Skip to main content

Microsoft’s Windows 10 S restrictions go deeper than just locking down apps

Windows 10 S restrictions
Image used with permission by copyright holder
Microsoft introduced its seemingly long-awaited Surface Laptop during a special education-themed event in May. Powering this device was a new version of Windows 10 with an ‘S’ slapped at the end of its name. Right off the bat, we knew that the platform would only enable the use of Microsoft-sanctioned apps sold through the Windows Store. But the scope of Microsoft’s Windows 10 S restrictions goes way beyond a simple app lock-down.

For clarification, the Windows 10 S restrictions require that all apps and drivers have a Windows Store signature. That means users can’t side-load apps even if they are based on Microsoft’s Universal Windows Platform design. But that also means companies and institutions cannot install their in-house solutions used on Windows 10 Pro and Windows 10 Enterprise. Moreover, driver packages cannot include “non-Microsoft UI components or applications.”

As Microsoft previously confirmed, the Windows 10 S restrictions prevent users from installing Google Chrome, Mozilla Firefox, and other internet browsers unless the developers create versions for distribution through the Windows Store. Thus, Microsoft Edge is the only browser that can be used and Microsoft is also preventing users from changing the default search engine from Bing.

Another problem stemming from the Windows Store lockdown is that Windows 10 S users cannot install third-party anti-virus, disk utility, and backup products that rely on file system filter drivers. That said, Windows 10 S forces users to rely on the built-in Windows Defender component, which is not a bad thing, but could pose a problem in institutions where IT pros manage the security of multiple devices with one solution.

That is not the only headache for IT. Devices with Windows 10 S cannot join a Windows domain. That means they cannot be managed by Active Directory either and must be handled through Azure Active Directory, a “multi-tenant cloud based directory and identity management service.”

Outside the Windows Store requirement, the Windows 10 S restrictions include blocking specific built-in Windows 10 components from running at all. These include:

  • bash.exe
  • cdb.exe
  • cmd.exe
  • cscript.exe
  • csi.exe
  • dnx.exe
  • kd.exe
  • lxssmanager.dll
  • msbuild.exe
  • ntsd.exe
  • powershell.exe
  • powershell_ise.exe
  • rcsi.exe
  • reg.exe
  • regedt32.exe
  • windbg.exe
  • wmic.exe
  • wscript.exe

As of this publication, Microsoft has yet to provide detailed information outlining the Windows 10 S restrictions and benefits. The company also has not provided evaluation copies for IT pros to test, which are usually served up on Microsoft-owned sources including MSDN. The platform, it seems, is only found on the new Surface Laptop … for now.

The point behind Windows 10 S is to combat Google’s popular Chrome OS platform powering Chromebooks in the education arena. Although the Surface Laptop does not sport the price you expect for the average student, many models packing the Windows 10 S operating system will be low enough to give low-cost Chromebooks a hard time on the market. Microsoft is mainly targeting students with its Windows 10 S initiative and users can always upgrade to Windows 10 Pro if the limiting Windows 10 S restrictions get too cumbersome.

Kevin Parrish
Former Digital Trends Contributor
Kevin started taking PCs apart in the 90s when Quake was on the way and his PC lacked the required components. Since then…
I downgraded from Windows 11 to Windows 10, and I don’t plan on going back
A photo of the TikTok app running on a Windows 11 laptop

Microsoft just announced that Windows 11 is around the corner. The rollout is set to begin on October 5, with eligible PCs receiving a notification to upgrade in waves. I've used Windows 11 throughout most of the Insider period, and after downgrading, I plan on sticking with Windows 10 for a while.

Windows 11 has caused some controversy, from the confusing TPM requirement, which left DIY builders in the cold, to the busted PC Health Check app, which made it difficult to see whether your PC could even run Windows 11. Although the direction forward seems clear now, I'm still holding my breath, waiting for Microsoft to iron out the issues with and requirements of Windows 11.

Read more
Microsoft warns select Windows 11 beta testers to move back to Windows 10 now
Laptop screen featuring a Windows update screen.

Microsoft is sending a warning out to those who managed to beta test Windows 11 on unsupported hardware. It is now time to go back to Windows 10, as your device is no longer eligible to join the Windows Insider program on Windows 11.

While the message might seem shocking, it is actually a long time in the making. When Microsoft first announced Windows 11 in June, they had allowed all Windows Insiders who were already testing previous Windows 10 builds to beta test the operating system. It was intended as a "limited exception" thank-you gift to the Windows fans, but now that an official October 5 Windows 11 release date has been announced, Microsoft is ready to move on.

Read more