494
this post was submitted on 30 Nov 2023
494 points (97.9% liked)
Technology
58303 readers
9 users here now
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related content.
- Be excellent to each another!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, to ask if your bot can be added please contact us.
- Check for duplicates before posting, duplicates may be removed
Approved Bots
founded 1 year ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
We run virtual workstations and terminal servers for specific purposes, but a lot of our decisions are guided by NERC CIP standards and where certain things fall within that framework. The Windows workstations are probably the easiest part of this whole environment to manage though. It's realtime data and all the applications linked to that where the complicated stuff is. If it was up to me we'd be a Kubernetes shop.
I would hazard a guess that this is more of a "safe-bet" thing rather than a hard policy. I tried looking up anything that stipulates using Windows over any other OSes, and this Software Integrity and Authenticity is the only thing I could find with a five minute search.
Microsoft Windows provides such a mechanism for Microsoft signed software through its default configuration and through a Group Policy Object (GPO) that expands this capability to other trusted third parties.
It doesn't make sense that you wouldn't be able to use Linux, unless the higher-ups making the decisions are your classic dinosaurs that still believe Microsoft's propaganda from the 2000's about the scary "communist" Linux OS and the dangerous open-source programs that will steal your company secrets.
Nah it's because some core apps are not supported by the vendors on non-Windows OSs and adding an extra layer just to run Windows apps virtually/remotely when we could run them on workstations is unnecessary.