So you wrote a lot and it even makes sense and considers most of the cases.

But Aero is disabled by default in Server 2008/R2. So there's no harm - it's available if you need it, but it doesn't affect your security with just being there.

Not really. If you're doing something for free, many laws don't come into play. For example, this is about the "Sales of Goods Act". If you're not selling, you don't have to worry.

Accountability for software sold is a good thing. Because right now, there is none.

DNSSEC is okay, it's just BIND that sucks. There are several DNS appliance vendors that have fully automated DNSSEC already working. For that matter, the Windows DNS server also sucks on the same level as does bind.

PowerDNS will bring mostly-automated DNSSEC, but it's not done yet.

That's a good thing, isn't it? If there's such a tax, you can download all the content you want. After all, you paid for it when you bought the storage medium.

Sadly, this is what a few people here actually believe.

No, there are plenty of SSDs that can sustain sequential read speeds above SATA2.

In fact, the US Military has rules to say our soldiers are supposed to disobey unlawful orders.

Erm, what happened in Germany was legal on their laws at that time. Laws can be changed.

No longer. The EU forbade it. You need to explicitly click on the yellow icon and allow newer IE versions to be installed.

5% of the system partition. If you don't have enough space, you won't enough space for restore points.

You can set it higher manually, though. But you'll need to know about it.

The default is 5% of the system partition. Small system partition, no place for restore points.

That's why i recommend at least 200GB for C:\

Obviously, Kirk is the better Captain.

The only way to clean a compromised system is a clean backup or a complete reinstall.

System restore points are filesystem snapshots. They can't help you with an infected computer.

I also see no reason in backing up desktop computers in an enterprise. Just reload the image and let SCCM reinstalled the applications needed on that machine. User settings will be on the server anyway.

SCCM is pretty powerful, though. It can do a lot to deploy applications seamlessly. It's still nowhere near what Linux distributions can do out of the box for this, but it's better than AD and system startup scripts.

The default is 5% of the system drive.

For the default PC partitioning scheme (one giant partition with everything on it), this makes perfect sense. For people that use a system partition that's to small (20-30GB), they'll wind up without enough space.

Here's another story for you: I'm a Swiss citizen, and i've grown up here with Swiss parents. So i'm not an immigrant.

Since 16, i had to carry my ID card with me - an ID looks like an US drivers license, except it's just an ID. It can function as a passport within other European countries, so you don't have to have your password with you to e.G. drive to Germany. I only need my passport when i visit countries which are further away.

On my last trip to the US, i needed a new biometric passport so i could go to the US without a visa. That cost 300 bucks.

I don't get any of the reactions here. When you leave your house, carry your ID with you. It's not inconvenient, i have it in my wallet just like my drivers license.