https://www.techtarget.com/searchvmware/tip/VMware-pitches-in-on-Workspace-ONE-UEM">VMware Workspace ONE UEM</a> and Microsoft Intune provide MDM capabilities that allow desktop admins to set up Windows 11 kiosk mode to manage devices remotely. These remote commands include the ability to lock some elements of Windows 11, turning these devices into kiosks.</p> <p>These tools can proactively alert IT when device problems require attention relating to storage, CPU usage, system errors or going offline. Using an MDM for remote kiosk management also helps IT ensure the kiosk devices receive the security patches and OS updates they need to remain secure and compliant.</p> <p>Windows kiosk mode provides organizations with a reliable way to deliver controlled user experiences on shared devices. Whether administrators configure kiosks locally, through scripts or with centralized device management platforms, the right deployment method depends on the number of devices and the level of control required.</p> <p><em>Will Kelly is a freelance writer and content strategist who has written about cloud, DevOps, AI and enterprise mobility.</em></p> <p><em>Reda Chouffani runs a consulting practice he co-founded, Biz Technology Solutions Inc., and is CTO at New Charter Technologies. He is a technology consultant with a focus on healthcare and manufacturing, cloud expert and business intelligence architect who helps enterprises make the best use of technology.</em></p> </section> Windows 11 kiosk mode allows IT to restrict devices to specific apps. There are four deployment methods: local setup, PowerShell, Windows Configuration Designer, and MDM tools. https://cdn.ttgtmedia.com/rms/onlineimages/keyboard_g1077903946.jpg https://www.techtarget.com/searchenterprisedesktop/tip/Setting-up-Windows-10-kiosk-mode-with-4-different-methods Wed, 11 Mar 2026 19:30:00 GMT <p>The <a href="https://www.techtarget.com/whatis/definition/Microsoft-Edge">Microsoft Edge</a> browser includes Internet Explorer mode -- or IE mode -- a feature that renders legacy IE websites using the Internet Explorer 11 engine.</p> <p>Microsoft Edge is built on the <a href="https://www.techtarget.com/searchenterprisedesktop/news/252496114/Microsoft-to-drop-Edge-Legacy-from-upcoming-Windows-update"> Chromium platform</a>, an open source browser project designed to make the web faster, safer and more stable. With Internet Explorer mode included in Edge, end users can work with modern and legacy applications without switching between browsers or relying on the retired Internet Explorer browser.</p> <p>Many organizations still rely on internal web applications built for Internet Explorer. IE mode allows IT teams to maintain access to those applications while standardizing on Microsoft Edge as the primary enterprise browser and gradually modernizing legacy systems.</p> <p>Administrators can easily enable the feature across their managed desktops so specific websites will automatically render in IE mode when users access them. Alternatively, users can manually enable the feature to apply IE mode to other websites.</p> <section class="section main-article-chapter" data-menu-title="What is Internet Explorer mode in Microsoft Edge?"> <h2 class="section-title"><i class="icon" data-icon="1"></i>What is Internet Explorer mode in Microsoft Edge?</h2> <p>Internet Explorer mode enables users to access modern and <a href="https://www.techtarget.com/searchitoperations/definition/legacy-application">legacy websites</a> within a single browser. The Chromium engine built into Edge uses the same open source browser platform that powers Google Chrome, making it well-suited for modern web applications. However, the Chromium engine isn't meant for IE-based websites, which some organizations continue to support. For this reason, Edge also includes the Trident (MSHTML) engine from Internet Explorer 11, enabling users to work with web applications created for IE alongside modern web apps.</p> <p>When users enter IE mode, in-page navigations such as links, forms and scripts all stay on the page, so users can navigate the website as though working in Internet Explorer 11. However, actions such as entering a new URL or navigating to a page that is not configured for IE mode will cause Edge to switch back to its standard Chromium rendering engine.</p> <p>IE mode in Microsoft Edge supports most Internet Explorer functionality, such as Edge extensions, document modes, enterprise modes, security zone policies, Browser Helper Objects and Internet Explorer F12 developer tools. However, IE mode does not support features such as Internet Explorer toolbars, navigation menu policies or Edge F12 developer tools.</p> <blockquote class="main-article-pullquote"> <div class="main-article-pullquote-inner"> <figure> Administrators can easily enable the feature across their managed desktops so specific websites will automatically render in IE mode. </figure> <i class="icon" data-icon="z"></i> </div> </blockquote> <p>Organizations can use Internet Explorer mode to continue to view IE-based websites as they <a href="https://www.techtarget.com/searchenterprisedesktop/news/252491456/Microsoft-redirects-to-Edge-as-IE-nears-end-of-life">transition away from Internet Explorer</a>, which Microsoft officially retired in February 2023.</p> </section> <section class="section main-article-chapter" data-menu-title="How to enable Internet Explorer mode in Microsoft Edge"> <h2 class="section-title"><i class="icon" data-icon="1"></i>How to enable Internet Explorer mode in Microsoft Edge</h2> <p>There are several ways to enable IE mode on Edge, but the most common is to use the Enterprise Site List Manager after enabling Internet Explorer compatibility.</p> <h3>Enable Internet Explorer compatibility settings in Edge</h3> <p>Before users or administrators can dictate which sites can be opened in Internet Explorer mode, they must first enable Internet Explorer compatibility through the following steps:</p> <ol class="default-list"> <li>Open Microsoft Edge.</li> <li>Click <strong>Settings and more</strong>, marked with an ellipsis, in the top right corner.</li> <li>Select <strong>Settings</strong>.</li> <li>Click <strong>Default browser</strong> from the list on the right.</li> <li>Under the <strong data-end="834" data-start="799">Internet Explorer compatibility</strong> section, set <strong data-end="914" data-start="848">Allow sites to be reloaded in Internet Explorer mode (IE mode)</strong> to <strong data-end="927" data-start="918">Allow</strong>.</li> <li>Click the <strong>Restart </strong>button to refresh the browser and implement the changes.</li> </ol> <figure class="main-article-image full-col" data-img-fullsize="https://www.techtarget.com/rms/onlineimages/screenshot_1_iemode-f.jpg"> <img data-src="https://www.techtarget.com/rms/onlineimages/screenshot_1_iemode-f_mobile.jpg" class="lazy" data-srcset="https://www.techtarget.com/rms/onlineimages/screenshot_1_iemode-f_mobile.jpg 960w,https://www.techtarget.com/rms/onlineimages/screenshot_1_iemode-f.jpg 1280w" alt="Screenshot of the Microsoft Edge settings page showing Internet Explorer compatibility options." height="306" width="560"> <figcaption> <i class="icon pictures" data-icon="z"></i>The Internet Explorer compatibility settings in Microsoft Edge allow users or administrators to enable IE mode for specific websites. </figcaption> <div class="main-article-image-enlarge"> <i class="icon" data-icon="w"></i> </div> </figure> <p>They must then restart their browsers, making the feature available to individual websites. After enabling IE mode, users can manually apply it to individual websites by following these steps:</p> <ol class="default-list"> <li>Go to the website.</li> <li>Click the <strong>Settings and more</strong> ellipsis in the upper right corner.</li> <li>Point to <strong>More tools</strong>, and then click <strong>Reload in Internet Explorer mode</strong>.</li> </ol> <p>Edge will reload, and the page will display an IE logo indicator, which the user can click to view more information. A banner will appear at the top of the page with a message about IE mode and Edge, along with an option for exiting IE mode.</p> <h3>Enterprise Site List Manager</h3> <p>Administrators that manage Windows 11 computers and the Edge browser can configure IE mode on their end users' computers using tools such as <a href="https://www.techtarget.com/searchwindowsserver/definition/Group-Policy-Management-Console">Group Policy Management Console</a>, <a href="https://www.techtarget.com/searchitchannel/definition/Microsoft-Intune">Microsoft Intune</a> or Microsoft's Enterprise Site List Manager.</p> <p>Enterprise Site List Manager is an in-browser tool that lets an administrator manage an organization's site list, found at <em>edge://compat/SiteListManager</em>. The enterprise mode site list should include all the website URLs that require Internet Explorer. When users connect to one of the listed sites, the browser will automatically render the page in IE mode without the user having to take any actions. Any URLs that users go to that are not on the list render as modern websites.</p> <p>To add sites to Enterprise Site List Manager, follow these steps.</p> <ol class="default-list"> <li>In Enterprise Site List Manager, select <strong>Add a site</strong>.</li> <li>Type the website's URL in the dialog box and select <strong>Open in IE Mode</strong> from the dropdown menu.</li> <li>Click <strong>Add</strong> to save the URL and settings to the site list.</li> </ol> <figure class="main-article-image full-col" data-img-fullsize="https://www.techtarget.com/rms/onlineimages/screenshot2_sitelist-f.jpg"> <img data-src="https://www.techtarget.com/rms/onlineimages/screenshot2_sitelist-f_mobile.jpg" class="lazy" data-srcset="https://www.techtarget.com/rms/onlineimages/screenshot2_sitelist-f_mobile.jpg 960w,https://www.techtarget.com/rms/onlineimages/screenshot2_sitelist-f.jpg 1280w" alt="Screenshot of the Microsoft Edge Enterprise Site List Manager showing the interface used to add websites that load in Internet Explorer mode." height="306" width="560"> <figcaption> <i class="icon pictures" data-icon="z"></i>The Enterprise Site List Manager in Microsoft Edge lets administrators add legacy websites that should automatically open in Internet Explorer mode. </figcaption> <div class="main-article-image-enlarge"> <i class="icon" data-icon="w"></i> </div> </figure> <p>After adding the list of websites, admins should save it to an XML file and store it in an HTTPS location, network share or local computer. Microsoft recommends using HTTPS, although a local folder works fine for testing.</p> <p>Administrators can use the EnterpriseModeSiteListManagerAllowed group policy to allow users access to the site list manager tool. When enabled, users can view the Enterprise Site List Manager on the left pane in <em>edge://compat</em>.</p> <p>While implementing Internet Explorer mode is straightforward, IT's efforts will need to focus on maintaining the site list. However, the list will likely shrink over time as IE-based applications reach end of life and organizations migrate to modern web technologies. Until then, IE mode could prove a useful asset to organizations still supporting IE-based applications and looking for ways to simplify their operations and improve the user experience.</p> <p>Although many organizations still rely on IE-based applications, most IT teams are gradually replacing them with modern web applications to reduce compatibility risks and improve security.</p> <p><em>Robert Sheldon is a freelance technology writer. He has written numerous books, articles and training materials on a wide range of topics, including big data, generative AI, 5D memory crystals, the dark web and the 11th dimension.</em></p> </section> Internet Explorer mode in Microsoft Edge lets organizations run legacy IE web applications in a modern browser, helping maintain compatibility with older websites. https://cdn.ttgtmedia.com/rms/onlineimages/keyboard_g164210754.jpg https://www.techtarget.com/searchenterprisedesktop/tip/How-to-enable-Internet-Explorer-mode-on-Microsoft-Edge Wed, 11 Mar 2026 12:34:00 GMT <p>Keeping BIOS and Unified Extensible Firmware Interface (<a href="https://www.techtarget.com/whatis/definition/Unified-Extensible-Firmware-Interface-UEFI">UEFI</a>) firmware up to date is essential for a stable, compliant Windows 11 fleet.</p> <p>Modern PCs technically use UEFI firmware, not the old legacy BIOS, but the two terms are often used interchangeably. BIOS was the original firmware system, limited to 16‑bit code and small Master Boot Record disks; UEFI is its faster, more secure successor that supports features like Secure Boot and GUID Partition Table drives. Despite this shift, Windows interfaces still call the firmware setup screen "the BIOS." Making sure this system firmware is up to date is a key part of Windows management.</p> <p>Updating BIOS/UEFI firmware can be an important step for <a href="https://www.techtarget.com/searchenterprisedesktop/tip/Troubleshooting-the-most-common-issues-with-Windows-11">troubleshooting hardware issues</a>. When logging a support request with a hardware manufacturer, it's typically one of the first steps that IT is instructed to take. It's also important from a security perspective. Maintaining up-to-date firmware ensures that systems are patched and protected from the latest threats.</p> <p>Running BIOS updates should be part of IT's regular maintenance tasks to ensure that Windows devices are running optimally and securely. Ignoring these updates can lead to the following problems:</p> <ul type="disc" class="default-list"> <li>Performance issues.</li> <li>Security vulnerabilities.</li> <li>Missing functionality.</li> <li>Incompatibility with a new operating system.</li> <li>Compliance audit failures.</li> </ul> <p>IT leaders must establish a reliable approach to BIOS/UEFI updates. Modern Windows 11 computers from Lenovo, HP and Dell now support streamlined, OS‑level firmware updates that reduce operational overhead. Understanding these tools and how to integrate them into enterprise maintenance workflows helps ensure that every device in the organization remains secure, functional and fully supported.</p> <section class="section main-article-chapter" data-menu-title="How to update firmware for BIOS systems"> <h2 class="section-title"><i class="icon" data-icon="1"></i>How to update firmware for BIOS systems</h2> <p>Historically, IT administrators would need to update the firmware from the BIOS system itself, but with modern UEFI/BIOS systems and Windows 11, it's possible to do it from the OS without booting into the system directly.</p> <p>Most hardware manufacturers have their own utilities to help keep firmware and drivers up to date from within Windows, but there is the option to download and install BIOS updates manually. However, unless the system is unbootable because it's corrupt, it makes more sense to install the updates from the OS.</p> <h3>Installing BIOS updates on Lenovo devices in Windows 11</h3> <p>On Lenovo devices, administrators can choose from two methods to install BIOS updates. The first option is to use Lenovo Vantage. First, if the Lenovo Vantage app isn't already on the device, install it from the Microsoft Store. Open the app and click the <b>Check for updates</b> button. The software will then check for available updates, including any BIOS updates that are compatible with the Windows 11 system.</p> <p>The second option is to download and install the updates manually from the Lenovo website. Take the following steps:</p> <ol type="1" start="1" class="default-list"> <li>Go to Lenovo's support <a target="_blank" href="https://support.lenovo.com/us/en" rel="noopener">website</a>.</li> <li>From the product family types, select <b>PC</b>.</li> <li>To find the device, click <b>Detect Product</b>, or click <b>Browse Product</b> and search for the hardware model.</li> <li>After finding the device, scroll down and click on the <b>Drivers and Software</b> option. Then, click <b>Select Drivers</b> under the Manual Update option.</li> <li>Select the <b>BIOS/UEFI</b> option and click <b>Download</b> for the latest update installer.</li> <li>Run the installer.</li> </ol> <h3>Installing BIOS updates on HP devices in Windows 11</h3> <p>To install BIOS updates from the OS on an HP device, admins can use the HP Support Assistant. First, install the <a target="_blank" href="https://support.hp.com/us-en/help/hp-support-assistant" rel="noopener">software</a> from the HP website. Open the tool and go to My devices &gt; Updates &gt; Check for updates and messages. Once the checks are complete, the Support Assistant will list any available firmware and BIOS updates. Select and install the desired updates.</p> <p>To manually install BIOS updates on an HP device, take the following steps:</p> <ol type="1" start="1" class="default-list"> <li>Go to HP's support <a target="_blank" href="https://support.hp.com/us-en/drivers" rel="noopener">website</a>.</li> <li>Choose the product type -- <b>Laptop</b> or <b>Desktop</b>, depending on the device.</li> <li>Type in the device's serial number and search for it.</li> <li>After finding the device, a list of available software and firmware for the device will appear. Expand the option labeled <b>BIOS</b> and click <b>Download</b> for the corresponding update.</li> <li>Once the download is complete, run the installer.</li> </ol> <h3>Installing BIOS updates on Dell devices in Windows 11</h3> <p>To install BIOS updates from the OS on a Dell device, admins can use Dell SupportAssist. Install the <a target="_blank" href="https://www.dell.com/support/contents/en-us/article/product-support/self-support-knowledgebase/software-and-downloads/support-assist/supportassist-for-business-pc" rel="noopener">software</a> from the Dell website, then open it and go to <b>Drivers and Downloads</b>. Select <b>BIOS Update</b>, and the software will check the BIOS version. If the software indicates that an update is available, select <b>Install</b>.</p> <p>To manually install BIOS updates on a Dell device, take the following steps:</p> <ol type="1" start="1" class="default-list"> <li>Go to Dell's support <a target="_blank" href="https://www.dell.com/support/home/en-us" rel="noopener">website</a>. &nbsp;</li> <li>Enter the service tag.</li> <li>Under Drivers and Downloads, find <b>BIOS</b>. Download the latest update from that page.</li> <li>Run the downloaded .exe file from within Windows.</li> </ol> <p>Up-to-date BIOS/UEFI firmware is crucial for device protection and performance. By standardizing these update processes and ensuring they're executed consistently across the device fleet, IT leaders can reduce support incidents, close security gaps and maintain compliance with evolving regulatory requirements.</p> <p><i>Jake Gardner works with regional organizations, helping them to use technology to provide practical, functional solutions. </i></p> </section> Firmware is an often-overlooked layer in device security and performance. Find the best way to update BIOS/UEFI and close gaps that threaten enterprise stability. https://cdn.ttgtmedia.com/rms/onlineimages/check_g530502390.jpg https://www.techtarget.com/searchenterprisedesktop/tip/How-to-update-BIOS-on-Windows-11 Wed, 11 Mar 2026 10:32:00 GMT <p>Dual‑booting Windows and Linux lets one machine run both OSes natively. This offers flexibility, hardware access and a cost‑effective way to use the best tools from each platform.</p> <p>A standard enterprise workstation has a single OS installed. The OS is usually Windows 11, but there are many cases in which Linux distributions would be helpful to administrators, developers and other power users. Dual-booting involves installing two OSes on the same hardware, then using a bootloader menu to select the desired OS when the system starts up. Changing to the other OS requires you to reboot and change your selection at the bootloader menu.</p> <section class="section main-article-chapter" data-menu-title="Why perform a Linux dual-boot?"> <h2 class="section-title"><i class="icon" data-icon="1"></i>Why perform a Linux dual-boot?</h2> <p>Dual-boots are complete installations that take full advantage of the system's native hardware capabilities. While alternatives like VMs can be useful, they don't fit in every use case.</p> <p>Adding a Linux operating system to an existing Windows installation offers a capable and flexible option for using applications. Benefits include the following:</p> <ul type="disc" class="default-list"> <li>It enables one hardware investment to be used for testing multiple apps, drivers or other software components on different OSes.</li> <li>It offers access to specialized hardware from multiple OSes, which might not be possible using VMs.</li> <li>It enables access to OS-specific applications from a single piece of hardware. For example, you can use <a href="https://www.techtarget.com/searchsecurity/feature/Why-Kali-Linux-is-the-go-to-distribution-for-penetration-testing">Kali Linux for penetration testing</a> on an admin workstation while also using Windows-only applications, all from one laptop.</li> </ul> </section> <section class="section main-article-chapter" data-menu-title="How to dual-boot Windows and Linux"> <h2 class="section-title"><i class="icon" data-icon="1"></i>How to dual-boot Windows and Linux</h2> <p>Before starting the dual-boot configuration, you must take a few preliminary steps. The following tasks are necessary:</p> <ul type="disc" class="default-list"> <li>Back up essential data on the system using the <a href="https://www.techtarget.com/searchDataBackup/tutorial/How-to-use-the-Windows-Server-Backup-tool">Windows backup utility</a>.</li> <li>Select a Linux distribution. Common choices include Ubuntu, Mint, Fedora and Rocky.</li> <li>Choose a USB flash drive large enough for the Linux distribution image you selected. The standard recommendation is at least 8 GB.</li> <li>Have your Windows install/repair media handy in case you need to recover the OS.</li> </ul> <p>Familiarize yourself with all steps in this procedure before starting.</p> <figure class="main-article-image full-col" data-img-fullsize="https://www.techtarget.com/rms/onlineimages/popular_linux_distributions-f.png"> <img data-src="https://www.techtarget.com/rms/onlineimages/popular_linux_distributions-f_mobile.png" class="lazy" data-srcset="https://www.techtarget.com/rms/onlineimages/popular_linux_distributions-f_mobile.png 960w,https://www.techtarget.com/rms/onlineimages/popular_linux_distributions-f.png 1280w" alt="Infographic describing popular Linux distributions." data-credit="Informa TechTarget" height="353" width="560"> <div class="main-article-image-enlarge"> <i class="icon" data-icon="w"></i> </div> </figure> <p>The following steps can help simplify this process:</p> <ul type="disc" class="default-list"> <li><b>Install Windows before installing Linux.</b> Linux typically accepts alternate OSes more easily than Windows.</li> <li><b>Verify your hardware meets the minimum standards for each OS.</b> Linux is usually more forgiving of older hardware.</li> <li><b>Go through the process slowly and read each prompt carefully.</b> This is especially important when creating partitions to avoid overwriting your Windows installation.</li> <li><b>Confirm Linux drivers exist for any custom or uncommon hardware. </b>Today's Linux distributions typically have a solid list of available drivers, but it's best to check before beginning the installation.</li> </ul> <p>You can also use this process to install more than just two OSes. In theory, you can install as many as your storage disks can support. However, two or three OS installations are usually sufficient. For example, you might have a desktop computer with the following combinations:</p> <ul type="disc" class="default-list"> <li>Windows 11, Ubuntu Linux and Kali Linux.</li> <li>Windows 11, Fedora Linux and Kali Linux.</li> <li>Windows 10, Linux Mint and Rocky Linux.</li> </ul> <p>Once you confirm the prerequisites are in place and you've backed up your data, it's time to get started.</p> <h3>Prepare the existing Windows installation</h3> <p>Your existing Windows installation probably consumes the entire storage disk on the system. If so, you'll need to <a href="https://www.techtarget.com/searchwindowsserver/tip/Using-Diskpart-to-create-extend-or-delete-a-disk-partition">free up disk space</a> for your new Linux installation. Shrink the Windows partition(s) using the native Disk Management utility. Requirements vary by distribution, but assume you'll need around 30 GB. Remember that your Linux distribution needs room for updates, applications and any data you generate. It also requires free disk space for virtual memory and other system operations.</p> <p>Take the following steps to shrink the partitions:</p> <ol type="1" start="1" class="default-list"> <li>Back up your data.</li> <li>Open the Windows 11 Disk Management utility.</li> <li>Right-click a partition and select <b>Shrink Volume</b>.</li> <li>Enter the amount of space to shrink. Be careful to leave some room for additional data.</li> <li>Select <b>Shrink</b> to begin the process.</li> </ol> <p>Leave the resulting unallocated space for your new Linux installation. The Linux installer will see this space once you begin the installation process.</p> <p>You could also use other tools, such as the open source GParted partition editor.</p> <p>Disable the Windows Fast Startup and Secure Boot features to avoid startup issues while installing Linux. The Fast Startup feature improves Windows boot times by combining the hibernation and shutdown processes. However, it also locks the partition, interfering with some dual-boot configurations.</p> <p>You might also need to disable Secure Boot, though most <a href="https://www.techtarget.com/searchdatacenter/tip/Discover-the-three-major-CentOS-clones">modern Linux distributions</a> use signed drivers and bootloaders, so it might not be an issue. Consider disabling it during the installation procedure and then testing it after you finish the dual-boot configuration.</p> <h3>Create Linux installation media</h3> <p>You must create media containing the Linux distribution you've selected. This step typically involves using a USB drive. Make sure the drive is 8 GB or larger.</p> <p>Use the following steps to configure the bootable USB drive:</p> <ol type="1" start="1" class="default-list"> <li>Download the latest ISO image for your chosen Linux distribution from the distribution's official site.</li> <li>Install either <a target="_blank" href="https://github.com/balena-io/etcher" rel="noopener">Etcher</a> or <a href="https://bztsrc.gitlab.io/usbimager/" target="_blank" rel="noopener">USBImager</a> on your Windows OS. You only need one of these tools.</li> <li>Open the selected tool and browse to the ISO file. Then, select the target USB drive.</li> <li>Select <b>Write</b> if using USBImager, or <b>Flash!</b> if using Etcher.</li> </ol> <p>The USB drive is ready once the process completes.</p> <p>Next, boot from the USB installation media to bypass Windows. Be careful during the partitioning phase. If you overwrite the Windows partition, you'll lose access to Windows and any data stored on that partition.</p> <h3>Install Linux</h3> <p>Thousands of Linux distributions exist, but most follow a similar installation process. The following steps should work for any of the more popular distributions.</p> <p>The Linux installer application should recognize the existing Windows bootloader and OS. It will prompt you to "Install alongside Windows Boot Manager" or possibly display a "Something else" option. A mistake here could overwrite your Windows installation.</p> <p>Use the following basic steps:</p> <ol type="1" start="1" class="default-list"> <li>Start the installer and select <b>Install Linux</b>.</li> <li>Choose your language, region and desired keyboard layout.</li> <li>Configure network settings, including DHCP client status or a static IP address. You might also adjust network settings after the installation process.</li> <li>Select your partition options. Do not select "Erase the disk" or similar options. Select the option for custom partitions. Use the available free space for Linux, and do not delete the partitions where Windows resides.</li> <li>Create a user account and grant it administrative privileges.</li> <li>Some distributions let you select additional software, such as LibreOffice, Apache or security tools.</li> </ol> <p>Update Linux and the installed applications once the system reboots.</p> <p>Once the Linux installer prompts you to install the Grub2 bootloader, accept the prompt. Grub2 should detect the Windows installation and generate a menu entry for it. It displays the menu during the startup process, enabling you to select the Windows or Linux entry.</p> <p>On some systems, you might need to modify the boot options in the BIOS. To do this, boot to the BIOS, select the <b>Boot Menu</b> option and click <b>UEFI NVMe Drive BBS Priorities</b>. Then, set Linux as <b>Boot Option 1</b>. The process or wording might vary slightly depending on the system.</p> <h3>Update Linux and install applications</h3> <p>Don't forget to update your new Linux installation. The updates provide current drivers, applications, kernel improvements and other essential patches that keep Linux secure and efficient.</p> <p>You'll maintain Linux software using <a href="https://www.techtarget.com/searchITOperations/tip/How-to-use-Linux-package-managers">package managers</a>. There are two main package manager choices, and they're related to various distributions:</p> <ul type="disc" class="default-list"> <li>If your distribution is Fedora, Red Hat Enterprise Linux, Rocky, AlmaLinux or similar, your command-line package manager is DNF.</li> <li>If your distribution is Debian, Ubuntu, Mint, Kali or similar, your command-line package manager is APT.</li> </ul> <p>If you installed a GUI with your Linux distribution, you should also have access to a GUI-based software maintenance app. Install tools like web browsers, word processors, games, databases and other programs using these package managers.</p> <h3>Select an OS</h3> <p>After configuring the dual-boot setup, you'll select an operating system each time the computer boots up. The bootloader presents a menu during the startup process that lets you choose your Windows or Linux installation. Select the OS you need for your current tasks. Reboot the computer when you want to switch platforms.</p> </section> <section class="section main-article-chapter" data-menu-title="Alternative ways to run Linux alongside Windows"> <h2 class="section-title"><i class="icon" data-icon="1"></i>Alternative ways to run Linux alongside Windows</h2> <p>Dual-booting Windows and Linux can help maximize the usefulness of one workstation without purchasing or maintaining additional hardware. It frees you to use the best applications for the job at hand, whether they're <a href="https://www.techtarget.com/searchenterprisedesktop/tip/Comparing-the-Linux-kernel-vs-the-Windows-kernel">Windows or Linux programs</a>.</p> <p>If, for whatever reason, dual-booting a computer isn't viable, you can consider the following alternative options:</p> <ul class="default-list"> <li>Virtual machines can run almost any Linux distribution, enabling a wide range of application platforms without buying additional hardware. Your host system needs to be fairly high-performance, and you'll need to select a virtualization platform.</li> </ul> <ul type="disc" class="default-list"> <li><a href="https://www.itprotoday.com/linux-os/how-to-use-windows-subsystem-for-linux">Windows Subsystem for Linux</a> enables admins and developers to run Linux apps natively, including an isolated file system and support for graphical applications.</li> </ul> <ul type="disc" class="default-list"> <li>Containers can run specific apps using Docker or similar container platforms on your local workstation and OS.</li> <li><a href="https://www.techtarget.com/searchitoperations/tip/What-is-a-Raspberry-Pi-used-for">Raspberry Pi</a> and other single-board computers run Linux well and require only a minimal hardware investment.</li> </ul> <p>A dual‑boot configuration offers native performance and full hardware access for both OSes, making it a strong option for mixed‑environment workloads. Evaluating this approach alongside virtualization, containers and other tools helps ensure the system design aligns with your operational and administrative needs.</p> <p><i>Damon Garn owns Cogspinner Coaction and provides freelance IT writing and editing services. He has written multiple CompTIA study guides, including the Linux+, Cloud Essentials+ and Server+ guides, and contributes extensively to Informa TechTarget, The New Stack and CompTIA Blogs.</i></p> </section> Adding Linux alongside Windows enables dual‑boot setups that maximize hardware, support specialized apps and give administrators and developers a flexible multi‑OS workflow. https://cdn.ttgtmedia.com/rms/onlineimages/container_g1062387306.jpg https://www.techtarget.com/searchenterprisedesktop/tip/How-to-perform-a-dual-boot-with-Windows-and-Linux Fri, 06 Mar 2026 14:39:00 GMT <p>Windows Print Management is a Microsoft Management Console (MMC) snap-in that desktop administrators can use to manage and troubleshoot print servers and printers on Windows 11 systems.</p> <p>The centralized Print Management interface enables IT to configure print drivers, forms, ports and the printers themselves from a single location. However, it's possible that this tool is not accessible at all, either because it has not been installed or because there is a problem with the installation. Fortunately, as an administrator, you have multiple options for getting Print Management up and running on Windows 11 systems.</p> <section class="section main-article-chapter" data-menu-title="Accessing Print Management in Windows 11"> <h2 class="section-title"><i class="icon" data-icon="1"></i>Accessing Print Management in Windows 11</h2> <p>As handy as Print Management is, it's not always apparent how to launch it. For example, it's not listed as one of the apps in the Start menu, and it might or might not be listed&nbsp;with the other Windows tools in Control Panel. For reference, these are the tools that are referred to as Administrative Tools in Windows 10. In any case, there are a number of different options for launching the Windows Print Management console.</p> <h3>1. Use the Run Prompt</h3> <p>One of the simplest ways to launch Print Management is to open a&nbsp;<b>Run</b>&nbsp;command window, type&nbsp;<b>printmanagement.msc</b>, and click&nbsp;<b>OK</b>. PrintManagement.msc is the name of the Print Management file, which is located in the <em>%windir%\Windows\system32</em> folder.</p> <p>You must type the entire Print Management file name -- <b>printmanagement.msc</b> -- in the <b>Run</b>&nbsp;command window. Typing&nbsp;<b>printmanagement</b>&nbsp;or&nbsp;<b>Print</b>&nbsp;<b>Management</b>&nbsp;will not work.</p> <h3>2. Use Windows Search</h3> <p>Another way to launch Print Management is to perform a Windows search for&nbsp;<b>printmanagement.msc</b>, once again making sure to use the entire file name.</p> <h3>3. Use a Command Line Interface</h3> <p>Still another option for opening Print Management is to use a&nbsp;<a href="https://www.techtarget.com/whatis/definition/command-prompt">Command Prompt</a>&nbsp;window or a&nbsp;<a href="https://www.techtarget.com/searchwindowsserver/definition/PowerShell">PowerShell</a> session, in which case, you need only enter <b>printmanagement.msc</b>&nbsp;at the command prompt -- again, avoiding&nbsp;<b>printmanagement</b>&nbsp;and&nbsp;<b>Print</b>&nbsp;<b>Management</b>.</p> <h3>4. Use the Microsoft Management Console</h3> <p>If you plan to use Print Management regularly, along with other MMC tools, you might consider creating a custom MMC console and adding Print Management as one of the snap-ins.</p> <p>To do so, enter the MMC command at the run prompt. This will cause Windows to open an empty console. Next, choose the <strong>Add or Remove Snap-ins</strong> command from the console's file menu. Select the <strong>Print Management</strong> option from the list of available snap-ins and click <strong>Add</strong> (Figure 1).</p> <figure class="main-article-image full-col" data-img-fullsize="https://www.techtarget.com/rms/onlineimages/windows_eleven_print_issues_1-f.jpg"> <img data-src="https://www.techtarget.com/rms/onlineimages/windows_eleven_print_issues_1-f_mobile.jpg" class="lazy" data-srcset="https://www.techtarget.com/rms/onlineimages/windows_eleven_print_issues_1-f_mobile.jpg 960w,https://www.techtarget.com/rms/onlineimages/windows_eleven_print_issues_1-f.jpg 1280w" alt="The Microsoft Management Console snap-in tools showing the Print Management utility as active." data-credit="Robert Sheldon" height="306" width="560"> <figcaption> <i class="icon pictures" data-icon="z"></i>Figure 1. The selected Snap-ins showing Print Management included in the current Windows 11 build. </figcaption> <div class="main-article-image-enlarge"> <i class="icon" data-icon="w"></i> </div> </figure> <p>When you add the Print Management snap-in, you'll be prompted to specify one or more print servers. If all you need is the local server, you can simply click the <strong>Add the Local Server</strong> button. Click <strong>Finish</strong>, followed by <strong>OK</strong> to return to the console. You can use the console as it is, but if you want to save the console's configuration for future use, you can do so by using the <strong>Save As</strong> option found on the File menu.</p> </section> <section class="section main-article-chapter" data-menu-title="Introducing Print Management in Windows 11"> <h2 class="section-title"><i class="icon" data-icon="1"></i>Introducing Print Management in Windows 11</h2> <p>The Print Management interface provides a hierarchical view of the local&nbsp;<a href="https://www.techtarget.com/whatis/definition/print-server">print server</a> and any connected network print servers. For each print server, you can access information about print drivers, forms, ports and printers. You can also carry out multiple tasks specific to each category. For instance, you can uninstall printer drivers, add print forms, delete ports or configure printer settings. In this example, the Canon MF260 printer is selected in the main window. If you right-click the printer, a context menu appears, providing several options for working with the printer (Figure 2).</p> <figure class="main-article-image full-col" data-img-fullsize="https://www.techtarget.com/rms/onlineimages/windows_eleven_print_issues_2-f.jpg"> <img data-src="https://www.techtarget.com/rms/onlineimages/windows_eleven_print_issues_2-f_mobile.jpg" class="lazy" data-srcset="https://www.techtarget.com/rms/onlineimages/windows_eleven_print_issues_2-f_mobile.jpg 960w,https://www.techtarget.com/rms/onlineimages/windows_eleven_print_issues_2-f.jpg 1280w" alt="The pop-up menu revealed by right-clicking the Canon MF260 printer in Print Management." data-credit="Robert Sheldon" height="406" width="560"> <figcaption> <i class="icon pictures" data-icon="z"></i>Figure 2. The context menu for the Canon MF260 printer within the Windows 11 Print Management utility. </figcaption> <div class="main-article-image-enlarge"> <i class="icon" data-icon="w"></i> </div> </figure> <p>You can open the printer queue, pause printing, set printing defaults, print a test page or share the printer. You can also delete the printer, rename it or deploy it with group policy if the computer is connected to a domain.</p> <p>You can access the printer's properties through the context menu or by double-clicking the printer. From the <b>Properties</b>&nbsp;dialog box, you can view additional information about the printer and carry out a variety of other tasks. For example, the&nbsp;<b>General</b>&nbsp;tab lets you change the printer's name, add a location or comment, and view information about the printer's features (Figure 3).</p> <figure class="main-article-image full-col" data-img-fullsize="https://www.techtarget.com/rms/onlineimages/windows_eleven_print_issues_3-h.jpg"> <img data-src="https://www.techtarget.com/rms/onlineimages/windows_eleven_print_issues_3-h_half_column_mobile.jpg" class="lazy" data-srcset="https://www.techtarget.com/rms/onlineimages/windows_eleven_print_issues_3-h_half_column_mobile.jpg 960w,https://www.techtarget.com/rms/onlineimages/windows_eleven_print_issues_3-h.jpg 1280w" alt="The Print Management Properties Window for a Canon MF260 printer." data-credit="Robert Sheldon" height="355" width="280"> <figcaption> <i class="icon pictures" data-icon="z"></i>Figure 3. The properties of the Canon MF260 shown in the General tab of the menu. </figcaption> <div class="main-article-image-enlarge"> <i class="icon" data-icon="w"></i> </div> </figure> <p>You can also print a test page or access print preferences.</p> <p>The&nbsp;<b>General</b>&nbsp;tab is just one of multiple tabs in the&nbsp;<b>Properties</b>&nbsp;dialog box, most of which are self-explanatory. For instance, you can use the&nbsp;<b>Security</b>&nbsp;tab to manage the printer's permissions, the&nbsp;<b>Sharing</b>&nbsp;tab to share the printer and the&nbsp;<b>Device Settings</b>&nbsp;tab to configure printer settings.</p> <p>In addition, you can use the&nbsp;<b>Advanced</b> tab to configure availability, spooling and other settings (Figure 4). You can also set the printing defaults, select the print processor and specify a separator page from this tab.</p> <figure class="main-article-image full-col" data-img-fullsize="https://www.techtarget.com/rms/onlineimages/windows_eleven_print_issues_4-h.jpg"> <img data-src="https://www.techtarget.com/rms/onlineimages/windows_eleven_print_issues_4-h_half_column_mobile.jpg" class="lazy" data-srcset="https://www.techtarget.com/rms/onlineimages/windows_eleven_print_issues_4-h_half_column_mobile.jpg 960w,https://www.techtarget.com/rms/onlineimages/windows_eleven_print_issues_4-h.jpg 1280w" alt="The Advanced settings tab for the Properties menu in Windows 11 Print Management." data-credit="Robert Sheldon" height="355" width="280"> <figcaption> <i class="icon pictures" data-icon="z"></i>Figure 4. The Properties menu for the Canon MF260 showing the Advanced options. </figcaption> <div class="main-article-image-enlarge"> <i class="icon" data-icon="w"></i> </div> </figure> <p>Print Management in Windows 11 also lets you perform tasks at the server level, such as add a printer, export printers to a file, import printers from a file, set notifications and carry out other tasks. In addition, you can access the server's properties and configure security at the server level, specify the spool folder and perform additional operations.</p> <p>There are many other printer-related tasks you can perform in Print Management, and there are often multiple methods to access different features. The best way to learn about Print Management is to open it up and start exploring the utility. You'll find that the interface is simple to navigate and easy to understand. It provides a valuable tool for print management in Windows 11.</p> </section> <section class="section main-article-chapter" data-menu-title="What to do if you can't access Print Management"> <h2 class="section-title"><i class="icon" data-icon="1"></i>What to do if you can't access Print Management</h2> <p>Once you figure out how to launch Print Management, you should be able to use the tool with little problem. However, you might encounter a situation where you cannot access or find the Print Management snap-in. For example, when you try to launch it from a&nbsp;<b>Run</b>&nbsp;command window, Windows 11 might instead return the error that includes the following message: "Windows cannot find 'printmanagement.msc'. Make sure you typed the name correctly, and then try again."</p> <p>Often, the reason that Print Management is not available is that it hasn't been installed on the local Windows 11 computer. In fact, it's considered an optional feature in Windows 11 and sometimes needs to be manually added to the system (although installing a printer driver can automatically add the feature). It's worth noting that Print Management is available only to the <a href="https://www.techtarget.com/searchenterprisedesktop/tip/Understanding-the-features-of-Windows-11-Enterprise">Windows 11 Professional and Enterprise editions</a>, not to the Home editions.</p> <p>To add Print Management, open the Settings app and click <b>System</b>. Next, click <b>Optional</b>&nbsp;<b>features</b>. Check the list of installed features to see whether or not Print Management is installed. If not, click <b>View Features</b> and then start typing&nbsp;<b>print management</b> into the search box. When you find the app, click the associated check box and select <b>Next</b>&nbsp;(Figure 5).</p> <figure class="main-article-image full-col" data-img-fullsize="https://www.techtarget.com/rms/onlineimages/windows_eleven_print_issues_5-f.jpg"> <img data-src="https://www.techtarget.com/rms/onlineimages/windows_eleven_print_issues_5-f_mobile.jpg" class="lazy" data-srcset="https://www.techtarget.com/rms/onlineimages/windows_eleven_print_issues_5-f_mobile.jpg 960w,https://www.techtarget.com/rms/onlineimages/windows_eleven_print_issues_5-f.jpg 1280w" alt="The option to add Print Management to the Windows 11 utilities." data-credit="Robert Sheldon" height="707" width="560"> <figcaption> <i class="icon pictures" data-icon="z"></i>Figure 5. The dialogue menu to add Print Management to the Windows 11 desktop. </figcaption> <div class="main-article-image-enlarge"> <i class="icon" data-icon="w"></i> </div> </figure> <p>After you click&nbsp;<b>Next</b>, a second screen will appear, verifying the installation. On the second screen, click&nbsp;<b>Install</b>. This will return you to the&nbsp;<b>Optional features</b> screen, where you can confirm that Print Management was recently installed (Figure 6). You can also confirm that it is listed as an installed feature. You can then close the Settings app and start up Print Management as you normally would.</p> <figure class="main-article-image full-col" data-img-fullsize="https://www.techtarget.com/rms/onlineimages/windows_eleven_print_issues_6-f.jpg"> <img data-src="https://www.techtarget.com/rms/onlineimages/windows_eleven_print_issues_6-f_mobile.jpg" class="lazy" data-srcset="https://www.techtarget.com/rms/onlineimages/windows_eleven_print_issues_6-f_mobile.jpg 960w,https://www.techtarget.com/rms/onlineimages/windows_eleven_print_issues_6-f.jpg 1280w" alt="The Windows 11 settings menu showing that Print Management was recently installed and is available to launch." data-credit="Robert Sheldon" height="408" width="560"> <figcaption> <i class="icon pictures" data-icon="z"></i>Figure 6. The recent action of a Print Management installation shown in the Windows 11 settings, with the utility circled in red. </figcaption> <div class="main-article-image-enlarge"> <i class="icon" data-icon="w"></i> </div> </figure> <p>In some cases, you might run into problems trying to start Print Management even if it seems to be installed. Before taking any other steps, you should&nbsp;<a target="_blank" href="https://answers.microsoft.com/en-us/windows/forum/all/printmanagementmsc/c2687765-cc64-4e43-9e85-92ab20318679" rel="noopener">confirm</a>&nbsp;whether the printmanagement.msc file is listed in the&nbsp;<i>%windir%\Windows\system32</i> folder. If it isn't, you should try to install it again. If it is installed, there might be an issue with the Print Management installation, perhaps caused by an update, a new driver or malware. It might be possible to fix the problem by copying the printmanagement.msc file from another computer that is running the same version of Windows 11.</p> <p>As an alternative, you can remove and reinstall the Print Management tool. To do so, open the Settings app and go to the&nbsp;<b>Optional features</b>&nbsp;screen. Expand the&nbsp;<b>Print Management</b> listing (Figure 7). Then, click <b>Uninstall</b>. Once this is complete, try to reinstall Print Management following the previous instructions.</p> <figure class="main-article-image full-col" data-img-fullsize="https://www.techtarget.com/rms/onlineimages/windows_eleven_print_issues_7-f.jpg"> <img data-src="https://www.techtarget.com/rms/onlineimages/windows_eleven_print_issues_7-f_mobile.jpg" class="lazy" data-srcset="https://www.techtarget.com/rms/onlineimages/windows_eleven_print_issues_7-f_mobile.jpg 960w,https://www.techtarget.com/rms/onlineimages/windows_eleven_print_issues_7-f.jpg 1280w" alt="The Windows 11 setting menu showing Print Management, with the button to uninstall highlighted." data-credit="Robert Sheldon" height="359" width="560"> <figcaption> <i class="icon pictures" data-icon="z"></i>Figure 7. The Optional features menu in Windows 11 settings, with the Print Management utility circled in red. The Uninstall button is in the bottom right corner. </figcaption> <div class="main-article-image-enlarge"> <i class="icon" data-icon="w"></i> </div> </figure> <p>If you're still unable to access Print Management, you can try using the Windows Deployment Image Servicing and Management (<a href="https://www.techtarget.com/searchenterprisedesktop/definition/Microsoft-Windows-Deployment-Image-Servicing-and-Management-DISM">DISM</a>) utility to verify whether Print Management is installed or to remove the app or add it back in. Because DISM is a command-line utility, you can run it in a Command Prompt window, although you must launch Command Prompt as an administrator.</p> <p>To view whether Print Management is installed, run the following command at the command prompt:</p> <pre><span style="font-family: 'courier new', courier, monospace;">dism /Online /get-capabilityinfo /capabilityname:Print.Management.Console~~~~0.0.1.0</span></pre> <p>If Print Management is installed, the&nbsp;<b>State</b>&nbsp;property will read&nbsp;<b>Installed</b>. If you think there's a problem with Print Management and you want to uninstall it, you can run the following command:</p> <pre><span style="font-family: 'courier new', courier, monospace;">dism /Online /Remove-Capability /CapabilityName:Print.Management.Console~~~~0.0.1.0</span></pre> <p>To install or reinstall Print Management, run the following command:</p> <pre><span style="font-family: 'courier new', courier, monospace;">dism /Online /add-Capability /CapabilityName:Print.Management.Console~~~~0.0.1.0</span></pre> <p>If you still can't access Print Management after trying all these options, you might need to resort to other measures. While these additional measures won't fix the console, they might fix print issues that are indirectly contributing to console problems.</p> <p>You might begin by restarting the Printer Spooler service. The easiest way to do so is to enter the <strong>Services.msc</strong> command at the Windows Run prompt to start the Service Control Manager. Next, scroll through the list of services until you locate the Print Spooler. Right-click on the Print Spooler and select the <strong>Restart</strong> command from the shortcut menu.</p> <p>If you are still having trouble, you might consider cleaning out the spool folder -- for example, running&nbsp;<i>%windir%\Windows\system32\spool\PRINTERS</i>. This folder should normally be empty unless there is an active print job or a print job that is stuck.</p> <p>Another option is to run a System File Checker scan. This will locate and repair missing or corrupted files. To do so, open a Command Prompt window and enter <span style="font-family: 'courier new', courier, monospace;">sfc /scannow</span>.</p> <p>If nothing else fixes the problem, you could reset Windows as a last resort. Before doing so, however, it's important to create a system backup, since resetting Windows is akin to reinstalling the OS.</p> <p><b>Editor's note:</b><i>&nbsp;This article was originally written by Robert Sheldon in September 2022. Brien Posey updated the article in February 2026 to reflect product changes and improve the reader experience.</i></p> <p><i>Brien Posey is a former 22-time Microsoft MVP and a commercial astronaut candidate. In his more than 30 years in IT, he has served as a lead network engineer for the U.S. Department of Defense and a network administrator for some of the largest insurance companies in America. </i></p> <p><i>Robert Sheldon is a freelance technology writer. He has written numerous books, articles and training materials on a wide range of topics, including big data, generative AI, 5D memory crystals, the dark web and the 11th dimension.</i></p> </section> IT admins can use Print Management in Windows 11 to manage all printers connected to a device, troubleshoot problems and restart devices and servers. https://cdn.ttgtmedia.com/rms/onlineimages/wfh_a382773067.jpg https://www.techtarget.com/searchenterprisedesktop/tip/How-Windows-11-Print-Management-can-fix-printer-issues Tue, 24 Feb 2026 14:59:00 GMT <p>With Windows 10 now past its end-of-support date, many organizations are rushing to complete their upgrades to Windows 11. While such upgrade planning efforts often focus on <a href="https://www.techtarget.com/searchenterprisedesktop/tip/What-does-a-Windows-11-license-cost-for-business">issues such as licensing</a> or hardware compatibility, it's also important to consider how the OS migration process will affect applications and files that might reside on local machines.</p> <p>Even though Windows 11 is designed to support most apps that run on Windows 10, the migration process itself can introduce complications if organizations don't fully understand what's installed on their endpoints. Many environments contain a mix of legacy software, locally stored data and one‑off configurations that were never formally documented. These elements can behave unpredictably during an OS transition. Taking time to assess the state of each device -- what apps are present, how they're configured, and where critical data resides -- helps ensure that the chosen upgrade path doesn't disrupt users or break essential workflows.</p> <section class="section main-article-chapter" data-menu-title="In-place upgrade vs. clean installation"> <h2 class="section-title"><i class="icon" data-icon="1"></i>In-place upgrade vs. clean installation</h2> <p>Windows migrations generally fall into one of two categories. The first category is a clean installation. This approach involves installing the new OS in a way that reformats the system's hard disk, leaving no trace of the old OS or any apps or data that might have previously resided on the system.</p> <p>The other option is to <a href="https://www.techtarget.com/searchenterprisedesktop/tip/How-to-perform-an-in-place-upgrade-to-Windows-11">perform an in-place upgrade</a>. This means installing a new version of Windows on top of the existing version with the goal of preserving system settings, apps and data.</p> <p>Although performing an in-place upgrade is sometimes the easier of the two upgrade paths, an in-place upgrade isn't always an option. It's not possible when changing architectures, such as moving from a 32-bit to a 64-bit OS or switching from x86/x64 to ARM. Similarly, Microsoft blocks certain migration paths. Organizations can't, for example, migrate from Windows 10 Home to Windows 11 Pro, but with the proper license keys, they can migrate from Windows 10 Home to Windows 10 Pro to Windows 11 Pro. As a general rule, however, the edition of Windows 11 that an organization is installing must match the edition of Windows 10 that is currently running.</p> <p>Even though an in-place upgrade retains all of a PC's existing settings, apps and data, many IT professionals prefer to perform a clean installation. This is because a clean installation eliminates any unwanted carryover from the previous OS. If a previous Windows installation contained an incorrect configuration setting, a buggy device driver or hidden malware, those things could potentially be carried over to the new OS through an in-place upgrade. Conversely, a clean installation removes any trace of the old OS, enabling a start fresh. Better still, clean deployments can be completely automated using tools such as Microsoft System Center.</p> <p>During an in-place upgrade, Windows retains any data that resides in Windows library folders. Data residing in other locations on the local system usually survives the upgrade as well, since the upgrade doesn't reformat the hard disk. But if any data exists within the Windows folder or its subfolders, that data might be at risk.</p> <p>An in-place upgrade also attempts to carry over all compatible apps and device drivers. In this process, though, the upgrade might remove or replace outdated drivers. Similarly, it retains most of the operating system settings, but some settings, such as file associations or certain system policies, might be reset to default values.</p> <p>Anything that runs on Windows 10 should be <a href="https://www.techtarget.com/searchenterprisedesktop/tip/3-tools-to-check-Windows-11-update-compatibility">compatible with Windows 11</a>. However, there have been documented cases of poorly written apps or device drivers that worked on Windows 10 but not on Windows 11. This is most common with extremely old apps that have been patched to make them run on Windows 10.</p> <p>An in-place upgrade might also cause problems for legacy apps that have external dependencies. For example, if an aging application has a dependency on an ancient version of the .NET Framework, upgrading to Windows 11 could cause the old version of .NET to be removed, thereby breaking the app.</p> <p>Apps might also experience problems if the upgrade process causes certain registry values to be reset, or if new security baselines interfere with the permissions that the app needs in order to run.</p> </section> <section class="section main-article-chapter" data-menu-title="Preparing applications for a Windows 11 migration"> <h2 class="section-title"><i class="icon" data-icon="1"></i>Preparing applications for a Windows 11 migration</h2> <p>When planning a Windows 11 migration, the first thing IT leaders should figure out is whether an in-place upgrade or a clean Windows installation will be a better fit for their organizations. In either case, however, admins must do some planning before starting the migration process.</p> <h3>Basic preparation</h3> <p>The first step in the planning process is creating an organization-wide app inventory and identifying applications that are likely to be incompatible with Windows 11. IT teams should also identify all systems that contain data. Either back up the data or move it off those systems before beginning the upgrade.</p> <p>The basic preparation stage is also the point when IT should perform a hardware inventory to make sure the organization's existing hardware adheres to <a href="https://www.techtarget.com/searchenterprisedesktop/tip/The-Windows-11-system-requirements-and-what-they-indicate">Windows 11's requirements</a>.</p> <figure class="main-article-image full-col" data-img-fullsize="https://www.techtarget.com/rms/onlineimages/windows_10_vs_windows_11-f.png"> <img data-src="https://www.techtarget.com/rms/onlineimages/windows_10_vs_windows_11-f_mobile.png" class="lazy" data-srcset="https://www.techtarget.com/rms/onlineimages/windows_10_vs_windows_11-f_mobile.png 960w,https://www.techtarget.com/rms/onlineimages/windows_10_vs_windows_11-f.png 1280w" alt="Windows 10 vs. Windows 11 system requirements" data-credit="Informa TechTarget" height="350" width="560"> <div class="main-article-image-enlarge"> <i class="icon" data-icon="w"></i> </div> </figure> <p>Most organizations can handle a Windows 11 migration without the need for external support. Still, this stage is a good time to identify any support resources that might be available, should IT need them.</p> <h3>Application migration strategies</h3> <p>If an organization opts for a clean installation, it must consider how IT is going to install apps onto the PCs once Windows 11 has been installed. There are many options available. For example, admins might use a tool such as System Center Configuration Manager or Microsoft Intune, or they could script the deployment through PowerShell. There are also third-party tools that can help with the app installation process.</p> <p>In addition to figuring out which tools to use, admins must make sure that they have a copy of the installation media for the various apps and that they are in possession of any required product keys.</p> <h3>Validation and testing</h3> <p>After figuring out which <a href="https://www.techtarget.com/searchenterprisedesktop/tip/Windows-11-migration-tools-for-desktop-administrators">tools IT will use to facilitate the migration</a> process, the next step is to validate those tools in a lab environment. Organizations must deploy various Windows systems in a way that mimics the way that the systems are configured in their production environment. IT can then test and fine-tune the migration strategy within the lab. Throughout that process, be sure to document what works and what doesn't.</p> <h3>Pilot deployment</h3> <p>When IT has done sufficient testing to validate the chosen migration process, it's time to <a href="https://www.techtarget.com/searchcio/feature/Pros-and-cons-of-a-technology-pilot">perform a pilot deployment</a>. The goal is to perform Windows 11 migrations on a small percentage of the machines in the production environment. Ideally, these machines should be scattered throughout the organization, thereby enabling IT to test the migration process against a variety of configurations. It's also a good idea to only include power users in the pilot migration. These users are the most likely to be able to provide useful information in the event of a problem.</p> <h3>Final deployment</h3> <p>Once the IT team is satisfied with the pilot deployment's success, the last step is to migrate the rest of the organization's PCs. Upon completion of the migration process, be prepared to perform a deep audit of all the organization's PCs. This audit will help IT identify failed migrations, missing applications and machines that are missing patches or aren't configured in a way that adheres to the organization's security baselines.</p> <p>In most real-world migrations, apps can be moved from Windows 10 to Windows 11 easily and without issue. Even so, IT leaders can't assume that the migration process will be trouble-free. That's why planning and testing are so important. Thorough testing helps organizations identify problematic applications so they can address them before starting the actual migration process.</p> <p><i>Brien Posey is a former 22-time Microsoft MVP and a commercial astronaut candidate. In his more than 30 years in IT, he has served as a lead network engineer for the U.S. Department of Defense and a network administrator for some of the largest insurance companies in America. </i></p> </section> As Windows 10 support ends, organizations must plan Windows 11 migrations carefully. Assess apps, data and device configurations to avoid disruptions during the upgrade. https://cdn.ttgtmedia.com/rms/onlineimages/check_g1205300933.jpg https://www.techtarget.com/searchenterprisedesktop/tip/How-to-migrate-applications-to-Windows-11 Tue, 24 Feb 2026 14:38:00 GMT <p>Windows 10 reached end of support on October 14, 2025. Organizations that have not completed their Windows 11 migrations are now operating under Extended Security Updates (ESU) agreements or in unsupported configurations.</p> <p>For IT teams still transitioning, the focus has shifted from long-term planning to structured execution and risk reduction. A clear Windows 11 upgrade project plan helps reduce exposure, control costs and minimize disruption.</p> <p>However, before IT administrators take any of these steps, they'll need to evaluate their existing hardware to know if it is suitable to run the Windows 11 OS.</p> <section class="section main-article-chapter" data-menu-title="Windows 11 requirements and recommendations"> <h2 class="section-title"><i class="icon" data-icon="1"></i>Windows 11 requirements and recommendations</h2> <p>Windows 11 won't run on older PCs because of its hardware requirements. IT administrators need to&nbsp;<a href="https://www.techtarget.com/searchenterprisedesktop/tip/The-Windows-11-system-requirements-and-what-they-indicate">check these requirements</a>&nbsp;against their existing fleet and plan to replace any hardware that can't run the latest system. These requirements include the following:</p> <ul class="default-list"> <li><b>UEFI, TPM and Secure Boot capable.</b>&nbsp;Unified Extensible Firmware Interface (<a href="https://www.techtarget.com/whatis/definition/Unified-Extensible-Firmware-Interface-UEFI">UEFI</a>) and Trusted Platform Module (<a href="https://www.techtarget.com/whatis/definition/trusted-platform-module-TPM">TPM</a>) appeared on Windows PCs by 2006, and Secure Boot in 2011, so&nbsp;these requirements should be in place&nbsp;for endpoints that are part of a refresh cycle.</li> <li><b>Processor.</b>&nbsp;Windows 11 requires an 8th-generation or newer Intel CPU to run, AMD 3xxx or newer, and Qualcomm Snapdragon 7c or newer. Be sure to follow requirements for the latest Windows 11 LTSC or regular release -- 23H2 at the time this publishes, with 24H2 expected later in 2024. This roughly translates to PCs built in the second half of 2018 or newer -- less than six years old, in other words.</li> <li><b>RAM.</b> Microsoft states that Windows 11 can run on a minimum of 4 GB RAM. Except for kiosks and other limited-use scenarios, however, no Windows 11 PC should be equipped with less than 8 GB of RAM for usability and acceptable performance.</li> <li><b>Internet connection and account.</b> Except for certain workarounds, Windows 11 requires internet connectivity and an active Microsoft account for installation and initial setup. This should pose minimal difficulties for most organizations apart from special circumstances.</li> </ul> <p>The best approach to attaining new hardware is to incorporate a Windows 11 upgrade in any planned or upcoming hardware refresh. That said, such upgrades are usually on a set cycle. Buyers should make any new hardware purchases prior to an upgrade -- with Windows 10 preinstalled -- and ensure they&nbsp;<a href="https://www.techtarget.com/searchenterprisedesktop/news/252505594/Windows-10-vs-Windows-11-requirements-force-PC-upgrades">meet the Windows 11 requirements</a>.</p> <blockquote class="main-article-pullquote"> <div class="main-article-pullquote-inner"> <figure> A clear Windows 11 upgrade project plan helps reduce exposure, control costs and minimize disruption. </figure> <i class="icon" data-icon="z"></i> </div> </blockquote> <h3>Focus on UEFI</h3> <p>The most critical of the preceding items is UEFI 2.0 with Secure Boot. UEFI replaces traditional, older BIOS. It also enables Secure Boot, which protects against rootkits and other boot-time malware. Most business-class systems manufactured in the past decade support UEFI, though some legacy systems <a href="https://www.techtarget.com/searchenterprisedesktop/tip/How-IT-admins-can-check-BIOS-or-UEFI-versions-in-Windows-11">might still run BIOS</a>. Identifying and replacing such systems should be top priorities in any Windows 11 migration plan. The other items mentioned above -- namely TPM 2.0, CPUs and RAM -- remain important but should already be addressed through recent hardware refreshes. For many organizations, UEFI support serves as a practical gating criterion for upgrade eligibility.</p> <p>Organizations worried about these hardware costs can take comfort from Microsoft's longstanding free upgrades from previous to current versions of Windows -- <a href="https://www.techtarget.com/whatis/feature/Windows-11-vs-Windows-10-What-are-the-differences">in this case, Windows 10 to Windows 11</a>. This applies to volume licenses and other purchase and support agreements for desktop OSes as well.</p> <p>Microsoft offers additional support beyond the end-of-life date, but those added costs provide a strong financial incentive for organizations to upgrade quickly. Organizations that purchased ESU can continue receiving limited security patches through October 14, 2028. However, ESU programs are designed as temporary bridges rather than long-term operating strategies.</p> <figure class="main-article-image full-col" data-img-fullsize="https://www.techtarget.com/rms/onlineimages/comparing_the_requirements_for_windows_10_vs_windows_11-f.png "> <img data-src="https://www.techtarget.com/rms/onlineimages/comparing_the_requirements_for_windows_10_vs_windows_11-f_mobile.png " class="lazy" data-srcset="https://www.techtarget.com/rms/onlineimages/comparing_the_requirements_for_windows_10_vs_windows_11-f_mobile.png 960w,https://www.techtarget.com/rms/onlineimages/comparing_the_requirements_for_windows_10_vs_windows_11-f.png 1280w" alt=" A chart comparing the requirements of Windows 10 and Windows 11 OSes." height="333" width="560"> <figcaption> <i class="icon pictures" data-icon="z"></i>Windows 11 introduces stricter hardware, TPM 2.0 and storage requirements compared with Windows 10. </figcaption> <div class="main-article-image-enlarge"> <i class="icon" data-icon="w"></i> </div> </figure> </section> <section class="section main-article-chapter" data-menu-title="8 steps to planning a Windows 11 upgrade"> <h2 class="section-title"><i class="icon" data-icon="1"></i>8 steps to planning a Windows 11 upgrade</h2> <p>A structured Windows 11 upgrade project plan typically includes the following eight phases.</p> <h3>Step 1: Build a strategic migration framework</h3> <p>A successful Windows 11 migration project plan begins with a strategic framework. This includes the following:</p> <ul class="default-list"> <li><b>Defining goals.</b>&nbsp;Are you aiming for feature parity or upgrades/enhancements, enhanced security or improved performance?</li> <li><b>Establishing timelines.</b>&nbsp;Align upgrade phases with fiscal calendars, hardware refresh cycles and software renewal dates.</li> <li><b>Identifying stakeholders.</b>&nbsp;Include IT leadership, department heads and power users in planning discussions.</li> <li><b>Budgeting.</b>&nbsp;Account for hardware replacements, licensing, training and potential downtime.</li> </ul> <p>A clear roadmap helps avoid reactive decisions and maintain cross-department coordination.</p> <h3>Step 2: Assess hardware and application compatibility</h3> <p>Before deploying Windows 11, IT must thoroughly assess the existing environment. That means conducting a complete inventory of all systems, especially user endpoints and applications. Use Microsoft tools such as Endpoint Manager or Configuration Manager, or third-party alternatives (e.g., ServiceNow, SolarWinds and similar tools) to take stock of your current Windows fleet. The following elements are key:</p> <ul class="default-list"> <li>Identify devices that lack UEFI or Secure Boot, and obtain replacements.</li> <li>Flag devices with unsupported CPUs or less than 8 GB (16 is better) RAM and make appropriate changes (replace PCs with obsolete CPUs, add RAM where feasible).</li> <li>Catalog business applications and dependent elements for compatibility assessment and testing.</li> </ul> <p>For software elements, testing priority should focus on legacy or in-house programs. Most Windows 10 applications work on Windows 11, but the occasional exception will pop up. It's best to create a test matrix to validate compatibility and assess performance.</p> <h3>Step 3: Pilot testing, user experience checks</h3> <p>Create a pilot group of testers to evaluate the migration in a controlled environment. You'll want to include a mix of power users (developers, analysts or data scientists, and IT pros) for detailed feedback and rank-and-file workers (perhaps from HR, finance, data entry and help desk) to make sure typical usage is workable and comfortable for users.</p> <p>It's a good idea to deploy Windows 11 in waves or by groups, so you can monitor application performance, typical boot times and logins, user interface changes and training requirements, and more. You can use logging and monitoring to capture data about what's happening. But you should also conduct regular surveys to understand user experiences, especially pain points. This feedback helps refine training and deployment strategies.</p> <h3>Step 4: Build a phased deployment plan</h3> <p>Phased rollout helps reduce disruption. It also lets you use what you learn in earlier phases to improve and enhance later phases. A typical sequence of deployment phases looks like this:</p> <ul class="default-list"> <li><b>Pilot.</b>&nbsp;Small groups with continuous feedback and adjustment.</li> <li><b>Early adopters.</b>&nbsp;Power users and IT staff.</li> <li><b>Departmental rollout.</b>&nbsp;Deliver training and deploy Windows on a per-department basis.</li> <li><b>Full deployment.</b>&nbsp;Upgrade Windows across the organization.</li> </ul> <p>Every phase should have its own schedule and timeline. It's also important to build in performance checks, user satisfaction surveys and feedback mechanisms, with ready access to issue-reporting and resolution processes. Where possible, IT should seek to automate deployment. Microsoft tools for this job include Intune and Autopilot. Third-party tools include SmartDeploy, PDQ Deploy and ManageEngine or Ivanti Endpoint Management platforms.</p> <h3>Step 5: Extend device management, improve visibility</h3> <p>Integrating Windows 11 devices into the organization's management platform is essential for visibility and control. This confers considerable benefits, including the following:</p> <ul class="default-list"> <li>Enrollment in MDM platforms such as Intune or ManageEngine.</li> <li>Policy enforcement to drive updates, security and compliance.</li> <li>Monitoring and reporting to deliver the best performance, illuminate usage and plan for change and growth.</li> </ul> <p>Before taking management into full production (unless you're already there), you'll want to first set up a test environment to validate and adjust management workflows. When it comes to full deployment, you'll have the control and visibility you need from the outset.</p> <h3>Step 6: Get licensing and compliance right</h3> <p>Windows 11 licenses are normally <a href="https://www.techtarget.com/searchenterprisedesktop/tip/What-do-the-different-licenses-for-Windows-11-come-with">bundled with hardware</a> or through an organization's volume licensing agreement(s). Even so, IT administrators must still confirm that each upgraded device has a valid license. At the same time, they'll want to avoid excess licenses (like those for unused endpoints) to optimize costs and comply with MS licensing terms (e.g., each VM also needs a valid license, and there might be special circumstances for Cloud PC, Azure instances and related environments).</p> <p>Another consideration is whether to perform an upgrade or a clean install. Each path has its own licensing implications and affects how applications and settings will work. Also noteworthy: Several new Windows 11 features (e.g., Smart App Control, also known as SAC) aren't usable unless Windows 11 is clean-installed.</p> <h3>Step 7: Change management and training</h3> <p>Windows 11 is different enough from Windows 10 to affect users. They must be ready to cope with user interface changes and workflow alterations. Preparing users is the key to a successful migration effort and to keeping support calls to a minimum. To that end, it's a good idea to communicate with users early and often: let them know changes are coming and why they must happen.</p> <p>Training should be included to help users make the switch, with ample materials available from Microsoft Learn, LinkedIn Learning and third-party providers (e.g., Pluralsight). In-house training for orientation and specific applications can also be beneficial. Help desk and support staff should lead the way through migration, so be sure to train and equip them with user migration scripts, escalation paths and so forth. If users understand the benefits of a new OS, they'll be more inclined to use it well, and to enjoy that experience as much as possible.</p> <h3>Step 8: Monitor and optimize performance</h3> <p>Deployment does not end with installation. It's vital to keep on monitoring system performance and soliciting user feedback. You'll want to compare the Windows 11 experience against Windows 10 baselines and address any areas where the new isn't at least on par with the old.</p> <p>As you accumulate telemetry and monitoring data, use it to adjust group policies and resource allocations. You'll also find this information essential for planning future upgrades, hardware refreshes and feature rollouts. Ongoing optimization and improvement help ensure your Windows 11 migration delivers lasting value.</p> </section> <section class="section main-article-chapter" data-menu-title="When all is said and done, follow the plan"> <h2 class="section-title"><i class="icon" data-icon="1"></i>When all is said and done, follow the plan</h2> <p>A structured Windows 11 upgrade project plan helps balance technical requirements with business continuity. If you focus on UEFI compliance, phased rollouts and user experience, your IT staff can deliver a smooth, orderly transition. When executed properly, Windows 11 can improve productivity and strengthen endpoint security.</p> <p><em>Ed Tittel is a 30-plus year IT veteran who has worked as a developer, networking consultant, technical trainer and writer.</em></p> </section> Planning a Windows 11 upgrade requires hardware assessment, compatibility testing, phased rollout and change management to reduce disruption and compliance risk. https://cdn.ttgtmedia.com/rms/onlineimages/strategy_g1192721749.jpg https://www.techtarget.com/searchenterprisedesktop/tip/How-to-plan-a-Windows-11-upgrade-project Tue, 24 Feb 2026 12:34:00 GMT <p>IT professionals should make time to examine their enterprise PC lifecycle management policy and evaluate all available policy options to determine how to balance the need to refresh PCs and laptops against the costs involved.</p> <p>In 2026, lifecycle planning is also increasingly influenced by <a href="https://www.techtarget.com/searchenterprisedesktop/tip/How-to-perform-an-in-place-upgrade-to-Windows-11">Windows 11 hardware requirements</a>, security baselines, zero-touch provisioning strategies and environmental sustainability goals.</p> <p>As time goes by, hardware refresh for PCs becomes increasingly inevitable. According to numerous sources, the average duration of the refresh cycle in most businesses runs three to four years, with smaller businesses often pushing that window out by another year or two.</p> <p>However, those hardware requirements -- Trusted Platform Module (<a href="https://www.techtarget.com/whatis/definition/trusted-platform-module-TPM">TPM</a>) 2.0 and newer CPU compatibility standards -- have forced some organizations to accelerate or reconsider refresh timelines.</p> <p>But it's an open question as to whether IT should handle hardware refreshes directly. Given that the idea is to replace the computing devices that individual workers use, so long as they can keep working with minimal downtime, there's no real reason that in-house IT hours need to be dedicated to such a task.</p> <p>An organization can enable users to set up and get to work on a new machine before returning the old one, which means it can serve as a fallback should issues arise with their new units. Additionally, a PC lifecycle policy should support the migration from old systems to new ones, so workers should experience little or no downtime when transitioning.</p> <p>There are multiple routes organizations can take to get to a seamless PC lifecycle management policy, so management and IT staff should consider all of these options to find the best fit.</p> <section class="section main-article-chapter" data-menu-title="Understanding the role of outsourcing for desktop lifecycle management"> <h2 class="section-title"><i class="icon" data-icon="1"></i>Understanding the role of outsourcing for desktop lifecycle management</h2> <p>Once an organization has selected the target units for refresh deployment, it can work with an OEM or reseller to get replacement machines partially configured before delivering them to end users. Many providers now integrate <a href="https://www.techtarget.com/searchitoperations/definition/zero-touch-provisioning-ZTP">zero-touch deployment models</a>, such as Windows Autopilot, making it possible to ship devices directly to end users and provision them automatically upon first login.</p> <p>This means that a reseller or service provider can easily assume the burden of making sure the PCs get delivered to their intended recipients and work with them remotely or in person to get everything migrated from old systems to new before shipping off the old systems for reuse, resale or safe disposal. Maintaining a chain of evidence to show proper disposal for retired machines and their storage media is an important element in many compliance and governance regimes.</p> <p>A wide range of service providers offer hardware refresh services, delivery, support and tracking. These include the following:</p> <ul class="default-list"> <li><b>OEM corporate sales and service organizations.</b> All of the major PC vendors fall under this umbrella and provide either direct or partner-led capabilities for hardware refresh, including Lenovo, HP, Dell, Apple, Asus and others.</li> <li><b>Business service and support companies.</b> These work with organizations to create and implement a hardware refresh strategy from end to end. This can focus strictly on desktop and personal computing devices, or it can include an organization's entire equipment base with plans for data center consolidation or migration from on-premises into the cloud on the IT side of the equation. This includes vendors such as Enterprise Integration, ProTech Services, Insight and others.</li> <li><b>Certain MSPs.</b> This category includes options for organizations to include PC refresh planning and delivery among their offerings. These include the major consulting firms -- Accenture, Deloitte and so forth -- as well as most <a href="https://www.techtarget.com/searchitchannel/definition/managed-service-provider">MSPs</a>, such as Atos, Capgemini, IBM, Infosys and others.</li> </ul> <p>Even within the desktop administrator community, there is no single best practice that defines a desktop lifecycle management plan. Instead, such policies run a&nbsp;gamut of possibilities but can be boiled down to three main options.</p> </section> <section class="section main-article-chapter" data-menu-title="3 PC lifecycle management service options"> <h2 class="section-title"><i class="icon" data-icon="1"></i>3 PC lifecycle management service options</h2> <p>Working with a service provider like those described in the previous section, organizations can work to review and recast their PC lifecycle management strategy. To that end, they should decide how frequently they refresh user devices, what kinds of devices and peripherals the end users in various roles need, what kinds of services the provider should make available to end users while PCs are in use and what to do with PCs when they get refreshed.</p> <p>How PCs exit an organization is key to meeting data privacy and protection requirements for devices -- especially storage media -- that might be passing outside their control. If resale or donation is an option, it's essential to make sure that end-of-service devices leave the organization with none of their data still present. The idea is to provide end-to-end PC lifecycle management so that purchases align with organizational needs and budgets, devices remain usable while in service within the organization, and disposal and retirement align with compliance and governance policy and requirements, including tracking and documentation. This includes <a href="https://www.techtarget.com/whatis/definition/environmental-social-and-governance-ESG">environmental, social and governance</a> concerns related to recycling, environmental impact and more.</p> <p>Organizations should plan to choose among a variety of services that fall at various steps along the lifecycle path for PCs, and these services fall into three major categories:</p> <ol type="1" start="1" class="default-list"> <li><b>Direct device selection and specification.</b> This includes getting devices with a specific CPU, RAM, storage, display and so forth to comply with current and planned usage scenarios. Some degree of "buying up" is a good idea because brand-new PCs routinely lose 10% to 15% of their relative capabilities annually. This route requires some hands-on work from IT and management when it comes to deployment and disposal, but this way, organizations can keep all the labor in-house.</li> <li><b>Device-as-a-service offerings.</b> While these services might come with several different names -- such as <a href="https://www.techtarget.com/searchenterprisedesktop/definition/PC-as-a-service-PCaaS">PC as a service</a> -- they all involve ongoing hardware refresh from the service provider as part of the monthly subscription costs for access to devices and peripherals. The organization trades higher monthly lease payments or use fees against a perpetual refresh model that leaves updates to the provider. It enables organizations to convert <a href="https://www.techtarget.com/whatis/definition/CAPEX-capital-expenditure">Capex</a> to <a href="https://www.techtarget.com/whatis/definition/OPEX-operational-expenditure">Opex</a>, which is a key business initiative for some organizations.</li> <li><b>Outsourced PC support only.</b> These offerings mean that the organization picks up the cost for device purchase and maintenance, but the providers cover an ongoing service for those devices for a monthly fee. This still leaves the refresh open to negotiation on a cycle-by-cycle basis. Organizations that opt for this approach trade in-house help desk costs for monthly service fees from a provider.</li> </ol> <ul type="disc" class="default-list"></ul> <ul class="default-list"></ul> <blockquote class="main-article-pullquote"> <div class="main-article-pullquote-inner"> <figure> Whatever services an organization chooses to outsource, it still needs to maintain responsibility for the PC lifecycle. </figure> <i class="icon" data-icon="z"></i> </div> </blockquote> <p>Whatever services an organization chooses to outsource, it still needs to maintain responsibility for the PC lifecycle. It remains on the hook for choosing and selecting devices, handling refresh activity, maintaining devices while in use, and managing end of life or end of service within policy guidelines.</p> <p>A key consideration in choosing a service offering comes when deciding how many of its own human resources the organization wants to dedicate to managing the PC lifecycle. Those that choose more in-house labor can reduce service costs, but they should consider how resource-constrained their IT department is overall. Prevailing conventional wisdom is that IT resources are best expended innovating and delivering more or better services to users, clients and customers, rather than handling routine day-to-day tasks, such as configuring and setting up PCs, migrating data from old PCs to new, handling PC support requests and dealing with end of life when PCs retire.</p> <figure class="main-article-image full-col" data-img-fullsize="https://www.techtarget.com/rms/onlineimages/cio-it_asset_lifecycle_management.png"> <img data-src="https://www.techtarget.com/rms/onlineimages/cio-it_asset_lifecycle_management_mobile.png" class="lazy" data-srcset="https://www.techtarget.com/rms/onlineimages/cio-it_asset_lifecycle_management_mobile.png 960w,https://www.techtarget.com/rms/onlineimages/cio-it_asset_lifecycle_management.png 1280w" alt="Diagram of IT asset lifecycle management stages including plan, develop or acquire, integrate, maintain or upgrade, and retire." height="560" width="560"> <figcaption> <i class="icon pictures" data-icon="z"></i>IT asset lifecycle management framework showing the stages of planning, acquisition, integration, maintenance and retirement that also apply to enterprise PC and desktop management strategies. </figcaption> <div class="main-article-image-enlarge"> <i class="icon" data-icon="w"></i> </div> </figure> </section> <section class="section main-article-chapter" data-menu-title="How to approach desktop lifecycle warranties and support"> <h2 class="section-title"><i class="icon" data-icon="1"></i>How to approach desktop lifecycle warranties and support</h2> <p>As organizations decide a plan of attack, it's important to note that, for the most part, hardware failures typically occur in the first year or two of a product's lifetime. This makes it more important to have support in the early years of a product's life than later. It might sound backwards, but bugs usually work themselves out in the first couple of years. So, some PCs become more reliable over time.</p> <p>There are several ways to approach the support portion of the lifecycle. This is the phase of the longest duration for hardware of any kind, so it's particularly important.</p> <h3>Purchase warranties for an exact length of time</h3> <p>IT pros can purchase warranties for the specific duration needed for their lifecycle. For example, for a <a href="https://www.techtarget.com/searchmobilecomputing/tip/How-organizations-should-handle-mobile-device-lifecycles">three-year lifecycle</a>, IT would purchase a three-year warranty and then decommission the machines and purchase new ones thereafter. As a bonus, IT could then <a target="_blank" href="https://resource-recycling.com/recycling/2022/09/27/e-scrap-professionals-share-knowledge-with-wider-industry/" rel="noopener">sell old machines to a recycler</a> and generate revenue -- after proper storage cleanup, of course.</p> <p>This option guarantees support for all machines and eliminates more costly out-of-warranty support contracts. It can be expensive in the long run, however, because it requires IT to purchase new hardware every time the lifecycle ends.</p> <h3>Purchase support after the warranty expires and keep the PCs</h3> <p>For example, IT can get a three-year warranty and then tack on two years of support for a five-year lifecycle. Support is more expensive, but the lifecycle is extended.</p> <h3>No paid support after a warranty expires</h3> <p>In this scenario, IT keeps PCs and uses them until they give out. Dropping support for three years of warranty saves money, but that comes with some risk. If a machine goes down without support, IT must find time to fix it on its own.</p> <p>Any delays in the repair process can lead to lost productivity for users. Even if IT gets a user another machine -- temporary or a full-on replacement -- it takes time to set it up and load all the files. Further, users might not be familiar with the replacement device's interface, and any customizations that are missing could make it even more difficult to work.</p> <p>IT can mitigate such problems by maintaining a stock of emergency spare devices. These are ready for use with some speedy way to restore files and get the user up and running quickly. IT can then repair the broken device and turn it into another emergency spare.</p> <p>IT might be able to find other creative ways to repurpose machines, such as turning them into thin clients to extend their lives.</p> <div class="youtube-iframe-container"> <iframe id="ytplayer-0" src="https://www.youtube.com/embed/gctocRTgq-U?autoplay=0&amp;modestbranding=1&amp;rel=0&amp;widget_referrer=null&amp;enablejsapi=1&amp;origin=https://www.techtarget.com" type="text/html" height="360" width="640" frameborder="0"></iframe> </div> <p>IT pros can make the length of the lifecycle as long as they want, and they can mix and match the support methods for a&nbsp;<a href="https://www.techtarget.com/searchenterprisedesktop/feature/How-to-create-an-effective-PC-lifecycle-policy">wide variety of options</a>.</p> <p>When designing a PC lifecycle management policy, IT pros should use the warranty and post-warranty support they require to build a cost-effective policy. Remember that these are just PCs and laptops --&nbsp;not servers&nbsp;-- so IT can get away with relying on self-support. On the other hand, outsourcing represents a great way to trade cash for scarce resources. That's part of the reason why so many companies end up taking the latter route.</p> <p>Modern lifecycle strategies increasingly align with <a href="https://www.techtarget.com/searchenterprisedesktop/definition/unified-endpoint-management-UEM">unified endpoint management platforms</a> that provide visibility into device health, compliance posture and usage analytics across distributed workforces, helping IT teams make more informed refresh decisions.</p> <p><em>Ed Tittel is a 30-plus year IT veteran who has worked as a developer, networking consultant, technical trainer and writer.</em></p> <p><em>Gary Olsen has worked in the IT industry since 1983 and holds a Master of Science in computer-aided manufacturing from Brigham Young University. He was on Microsoft's Windows 2000 beta support team for Active Directory from 1998 to 2000 and has written two books on Active Directory and numerous technical articles for magazines and websites.</em></p> </section> Organizations can choose in-house, device-as-a-service or hybrid models for desktop lifecycle management, balancing cost, security, Windows 11 readiness and sustainability goals. https://cdn.ttgtmedia.com/rms/onlineimages/keyboard_g1307915204.jpg https://www.techtarget.com/searchenterprisedesktop/tip/Three-PC-lifecycle-management-options-IT-should-consider Sat, 21 Feb 2026 10:28:00 GMT <p>Recently, an article in <i>The Guardian</i> talked about the industrialization of deepfake campaigns. We've all seen the news about high-profile deepfakes and seen how convincing (or not) they can be, but I hadn't heard the term "industrialization" yet. So, I set out to write a blog post about how easy it is to make them, showing how to do it, the tools that bad actors use, etc.</p> <p>The problem is that it's so ridiculously easy to make a deepfake that there's nothing to write about. You can go to ElevenLabs right now, upload a photo -- not even a video -- of yourself and record 30 seconds of audio, and it will generate a video of you saying whatever you type. That's it. I could make a video of myself saying "Go Michigan!" right now, and I assure you, that is not something this Buckeyes fan would ever say voluntarily.</p> <p>No command line. No model training. No technical skill whatsoever.</p> <p>And ElevenLabs is just the one I happened to use. There are many more, including the following:</p> <ul type="disc" class="default-list"> <li>HeyGen, which focuses on creating videos in the same way using AI avatars.</li> <li>Descript's Overdub, which lets you clone a voice into a video and edit what it says like a text document.</li> <li>JoggAI, which advertises itself as a tool to "make deepfake videos ethically and safely."</li> <li>DeepFaceLive, a real-time face-swapping tool.</li> <li>FaceFusion, which lets users tweak faces. So, for example, you could use it to make a 10-year-old headshot on LinkedIn look older, then overlay it on a video of someone else.</li> </ul> <p>Some are paid or free online services, while others are open source projects on GitHub that anyone can download and run locally with no guardrails at all. The point is that there are dozens of these tools, they're getting better by the month and the baseline skill required to use them is basically just access to a web browser.</p> <p>To be clear, most of these tools aren't made for the sole purpose of creating <a href="https://www.techtarget.com/searchsecurity/tip/How-AI-malware-works-and-how-to-defend-against-it">malicious deepfakes</a> (though I have to say, JoggAI is the first I've seen use the term "ethical" to describe their deepfakes). The issue, ultimately, is one of intent. This thing exists, and it can be used for good or evil. In that way, you could say the same about email. Or the internet. Or bananas. So, I'm not judging any of these tools.</p> <p>That's how my how-to post died on the vine. You can't write a compelling walk-through when every tool is a three-step process. Then I realized: That <i>is</i> the story!</p> <section class="section main-article-chapter" data-menu-title="Source material for deepfakes is everywhere"> <h2 class="section-title"><i class="icon" data-icon="1"></i>Source material for deepfakes is everywhere</h2> <p>The ease of creating a deepfake is only half the equation. The other half is the raw material, and it's everywhere. Facebook, Instagram, TikTok, YouTube, LinkedIn -- each contains an element of your voice, mannerisms, images and the way you dress. There's more than enough publicly available audio and video to clone a convincing likeness, and that's not even counting things that can make deepfakes more convincing, like your favorite sports teams, the college you attended and more. This <a href="https://www.techtarget.com/whatis/feature/Digital-footprint-management-Tools-laws-and-strategies">data is out there about practically everyone</a>, and there are bots out there scraping everything they can.</p> <p>Now pair that with an AI agent -- not a person -- that's been tasked with targeting a single individual. The agent doesn't get tired. It doesn't lose focus. It can scour social media or scraped databases for personal details, craft a scenario tailored to the target, generate the deepfake and deliver it through the right channel at the right time. If that fails, it can adjust the approach to a new vector, new fake person, new audio, etc., and try again. A scammer just needs to point the agent at someone and wait.</p> <p>This is the industrialization of deepfakes. It's not that deepfakes exist; we've known that. It's that the barrier to creating and deploying them at scale has essentially disappeared.</p> </section> <section class="section main-article-chapter" data-menu-title="Research data backs up the deepfake concerns"> <h2 class="section-title"><i class="icon" data-icon="1"></i>Research data backs up the deepfake concerns</h2> <p>I found data backing up these concerns in my Omdia study, "The Growing Role of AI in Endpoint Management and Security Convergence." The <a target="_blank" href="https://research.esg-global.com/reportaction/515202052/Toc" rel="noopener">research</a> shows that 41% of organizations report that AI is increasing the quantity and sophistication of phishing and social engineering attacks. That's not a projection; that's what they're seeing today. Just 1% said AI-driven attacks hadn't affected them.</p> <p>Deepfakes specifically are showing up in the data as an emerging concern. In another recent Omdia <a target="_blank" href="https://research.esg-global.com/reportaction/515202139/Toc" rel="noopener">report</a>, "The Email and Messaging Security Imperative," 30% of respondents identified advanced threats delivered through messaging -- including deepfakes, business email compromise and AI-generated content -- as a challenge with their collaboration platforms. Perhaps most concerning, though, is that 72% of organizations face socially-engineered attacks across multiple communication channels on at least a monthly basis. The multi-vector, multi-channel social engineering attack is already the norm, and deepfakes are the newest weapon in that arsenal.</p> </section> <section class="section main-article-chapter" data-menu-title="Why deepfakes will be harder to defend against than phishing"> <h2 class="section-title"><i class="icon" data-icon="1"></i>Why deepfakes will be harder to defend against than phishing</h2> <p>Deepfakes could very well be a harder problem to solve than phishing. While 38% of respondents said phishing or spear phishing had penetrated their security controls, and <a href="https://www.techtarget.com/searchsecurity/tip/Prepare-for-deepfake-phishing-attacks-in-the-enterprise">phishing is becoming increasingly sophisticated</a> due to AI, we've had 15-plus years of practice with it. We've trained users, built filters and developed playbooks. We know what to look for because we've been looking for it since the days of Nigerian prince emails.</p> <p>Deepfakes are different. With phishing, we taught users to check the sender, hover over links and look for urgency cues. There's a pattern to recognize. While some of this applies to deepfake videos or audio clips, users need to know the person well enough to spot that their voice sounds slightly off, or that they'd never use that particular phrase. If it's your direct manager, maybe you'd catch it. If it's your CEO, or a vendor you've met twice, or a new executive you've only seen on a company-wide Zoom call, that's a different story.</p> <figure class="main-article-image full-col" data-img-fullsize="https://www.techtarget.com/rms/onlineimages/how_to_spot_a_deep_fake-f.png"> <img data-src="https://www.techtarget.com/rms/onlineimages/how_to_spot_a_deep_fake-f_mobile.png" class="lazy" data-srcset="https://www.techtarget.com/rms/onlineimages/how_to_spot_a_deep_fake-f_mobile.png 960w,https://www.techtarget.com/rms/onlineimages/how_to_spot_a_deep_fake-f.png 1280w" alt="How to spot a deepfake." data-credit="Informa TechTarget" height="437" width="560"> <div class="main-article-image-enlarge"> <i class="icon" data-icon="w"></i> </div> </figure> <p>It's easy to dismiss voice cloning if you only try it on yourself. When you record your own voice on ElevenLabs and then ask it to generate speech, you immediately hear the flaws. You'd never say that word with that inflection, or the cadence is off, or a word is slurred. But that's because you know your own voice better than anyone. For someone who doesn't? It can be convincing enough.</p> </section> <section class="section main-article-chapter" data-menu-title="So what do we do about deepfakes?"> <h2 class="section-title"><i class="icon" data-icon="1"></i>So what do we do about deepfakes?</h2> <p>Deepfake detection technology is emerging, but it's in the same position that every defensive security technology occupies: perpetually one step behind the attackers. It's the same cat-and-mouse game we've always played with malware and endpoint detection and response. We assume the threat is coming and try to spot the anomalies.</p> <p>The one piece of good news is that deepfakes have a narrower delivery surface than phishing. Phishing hits you through email, messaging apps, SMS, social media -- basically anywhere text can travel. Deepfake audio and video are more constrained. They show up <a href="https://www.techtarget.com/searchsecurity/tip/Real-world-AI-voice-cloning-attack-A-red-teaming-case-study">in voice calls</a>, video calls, maybe a well-crafted voicemail. (Sure, someone could text you a deepfake video, but that's a red flag since nobody communicates that way.)</p> <p>That narrower scope means there might be an opportunity to teach users specific behaviors for specific channels -- verifying unusual requests through a different medium, establishing code words for financial approvals, and treating any unexpected video or audio message with the same skepticism we've learned to apply to email.</p> <p>But let's be realistic. This is a new pattern, and even the savviest users haven't seen enough deepfakes to recognize a pattern yet. Also, while there are guides out there highlighting ways to <a href="https://www.techtarget.com/searchsecurity/tip/How-to-detect-deepfakes-manually-and-using-AI">detect deepfakes</a>, scammers see these, too. Just like phishing email text, as time goes by, audio and video will also get better.</p> </section> <section class="section main-article-chapter" data-menu-title="The defense is coming, though"> <h2 class="section-title"><i class="icon" data-icon="1"></i>The defense is coming, though</h2> <p>That said, there are signs that the industry is starting to take this seriously as more than a future problem. The following developments are promising:</p> <ul class="default-list"> <li>Both Intel and AMD are partnering with security vendors to run deepfake detection models directly on the neural processing unit in AI PCs. Most seem to be consumer-facing, but it's not hard to imagine EDR or platforms adding this to their portfolios.</li> <li>Email security vendor Ironscales has focused on deepfake detection capabilities for a few years, including live analysis of audio and video that looks for synthesis artifacts. I'm sure other email security vendors will follow, especially as deepfakes increasingly get delivered alongside or in support of traditional phishing and business email compromise campaigns.</li> <li>Companies like Netarx are developing tools specifically aimed at deepfake detection across communications channels.</li> <li>Training and education companies like KnowBe4 are building <a href="https://www.techtarget.com/searchsecurity/tip/How-to-prevent-deepfakes-in-the-era-of-generative-AI">deepfake training programs</a> to support end-user awareness.</li> </ul> <p>There's so much activity in this space, and I'm thinking 2026 might be the year deepfakes move from a few high-profile cases used to generate fear, uncertainty and doubt to a mainstream problem -- not as a hypothetical conference demo, but as a real and recurring component of social engineering campaigns.</p> <p>Not convinced? Try it yourself over lunch and see just how easy it is.</p> <p><i>Gabe Knuth is the principal analyst covering end-user computing for Omdia.</i></p> <p><i>Omdia is a division of Informa TechTarget. Its analysts have business relationships with technology vendors.</i></p> </section> Deepfakes are now so easy to create that anyone with a browser can make one. With cheap tools and abundant data, 2026 could be the year they go from novelty to mainstream threat. https://cdn.ttgtmedia.com/rms/onlineimages/ai_a279596285.jpg https://www.techtarget.com/searchenterprisedesktop/opinion/Will-2026-be-the-year-deepfakes-go-mainstream Fri, 20 Feb 2026 16:10:00 GMT <p>Deciding which desktop OS enterprise users run -- and how their applications are delivered -- is no longer a straightforward IT decision.</p> <p>End-user computing (EUC) used to feel like a tactical concern -- something IT could adjust over time without locking the business into long-term consequences. That is no longer the case. In 2026, desktop platforms, endpoint management and access controls are shaping cost, risk and operational resilience in very real ways.</p> <p>Many organizations are now realizing that desktop decisions hardened earlier than expected, driven less by operating system preference and more by vendor timelines, cost pressure and delivery models that quietly narrowed options.</p> <p>In practice, this doesn't feel like strategy at all. It feels like reacting to a deadline that suddenly became real.</p> <p>As organizations move beyond Windows 10 end of support and adapt to Windows 11, the <a href="https://www.techtarget.com/searchenterprisedesktop/feature/End-user-computing-trends-to-watch">EUC landscape has fragmented</a> into multiple tracks. Different user populations, regulatory requirements and delivery models now demand tailored strategies rather than a single, uniform desktop approach. Identity, observability and application modernization have shifted from best practices to baseline requirements.</p> <section class="section main-article-chapter" data-menu-title="Windows 10 end of support forced the timing"> <h2 class="section-title"><i class="icon" data-icon="1"></i>Windows 10 end of support forced the timing</h2> <blockquote class="main-article-pullquote"> <div class="main-article-pullquote-inner"> <figure> In practice, this doesn't feel like strategy at all. It feels like reacting to a deadline that suddenly became real. </figure> <i class="icon" data-icon="z"></i> </div> </blockquote> <p>The end of support for Windows 10 created a time crunch that many enterprises could not avoid. At the same time, the cost of migrating to Windows 11 -- driven by more stringent system requirements -- introduced real budget pressure. In many environments, upgrading was not just a software exercise and required the replacement of at least some existing PCs and workstations.</p> <p>Business leaders felt the pressure first. By the time procurement was asking about replacement cycles or licensing renewals, the decision had usually already been made. Leaders had to choose a direction before procurement or IT could act. Once that directional decision was made, procurement followed with purchasing, and IT followed with implementation. By the time planning discussions formally began, the path was already largely set.</p> </section> <section class="section main-article-chapter" data-menu-title="ESU as a tax, not a choice"> <h2 class="section-title"><i class="icon" data-icon="1"></i>ESU as a tax, not a choice</h2> <p>As <a href="https://www.techtarget.com/searchenterprisedesktop/tip/When-is-Windows-10-end-of-life-How-to-extend-support">Windows 10 support deadlines approached</a>, organizations were presented with what appeared to be a menu of options: upgrade to Windows 11, pay for Extended Security Updates (ESU) or accept unsupported risk. In practice, many enterprises had already made this decision.</p> <p>For organizations unable to absorb the immediate hardware and software costs associated with Windows 11, paying for ESU became the only viable path. Extended support was not truly optional. No one frames it that way internally, of course, but that’s how it behaves in practice. It functioned as a penalty or tax for delaying a transition that vendor timelines had already forced. Crucially, ESU decisions had to be made early, well before the actual end-of-support date, further compressing the window for meaningful choice.</p> <blockquote class="main-article-pullquote"> <div class="main-article-pullquote-inner"> <figure> Extended support was not truly optional. </figure> <i class="icon" data-icon="z"></i> </div> </blockquote> </section> <section class="section main-article-chapter" data-menu-title="Why Linux shows up now"> <h2 class="section-title"><i class="icon" data-icon="1"></i>Why Linux shows up now</h2> <p>Against this backdrop, Linux appears to be gaining visibility as a desktop option in 2026. It is tempting to frame this as renewed interest in Linux itself -- improved usability, better hardware support and maturing enterprise tooling. But that explanation misses the larger point.</p> <p><a href="https://www.techtarget.com/searchenterprisedesktop/feature/Why-2026-might-bring-more-Linux-desktops-to-the-enterprise">Linux becomes part of the conversation</a>, not because organizations set out to rethink the desktop, but because existing paths narrowed. Browser-delivered applications, SaaS workflows and cloud platforms have hollowed out the traditional OS dependency. Linux becomes acceptable not for its native strengths but because SaaS has changed what the desktop decision means.</p> <p>Most end users remain unfamiliar with Linux. SaaS mitigates that friction by delivering applications through the cloud, often via the browser, preserving a familiar work experience regardless of the underlying OS. Years ago, the web browser leveled the playing field for basic internet access. SaaS has taken that much further by enabling everyday work to happen in OS-agnostic ways that were not feasible before.</p> <p>In practice, this means the decision is no longer really about applications at all. The OS matters less on its own -- but the commitments that surround it matter more.</p> <p>None of this feels like a strategic choice in the moment. It feels like reacting to a deadline.</p> </section> <section class="section main-article-chapter" data-menu-title="Why these decisions stop being reversible"> <h2 class="section-title"><i class="icon" data-icon="1"></i>Why these decisions stop being reversible</h2> <p>Planning frameworks often imply that desktop decisions unfold linearly: assess, plan, migrate, support. In reality, the most consequential choices occur before planning ever begins. Leaders must first decide whether they are staying on Windows, paying for extended support, moving toward Linux or adopting cloud-based or virtual desktop models.</p> <p>Once that direction is chosen, a number of other decisions quietly stop being optional. Hardware refresh conversations change. Licensing assumptions harden. Delivery models begin shaping support and security expectations in ways that are hard to reverse later without cost or disruption.</p> <p>By the time these choices feel operational, most of the leverage is already gone.</p> </section> <section class="section main-article-chapter" data-menu-title="What this means for leaders"> <h2 class="section-title"><i class="icon" data-icon="1"></i>What this means for leaders</h2> <p>Desktop OS decisions in 2026 are not purely technical. They are financial and governance decisions shaped by vendor timelines, hardware lifecycles and delivery models. SaaS and DaaS may blur traditional boundaries, but they do not eliminate commitment. Instead, they relocate it.</p> <p>The lesson for EUC and business leaders is not to chase platforms but to recognize how early these decisions are being forced -- and how little flexibility remains by the time they feel like "planning."</p> <p><i>James Alan Miller is a veteran technology editor and writer who leads Informa TechTarget's Enterprise Software group. He oversees coverage of ERP &amp; Supply Chain, HR Software, Customer Experience, Communications &amp; Collaboration and End-User Computing topics.</i></p> </section> Explore how Windows 10 end of support, SaaS delivery and cost pressure are forcing enterprise desktop decisions earlier than expected -- and making them harder to unwind. https://cdn.ttgtmedia.com/rms/onlineimages/strategy_a200792738.jpg https://www.techtarget.com/searchenterprisedesktop/feature/The-illusion-of-choice-in-enterprise-desktop-strategy Fri, 20 Feb 2026 12:44:00 GMT <p>It has been more than three years since Windows 11 was first released, and following the October 2025 end of support for Windows 10, many organizations are now actively executing or finalizing their Windows 11 migration strategies.</p> <p>Although many organizations still run Windows 10 in production environments for legacy applications or hardware constraints, it's worth considering whether a Windows 11 upgrade is worth the cost and effort.</p> <section class="section main-article-chapter" data-menu-title="Challenges of upgrading to Windows 11"> <h2 class="section-title"><i class="icon" data-icon="1"></i>Challenges of upgrading to Windows 11</h2> <p>Those who have never overseen an OS upgrade within a corporate environment might not fully appreciate just how challenging it is. There is far more to the upgrade process than just inserting installation media and running the setup or <a href="https://www.techtarget.com/searchenterprisedesktop/tip/How-to-create-a-custom-ISO-for-Windows-10">pushing a new Windows image</a> to any managed endpoints. Although the purpose of this article is not to provide a migration guide, it's worth examining all the details involved in upgrading Windows desktop OSes.</p> <p>One of the first things that an organization must do before updating its endpoints to a new version of Windows is to perform a comprehensive hardware inventory to ensure that the existing hardware is compatible with the new OS. For the most part, Windows 10 and Windows 11 have similar hardware requirements, but there are some <a href="https://www.techtarget.com/whatis/feature/Windows-11-vs-Windows-10-What-are-the -differences">key differences to consider</a>.</p> <p>Organizations must also test every application that users rely on for business workflows to verify that the application will run on the new OS. This testing process involves more than just making sure that admins can install the application and load it properly. Organizations must perform comprehensive testing to make sure that all the application's features still work properly.</p> <p>To provide a more concrete example, I oversaw a recent migration of all my production systems to Windows 11 earlier this year. In doing so, I discovered that a particular computer-aided design (<a href="https://www.techtarget.com/whatis/definition/CAD-computer-aided-design">CAD</a>) application initially seemed to work with Windows 11. However, I later discovered that the CAD software's 3D capabilities could no longer function because they were not compatible with high dynamic range video. I ultimately ended up switching to a different CAD package.</p> <p>Although application compatibility testing is probably the biggest task that <a href="https://www.techtarget.com/searchenterprisedesktop/tip/How-to-plan-a-Windows-11-upgrade-project">administrators must perform prior to an OS upgrade</a>, it's far from being the only such task. Organizations should ensure they train users on how to use the new OS. Further, organizations must provide training to the help desk staff and to anyone in the IT department who will be responsible for supporting the new OS.</p> <figure class="main-article-image full-col" data-img-fullsize="https://www.techtarget.com/rms/onlineimages/comparing_the_requirements_for_windows_10_vs_windows_11-f.png"> <img data-src="https://www.techtarget.com/rms/onlineimages/comparing_the_requirements_for_windows_10_vs_windows_11-f_mobile.png" class="lazy" data-srcset="https://www.techtarget.com/rms/onlineimages/comparing_the_requirements_for_windows_10_vs_windows_11-f_mobile.png 960w,https://www.techtarget.com/rms/onlineimages/comparing_the_requirements_for_windows_10_vs_windows_11-f.png 1280w" alt="Chart showing hardware requirement differences between Windows 10 and Windows 11 for enterprise upgrade evaluation." height="333" width="560"> <figcaption> <i class="icon pictures" data-icon="z"></i>Comparison of Windows 10 and Windows 11 hardware requirements, including TPM 2.0, Secure Boot and memory minimums that affect enterprise upgrade planning. </figcaption> <div class="main-article-image-enlarge"> <i class="icon" data-icon="w"></i> </div> </figure> </section> <section class="section main-article-chapter" data-menu-title="What issues are common with a Windows migration?"> <h2 class="section-title"><i class="icon" data-icon="1"></i>What issues are common with a Windows migration?</h2> <p>It's extremely important for an organization to thoroughly test a new OS before it fully commits to an upgrade. OS upgrades sometimes need to be paused or even halted altogether as a result of issues found during the testing process.</p> <p>When Windows 2000 was released, my former employer had planned to deploy it within one particular department. However, someone had put into the documentation that no device drivers existed for some of the special-purpose hardware that the department used. As such, the Windows 2000 adoption had to wait.</p> <p>Similarly, when Windows Millenium Edition (ME) was released, the organization where I worked at the time planned to deploy it. However, testing revealed that Windows ME was incredibly unstable, crashing frequently. As such, the organization completely abandoned its plans for a Windows ME migration.</p> <p>Going even further back, I once worked for an organization that was running Windows 95 and wanted to upgrade to Windows 98. Although its PCs were theoretically capable of running Windows 98, installing Windows 98 caused the machines to slow to a crawl because the PCs barely met the minimum hardware requirements. The organization postponed the upgrade until the next hardware refresh.</p> <p>These are far from isolated incidents. <a href="https://www.techtarget.com/searchenterprisedesktop/opinion/Windows-XP-EOL-anniversary-10-years-of-endpoint-evolution">With Windows XP, for example, there were issues</a> with the activation process.</p> <p>There are two important takeaways from these examples of OS issues:</p> <ol class="default-list"> <li>Not every Windows upgrade is problematic. While there have been plenty of disastrous upgrade attempts, there have also been plenty that went smoothly.</li> <li>When it comes to real-world OS migrations, things can -- and sometimes do -- go wrong. The best way to keep that from happening is by working through a comprehensive testing process, followed by a small-scale pilot deployment.</li> </ol> <div class="youtube-iframe-container"> <iframe id="ytplayer-0" src="https://www.youtube.com/embed/iMaX4Rd89gE?autoplay=0&amp;modestbranding=1&amp;rel=0&amp;widget_referrer=null&amp;enablejsapi=1&amp;origin=https://www.techtarget.com" type="text/html" height="360" width="640" frameborder="0"></iframe> </div> </section> <section class="section main-article-chapter" data-menu-title="Is it worthwhile to migrate to Windows 11 now?"> <h2 class="section-title"><i class="icon" data-icon="1"></i>Is it worthwhile to migrate to Windows 11 now?</h2> <p>There are sometimes issues that occur as a part of an OS upgrade, so organizations must consider whether keeping pace with the latest OS to come out of Microsoft is worth dealing with any potential issues that might come with it.</p> <p>Most of the issues that come with Windows 11 migrations have been hardware-related. Most notably, <a href="https://www.techtarget.com/searchenterprisedesktop/tip/The-Windows-11-system-requirements-and-what-they-indicate">Windows 11 requires the presence of a Trusted Platform Module 2.0 chip</a> and Secure Boot has to be enabled. However, these are not the only hardware-related differences. Unlike Windows 10, Windows 11 requires a 64-bit CPU. Additionally, Windows 11 requires 64 GB of storage, compared to the 20 GB needed by the 64-bit version of Windows 10. Windows 11 also requires twice as much memory -- 4 GB compared to 2 GB -- as the 64-bit version of Windows 10.</p> <blockquote class="main-article-pullquote"> <div class="main-article-pullquote-inner"> <figure> Although there are many people who prefer Windows 10, a migration away from Windows 10 seems all but inevitable. </figure> <i class="icon" data-icon="z"></i> </div> </blockquote> <p>In my environment, I rolled out Windows 11 as a part of a hardware refresh, so the hardware requirements were a nonissue. Even so, many people view the Windows 10 experience as superior. Windows 11 places greater emphasis on Microsoft account integration and cloud-connected features than previous versions. In some cases, this requirement is tough to avoid, even if the machine will eventually be joined to a domain.</p> <p>Windows 11 is also a lot worse than Windows 10 about nagging you with constant notifications -- though, for the most part, you can disable these notifications. Windows 11 also seems to make it more difficult to protect your personal privacy. Administrators can lock down Windows 11 to prevent it from compromising user privacy, but doing so involves adjusting a lot of individual settings. Even after all that work, it's easy to accidentally undo your privacy efforts as the OS uses the local Microsoft account or Microsoft 365 account to log the user in to the Edge browser.</p> </section> <section class="section main-article-chapter" data-menu-title="Is Windows 11 inevitable?"> <h2 class="section-title"><i class="icon" data-icon="1"></i>Is Windows 11 inevitable?</h2> <p>Although there are many people who prefer Windows 10, a migration away from Windows 10 seems all but inevitable.</p> <p>After all, Microsoft is discontinuing official Windows 10 support on Oct. 14, 2025. While an organization could conceivably continue running <a href="https://www.techtarget.com/searchenterprisedesktop/tip/When-is-Windows-10-end-of-life-How-to-extend-support">Windows 10 beyond the end-of-support date</a>, doing so might not be practical for a few different reasons.</p> <p>The most obvious reason is because, at that point, Microsoft has shifted its focus to Windows 11 licensing for new devices, making Windows 10 licenses increasingly limited and harder to obtain through standard channels. This means that Windows 10 will become vulnerable to any new exploits that are discovered.</p> <p>A second reason why it might not be practical to continue running Windows 10 past the end-of-support date is because, although Microsoft will likely offer extended support for Windows 10, it may be cost-prohibitive. This has happened in recent years, particularly with Windows Server OSes. Microsoft puts a high price tag on extended support as a way of pushing customers toward the adoption of a new OS.</p> <p>Extended support for Windows 10 is now governed by Microsoft’s ESU licensing structure, and pricing and eligibility vary based on licensing agreements, device counts and deployment models. Organizations should confirm current ESU terms directly with Microsoft or their licensing provider, as costs and enrollment conditions may change over time.</p> <p>A third reason why a transition away from Windows 10 may be inevitable is because Microsoft no longer sells Windows 10 licenses. It is still possible to purchase licenses from some third-party resellers, but Windows 10 licenses are becoming increasingly difficult to acquire. That means that an organization will most likely be stuck running Windows 11 on any newly acquired PCs.</p> <p>Even though a transition away from Windows 10 might end up being inevitable, Windows 11 adoption might not be the only option. Some industry analysts have speculated about future Windows releases, but enterprise migration planning is still primarily centered on the Windows 10 end of support and the transition to Windows 11.</p> <p><i>Brien Posey is a 22-time Microsoft MVP and a commercial astronaut candidate. In his over 30 years in IT, he has served as a lead network engineer for the U.S. Department of Defense and as a network administrator for some of the largest insurance companies in America.</i></p> </section> With Windows 10 end of support now past, enterprises must evaluate whether to upgrade to Windows 11 based on hardware readiness, application compatibility and lifecycle planning. https://cdn.ttgtmedia.com/rms/onlineimages/toolGearArrow_g140057613.jpg https://www.techtarget.com/searchenterprisedesktop/opinion/Is-it-worthwhile-to-upgrade-to-Windows-11-right-now Thu, 19 Feb 2026 15:58:00 GMT <p>Managing risk is a constant concern for enterprises. Where that risk resides within IT infrastructure has evolved over time, but that evolution is now accelerating. As a result, many organizations are finding that familiar risk management and governance practices are no longer sufficient.</p> <section class="section main-article-chapter" data-menu-title="Risk expanding beyond the core"> <h2 class="section-title"><i class="icon" data-icon="1"></i>Risk expanding beyond the core</h2> <p>Traditionally, enterprise leaders have thought about risk as something that lives inside core systems -- and through access to those systems. Much of that framing still holds. But exposure to risk has expanded beyond the core into areas once considered peripheral to IT decision-making.</p> <p>What's changed is not simply where risk shows up, but when it begins to form. Increasingly, exposure is created at the very beginning of planning, before decisions feel formal or fully defined. Once a decision is made, it becomes much harder to unwind, constrained by timelines, vendor models, organizational structures and other factors that are no longer entirely within an organization's control.</p> <p>Many technology decisions that once unfolded over years are now being made in months, or even weeks. When decisions were slower, governance models could adapt as systems evolved. Today, commitments harden earlier, often before organizations fully understand the downstream implications. Risk forms upstream of deployment, not downstream of failure -- a pattern reinforced by <a href="https://www.techtarget.com/searcherp/feature/How-enterprise-software-planning-is-taking-shape-for-2026">shortening enterprise software adoption cycles</a>.</p> <p>This shift requires a reset in how enterprise leaders think about risk. It isn't just about systems and access anymore; it's about decision-making itself -- and when decision-making actually starts. In many cases, exposure begins before an organization even realizes a decision is being made.</p> <p>Seen this way, the risk question facing enterprise leaders is no longer just about protecting core systems once they are in place. Instead, it is about recognizing how exposure begins to take shape much earlier, as assumptions are set and decisions quietly bind future outcomes. Risk follows decision-making now, not deployment -- and that shift changes where leaders need to pay attention first.</p> <p>Nowhere is this shift more visible than in identity, which has moved from being a gate into core systems to something that increasingly influences how access, roles and trust take form early on.</p> </section> <section class="section main-article-chapter" data-menu-title="Where enterprise risk forms"> <h2 class="section-title"><i class="icon" data-icon="1"></i>Where enterprise risk forms</h2> <p>Traditionally, the role identity played in enterprise risk thinking was fairly straightforward: It was about making sure only the right people had permission to access specific resources. Identity protected data, infrastructure and core business operations. If access was properly controlled, risk was assumed to be contained.</p> <p>That role has expanded significantly. Identity now sits across nearly every part of the enterprise application stack. It has moved to the top of the pyramid, shaping how systems connect, how workflows operate and how decisions flow across the organization. Rather than simply gating access to core systems, identity increasingly defines how people interact with the enterprise itself -- particularly through <a href="https://www.techtarget.com/searchenterprisedesktop/feature/End-user-computing-trends-to-watch">identity-driven access across endpoints and applications</a>.</p> <p>As identity has taken on this more central role, it has also compounded risk. Failures in identity and access management (IAM) no longer affect a single system or function. They can cascade across applications, teams and processes simultaneously. Where identity issues were once largely contained within core IT environments, they now carry broader consequences because so much else depends on them.</p> <p>That dynamic explains why identity now behaves less like a control and more like an amplifier. When identity shapes access, roles and trust across systems at once, even small misalignments can have outsize effects.</p> <p>Identity, in this sense, is no longer just about identification. It has become a kind of operating persona -- a nonvisual avatar that represents each employee across systems, tools and workflows. That persona determines what someone can see, do and influence, often long before a decision ever reaches a core platform or formal approval process.</p> <p>As identity has moved into this central role, it has also become one of the most consequential amplifiers of enterprise risk. When identity shapes access, roles and trust across systems simultaneously, even small failures can propagate widely. That dynamic matters most at the moment identity is first created and begins to spread -- which is why people and hiring processes now play a much larger role in the enterprise risk picture than they once did.</p> <div class="extra-info"> <div class="extra-info-inner"> <p></p> <h3 class="splash-heading">Why identity now sits at the center of enterprise risk</h3> <ul class="default-list"> <li>Identity increasingly determines access <i>before</i> application selection.</li> <li>Roles are often provisioned <i>before</i> workflows are fully defined.</li> <li>Identity policies frequently outlive individual systems and platforms.</li> <li>Identity failures propagate across tools simultaneously.</li> </ul> <p>Calling identity a persona or "top of the pyramid" isn't poetic shorthand. It reflects observable system behavior that has been evolving for years</p> </div> </div> </section> <section class="section main-article-chapter" data-menu-title="Hiring and people as an early risk surface"> <h2 class="section-title"><i class="icon" data-icon="1"></i>Hiring and people as an early risk surface</h2> <p>Hiring-related risk traditionally centered on the hiring process itself -- not on the systems a new hire's identity enabled them to access, or the kind of exposure that access created across the enterprise.</p> <p>Today, just because you hire a good, honest employee does not mean risk is zero. That has never really been the case, given the ongoing realities of compliance, security and governance. But risk is higher now. This is not simply because people are people, or because they don't always follow perfect security hygiene; risk is higher because those kinds of issues now have much larger consequences. An employee's identity, in the system-access and usage sense, is embedded across far more applications, systems and platforms throughout the enterprise. A small compromise in one place is more likely to lead to cascading negative effects elsewhere.</p> <p>Once a corporate identity is created, it opens access to corporate resources and networks. That process often happens very early and is frequently automated -- particularly as organizations <a href="https://www.techtarget.com/searchhrsoftware/tip/HR-software-trends-CHROs-should-learn-about-for-2026">pursue faster, more automated hiring and onboarding</a>.</p> <p>Hiring, simply bringing someone into the organization, becomes ground zero for risk because this is where all of that begins. This is the point at which identity is created, access is enabled and exposure starts to take shape -- often before teams fully appreciate how broadly that identity will travel.</p> </section> <section class="section main-article-chapter" data-menu-title="Mobile devices and endpoints as an expanded risk surface"> <h2 class="section-title"><i class="icon" data-icon="1"></i>Mobile devices and endpoints as an expanded risk surface</h2> <p>Traditionally, enterprises thought about endpoints and devices as a source of risk unto themselves. The focus was on the data that lived on those devices and the access they had to systems and resources.</p> <p>That framing changes once identity is fully brought into the equation. Identity is now global across the enterprise infrastructure, from the edge inward. When identity functions this way, a compromise no longer stays local. It opens the potential for much broader exposure because that same identity connects to so many systems at once.</p> <p>Work gets done everywhere. Access happens everywhere. And corporate identity follows users everywhere -- especially as <a href="https://www.techtarget.com/searchmobilecomputing/feature/enterprise-mobility-trends-to-watch">work now happens across managed and unmanaged endpoints</a>.</p> <p>That makes risk harder to contain for a simple reason: It becomes harder to consistently confirm that the person using a device is who they say they are. Even small breaks in trust can ripple outward when identity is the connective tissue tying systems together.</p> <blockquote class="main-article-pullquote"> <div class="main-article-pullquote-inner"> <figure> Risk follows decision-making now, not deployment. </figure> <i class="icon" data-icon="z"></i> </div> </blockquote> </section> <section class="section main-article-chapter" data-menu-title="Partners, platforms and ecosystems as an expanded risk geography"> <h2 class="section-title"><i class="icon" data-icon="1"></i>Partners, platforms and ecosystems as an expanded risk geography</h2> <p>Traditionally, enterprises tended to think about risk from vendors, partners and external platforms as relatively contained. Trust existed, but it was bounded. Each organization managed its own governance, security and controls, and integration points were limited enough that exposure could be isolated if something went wrong. That assumption has become harder to maintain as platforms and services have moved from the edges of IT into the center of daily operations. What were once supporting tools are now deeply embedded in how work gets done, how data moves and how decisions are made across organizations -- particularly as enterprises rely on <a href="https://www.techtarget.com/searchunifiedcommunications/tip/The-future-of-work-Key-UCaaS-trends-for-IT-leaders">deeply integrated collaboration and platform ecosystems</a>.</p> <p>Identity, access and workflows no longer stop neatly at organizational boundaries. Visibility becomes fragmented. Responsibility becomes harder to assign. Over time, it becomes genuinely difficult to tell where the enterprise ends and the ecosystem around it begins.</p> <p>The tighter the integration, the harder it becomes to isolate risk -- and the harder it becomes to unwind decisions once they are embedded across organizations.</p> <div class="extra-info"> <div class="extra-info-inner"> <p></p> <h3 class="splash-heading">When identity extends beyond people</h3> <p>As organizations deploy AI copilots and automated workflows, IAM is no longer limited to human users. These systems grant software agents access to data, systems and decision-making authority -- often using governance models designed for people, not machines.</p> <p>The result is a new class of ecosystem risk, where visibility and control can erode even as automation improves efficiency.</p> </div> </div> </section> <section class="section main-article-chapter" data-menu-title="Why this shift is surfacing now"> <h2 class="section-title"><i class="icon" data-icon="1"></i>Why this shift is surfacing now</h2> <p>Pressure to move faster has always existed. What has changed is the pace and the accumulation of decisions made earlier, automated sooner and integrated more deeply.</p> <p>Risk has not increased overnight. It migrated outward over time as infrastructure became more distributed, more identity-driven and more tightly interconnected.</p> <p>This is not a failure of intent or discipline; it is a structural reality of modern IT environments, and one that traditional governance models were never designed to handle at this scale.</p> <p>The challenge enterprise leaders face today is not that risk has suddenly increased, but that it has moved outward, earlier and into places that traditional control models were never designed to reach. Recognizing that shift is the first step toward understanding why risk feels harder to manage now, even when organizations are doing many of the right things.</p> <p><em>James Alan Miller is a veteran technology editor and writer who leads Informa TechTarget's Enterprise Software group. He oversees coverage of ERP &amp; Supply Chain, HR Software, Customer Experience, Communications &amp; Collaboration and End-User Computing topics.</em></p> </section> Risk is no longer centered only in core systems. Identity, hiring, endpoints and partner platforms are where exposure increasingly begins. Learn why. https://cdn.ttgtmedia.com/rms/onlineimages/map_globe_g1056221190.jpg https://www.techtarget.com/searchenterprisedesktop/feature/The-new-geography-of-enterprise-risk Thu, 19 Feb 2026 15:32:00 GMT <p>The October 14, 2025 end-of-support date for Windows 10 marked a critical milestone for organizations managing enterprise endpoints, but it does not mean the OS immediately becomes unusable. IT teams must now decide whether to migrate devices to Windows 11, extend support with ESU or align the transition with broader endpoint lifecycle strategies.</p> <p>There are several ways that organizations can extend support for Windows 10 desktops beyond the end of support, though they each come with added complexity. Whether IT departments plan to <a href="https://www.techtarget.com/searchenterprisedesktop/tip/Completing-a-migration-to-Windows-11-with-Microsoft-Intune">migrate to Windows 11</a> or extend their usage of Windows 10, they need a concrete plan on how to handle the official end-of-support date.</p> <section class="section main-article-chapter" data-menu-title="Windows 10 end of support: What IT teams should know"> <h2 class="section-title"><i class="icon" data-icon="1"></i>Windows 10 end of support: What IT teams should know</h2> <p>The official end of service -- also known as end of life -- for the Windows 10 operating system is October 14, 2025.</p> <p>If an IT department manages devices that will not migrate to Windows 11 by the end of service (EOS) date, it should look into the extended support update (ESU) service to provide security updates after the EOS date. Organizations that have not finalized their Windows 10 migration strategy must evaluate whether to upgrade to Windows 11, extend support through ESU or retire unsupported devices.</p> <p>To complicate things further, the <a href="https://www.techtarget.com/searchenterprisedesktop/news/252505594/Windows-10-vs-Windows-11-requirements-force-PC-upgrades">increased hardware requirements of Windows 11</a> may prevent some laptops and desktops from even running the system. So, organizations may have to choose between retiring devices early and purchasing ESU licenses for the devices until they are due for replacement.</p> <p>Because of hardware compatibility limitations, many enterprises are tying Windows 10 end-of-support planning to broader PC refresh and endpoint lifecycle management strategies to control cost, risk and operational disruption. In many cases, ESU is used as a short-term risk mitigation tool while organizations phase hardware refresh cycles and Windows 11 migration over multiple budget periods.&nbsp;</p> </section> <section class="section main-article-chapter" data-menu-title="What do organizations get with an ESU subscription?"> <h2 class="section-title"><i class="icon" data-icon="1"></i>What do organizations get with an ESU subscription?</h2> <p>IT managers and staff must understand what the ESU subscription is, how it is obtained and installed, and what it includes and does not include.</p> <p>To begin, it is available for all editions of Windows 10. However, there are some prerequisites to get ESU.&nbsp;Organizations must meet Microsoft licensing and update prerequisites on supported Windows 10 versions, and eligibility can vary based on licensing channel and management model. Devices must run Windows 10 v22H2 or later, and ESU planning typically begins well in advance of the EOS date due to licensing, budgeting and deployment requirements.</p> <p>The ESU will not provide business-as-usual update support that is present during Microsoft's support lifecycle. It does, however, include the following:</p> <p>• Security updates. &nbsp;<br>• Subscription service access. &nbsp;<br>• Three years of support maximum.</p> <p>The pricing can vary significantly from environment to environment, so IT administrators should be sure to budget out the cost of maintaining Windows desktops via ESU.</p> <p>What is not included with ESU are new features, customer requested non-security updates and design change requests. This supports Microsoft's goal of making ESU a temporary fix and providing only necessary security updates to keep the devices <a target="_blank" href="https://learn.microsoft.com/en-us/windows/whats-new/extended-security-updates" rel="noopener">safe</a> and technically functional.</p> <div class="youtube-iframe-container"> <iframe id="ytplayer-0" src="https://www.youtube.com/embed/fZ30QMQf3Xc?autoplay=0&amp;modestbranding=1&amp;rel=0&amp;widget_referrer=null&amp;enablejsapi=1&amp;origin=https://www.techtarget.com" type="text/html" height="360" width="640" frameborder="0"></iframe> </div> </section> <section class="section main-article-chapter" data-menu-title="Pricing options for Windows 10 ESU"> <h2 class="section-title"><i class="icon" data-icon="1"></i>Pricing options for Windows 10 ESU</h2> <p>There are several pricing options for the ESU program that organizations should consider.&nbsp;It will benefit the organization to move to Windows 11 as soon as possible on as many devices as possible to reduce this additional cost for ESU subscriptions. It is generally <a href="https://www.techtarget.com/searchenterprisedesktop/tip/Costs-to-migrate-from-Windows-10-to-11">more economical</a> for organizations to migrate eligible devices to Windows 11 rather than rely on ESU as a long-term support strategy.</p> <p>Baseline ESU pricing guidance has been published, though actual costs can vary based on licensing agreements, device volume and deployment model. Early guidance indicated starting ESU costs of about $61 per device for the first year, and organizations should confirm current pricing with Microsoft or their licensing provider because ESU terms and costs may evolve over time.</p> <p>ESU pricing is also structured to increase each year of the program, reinforcing that it is intended as a temporary bridge rather than a long-term support strategy.</p> <p>Published guidance and licensing documentation outline several ESU pricing structures and tiers, though availability and exact costs vary by agreement and region.</p> <ul class="default-list"> <li>ESU eligibility may be <a href="https://www.techtarget.com/searchvirtualdesktop/tip/What-is-Windows-365-and-what-does-it-offer">included with Windows 365</a> and certain cloud-managed environments, depending on licensing and deployment configuration.</li> <li>There are no minimum purchase requirements for Windows 10 ESU.</li> <li>Purchase is available in 12-month periods only. For example, a six-month license is not available.</li> <li>ESU enrollment timelines follow Microsoft lifecycle and licensing policies, so organizations should verify current eligibility and enrollment deadlines with Microsoft or their licensing provider.</li> <li>Early ESU guidance referenced discounted cloud-based activation pricing of around $45 per user for up to five devices in year one, though organizations should confirm current pricing with Microsoft.</li> <li>ESU pricing for Microsoft Education customers has historically included tiered rates such as:</li> </ul> <ul class="default-list"> <ul class="default-list"> <li> <p>$1 per license for year one.</p> </li> <li> <p>$2 per license for year two.</p> </li> <li> <p>$4 per license for year three.</p> </li> </ul> </ul> <p>Organizations can't skip out on ESU for year one and then rejoin the program for year two -- so executives and IT leaders will need to decide early and adjust their device management strategy accordingly.</p> </section> <section class="section main-article-chapter" data-menu-title="3 ways to set up ESU for Windows 10"> <h2 class="section-title"><i class="icon" data-icon="1"></i>3 ways to set up ESU for Windows 10</h2> <p>Organizations will need to select their approach for receiving ESU on their desktops depending on how those desktops are managed.</p> <h3>1. The 5-by-5 activation method</h3> <p>Purchase activation keys that IT can apply to individual Windows 10 devices. Management options for this method include scripting, the Volume Activation Management Tool and Windows Server Update Services with Configuration Manager.</p> <h3>2. Windows 365 subscription</h3> <p>Windows 365 subscriptions currently include free access to the ESU program for all linked accounts. All <a href="https://www.techtarget.com/searchenterprisedesktop/tip/Windows-365-compared-to-Windows-10">Windows 365 deployments can run Windows 10</a> as long as ESU is still active.</p> <h3>3. Cloud-based activation via Intune or Windows Autopatch</h3> <p>IT administrators can apply ESU cloud activation licenses to Windows 10 devices for one year at this time. Note that no 5-by-5 key is necessary. Admins can manage them via Intune and Autopatch. No manual intervention is required with Autopatch, and a discounted price is available for this option.</p> <p><b><i>Editor's note</i></b><i>: This article was updated in 2026 to reflect current Windows 10 end-of-support timelines, ESU considerations and enterprise endpoint lifecycle planning.</i></p> <p><em>Gary Olsen has worked in the IT industry since 1983 and holds a Master of Science in computer-aided manufacturing from Brigham Young University. He was on Microsoft's Windows 2000 beta support team for Active Directory from 1998 to 2000 and has written two books on Active Directory and numerous technical articles for magazines and websites.</em></p> </section> The Windows 10 end-of-support deadline forces IT teams to choose between Windows 11 migration, ESU enrollment and broader desktop lifecycle planning. https://cdn.ttgtmedia.com/rms/onlineimages/clock-time12.jpg https://www.techtarget.com/searchenterprisedesktop/tip/When-is-Windows-10-end-of-life-How-to-extend-support Thu, 19 Feb 2026 13:41:00 GMT <p>BYOD policies are no longer a fringe workforce accommodation. For many organizations, they are a response to cost pressure, hybrid work expectations and employee device preferences. The question for CIOs and CISOs is no longer whether employees will use personal devices for work, but whether the organization will govern that reality strategically.</p> <p>In a zero-trust, SaaS-driven environment, a <a href="https://www.techtarget.com/whatis/definition/BYOD-bring-you">BYOD</a> policy affects more than hardware budgets. It shapes identity controls, data segmentation, endpoint visibility and risk exposure. When designed correctly, BYOD can support cost discipline, workforce flexibility and sustainability goals. When poorly governed, it can expand the attack surface and <a href="https://www.techtarget.com/searchsecurity/tip/How-to-manage-BYOD-security-policies-and-stay-compliant">complicate compliance efforts</a>.</p> <p>The following benefits explain why many organizations formalize BYOD policies -- and where leadership should evaluate the tradeoffs.</p> <section class="section main-article-chapter" data-menu-title="7 benefits of implementing a BYOD policy"> <h2 class="section-title"><i class="icon" data-icon="1"></i>7 benefits of implementing a BYOD policy</h2> <p>BYOD policies deliver value across cost, workforce flexibility and sustainability -- but only when governance maturity keeps pace with access and data risks.</p> <h3>1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Lower upfront cost for hardware</h3> <p>The money saved from not purchasing a fleet of endpoints is perhaps the most obvious and easy-to-quantify benefit of a BYOD program. With BYOD in place, the burden of cost is shifted to the end users, but not in a way that drastically affects an end user's bottom line. After all, BYOD users will simply be adding functionality to the devices that they would own anyway.</p> <p>These cost savings are not only upfront but also on the timeline of a refresh cycle. Consider an example organization with an endpoint refresh cycle of three years. The organization will save hundreds of dollars by not purchasing a new device for each user operating a BYOD endpoint.&nbsp;Further, users would likely bring corporate-owned devices in for repairs if damaged, but the user will usually handle a damaged personal device.</p> <p>Some organizations could even consider passing on some of the savings to the end users by offering a BYOD stipend for a portion of the new device's cost if the device is truly critical to the user's day-to-day work.</p> <h4>2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Increased employee satisfaction</h4> <p>This benefit is more difficult to quantify precisely, but users often report a better overall working experience if they don't need to carry around two smartphones -- or even laptops -- every day. Of course, each user might have a different preference for a device ownership program, but market research points to employees, in the aggregate, being more satisfied when they work using BYOD.</p> <p>Workforce surveys consistently show that employees prefer using familiar devices, particularly in hybrid and remote roles where mobility and convenience influence overall engagement.</p> <h3>3.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Improve user productivity</h3> <p>Organizations that formalize BYOD often report productivity gains, largely because employees work faster on devices and workflows they already know.</p> <p>Familiarity reduces onboarding friction and shortens the time required for employees to become productive on new roles or projects. In distributed teams, eliminating device constraints can also reduce informal workarounds that introduce security gaps.</p> <p>Productivity gains, however, assume mature identity management, conditional access policies and data segmentation to prevent unmanaged data exposure.</p> <p>If a user is familiar with Apple devices, it might be difficult to adapt to using an Android smartphone or a Windows desktop. The same applies to someone familiar with Windows and <a href="https://www.techtarget.com/searchmobilecomputing/definition/Android-OS">Google Android</a> -- corporate-owned Apple devices might present a learning curve. Even if a user is used to Android devices, moving from a Samsung-manufactured device to a Google-manufactured device could prove challenging.</p> <blockquote class="main-article-pullquote"> <div class="main-article-pullquote-inner"> <figure> In a zero-trust, SaaS-driven environment, a BYOD policy affects more than hardware budgets. It shapes identity controls, data segmentation, endpoint visibility and risk exposure. </figure> <i class="icon" data-icon="z"></i> </div> </blockquote> <h3>4.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; A more connected workforce</h3> <p>Users that rely on their personal devices for work tasks are more likely to be able to access work materials at all times than users with a dedicated work device. If users have a dedicated work device, they are more likely to turn it off and put it fully away compared to an endpoint that also functions as a personal device.</p> <p>A BYOD program’s goal is not to trick users into checking their email and absentmindedly returning to work during their time off. However, in the event of timely tasks that need immediate approval or a work-related emergency, it's crucial to reach key employees immediately.</p> <p>In time-sensitive scenarios -- such as incident response, financial approvals or operational disruptions --&nbsp; consistent device access can improve responsiveness without requiring employees to manage multiple endpoints.</p> <p>These benefits are also present with corporate-owned personally enabled (<a href="https://www.techtarget.com/searchmobilecomputing/definition/COPE-corpora">COPE</a>) endpoints, but only if users adopt those devices as their primary personal devices, which isn't always possible.</p> <figure class="main-article-image full-col" data-img-fullsize="https://www.techtarget.com/rms/onlineimages/mobilecomputing-byod_vs_cyod_vs_cope_vs_cobo-f.png"> <img data-src="https://www.techtarget.com/rms/onlineimages/mobilecomputing-byod_vs_cyod_vs_cope_vs_cobo-f_mobile.png" class="lazy" data-srcset="https://www.techtarget.com/rms/onlineimages/mobilecomputing-byod_vs_cyod_vs_cope_vs_cobo-f_mobile.png 960w,https://www.techtarget.com/rms/onlineimages/mobilecomputing-byod_vs_cyod_vs_cope_vs_cobo-f.png 1280w" alt="A chart showing multiple device ownership options for businesses and their differences." height="426" width="560"> <div class="main-article-image-enlarge"> <i class="icon" data-icon="w"></i> </div> </figure> <h3>5.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Easier for employees to keep track of one device</h3> <p>The notion that one device is easier to keep track of than two is almost too obvious, but it's worth exploring why that is key for organizations. One of the dangers of allowing any smartphone -- personal or corporate-owned -- to access an organization's business data and internal services is the risk of that device falling into the wrong hands.</p> <p>From a governance perspective, formalizing BYOD reduces unmanaged device sprawl. Devices enrolled in mobile device management (MDM) platforms, equipped with remote wipe capabilities and governed through conditional access controls, provide more visibility than ad hoc personal device usage.</p> <p>A stolen or lost device can be catastrophic for an organization. Cybercriminals can gain access to internal data, change passwords to key accounts, view private communications and eventually elevate their privilege to access information beyond the user's permissions.</p> <h4>6.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Limit the reasons to use personal devices improperly</h4> <p>In an ideal world, organizations could prevent BYOD use until they deploy an official policy, but unfortunately, that isn't the reality. Whether for convenience or out of desperation in a time-sensitive situation, users will find workarounds to use personal devices if they truly want to.</p> <p>Many organizations still operate with informal or inconsistently enforced BYOD practices. A clearly communicated policy reduces shadow IT behavior and establishes guardrails for SaaS access, cloud storage usage and AI-enabled tools that may process sensitive corporate data.</p> <p>A well-communicated BYOD policy can mitigate both issues by providing a roadmap for securely handling work materials on a personal device.</p> <p>Formal governance helps prevent data from flowing between unmanaged personal apps and enterprise environments.</p> <h4>7.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Improve sustainability by limiting hardware-related emissions</h4> <p><a href="https://www.techtarget.com/searchcio/feature/3-tips-CIOs-can-use-for-more-sustainable-device-management">Sustainability considerations</a> increasingly influence IT procurement decisions. Because most device-related carbon emissions occur during manufacturing and distribution, reducing enterprise-issued hardware can meaningfully affect Scope 3 supply chain reporting.</p> <p>When calculating the sustainability impact of endpoint policies, practices that reduce device purchases -- or extend device lifecycles -- improve sustainability outcomes.</p> <p>Issuing smartphones to users with a similar endpoint for their personal lives is a practice that significantly increases an organization's overall carbon emissions. As organizations look for ways to quickly reduce their emissions without overhauling their entire day-to-day operations, implementing BYOD programs can provide that value if the user base is on board.</p> </section> <section class="section main-article-chapter" data-menu-title="Potential drawbacks of implementing a BYOD policy"> <h2 class="section-title"><i class="icon" data-icon="1"></i>Potential drawbacks of implementing a BYOD policy</h2> <p>There are several reasons that organizations might not want to deploy a BYOD policy despite all the benefits that these programs offer. Managing these devices is one of the most common challenges associated with a BYOD policy.</p> <p>Organizations that adopt BYOD successfully typically pair it with zero-trust architecture, identity-based access enforcement, endpoint detection and response (EDR) tooling and containerization features that separate corporate and personal data.</p> <p>With a corporate-owned device, the organization gets to maintain full control of the device's settings and preset the device to block certain apps, functions or actions. However, a personally owned device presents more management challenges. Organizations can try to enact a comprehensive BYOD policy that gives them control over the device, but users might balk at this as an invasion of their privacy.</p> <p>Smartphone manufacturers have been adding BYOD-friendly features that separate a device's work and personal sides. Apple's User Enrollment feature allows organizations to control the aspects of an Apple device <a href="https://www.techtarget.com/searchmobilecomputing/tip/How-to-enable-User-Enrollment-for-iOS-in-Microsoft-Intune">that are within a managed Apple ID</a> via mobile device management (<a href="https://www.techtarget.com/searchmobilecomputing/definition/mobhttps:/www.techtarget.com/searchmobilecomputing/definition/mobile-device-managementile-device-management">MDM</a>) while ignoring anything on the device that is associated with a personal Apple ID.</p> <p>Google <a href="https://www.techtarget.com/searchmobilecomputing/tip/How-to-create-a-work-profile-on-Android-devices">offers Android work profiles</a> to keep Android devices under the proper management while respecting user privacy. The organization gets to choose the apps and services to deploy on the work profile, and once the device is registered, the user can switch back and forth between the profiles as needed.</p> <p>Even with these controls, data leakage risks remain if identity governance, logging and monitoring practices are immature.</p> <p>There are also concerns about user preference and corporate culture when implementing BYOD. Some users might prefer a second device they can bring when needed but put away when they're off the clock.</p> </section> <section class="section main-article-chapter" data-menu-title="When BYOD may not be appropriate"> <h2 class="section-title"><i class="icon" data-icon="1"></i>When BYOD may not be appropriate</h2> <p>BYOD policies are not universally beneficial. Highly regulated industries, organizations managing sensitive intellectual property or enterprises with limited identity governance maturity may determine that corporate-owned devices offer stronger control and auditability. Leadership teams should assess regulatory exposure, incident response readiness and support capacity before expanding BYOD programs.</p> <div class="youtube-iframe-container"> <iframe id="ytplayer-0" src="https://www.youtube.com/embed/g4TMM7FrmzI?autoplay=0&amp;modestbranding=1&amp;rel=0&amp;widget_referrer=null&amp;enablejsapi=1&amp;origin=https://www.techtarget.com" type="text/html" height="360" width="640" frameborder="0"></iframe> </div> </section> BYOD can reduce hardware costs and improve workforce flexibility -- but it also expands governance, identity and security responsibilities. https://cdn.ttgtmedia.com/rms/onlineimages/check_g1211896141.jpg https://www.techtarget.com/searchmobilecomputing/feature/Key-benefits-of-enacting-a-BYOD-policy Wed, 18 Feb 2026 15:06:00 GMT <p>Windows 11 desktops might experience problems to the point that IT has little choice but to reinstall Windows. In some of these instances, an ISO file is the best option.</p> <p>Determining how and when to use the ISO repair can be a bit more complicated. As a Windows administrator, you should learn about the benefits of using an ISO file to repair a desktop and how to properly apply the ISO install.</p> <section class="section main-article-chapter" data-menu-title="Why use an ISO file to repair a Windows desktop?"> <h2 class="section-title"><i class="icon" data-icon="1"></i>Why use an ISO file to repair a Windows desktop?</h2> <p>There are several options for repairing a Windows 11 installation. Enterprise IT departments often resort to automatically reimaging the OS rather than attempting to repair it. Large organizations find this approach to be quicker and more cost-effective than repairing an ailing Windows system. However, if an organization lacks the infrastructure required to push a deployment image to a Windows 11 machine, repairing Windows 11 might be the best option.</p> <p>It's possible to repair a Windows 11 installation without having to resort to using an ISO file. To do so, click on <b>Settings</b> in the local desktop, and then make sure that the <b>System</b> option is selected. Next, click on <b>Recovery</b>, and then click the <b>Reset PC</b> button. From there, you can follow the prompts to <a href="https://www.techtarget.com/searchenterprisedesktop/tip/How-to-perform-a-factory-reset-on-a-Windows-11-desktop">complete the Windows reset process</a>.</p> <p>Although this is often the preferred technique for repairing Windows 11, it does have one major shortcoming. If the problems that are occurring within the Windows 11 OS are happening as a result of hard disk corruption, it's entirely possible that the files used to reset and repair Windows might also be corrupt. The same also holds true if the system was <a href="https://www.techtarget.com/searchsecurity/tip/10-common-types-of-malware-attacks-and-how-to-prevent-them">damaged by a malware attack</a>. In these cases, there are no guarantees that the files needed to repair the OS are still functioning.</p> <p>Using an ISO file to repair Windows enables you to fix the problem using known-functional copies of the Windows system files.</p> </section> <section class="section main-article-chapter" data-menu-title="How does an ISO repair install differ from a normal install?"> <h2 class="section-title"><i class="icon" data-icon="1"></i>How does an ISO repair install differ from a normal install?</h2> <p>An ISO file is essentially just a DVD image file. At one time, it was common practice to install Windows from an installation DVD. However, it's now somewhat rare for PCs to be equipped with DVD drives. An ISO file can take the place of a DVD, thereby negating the need for physical installation media. To use an ISO file to repair Windows 11, the faulty machine must be at least somewhat functional. In extreme cases where the desktop's issues prevent you from completing the repair process, you might be able to <a href="https://www.techtarget.com/searchenterprisedesktop/tip/How-Windows-11-Safe-Mode-works-and-when-to-use-it">boot Windows 11 into Safe Mode</a> prior to attempting the repair.</p> <p>Regardless of whether you're installing Windows 11 from a physical DVD or from an ISO file, there's a significant difference between a normal installation and a repair installation. Typically, installing Windows results in a clean installation. Unless you're upgrading a prior version of Windows, the new Windows installation runs a default installation.</p> <p>In contrast, performing a repair installation reinstalls Windows 11 without overwriting anything important in the process. In other words, the Setup program does not format the system's hard disk. Windows 11 Setup also makes a concerted effort to preserve all the files, apps and settings that are present on the system. You should keep in mind that existing files, apps or settings could be what's causing the problem, so a repair install from an ISO file is not guaranteed to fix the problem.</p> </section> <section class="section main-article-chapter" data-menu-title="Using an ISO file to repair Windows 11"> <h2 class="section-title"><i class="icon" data-icon="1"></i>Using an ISO file to repair Windows 11</h2> <p>The first step of using an ISO file to repair Windows 11 is to <a href="https://www.techtarget.com/searchenterprisedesktop/tip/How-to-create-a-custom-ISO-for-Windows-10">find an ISO file</a> that meets your requirements. Many organizations maintain a collection of ISO files that are readily available for such situations. However, if you do not have an ISO file at your disposal, you can download a Windows 11 ISO file <a target="_blank" href="https://www.microsoft.com/software-download/windows11" rel="noopener">directly</a> from Microsoft. The nice thing about using the Windows 11 download site is that the ISO is based on the current Windows 11 release, meaning there probably aren't many updates that you need to install when you finish repairing Windows.</p> <p>As a best practice, it's a good idea to create a backup before attempting to repair Windows. Even though Windows 11 Setup is designed to preserve files, settings and apps, things can and occasionally do go wrong. It's also possible that the Setup process could end up deactivating your Windows license or other software licenses. As such, you might have to perform various cleanup tasks, such as entering a product key, when you're done.</p> <p>To get started, copy the ISO file to an empty folder on the computer that needs to be repaired. Next, right-click on the ISO file, and select the <b>Mount</b> command from the resulting shortcut menu. This causes the ISO file to be mounted as a virtual DVD drive. Windows assigns a drive letter to the virtual DVD drive, and all of the files contained within the ISO file are accessible through the drive mapping.</p> <p>With the ISO file mounted, double-click on the <b>Setup.exe</b> file. This causes Windows to launch Windows 11 Setup. Click <b>Next</b>, and Setup then performs a quick update check. When this check is completed, a prompt asking you to accept the <a href="https://www.techtarget.com/searchenterprisedesktop/tip/What-do-the-different-licenses-for-Windows-11-come-with">Windows 11 licensing terms</a> should appear. At this point, an additional, more time-consuming update check might occur.</p> <p>It's possible to skip the update check to save time, but this is generally a bad idea. Skipping the update check can lead to a situation in which the ISO file is older than the version of Windows that is installed on the PC. When that happens, the only option is to either restart Setup and download the updates or to perform a clean Windows installation rather than repair the system.</p> <p>At this point, the computer should show a screen confirming the action that Setup is about to take (Figure 1).</p> <figure class="main-article-image full-col" data-img-fullsize="https://www.techtarget.com/rms/onlineimages/windows_iso_repair_process_1-f.jpg"> <img data-src="https://www.techtarget.com/rms/onlineimages/windows_iso_repair_process_1-f_mobile.jpg" class="lazy" data-srcset="https://www.techtarget.com/rms/onlineimages/windows_iso_repair_process_1-f_mobile.jpg 960w,https://www.techtarget.com/rms/onlineimages/windows_iso_repair_process_1-f.jpg 1280w" alt="The dialog box from Windows 11 Setup indicating that the ISO is ready for installation." data-credit="Brien Posey" height="441" width="560"> <figcaption> <i class="icon pictures" data-icon="z"></i>Figure 1. The Windows 11 Setup utility showing the type of ISO install that the admin has chosen. </figcaption> <div class="main-article-image-enlarge"> <i class="icon" data-icon="w"></i> </div> </figure> <p>Notice that Setup is indicating that it installs Windows 11 Pro and keeps personal files and apps. This means that Setup is going to attempt to repair the Windows OS, but it will also try to preserve all the files, settings and apps that presently exist. If you decide that you don't want to preserve anything and prefer to simply overwrite the old copy of Windows with a clean install, you can click on the <b>Change what to keep</b> link and select the <b>Nothing</b> option from the screen that appears (Figure 2).</p> <figure class="main-article-image full-col" data-img-fullsize="https://www.techtarget.com/rms/onlineimages/windows_iso_repair_process_2-f.jpg"> <img data-src="https://www.techtarget.com/rms/onlineimages/windows_iso_repair_process_2-f_mobile.jpg" class="lazy" data-srcset="https://www.techtarget.com/rms/onlineimages/windows_iso_repair_process_2-f_mobile.jpg 960w,https://www.techtarget.com/rms/onlineimages/windows_iso_repair_process_2-f.jpg 1280w" alt="The option to choose what aspects of the Windows 11 system to keep after the ISO install." data-credit="Brien Posey" height="441" width="560"> <figcaption> <i class="icon pictures" data-icon="z"></i>Figure 2. Windows 11 Setup displaying the ISO install type options. </figcaption> <div class="main-article-image-enlarge"> <i class="icon" data-icon="w"></i> </div> </figure> <p>There's also an option to keep only personal files but not applications or settings. All you have to do is make your selection and click <b>Next</b>, followed by <b>Install</b>. Setup does the rest.</p> <p>Many organizations rely on distributed workforces, diverse hardware fleets and limited on‑site support -- all of which make traditional reimaging workflows harder to execute consistently. Having a reliable, repeatable repair method that preserves user data and minimizes downtime gives admins a useful middle ground between full redeployment and time‑consuming manual troubleshooting. As such, ISO‑based repair installs help IT maintain stability without disrupting productivity.</p> <p><i>Brien Posey is a former 22-time Microsoft MVP and a commercial astronaut candidate. In his more than 30 years in IT, he has served as a lead network engineer for the U.S. Department of Defense and a network administrator for some of the largest insurance companies in America.</i></p> </section> Wiping and reinstalling with a clean install is the simplest way to fix a broken Windows 11 desktop, but an ISO file repair can help save some of the desktop's settings and files. https://cdn.ttgtmedia.com/rms/onlineimages/pharma_g1358852671.jpg https://www.techtarget.com/searchenterprisedesktop/tip/How-to-repair-Windows-11-with-an-ISO-file Tue, 17 Feb 2026 14:00:00 GMT <p>Various operational and lifecycle scenarios may prompt IT teams to perform a factory reset on Windows 11 desktops or laptops.</p> <p>By definition, a factory reset restores the target PC to the same condition it was in when it first left the factory, removing user data, settings and installed applications.&nbsp;</p> <p>A factory reset is typically used as a last-resort remediation or lifecycle management step to return a device to a known baseline state. An IT administrator can do this quickly in a Windows 11 environment. Typical situations that call for a factory reset include the following:</p> <ul class="default-list"> <li>Prepping a device for reuse, sale or donation.</li> <li>Attempting to restore the PC to operation when less drastic repairs don't work (e.g., in-place upgrade repair installs or various Deployment Image Servicing and Management repairs).</li> <li>Recovering from malware and viruses to restore the PC to a known, good working -- and clean -- state.</li> <li>Providing a fresh start for PCs with persistent software problems or performance issues.</li> </ul> <p>Admins should understand that restoring a PC to factory settings essentially provides a clean slate. It allows them to start over and rebuild a problem PC or pass it outside the organization for resale or reuse.</p> <section class="section main-article-chapter" data-menu-title="Precautions to take before performing a factory reset"> <h2 class="section-title"><i class="icon" data-icon="1"></i>Precautions to take before performing a factory reset</h2> <p>Not every device is immediately suitable for a factory reset, and failing to take proper precautions can result in permanent data loss or recovery complications. First, make an image-based backup, and then make sure you have the tools necessary to restore such a backup. This provides a fallback in case the factory reset fails to complete correctly and leaves the PC in a nonworking state.</p> <p><a href="https://www.techtarget.com/searchenterprisedesktop/tip/Top-Windows-10-backup-and-restore-utilities">Consider backup tools</a> such as Macrium Reflect X or EaseUS Todo Backup. These create bootable rescue media, typically stored on a USB flash or solid-state drive (SSD). If anything goes wrong with the factory reset, you can boot to this media and restore the PC to its pre-reset state using the backup image you made beforehand.</p> <p>Preserving data on the primary drive before initiating a factory reset is essential, particularly in enterprise environments where recovery windows and compliance requirements apply. The most convenient way to do that is via image backup. However, you can also use the built-in OneDrive-based Windows Backup, which is a more time- and labor-intensive process than using an image backup.</p> <p>Everything should turn out well if you can return things to where they were <a href="https://www.techtarget.com/searchenterprisedesktop/tip/How-to-reset-Windows-11-PC-from-BIOS">before you started the factory reset operation</a>. Most image backup tools will force you to save that image to another drive -- which is vital if you need to restore a Windows boot/system drive -- and provide tools to re-image the primary Windows drive from bootable media. Prudence dictates that you save image backups to an external drive, such as a USB-attached SSD or hard disk, to restore the image to a different PC if the source machine quits working entirely.</p> </section> <section class="section main-article-chapter" data-menu-title="Why perform a factory reset?"> <h2 class="section-title"><i class="icon" data-icon="1"></i>Why perform a factory reset?</h2> <p>A factory reset is usually needed in one of two typical situations. The first is when a PC is decommissioned for sale or transferred to another user. The factory reset removes all changes since the PC left the factory, leaving it in a clean state for sale or handoff. Make sure to apply pending updates to the OS to make the PC current and secure. The reset returns to when it left the factory, which <a href="https://www.techtarget.com/searchenterprisedesktop/tip/3-tools-to-check-Windows-11-update-compatibility">may be one or more feature upgrades behind current production levels</a>.</p> <p>The second scenario is when a PC exhibits persistent performance, stability or behavioral problems that remain unresolved after standard repair techniques. There's little that an <a href="https://www.techtarget.com/searchenterprisedesktop/tip/Use-an-in-place-upgrade-to-repair-Windows-10">in-place upgrade repair install</a> can't fix in Windows 11, but sometimes even that maneuver doesn't restore a PC to regular operation. When that happens, a <a href="https://www.techtarget.com/searchitchannel/definition/clean-install">clean install</a> or a factory reset is a potential next step toward Windows recovery. Thus, the factory reset can take the PC back to its earliest Windows state, possibly fixing whatever the root issue is.</p> </section> <section class="section main-article-chapter" data-menu-title="How to factory reset a Windows 11 PC"> <h2 class="section-title"><i class="icon" data-icon="1"></i>How to factory reset a Windows 11 PC</h2> <p>To start the factory reset process in Windows 11, click <b>Start</b> &gt; <b>Settings</b> &gt; <b>System</b> &gt; <b>Recovery</b> (Figure 1). Then, select <b>Reset PC</b>.</p> <p>You can also start the <b>Reset PC</b> operation from the sign-in screen or use a recovery drive or installation media to enter recovery mode during boot-up. Press the shift key while selecting <b>Restart</b> to boot into local recovery mode.</p> <figure class="main-article-image full-col" data-img-fullsize="https://www.techtarget.com/rms/onlineimages/windows_11_reset_1_h.jpg"> <img data-src="https://www.techtarget.com/rms/onlineimages/windows_11_reset_1_h_mobile.jpg" class="lazy" data-srcset="https://www.techtarget.com/rms/onlineimages/windows_11_reset_1_h_mobile.jpg 960w,https://www.techtarget.com/rms/onlineimages/windows_11_reset_1_h.jpg 1280w" alt="The 'Recovery' screen in the Windows 11 system settings." data-credit="Ed Tittel"> <figcaption> <i class="icon pictures" data-icon="z"></i>Figure 1. The option to reset the PC is under 'Recovery' in the 'System' section of settings. </figcaption> <div class="main-article-image-enlarge"> <i class="icon" data-icon="w"></i> </div> </figure> <p>From there, the screen will show two options (Figure 2). The option you choose depends on how you plan to use the PC after resetting it. If it's a last-ditch repair operation, it's easiest to select <b>Keep my files</b> (this preserves files from your primary hard drive, especially those for user accounts Documents, Downloads, Music and other default folders). If you're prepping for sale or handoff, choose <b>Remove everything</b>.</p> <figure class="main-article-image full-col" data-img-fullsize="https://www.techtarget.com/rms/onlineimages/windows_11_reset_2_h.jpg"> <img data-src="https://www.techtarget.com/rms/onlineimages/windows_11_reset_2_h_mobile.jpg" class="lazy" data-srcset="https://www.techtarget.com/rms/onlineimages/windows_11_reset_2_h_mobile.jpg 960w,https://www.techtarget.com/rms/onlineimages/windows_11_reset_2_h.jpg 1280w" alt="The 'Choose an option' screen in 'Reset this PC' process, showing options to 'Keep my files' or 'Remove everything.'" data-credit="Ed Tittel"> <figcaption> <i class="icon pictures" data-icon="z"></i>Figure 2. Reset options let you keep personal files or get rid of everything. </figcaption> <div class="main-article-image-enlarge"> <i class="icon" data-icon="w"></i> </div> </figure> <p>After clicking the desired option, you can choose how to reinstall Windows (Figure 3).</p> <p>Choosing <b>Cloud download</b> will download the Windows install file from Windows servers in the cloud. This option is safest if you think your local installation is corrupt or damaged.</p> <p>Choosing <b>Local reinstall </b>will download the Windows install file from the current Windows files on your PC. This option is faster but not immune to local issues. Unless the local Windows drive is compromised, however, it should work. For best results, choose the <b>Cloud download</b>.</p> <figure class="main-article-image full-col" data-img-fullsize="https://www.techtarget.com/rms/onlineimages/windows_11_reset_3_h.jpg"> <img data-src="https://www.techtarget.com/rms/onlineimages/windows_11_reset_3_h_mobile.jpg" class="lazy" data-srcset="https://www.techtarget.com/rms/onlineimages/windows_11_reset_3_h_mobile.jpg 960w,https://www.techtarget.com/rms/onlineimages/windows_11_reset_3_h.jpg 1280w" alt="The screen showing 'Cloud download' and 'Local reinstall' as the options for how you can reinstall Windows." data-credit="Ed Tittel"> <figcaption> <i class="icon pictures" data-icon="z"></i>Figure 3. You can download the Windows install image from the cloud or from your Windows drive. </figcaption> <div class="main-article-image-enlarge"> <i class="icon" data-icon="w"></i> </div> </figure> <p>After choosing either reinstall option, the screen will show <b>Additional settings</b>. To continue the process without changing settings, click <b>Next</b>.</p> <p>If you want to make changes, click <b>Change settings</b>. From there, you can clean the drive completely by toggling <b>Yes</b> under <b>Clean data?</b> or download Windows from the cloud by toggling <b>No</b> under <b>Download Windows? </b>(Figure 4).</p> <figure class="main-article-image full-col" data-img-fullsize="https://www.techtarget.com/rms/onlineimages/windows_11_reset_4_h.jpg"> <img data-src="https://www.techtarget.com/rms/onlineimages/windows_11_reset_4_h_mobile.jpg" class="lazy" data-srcset="https://www.techtarget.com/rms/onlineimages/windows_11_reset_4_h_mobile.jpg 960w,https://www.techtarget.com/rms/onlineimages/windows_11_reset_4_h.jpg 1280w" alt="The 'Choose settings' screen, which appears if you select 'Change settings' at the previous step." data-credit="Ed Tittel"> <figcaption> <i class="icon pictures" data-icon="z"></i>Figure 4. If you click 'Change settings' in the preceding step, you can revisit options here. </figcaption> <div class="main-article-image-enlarge"> <i class="icon" data-icon="w"></i> </div> </figure> <p>Once you confirm your choices, a final confirmation screen will appear. After you select <b>Reset</b>, the process will begin (Figure 5). This is your final chance to cancel the reset. If you allow this step to proceed and don't click <b>Cancel </b>at any point, you can no longer reverse the reset process. You'll have to let it complete and then restore a backup to return to where you started.</p> <figure class="main-article-image full-col" data-img-fullsize="https://www.techtarget.com/rms/onlineimages/windows_11_reset_5_h.jpg"> <img data-src="https://www.techtarget.com/rms/onlineimages/windows_11_reset_5_h_mobile.jpg" class="lazy" data-srcset="https://www.techtarget.com/rms/onlineimages/windows_11_reset_5_h_mobile.jpg 960w,https://www.techtarget.com/rms/onlineimages/windows_11_reset_5_h.jpg 1280w" alt="The 'Preparing to reset' screen, showing how ready the PC is for reset and giving the option to cancel." data-credit="Ed Tittel"> <figcaption> <i class="icon pictures" data-icon="z"></i>Figure 5. The reset process does some preparation work before it reboots the PC. </figcaption> <div class="main-article-image-enlarge"> <i class="icon" data-icon="w"></i> </div> </figure> <p>Finally, the PC reboots and runs the Windows install that drives the chosen <a target="_blank" href="https://support.microsoft.com/en-us/windows/recovery-options-in-windows-31ce2444-7de3-818c-d626-e3b5a3024da5#WindowsVersion=Windows_11" rel="noopener">reset operation</a>.</p> <p>Once the OS is in place, the installer will run through several prompts to complete the installation. These include prompts for country or region, language, keyboard layout and privacy settings. Logging in to a Microsoft account completes the process. Once the out-of-box experience finishes, the Windows 11 desktop will be in the same state as when it left the factory. If you plan to sell or hand off the PC to someone else, it's ready to go. If you plan to return it to its original user, substantial work remains to restore the user's preferences and customizations.</p> <p>For IT teams, a factory reset should be treated as a controlled recovery or transition step rather than a routine troubleshooting action. When executed with proper backups and planning, it can return a system to a stable baseline without introducing unnecessary operational risk.</p> <p><b>Editor's note:</b> <em>This article was updated to improve the reader experience.</em></p> <p><em>Ed Tittel is a 30-plus year IT veteran who has worked as a developer, networking consultant, technical trainer and writer.</em></p> </section> A factory reset may be needed for Windows 11 devices with ongoing performance issues or when reassigned, helping IT reduce data loss and recovery risks. https://cdn.ttgtmedia.com/rms/onlineimages/wfh_a299201055.jpg https://www.techtarget.com/searchenterprisedesktop/tip/How-to-perform-a-factory-reset-on-a-Windows-11-desktop Tue, 10 Feb 2026 12:56:00 GMT <p>Windows 11 is now the standard desktop OS for new enterprise devices, but not every existing PC is eligible to upgrade. Hardware requirements introduced with Windows 11 continue to exclude many older systems, making compatibility checks essential before deployment.</p> <p>Although Windows 11 shares many architectural similarities with Windows 10, its stricter hardware requirements continue to block upgrades on older systems. Microsoft continues to recommend against upgrading unsupported hardware to Windows 11, noting that such systems may not receive feature or <a href="https://www.techtarget.com/searchsecurity/tip/5-enterprise-patch-management-best-practices">security updates</a> reliably.</p> <section class="section main-article-chapter" data-menu-title="Key Windows 11 hardware requirements"> <h2 class="section-title"><i class="icon" data-icon="1"></i>Key Windows 11 hardware requirements</h2> <p>All the details concerning Windows 11 specifications and requirements are <a href="https://www.microsoft.com/en-us/windows/windows-11-specifications?r=1" target="_blank" rel="noopener">available from Microsoft</a>. A select few are likely to pose compatibility issues for older PCs. Older PCs must support the following features or capabilities:</p> <ul class="default-list"> <li><strong>System firmware.</strong> Requires Unified Extensible Firmware Interface and must be Secure Boot capable.</li> <li><strong>Trusted Platform Module.</strong> Must run TPM version 2.0 or better. <ul class="default-list"> <li>This does not require discrete TPM circuitry. Newer Intel, AMD and Azure Resource Manager (ARM)/Qualcomm CPUs support TPM 2.0 via firmware emulation.</li> </ul> </li> <li><strong>CPU requirements. </strong> <ul class="default-list"> <li><strong></strong> <strong>Intel.</strong> Must be eighth-generation CPU or newer, with minor seventh-generation exceptions for certain Microsoft Surface PCs.</li> <li><strong></strong> <strong>AMD.</strong> Must be Epyc 72xx or better, or Ryzen 2300X CPU or better -- including most Ryzen 3 and 5 models.</li> <li><strong>ARM/Qualcomm.</strong> Must be Snapdragon 7c or 8xx, or MS SQ1 or SQ2 model.</li> </ul> </li> </ul> </section> <section class="section main-article-chapter" data-menu-title="Tools to assess Windows 11 update readiness"> <h2 class="section-title"><i class="icon" data-icon="1"></i>Tools to assess Windows 11 update readiness</h2> <p>Microsoft continues to offer the PC Health Check app, available through the Microsoft Store, that works on individual PCs, one at a time. To find the app, type "PC Health Check" into the <strong>Start Menu</strong> search box (Figure 1).</p> <figure class="main-article-image full-col" data-img-fullsize="https://www.techtarget.com/rms/onlineimages/windows_upgrade_1.jpg"> <img data-src="https://www.techtarget.com/rms/onlineimages/windows_upgrade_1_mobile.jpg" class="lazy" data-srcset="https://www.techtarget.com/rms/onlineimages/windows_upgrade_1_mobile.jpg 960w,https://www.techtarget.com/rms/onlineimages/windows_upgrade_1.jpg 1280w" alt="The PC Health Check app in the Start Menu." data-credit="Ed Tittel" height="344" width="560"> <figcaption> <i class="icon pictures" data-icon="z"></i>Simply type 'PC Health Check' in the Windows 10 Start Menu to launch the app. </figcaption> <div class="main-article-image-enlarge"> <i class="icon" data-icon="w"></i> </div> </figure> <p>If the version of PC Health Check on a target PC is outdated, Microsoft will update the app before it runs. When the PC Health Check app opens, click <strong>Check now</strong> to run the Windows 11 system requirements assessment (Figure 2).</p> <figure class="main-article-image full-col" data-img-fullsize="https://www.techtarget.com/rms/onlineimages/windows_upgrade_2.jpg"> <img data-src="https://www.techtarget.com/rms/onlineimages/windows_upgrade_2_mobile.jpg" class="lazy" data-srcset="https://www.techtarget.com/rms/onlineimages/windows_upgrade_2_mobile.jpg 960w,https://www.techtarget.com/rms/onlineimages/windows_upgrade_2.jpg 1280w" alt="The opening screen for the PC Health Check app." data-credit="Ed Tittel" height="120" width="560"> <figcaption> <i class="icon pictures" data-icon="z"></i>Click 'Check now' to launch the compatibility assessment. </figcaption> <div class="main-article-image-enlarge"> <i class="icon" data-icon="w"></i> </div> </figure> <p>Click <strong>See all results</strong> in the resulting pop-up to get to the PC Health Check window and find out whether the target PC meets Windows 11 requirements (Figure 3).</p> <figure class="main-article-image full-col" data-img-fullsize="https://www.techtarget.com/rms/onlineimages/windows_upgrade_3.jpg"> <img data-src="https://www.techtarget.com/rms/onlineimages/windows_upgrade_3_mobile.jpg" class="lazy" data-srcset="https://www.techtarget.com/rms/onlineimages/windows_upgrade_3_mobile.jpg 960w,https://www.techtarget.com/rms/onlineimages/windows_upgrade_3.jpg 1280w" alt="The screen showing the results of the PC Health Check." data-credit="Ed Tittel" height="235" width="560"> <figcaption> <i class="icon pictures" data-icon="z"></i>The Surface Pro 3 PC in this example, purchased in 2014, fails because it's running a fourth-generation Intel CPU (i7-4650U). </figcaption> <div class="main-article-image-enlarge"> <i class="icon" data-icon="w"></i> </div> </figure> <p>IT organizations might use third-party Windows 11 compatibility assessment tools on corporate PCs because the PC Health Check doesn't work with policy-based PC management. On such PCs, the native Microsoft tool's check produces only an error result (Figure 4).</p> <figure class="main-article-image full-col" data-img-fullsize="https://www.techtarget.com/rms/onlineimages/windows_upgrade_4.jpg"> <img data-src="https://www.techtarget.com/rms/onlineimages/windows_upgrade_4_mobile.jpg" class="lazy" data-srcset="https://www.techtarget.com/rms/onlineimages/windows_upgrade_4_mobile.jpg 960w,https://www.techtarget.com/rms/onlineimages/windows_upgrade_4.jpg 1280w" alt="The notification that PC Health Check results are not available on a PC because it is centrally managed." data-credit="Ed Tittel" height="256" width="560"> <figcaption> <i class="icon pictures" data-icon="z"></i>Centrally managed PCs don't work well with the PC Health Check. </figcaption> <div class="main-article-image-enlarge"> <i class="icon" data-icon="w"></i> </div> </figure> <p>For PCs that can't properly run the PC Health Check tool, there are a few third-party tools that IT admins can try. <a href="https://github.com/rcmaehl/WhyNotWin11" target="_blank" rel="noopener">WhyNotWin11</a> is a project available on GitHub that runs as a standalone Windows application. It reports on a series of checks that it runs on target PCs, such as CPU compatibility and storage availability. The application lists the requirements for Windows 11 and identifies which ones the target PC does and does not meet (Figure 5).</p> <figure class="main-article-image full-col" data-img-fullsize="https://www.techtarget.com/rms/onlineimages/windows_upgrade_5.jpg"> <img data-src="https://www.techtarget.com/rms/onlineimages/windows_upgrade_5_mobile.jpg" class="lazy" data-srcset="https://www.techtarget.com/rms/onlineimages/windows_upgrade_5_mobile.jpg 960w,https://www.techtarget.com/rms/onlineimages/windows_upgrade_5.jpg 1280w" alt="The screen showing results in WhyNotWin11." data-credit="Ed Tittel" height="420" width="560"> <figcaption> <i class="icon pictures" data-icon="z"></i>WhyNotWin11 shows an incompatible CPU and a missing TPM. </figcaption> <div class="main-article-image-enlarge"> <i class="icon" data-icon="w"></i> </div> </figure> <p>The <a href="https://github.com/jbcarreon123/Win11CompChk" target="_blank" rel="noopener">Windows 11 Compatibility Check</a> is another project available on GitHub that takes the form of a <a href="https://www.techtarget.com/searchwindowsserver/definition/batch-file">batch file</a> and runs inside an administrative command prompt or PowerShell window on target PCs. It also works on centrally managed PCs to produce a list of which Windows 11 requirements a target PC does and does not meet (Figure 6). To perform the check, start CMD.exe at the directory where Win11CompChk.bat resides and run the file, or do likewise in a PowerShell session.</p> <figure class="main-article-image full-col" data-img-fullsize="https://www.techtarget.com/rms/onlineimages/windows_upgrade_6.jpg"> <img data-src="https://www.techtarget.com/rms/onlineimages/windows_upgrade_6_mobile.jpg" class="lazy" data-srcset="https://www.techtarget.com/rms/onlineimages/windows_upgrade_6_mobile.jpg 960w,https://www.techtarget.com/rms/onlineimages/windows_upgrade_6.jpg 1280w" alt="The screen showing results in WhyNotWin11." data-credit="Ed Tittel" height="522" width="560"> <figcaption> <i class="icon pictures" data-icon="z"></i>The Win11CompChk.bat file provides a little more detail about what's missing. </figcaption> <div class="main-article-image-enlarge"> <i class="icon" data-icon="w"></i> </div> </figure> </section> <section class="section main-article-chapter" data-menu-title="Automating compatibility checks"> <h2 class="section-title"><i class="icon" data-icon="1"></i>Automating compatibility checks</h2> <p>Both WhyNotWin11 and Windows 11 Compatibility Check can run remotely via PowerShell scripts or batch files. They each support an export facility to save results and send them to a central collection point. IT administrators must embed those scripts with data to identify the PCs that the results address -- machine name or some other unique identifier such as asset ID or vendor ID -- so they can distinguish one computer from another after the compatibility data's collection. The results from these tools help IT teams identify which portions of their PC fleet remain eligible for Windows 11 and which devices require replacement. With <a href="https://www.techtarget.com/searchenterprisedesktop/feature/End-user-computing-trends-to-watch">Windows 10 now out of support</a>, compatibility data plays a critical role in identifying upgrade-eligible devices and prioritizing hardware refresh decisions.</p> <p>Windows 11 compatibility checks are less about whether to upgrade and more about understanding the current state of the device fleet. Results from these tools help inform replacement priorities, risk exposure and near-term endpoint decisions.</p> <p><em>Ed Tittel is a 30-plus-year IT veteran who has worked as a developer, networking consultant, technical trainer and writer.</em></p> </section> Before upgrading to Windows 11, IT should verify device compatibility. Tools like PC Health Check and third-party utilities identify hardware readiness. https://cdn.ttgtmedia.com/rms/onlineimages/check_g1199243271.jpg https://www.techtarget.com/searchenterprisedesktop/tip/3-tools-to-check-Windows-11-update-compatibility Tue, 10 Feb 2026 00:00:00 GMT <p>For most enterprises, Linux hasn't been part of serious desktop planning conversations for years. That's starting to change -- not because Linux suddenly became fashionable again, but because Windows 10 is going away, and the replacement comes with strings attached.</p> <p>Browser-based <a href="https://www.techtarget.com/searchcloudcomputing/feature/Top-SaaS-Examples-and-Applications-for-Businesses">SaaS applications</a> flattened a lot of day-to-day differences between desktops. Email looks the same. Collaboration tools behave the same. For many users, that was enough to stop caring about which OS sat underneath.</p> <p>That assumption holds -- to a point.</p> <p>The renewed interest in Linux desktops shows where its limits begin to appear.</p> <p>A recent article outlines <a href="https://www.techtarget.com/searchenterprisedesktop/feature/Why-2026-might-bring-more-Linux-desktops-to-the-enterprise">why Linux is becoming credible again</a> as an enterprise workstation option. The timing matters. With Windows 10 retiring and Windows 11 introducing new hardware requirements and upgrade costs, many organizations are reassessing whether another forced refresh actually delivers value.</p> <p>The appeal of Linux isn't that it makes the OS irrelevant; it's that OS decisions have become consequential again.</p> <section class="section main-article-chapter" data-menu-title="Linux as an escape hatch, not a fashion statement"> <h2 class="section-title"><i class="icon" data-icon="1"></i>Linux as an escape hatch, not a fashion statement</h2> <p>For most enterprises, renewed interest in Linux desktops has very little to do with enthusiasm for Linux itself. It starts with Windows 10 going away -- and with what comes next.</p> <p>Windows 11 brings tighter hardware requirements, shorter upgrade windows and fewer places to pause. For organizations that would rather not replace functioning devices on someone else's timetable, Linux becomes a way to slow the clock.</p> <p>That change shows up first in control, not cost. Linux makes it easier to see what the OS is doing, what data it collects and how much flexibility remains around device lifespans. Hardware requirements are less prescriptive. Upgrade paths are easier to defer or sequence. Teams regain some discretion over when desktops change and why.</p> <p>Sustainability considerations tend to follow. Extending desktop lifecycles is simpler when refresh decisions are not tied to a single OS roadmap. Energy efficiency improves incrementally rather than through forced replacement cycles. For organizations with <a href="https://www.techtarget.com/sustainability/feature/ESG-strategy-and-management-Complete-guide-for-businesses">environmental, social and governance goals</a>, Linux doesn't solve the problem -- but it removes one of the pressures that makes it harder.</p> <blockquote class="main-article-pullquote"> <div class="main-article-pullquote-inner"> <figure> The appeal of Linux isn't that it makes the OS irrelevant; it's that OS decisions have become consequential again. </figure> <i class="icon" data-icon="z"></i> </div> </blockquote> </section> <section class="section main-article-chapter" data-menu-title="Where SaaS actually fits"> <h2 class="section-title"><i class="icon" data-icon="1"></i>Where SaaS actually fits</h2> <p><a href="https://www.techtarget.com/searchvirtualdesktop/feature/Comparing-DaaS-vs-SaaS-and-how-they-work?Offer=ab_MeteredFormCopyEoc_ctrl">SaaS is different from desktop-as-a-service</a> because it is application-specific rather than desktop-specific. Most SaaS tools are delivered through the browser, which makes the OS far less important for day-to-day application use.</p> <p>That shift is what changes the Linux equation.</p> <p>Reduced hardware requirements make Linux more approachable for nontechnical users than it once was. SaaS addresses historic barriers -- application availability, deployment complexity, updates and compatibility -- through simplification rather than platform loyalty.</p> <p>Linux still makes some organizations uncomfortable -- not because of a single, stated objection, but because of accumulated habits that support models built around Windows, procurement assumptions and years of muscle memory. What's different now is that SaaS removes enough friction that those habits matter less. Cost pressure, simpler deployment and browser-first workflows do the work quietly, without anyone needing to champion Linux explicitly.</p> <div class="extra-info"> <div class="extra-info-inner"> <p></p> <h3 class="splash-heading">What CIOs often assume about enterprise Linux desktops</h3> <p>When Linux enters desktop planning discussions, it rarely arrives as a formal proposal. More often, it shows up at the edges -- as a question about refresh timing, device lifespans or whether another Windows upgrade is actually necessary.</p> <p>Years of SaaS adoption shape those conversations. When most work happens in the browser, the desktop OS starts to feel less important. As long as applications behave the same, differences in look and feel seem tolerable.</p> <p>Licensing usually fades even further into the background. It is treated as something to sort out later, once the architecture is already in place.</p> <p>Linux unsettles that sequence -- not by fading into the background, but by reintroducing the OS as something organizations can influence directly. The question stops being how to work around the OS -- and starts being who controls it, and for how long.</p> </div> </div> </section> <section class="section main-article-chapter" data-menu-title="What this means for CIOs"> <h2 class="section-title"><i class="icon" data-icon="1"></i>What this means for CIOs</h2> <p>Linux desktops are not becoming viable because enterprises suddenly love Linux. They are becoming viable because SaaS softened application dependence at the same time Windows 11 hardened OS consequences.</p> <p>Linux isn't winning because enterprises fell in love with it. It's showing up again because the alternatives became more expensive, more restrictive and harder to justify. In that context, Linux doesn't have to be perfect; it just has to be workable.</p> <p><i>James Alan Miller is a veteran technology editor and writer who leads Informa TechTarget's Enterprise Software group. He oversees coverage of ERP &amp; Supply Chain, HR Software, Customer Experience, Communications &amp; Collaboration and End-User Computing topics.</i></p> </section> As Windows 10 retires and SaaS reduces OS dependence, Linux desktops are re-emerging as a viable enterprise option driven by cost, control, privacy and hardware flexibility. https://cdn.ttgtmedia.com/rms/onlineimages/clock-time12.jpg https://www.techtarget.com/searchenterprisedesktop/feature/When-SaaS-softens-the-OS-but-doesnt-erase-it Fri, 06 Feb 2026 14:25:00 GMT <p>Windows 11 desktops can get stuck in a reboot loop that makes it impossible for users to work, and sometimes it's unclear why the problem occurs or how to fix it.</p> <p>This can hinder productivity to the point that affected users must find another machine to work on until IT can solve the problem. Consequences can include unplanned downtime, increased help desk volume, <a href="https://www.techtarget.com/searchdatabackup/tip/How-to-prevent-data-loss-Strategies-for-better-data-protection">loss of unsaved work</a> and elevated security risk when users switch devices.</p> <p>In managed environments, reboot loops often emerge after updates, configuration changes or hardware stress, but the underlying cause isn't always obvious. As an IT administrator, you might have to coordinate multiple strategies to properly address restart issues.</p> <p>The best approach is to determine which category of issue -- software, hardware or system configuration -- is most likely responsible based on how and when the restarts occur. By prioritizing the right troubleshooting steps, IT can restore access quickly and avoid unnecessary disruption.</p> <section class="section main-article-chapter" data-menu-title="What can cause Windows 11 to keep restarting?"> <h2 class="section-title"><i class="icon" data-icon="1"></i>What can cause Windows 11 to keep restarting?</h2> <p>It can be difficult to track down the root causes of a reboot issue, especially if the problem occurs on some managed computers and not others. You should consider a wide range of possibilities during the troubleshooting process, including the following:</p> <ul type="disc" class="default-list"> <li><b>Improper Group Policy settings.</b> If admins have misconfigured Group Policies or failed to properly update them, a system might experience reboot issues.</li> <li><b>Inappropriate system settings.</b> A few system configuration settings can cause a Windows 11 computer to keep restarting. For example, reboot problems can occur if users are overly aggressive with the power management settings or disable the Secure Boot function. Automatic restarts and fast startups, which are enabled by default, can also contribute to reboot issues.</li> <li><b>System instability.</b> Problems at the system level, such as missing or corrupt OS files, can cause restart loops. Third-party apps can sometimes lead to reboot issues as well, especially if users installed or updated them recently. Even a Windows update can cause restart problems, as can <a href="https://www.techtarget.com/searchenterprisedesktop/tip/Windows-11-upgrade-issues-that-desktop-admins-should-know">upgrading from Windows 10 to Windows 11</a>.</li> <li><b>Malfunctioning hardware.</b> Hardware drivers and peripheral devices can create restart issues. Potential causes include failing storage devices -- especially if they affect OS or application files -- and hardware overheating, which often worsens with high-intensity workloads.</li> <li><b>Malware infection.</b> A malware infection can cause a computer to keep restarting. A reboot problem can even be one of the only <a href="https://www.techtarget.com/searchsecurity/feature/10-types-of-security-incidents-and-how-to-handle-them">signs that malware has infected a computer</a>.</li> </ul> <p>There can be other sources for the issue as well, but these common causes give admins a few places to start when dealing with persistent rebooting. The causes are not necessarily mutually exclusive, however. Multiple factors can contribute to a Windows 11 reboot loop. This makes early symptom patterns especially useful when deciding where to focus troubleshooting first.</p> </section> <section class="section main-article-chapter" data-menu-title="What to do if Windows 11 keeps restarting"> <h2 class="section-title"><i class="icon" data-icon="1"></i>What to do if Windows 11 keeps restarting</h2> <p>Because there are so many reasons why Windows 11 might keep restarting, there are also many steps admins can take to resolve reboot issues. You should look at three broad areas to identify the source of the problem: software environment, hardware environment and system settings. By assessing the desktop through these three categories, IT can determine what the best way to solve the issue is -- whether that's pausing updates, replacing the local drive or changing Group Policy settings, for example.</p> <p>Whether trying to address reboot issues directly or working with a user remotely, you should understand how to use Safe Mode to access the Windows system. If the restart issue prevents the user from booting normally into the computer, most troubleshooting steps will require the use of Safe Mode, which is a diagnostic and troubleshooting operating environment. It runs a pared-down version of the OS to help isolate and identify system issues.</p> <p>You can use Safe Mode to carry out several tasks, such as updating drivers, removing hardware components, uninstalling new apps or scanning for malware -- in other words, addressing some of the possible causes of a Windows 11 reboot loop.</p> <h3>Assess the software environment</h3> <p>When restart loops begin immediately after updates, app installs or OS upgrades, a problem with the software environment is the most likely culprit.</p> <p>There is no single approach to take with software-related issues, and it will likely come down to some trial and error to discover the underlying cause. In some situations, though, the problem might be readily apparent. For example, it might have started right after applying a Windows update or installing a new app.</p> <p>If the cause isn't clear, a good place to start is with Windows Update. Even if you centrally control updates on managed desktops, you might need to assess an individual computer to determine whether a specific update has been properly installed. If you access the managed computer directly, you can check for updates or view the update history through the <b>Windows Update</b> feature in <b>Settings</b> (Figure 1).</p> <figure class="main-article-image half-col" data-img-fullsize="https://www.techtarget.com/rms/onlineimages/windows_11_restart_1.png"> <img data-src="https://www.techtarget.com/rms/onlineimages/windows_11_restart_1_half_column_mobile.png" class="lazy" data-srcset="https://www.techtarget.com/rms/onlineimages/windows_11_restart_1_half_column_mobile.png 960w,https://www.techtarget.com/rms/onlineimages/windows_11_restart_1.png 1280w" alt="The 'Windows Update' screen in the Windows 11 system settings." data-credit="Robert Sheldon" height="242" width="280"> <figcaption> <i class="icon pictures" data-icon="z"></i>Figure 1. The desktop's update history is available under 'Windows Update' in settings. </figcaption> <div class="main-article-image-enlarge"> <i class="icon" data-icon="w"></i> </div> </figure> <p>Here, you can see if an update failed. If it did, check whether any temporary files have been left behind in the software distribution folder. You might need to delete the files before trying to run the update again.</p> <p>In some cases, a successful update still appears to be the root of the reboot problem. If this occurred, you can uninstall the update through the <b>Update history</b> utility. If the computer then boots up normally, this at least helps get the computer operational and gives you more time to figure out why the update might be causing problems.</p> <p>You can also consider placing controls on when your organization's managed Windows 11 computers should restart after an update. For this, you can use Group Policy settings or an MDM tool to set restart policies that will take effect after an update.</p> <p>Temporarily deferring updates can also help resolve startup issues. Under Windows Update, users have the option to pause updates for <a target="_blank" href="https://support.microsoft.com/en-us/windows/manage-updates-in-windows-643e9ea7-3cf6-7da6-a25c-95d4f7f099fe#WindowsVersion=Windows_11" rel="noopener">up to three weeks</a>.</p> <p>Another option for addressing reboot issues is to restore the computer to a specific point in time. This is only possible if Windows has automatically created restore points on the system or if IT has done so manually. When working on an individual computer, you can use the System Restore utility to revert the system to a specific restore point.</p> <p>If you suspect that a recently installed application might be causing the reboot problem, uninstalling the app and rebooting the computer might address the issue. If working directly on the computer, you can use the <b>Apps &amp; features</b> screen to uninstall the suspected application (Figure 2).</p> <figure class="main-article-image half-col" data-img-fullsize="https://www.techtarget.com/rms/onlineimages/windows_11_restart_2.png"> <img data-src="https://www.techtarget.com/rms/onlineimages/windows_11_restart_2_half_column_mobile.png" class="lazy" data-srcset="https://www.techtarget.com/rms/onlineimages/windows_11_restart_2_half_column_mobile.png 960w,https://www.techtarget.com/rms/onlineimages/windows_11_restart_2.png 1280w" alt="The 'Apps &amp; features' screen, with the option to uninstall an app highlighted." data-credit="Robert Sheldon" height="223" width="280"> <figcaption> <i class="icon pictures" data-icon="z"></i>Figure 2. Under 'Apps &amp; features,' you can view and uninstall applications. </figcaption> <div class="main-article-image-enlarge"> <i class="icon" data-icon="w"></i> </div> </figure> <p>Consider using the Deployment Image Servicing and Management (DISM) tool and the System File Checker (SFC) to scan the Windows 11 computer as well. The DISM scan should run before the SFC scan. Together, these tools enable IT to identify and replace missing or corrupted Windows 11 system files. However, it's important to fully understand how these tools work before running either type of scan. DISM requires a healthy component store or a valid repair source, and on managed networks, it can fail without proper update access.</p> <p>You should also scan the computer for malware infections, which can lead to reboot issues and result in even more serious consequences. The approach IT teams take here will depend on how they've <a href="https://www.techtarget.com/searchsecurity/tip/5-ways-to-achieve-a-risk-based-security-strategy">implemented security protection</a> on their networks and desktops.</p> <p>Another software-related option for addressing reboot issues is to reset Windows, which returns the OS to its original factory settings. To do this, navigate to Start &gt; Settings &gt; System &gt; Recovery. After selecting<b> Reset this PC</b>, you can choose whether or not to retain personal files (Figure 3). In either case, you should back up the files before resetting Windows.</p> <figure class="main-article-image full-col" data-img-fullsize="https://www.techtarget.com/rms/onlineimages/windows_11_restart_3.png"> <img data-src="https://www.techtarget.com/rms/onlineimages/windows_11_restart_3_mobile.png" class="lazy" data-srcset="https://www.techtarget.com/rms/onlineimages/windows_11_restart_3_mobile.png 960w,https://www.techtarget.com/rms/onlineimages/windows_11_restart_3.png 1280w" alt="The 'Choose an option' screen in the factory reset process, showing options to 'Keep my files' or 'Remove everything.'" data-credit="Robert Sheldon"> <figcaption> <i class="icon pictures" data-icon="z"></i>Figure 3. When performing a factory rest, you can choose to keep personal files or remove everything. </figcaption> <div class="main-article-image-enlarge"> <i class="icon" data-icon="w"></i> </div> </figure> <p>You should not reset Windows until you've tried all other options, including those related to hardware and system settings. If resetting Windows doesn't work, you might need to reinstall the OS, effectively starting from scratch.</p> <h3>Assess the hardware environment</h3> <p>Hardware-related reboot loops often appear under sustained workloads, during charging or when connected to external devices such as docks or GPUs.</p> <p>For example, a hardware driver can cause reboot issues if it's corrupted or outdated. An administrator working directly on a Windows 11 PC can use the Device Manager to update drivers or remove a device that might be causing issues.</p> <p>In addition to the drivers, you should test other aspects of the hardware. For example, a peripheral device might be causing the reboot problem. For this reason, it's a good idea to unplug external devices when troubleshooting a system. You should also monitor hardware components -- particularly CPUs and graphics cards -- for <a href="https://www.techtarget.com/searchstorage/post/Understand-SSD-overheating-and-what-to-do-about-it">signs of overheating</a>. Overheating can cause a system to continually restart, attempting to avoid any damage to the hardware.</p> <p>You should also run diagnostics against the power supply to ensure that it's delivering sufficient voltage to the computer and operating within recommended parameters. Additionally, make sure that there are no problems with the local drive that might be causing random restarts. To do this, you can <a href="https://www.techtarget.com/searchenterprisedesktop/tip/How-to-scan-and-repair-disks-with-Windows-10-Check-Disk">use the Check Disk (CHKDSK) utility</a> to check the file system and the volume's metadata for logical and physical errors.</p> <p>The CHKDSK utility locates bad sectors and physical disk errors and attempts to recover readable information, which might include data that the OS is trying to access. In some cases, running a scan to check for errors can resolve reboot issues. However, if bad sectors are behind the problem, it might be time to replace the drive.</p> <h3>Assess the system settings</h3> <p>Configuration-related causes are common on managed systems and are often worth checking early, especially when restarts occur without clear software or hardware triggers.</p> <p>For example, misconfigured Group Policies can cause reboot issues. So can policies that are not properly updated, which can occur when updating Windows or migrating from Windows 10 to Windows 11. IT must properly configure and update Group Policies on managed computers as necessary.</p> <p>A Windows 11 computer can also run into reboot issues if Secure Boot has been disabled for any reason. You can verify whether Secure Boot is enabled through the system summary available in the <b>System Information</b> app (Figure 4). The <b>Secure Boot State</b> feature should be set to <b>On</b>. If it's not, you'll need to update the Unified Extensible Firmware Interface settings.</p> <figure class="main-article-image full-col" data-img-fullsize="https://www.techtarget.com/rms/onlineimages/windows_11_restart_4.png"> <img data-src="https://www.techtarget.com/rms/onlineimages/windows_11_restart_4_mobile.png" class="lazy" data-srcset="https://www.techtarget.com/rms/onlineimages/windows_11_restart_4_mobile.png 960w,https://www.techtarget.com/rms/onlineimages/windows_11_restart_4.png 1280w" alt="The 'System Information' screen, with the 'Secure Boot State' option and its status highlighted." data-credit="Robert Sheldon"> <figcaption> <i class="icon pictures" data-icon="z"></i>Figure 4. Under 'System Information,' you can enable the 'Secure Boot State' feature. </figcaption> <div class="main-article-image-enlarge"> <i class="icon" data-icon="w"></i> </div> </figure> <p>Another troubleshooting option is to disable the automatic restart feature on the <b>Startup and Recovery</b> screen (Figure 5). The <b>Automatically restart</b> option is enabled by default, so restart issues might occur no matter what the underlying problem is, making it difficult to diagnose. If you disable this feature, the computer might instead display an error message or perform some other behavior that can help isolate the problem.</p> <figure class="main-article-image half-col" data-img-fullsize="https://www.techtarget.com/rms/onlineimages/windows_11_restart_5.png"> <img data-src="https://www.techtarget.com/rms/onlineimages/windows_11_restart_5_half_column_mobile.png" class="lazy" data-srcset="https://www.techtarget.com/rms/onlineimages/windows_11_restart_5_half_column_mobile.png 960w,https://www.techtarget.com/rms/onlineimages/windows_11_restart_5.png 1280w" alt="The 'Startup and Recovery' screen, showing different options to check off for 'System startup' and 'System failure.' " data-credit="Robert Sheldon" height="368" width="280"> <figcaption> <i class="icon pictures" data-icon="z"></i>Figure 5. You can disable the 'Automatically restart' option under 'Startup and Recovery.' </figcaption> <div class="main-article-image-enlarge"> <i class="icon" data-icon="w"></i> </div> </figure> <p>You can also disable fast startup, which enables Windows to boot up more quickly after the computer shuts down. This feature sometimes causes issues, including repeated bootups. By disabling it, you can at least determine whether this might be part of the problem.</p> <p>Additionally, check whether users have configured <a href="https://www.techtarget.com/whatis/definition/clock-speed">overclocking</a> on any of the hardware. If so, you should disable it. On laptop computers, you should review the power management settings, particularly as they pertain to the battery. In some cases, such as when performing resource-intensive operations, the power options might be causing the reboot issue.</p> <p>When reviewing the configuration settings, make one change at a time and check whether it alters the restart behavior. If it doesn't, revert the setting and move on. This strategy helps isolate the cause while minimizing unintended effects on managed systems.</p> <p>More often than not, restart loops in Windows 11 don't just have one obvious cause. A targeted, symptom-driven approach to troubleshooting can reduce downtime and limit unnecessary escalation.</p> <p><b>Editor's note:</b><i>&nbsp;This article was updated in February 2026 to reflect technology changes and to improve the reader experience.</i></p> <p><i>Robert Sheldon is a freelance technology writer. He has written numerous books, articles and training materials on a wide range of topics, including big data, generative AI, 5D memory crystals, the dark web and the 11th dimension.</i></p> </section> When a Windows 11 desktop keeps restarting, there are a few factors that might be behind the issue. IT administrators should understand all the possible causes and how to solve them. https://cdn.ttgtmedia.com/rms/onlineimages/check_g1199243271.jpg https://www.techtarget.com/searchenterprisedesktop/tip/How-to-fix-Windows-11-when-it-keeps-restarting Thu, 05 Feb 2026 17:00:00 GMT 60 webmaster@techtarget.com