I installed windows 11 a dozen time at work (never at home) and I just click on “domain login”, it just creates a local account and then after the install I have to manually join the domain. No Microsoft account enforcement at all.
It’s regular Windows 11, not Enterprise, we are a small company.
But I’m wondering, this bypass is too easy, is it because it sees that the DNS server is also an active directory server, so it allows that, or the trick is that you tell him you want to join a domain?
Or maybe it’s a domain enrollment bug because we’re using samba 4 under Debian as active directory server and not Windows server/entra id/whatever they call it this month?
You need to have 11 Pro or better to domain join a computer.
Your computer would also need to be joined to your domain to allow the login, so there is definitely some config going on that is not available to the typical home user.
I don’t know why it was so easy for you, but the last four Windows 11 machines I set up over the last two years definitely required increasingly complicated hacks just to not create an online account.
I don’t think they ever said they plan to require it for Windows Pro or above skus. It’s only home (you know the one business shouldn’t be using anyway) that they said they wanted to enforce it on.
I installed windows 11 a dozen time at work (never at home) and I just click on “domain login”, it just creates a local account and then after the install I have to manually join the domain. No Microsoft account enforcement at all.
It’s regular Windows 11, not Enterprise, we are a small company.
But I’m wondering, this bypass is too easy, is it because it sees that the DNS server is also an active directory server, so it allows that, or the trick is that you tell him you want to join a domain?
Or maybe it’s a domain enrollment bug because we’re using samba 4 under Debian as active directory server and not Windows server/entra id/whatever they call it this month?
You need to have 11 Pro or better to domain join a computer.
Your computer would also need to be joined to your domain to allow the login, so there is definitely some config going on that is not available to the typical home user.
I don’t know why it was so easy for you, but the last four Windows 11 machines I set up over the last two years definitely required increasingly complicated hacks just to not create an online account.
I don’t think they ever said they plan to require it for Windows Pro or above skus. It’s only home (you know the one business shouldn’t be using anyway) that they said they wanted to enforce it on.