> By pushing to make Windows as idiot-proof as possible, Microsoft is zagging when it should zig. [...] Their only hope is to position Windows as the OS for people who want to get serious work done
Arguably that's what they are doing by making Windows as idiot-proof as possible. For all their accidental botnets, the home users forgetting or not knowing to keep their machines updated are one problem, sure, but let's not forget that the real villains in not keeping Windows machines up to date are all in Enterprise IT. There are so many people actively working to keep machines out of date in the name of keeping their jobs "easy" or "stability", and that should be a staggering statistic.
I've got a feeling the number of Fortune 5,000 companies that have contributed to botnets is incredibly underreported, and I've got a feeling the number of Fortune 500 companies that have only avoided that fate by raw luck and bubble gum is a lot bigger than people think.
> Telemetry
Enterprise loves Telemetry. They want your machine to spy on all your activities. They want to complain that you spend too much time on HN and accidentally glance at articles related to "Gaming" during work time because they have a cool HN discussion thread.
Admittedly, some are overtly mad at Microsoft for getting access to that data themselves and trying to use some telemetry to improve their products, but how many of those complaining are covertly excited that they get access to the same data in tools like System Center?
> User-hostile update policies.
Per above, Enterprises have shown they need to be forced to update too.
> Pushing a Microsoft account for desktop login.
Enterprises love accounts. It helps keep things accountable. (Terrible pun intended.) Your Microsoft account gets to connect to your Office 365 work account. They can send you reminders to your personal Microsoft Account via the Microsoft Graph to your home computer to get back to work, if you let them. With BYOD workplaces, your home computer can double as your workplace computer and you can be so productive with all your accounts communicating together in "harmony", personal and work.
For the users used to using an AD domain account every day at work, a personal Microsoft Account can make their home devices feel like a "real boy" with the nice things like profile roaming that their Enterprise AD accounts get (assuming the Enterprise doesn't turn off nice things with Group Policies and mismanagement, of course).
> These things are not office-user friendly
Except for Minecraft, these things are extremely office-user friendly. These are things Enterprises love. These are reasons why most Enterprises couldn't quit Windows if they tried.
(Even forced updates; as much as some companies are griping right now, soon it will be the new normal and corporate ITs will adjust. They'll continue to complain, having a nice scapegoat to blame in Microsoft for update failures, but they'll also likely enjoy the perks of the new regime eventually as they realize that tech debt of not updating was its own misery and less "easy" than they thought it was.)