Recommended Posts

The new Microsoft Windows 8 systems that come preinstalled on a new computer have a special feature - a feature no other PC has ever had. By default they are locked down so you cannot dual boot Windows 8 with another operating system such as Linux or even older versions of Windows such as Windows XP and Windows 7.

Dual booting is a popular thing to do for many PC users because it allows them the ability to use the right applications they need to get the job done if those applications are not found on Windows 8 alone. Dual booting is also used in companies that require workers use multiple operating system platforms or home users and students to try out and learn about other operating systems. Many of these operating systems are faster than Windows and have other features Windows does not have, as well as there are things Windows does better than these operating systems like AAA Gaming.

The reason Windows 8 will not dual boot is because Microsoft has insisted that their PC manufacturer partners like HP and Dell ship with a new type of bios called UEFI (Unified Extensible Firmware Interface) and it's feature called Secure Boot enabled. Secure Boot acts as a protection feature that is supposed to ensure your system doesn't have any malware at the time of shipping. It works by checking keys in the operating system against hard coded keys in the UEFI. As these keys are signed by Microsoft, the system will not allow any other operating system to boot assuring you have a clean copy of Windows 8. This has never been done before in the PC market and for good reason - PC Manufacturers don't have problems with systems getting malware before they ship.

PC's that ship with Windows are cheaper because Microsoft buys a portion of the hardware in exchange for HP offering Windows in the computer. The rep told me all the PC manufacturers and Microsoft have this same agreement. I wanted to know why there was no mention of UEFI in the HP documentation or why the tech support could not help me. The HP rep told me many times during our phone conversation that because they are paid by Microsoft, they adhere to Microsoft's wishes and not make it easy on people to learn about disabling Secure Boot so you can dual boot - something that is required by the manufacturers from Microsoft's own documentation called Windows 8 Hardware Certification Requirements for Client and Server Systems.

more

I also like trudging up articles about things we knew a year ago for fresh FUD!

Did you know that every time you connect to the internet you're assigned an identifier called an 'IP address' than can associate your online activity with your internet account? More at 11!

The HP rep told me many times during our phone conversation that because they are paid by Microsoft, they adhere to Microsoft's wishes and not make it easy on people to learn about disabling Secure Boot so you can dual boot.

Yeah I do not know about this. - I am always skeptical when I see quotes like this. It is too easy to change / alter or just straight fabricate this information in an attempt to make a story spin in a specific direction.

Even IF this was quoted, I am sure this person is not authorized or have the capacity to discuss the terms and agreements.

Microsoft buys a portion of the hardware? Microsoft pays HP to use windows? :woot:

im sorry but your info is incorrect. HP pays Microsoft for a license to use their software(Windows). Microsofts license requires certain features (SecureBoot) to be enabled if that device wants to have Windows 8 certification . Windows 8 certification means that the hardware and software meet certain standard. Anyone can sell non certified PCs,but most retailers and stores will not allow or sell non certified windows PCs.

Interesting:

  • UEFI allows firmware to implement a security policy
  • Secure boot is a UEFI protocol not a Windows 8 feature
  • UEFI secure boot is part of Windows 8 secured boot architecture
  • Windows 8 utilizes secure boot to ensure that the pre-OS environment is secure
  • Secure boot doesn?t ?lock out? operating system loaders, but is a policy that allows firmware to validate authenticity of components
  • OEMs have the ability to customize their firmware to meet the needs of their customers by customizing the level of certificate and policy management on their platform
  • Microsoft does not mandate or control the settings on PC firmware that control or enable secured boot from any operating system other than Windows

http://www.eightforums.com/tutorials/17058-secure-boot-enable-disable-uefi.html

Interesting:

  • UEFI allows firmware to implement a security policy
  • Secure boot is a UEFI protocol not a Windows 8 feature
  • UEFI secure boot is part of Windows 8 secured boot architecture
  • Windows 8 utilizes secure boot to ensure that the pre-OS environment is secure
  • Secure boot doesn?t ?lock out? operating system loaders, but is a policy that allows firmware to validate authenticity of components
  • OEMs have the ability to customize their firmware to meet the needs of their customers by customizing the level of certificate and policy management on their platform
  • Microsoft does not mandate or control the settings on PC firmware that control or enable secured boot from any operating system other than Windows

http://www.eightforu...sable-uefi.html

Wait I am confused, are you correcting yourself?

I'm thinking it's more in the realm of preventing bootloader activation cracks and rootkits that inject themselves into the bootloader. I'm pretty sure part of the spec is that manufacturers must place an option in the BIOS to disable secure boot.

So explain how people are booting Ubuntu on surface pros

Microsoft signed a shim bootloader for Linux.This is basically a generic prebootloader that allows to run a secondary bootloader which can be specific to each Linux distribution. The shim bootloaders is generic because Microsoft cant keep signing every new version of bootloaders for Linux guys. Therefore since this is a trusted binary, its able to run and then boot Linux with secureboot enabled.

If it weren't for the fact that 90% of PC users are uneducated and unwilling to learn about what they bought/use (but also cannot live without it these days) we wouldn't need "Secure Boot".

I got fed up of helping people with viruses and trojans taking up hours of my time (mostly for free) that I just prefer they go to someone else or even pay for a professional to help them now.

I got fed up of helping people with viruses and trojans taking up hours of my time (mostly for free) that I just prefer they go to someone else or even pay for a professional to help them now.

Only people I help for free now is family, and if I am doing work for a charity. I told my one sis if she ever installed Limewire again (she kept installing it after I kept telling her not to) that I will not longer help her and she will have to pay to get the system fixed next time.

companies can put all the protection they want on a system...if hte user is uneducated and do not know what they are doing, no amount of protection will help. I would figure with computers being so common and wide spread that more people would be smarter.

  • Like 2

Only people I help for free now is family, and if I am doing work for a charity. I told my one sis if she ever installed Limewire again (she kept installing it after I kept telling her not to) that I will not longer help her and she will have to pay to get the system fixed next time.

companies can put all the protection they want on a system...if hte user is uneducated and do not know what they are doing, no amount of protection will help. I would figure with computers being so common and wide spread that more people would be smarter.

Screw that...I stopped helping out my family because it was pointless. The only ones I still help are my parents...you cannot say no to Mom and Dad :)

Simple, create a limited profile, define in GPO what applications she can use after you downloaded and configured the software she needs. and there yah go. I do that for my family to keep the lappie nice and clean and keep me sane!

There is no conspiracy, how hard is it to go to the bios to turn this off? Anyone who is going to be dual booting and such are already going to know about this or things like this to get around it. So why make a big deal over this?

  • Like 2

Thought Microsoft Security Essentials when released would cut down on Family infecting there PC's with junk, but I find that i'm still helping family remove Trojans and junk off there PC's pretty regularly, gotten to the point only help Mom these days, rest I recommend to local small PC shop, as too much time cleaning there PCs

Most of Family though removed MSE when they saw it failed certification tests...So I guess up to them now what they use.

This topic is now closed to further replies.
  • Posts

    • Microsoft confirms Windows 11 26H2 to finally get one of the most requested features by Sayan Sen This past week Microsoft officially confirmed Windows 11 version 26H2 with the latest build, 26300.8697, for testing in the experimental Insider channel. The company also published more details about it mainly directed towards IT admins and system admins. Essentially version 26H2 will be delivered via an enablement package (eKB) over Windows 11 25H2. If you are wondering about some of the upcoming features in the next Windows version, one of them is certainly very interesting as Microsoft has confirmed it is finally bringing one of the most overwhelmingly requested features ever. March Rogers, the Partner Director of Design at Microsoft, recently highlighted some of the Search improvements that the company is testing, and during the interaction with users on X where he posted it, Rogers also confirmed that the company is working on disabling web search results inside Search. This is something which many users find quite annoying as Windows would often serve them links to Bing which it feels could be more helpful rather than bringing up the actual object or app the user may be searching for on their PC. Finally though the company is prioritizing local file search over the web. However the feature could not be disabled for many users as not all new features are immediately rolled out to everyone. Image via phantomofearth (X) Windows enthusiast phantomofearth who likes to dig deep into new builds uncovered the IDs you will need to enable these features. Using the following feature IDs the new Search-related features landing in Windows 11 26H2 can be used. Follow the steps below to enable the new Search experience on Windows 11 build 26300.8697: Download ViveTool from GitHub and unpack the files in a convenient and easy-to-find folder. Press Win + X and select Terminal (Admin). Switch Windows Terminal to the Command Prompt profile with the Ctrl + Shift + 2 shortcut or by clicking the arrow-down button at the top of the window. Navigate to the folder containing the ViveTool files with the CD command. For example, if you have placed ViveTool in C:\Vive, type CD C:\Vive. Type vivetool /enable /id: and press Enter. Restart your computer. If you change your mind and want to restore, repeat the steps above and replace /enable with /disable in the commands on steps 5 and 6. Delightedly and perhaps also expectedly, once you disable web search and other such bloat, the Windows 11 Search is said to get snappier as remarked by another Windows enthusiast Xeno.
    • Makes me think of Family Guy - "Carl Sagan's Cosmos... edited for Rednecks" 🤣 https://www.youtube.com/watch?v=Ljt5iESYA7k&t=2s
    • Microsoft PC Manager 3.21.7.0 (Offline Installer) by Razvan Serea With Microsoft PC Manager, users can easily perform basic computer maintenance and enhance the speed of their devices with just one click. This app offers a range of features, including disk cleanup, startup app management, virus scanning, Windows Update checks, process monitoring, and storage management. Microsoft PC Manager key features: Storage Manager- easily uninstall infrequently used apps, manage large files, perform a cleanup, and set up Storage Sense to automatically clear temporary files. Health Checkup feature -scans for potential problems, viruses, and startup programs to turn off. It helps you identify unnecessary items to remove, optimizing your system's performance. Pop-up Management - block pop-up windows from appearing in apps. Windows Update - scans your system for any pending updates. Startup Apps - enable or disable startup apps on your PC, allowing you to optimize your system's startup performance. Browser Protection - rest assured that harmful programs cannot alter your default browser. Also enables you to change your default browser. Process Management - allows you to conveniently terminate any active process, ensuring optimal system performance and resource utilization. Anti-virus protection - Fully integrated with Windows Security. Safeguard your PC anytime. Quick Steps: Download Microsoft PC Manager Offline Installer (APPX/MSIX) with Adguard Adguard serves as a third-party online service, offering a user-friendly method for directly downloading appx, appxbundle, and msixbundle files from the Microsoft Store. Official download links will be generated for both the app's various versions and its dependency packages. How to download Microsoft PC Manager Offline Installer (APPX/MSIX) 1. Initially, you must find the app URL within the Microsoft Store. Access the Microsoft Store via your browser and search for "Microsoft PC Manager". Once located, copy the app URL, which includes the product ID, either from the address bar or from the provided link below. https://apps.microsoft.com/detail/9PM860492SZD 2. Now paste the app URL into the designated area, then click the check mark button to produce a direct download link. 3. To download, right-click the relevant link and select “Save link as…” from your browser's menu. Occasionally, Microsoft Edge may flag the download as insecure. In such cases, consider utilizing alternative browsers such as Google Chrome or Firefox to successfully complete the download. Microsoft PC Manager is a completely free tool optimized exclusively for use on Windows 10 (19042.0 and above) and Windows 11. Download: Microsoft PC Manager 3.21.7.0 | from Microsoft Store View: Microsoft PC Manager Home Page | Screenshot Get alerted to all of our Software updates on Twitter at @NeowinSoftware
    • jspaint is a lot better, if you like the classic mspaint experience and hate the new bloated Paint.
    • Amazon takes hundreds of dollars off its Kindle readers ahead Prime Day by Taras Buria Ahead of its Prime Day, Amazon brought its Kindle readers to all-time low prices, allowing you to save on various bundles across the entire lineup, from the most affordable Kindle to the flagship Scribe and its color-enabled variant. Kindle Essentials Bundle - $108.97 | 33% off This 6-inch Kindle is a portable reader with a front light, a brighter E-Ink display, and up to 6 weeks on a single charge. The bundle includes a protective case and a charger, so that you have everything you need for comfortable reading. Kindle Paperwhite Bundle - $154.98 | 45% off Kindle Colorsoft Bundle - $169.98 | 48% off The latest Paperwite is a 7-inch reader that features significantly faster page-turning, wireless charging, an ambient light sensor, 32GB of storage, and up to 12 weeks on a single charge. Right now, the bundle with a sling bag makes the Paperwhite 25% cheaper than the non-bundle variant. The same bundle is available for the Colorsoft version with a colorful E-Ink display. Kindle Scribe 32GB Bundle - $444.97 | 27% off Kindle Scribe Colorsoft 64GB Bundle - $574.97 | 27% off The Scribe is the biggest, flagship Kindle. It has an 11-inch texturized display with a stylus support, with a big emphasis on the note-taking experience. The built-in notebook has AI-assisted features for search, refinements, summarization, and more. The Scribe comes with 32GB of storage, and the bundle gets you a case, a stylus, and a protective case. Like with the Paperwhite, there is a Colorsoft version, which is also available with a massive discount. Note: These deals are available to Prime members only. If you do not have Prime, you can sign up using one of the links below. Good to know This Amazon deal is U.S. specific, and not available in other regions unless specified. We only use first-party seller links (at the time of article publishing); ensure that you purchase from a first-party seller link only. Check out Today's Deals on Amazon | or our recent tech deals. Become a Prime member (for Students or SNAP) via Neowin Get Prime Access - Prime for half price (for qualifying Medicaid, EBT, SNAP) Subscribe to Prime Video, Audible Plus, Music Unlimited or Kindle Unlimited via Neowin As an Amazon Associate, we earn from qualifying purchases.
  • Recent Achievements

    • Dedicated
      Almohandis earned a badge
      Dedicated
    • Dedicated
      JuvenileDelinquent earned a badge
      Dedicated
    • First Post
      DrWankel earned a badge
      First Post
    • Reacting Well
      DrWankel earned a badge
      Reacting Well
    • Week One Done
      Supreme Spray LV earned a badge
      Week One Done
  • Popular Contributors

    1. 1
      +primortal
      505
    2. 2
      +Edouard
      174
    3. 3
      PsYcHoKiLLa
      84
    4. 4
      Steven P.
      76
    5. 5
      Michael Scrip
      76
  • Tell a friend

    Love Neowin? Tell a friend!