Replying to @⁨chahn.chris@piefed.social⁩

Windows as a home user desktop is definitely coasting on momentum, though it is also the OS deployed on most new PCs which keeps it going.

I think the only thing really keeping Microsoft relevant is Active Directory (and Azure by extension) because a lot of organizations are dependent on AD internally, and there still aren’t really any good alternatives that check all the same boxes. You could probably cobble together a working solution for ~90% of it with open source software, but it would be clunky, fragmented and feature-poor compared to an on-prem AD system. It would require a lot more administrative overhead to configure and maintain it, and user management would be a mess.

Replying to @⁨chahn.chris@piefed.social⁩

Sure, but they’ll have to catch up on almost 30 years of feature development (and feature creep). Active Directory is entrenched, by virtue of being the only game in town for decades.

Not that they’re necessarily irreplaceable, but… a half-competent Windows Server admin can go from cold iron to running HyperV with a local domain (AD forest) with a SAN supporting 200 endpoints (assuming the hardware is already in place) pre-configured with end-user applications and all relevant network & security settings (via group policy), with a print server supporting local network printers, and be ready to enroll new users, in less than a day.

I’ve seen it done, I’ve helped get it done. And all of that can be done with point-and-click GUIs, and not a dozen different ones, just like 3 (one for server/HyperV deployment, one for HyperV config post-install, and then basically everything else can be done through Active Directory).

When you’re a sysadmin for a large organization, that kind of operation at scale is non-negotiable. When I say that AD really has no competition, that’s what I mean. You could accomplish all of the same things on Linux, but it would take you a week of punching through terminal commands just to get the server and the domain up and running, and once you were done the user management still wouldn’t be as flexible or feature-complete as it is on AD (especially if you need things like auditing, or physical access token integration like badges for authentication, or remote desktop support, or video conferencing that is linked to corporate email accounts).

All of that said, if you happen to know of a group that’s actually working on a competitor for on-prem AD (not Azure AD/EntraID, the cloud system is very different and not really comparable) I would be very interested. It’s a problem that’s been on my mind for awhile now, and I’d love to get paid to actually work on it.

Replying to an earlier post

Hey I didn’t say it would be easy, you’re right there’s a ton it’s doing.

Rebuilding what it’s doing though wouldn’t take 30 years, they’ve figured out the requirements which means a startup can start fresh and build something even cleaner that works full on premise but seamlessly leverages cloud services if you want them for backup / recovery situations in the event that your on premise systems have a failure.

I don’t know anyone working on this but the fact that it would be hard means it’s actually not easily replicable and would be a good business for a startup to capture. The value prop is high for companies, if they could save a huge amount of money on licensing and get improved operational cost without sacrificing what they get from on premise it would be worth it.

It would definitely be hard to get companies to switch but the potential savings and country independence parts might be enough to make them interested in paying the switching costs.

en

Replying to @⁨chahn.chris@piefed.social⁩

Rebuilding what it’s doing though wouldn’t take 30 years, they’ve figured out the requirements

Heh, I don’t know about that… AD is the way that it is because nobody has actually figured out what the operational requirements of any given organization are. Certainly not Microsoft, not even after 2.5 decades of trying.

which means a startup can start fresh and build something even cleaner that works full on premise but seamlessly leverages cloud services

Do you work in marketing? did you get that phrase out of a brochure?

There’s nothing seamless about anything cloud. Start taking apart any cloud platform and it will spill a bunch of ugly spaghetti and Swiss cheese.

There are no green fields, especially when you’re talking about replacing an existing, operationally critical piece of technology. This is what you get:


xkcd.com/927/

in the event that your on premise systems have a failure.

If the on-prem systems have a failure there won’t be any outbound network connectivity, there won’t be anything capable of connecting externally.

The value prop is high for companies, if they could save a huge amount of money on licensing and get improved operational cost

That “if” is load-bearing. The “potential savings” are imaginary, theoretical at best. It doesn’t really make sense to talk about “switching costs” when there’s nothing to switch to. It’s a big pile of “what-ifs” and “could-bes”.