<\/p>\n

Image: Chris Hoffman \/ IDG<\/span>\t\t\t\t<\/p>\n<\/p><\/div>\n

Microsoft mainly supplies Windows in two different editions: Home and Professional.<\/p>\n

Windows 11 Home is pre-installed on many PCs, while the Pro edition is often installed on business devices. This is because Windows 11 Pro can be integrated into a company\u2019s network infrastructure (Active Directory), whereas the Home edition cannot. <\/p>\n

However, this feature is not necessary for private users who are unlikely to operate a Windows server in their home network.<\/p>\n

Nevertheless, the Windows Pro edition has some features that are of interest to everyone.<\/p>\n

Saving tip 1<\/strong>: Buy Windows 11 Pro for just $79 instead of $199<\/a><\/li>\n
Saving tip 2<\/strong>: Buy a Windows 11 Pro upgrade for just $59 instead of $99<\/a><\/li>\n<\/ul>\n
If you want to take advantage of this, you can perform a Pro update for a fee. For details, see the box \u201cUpgrade from Windows 11 Home to Pro.\u201d<\/p>\n
\n
$\"Home$
\n
Home or Pro? Users of the Home edition receive most of the additional Pro functions free of charge. Additional tools provide what is missing in the cheaper Windows edition.<\/p>\n<\/figcaption><\/figure>\n
IDG<\/p>\n<\/div>\n
But an upgrade from Windows Home can also be completely free: Almost all Pro functions can be replaced by free software.<\/p>\n
It is even possible to unlock two Pro functions in the Home Edition, which we describe in more detail in this article.<\/p>\n
\n
See also:<\/strong> Windows survival skills: 8 things every PC user should know how to do<\/a><\/p>\n<\/blockquote>\n
The differences between Windows Home and Pro<\/h2>\n
There are actually only a few points where the two editions differ. Here are the most important and relevant for private users:<\/p>\n
\n
Bitlocker encryption<\/strong>, which can be used to secure the entire drive or USB sticks, is reserved for the Pro edition. Bitlocker is particularly useful for laptops so that nobody can access your data if the device is lost. However, Microsoft has added a similar function to the Home edition of Windows 11 24H2 with device encryption (point 3). This requires you to log in with a Microsoft account. Users who do not want a Microsoft account or use Windows 10 can use alternative methods (points 4 and 5).<\/li>\n
Hyper-V<\/strong> is software that can be used to virtualize operating systems. For example, you can install Linux or Windows in Hyper-V while Windows is running and use it as a virtual second system. We describe how Hyper-V can be activated in the Home edition and what the alternative Virtualbox<\/a> offers in points 6 and 7.<\/li>\n
The remote desktop <\/strong>enables remote access to the desktop of another Windows computer via the network. The Home edition only offers remote support, where a user must first invite a helper before they can access the other PC. Both methods are only suitable to a limited extent for spontaneous help via the internet. Remote access only works if the necessary ports are open in the router firewall. This is not necessary for other remote assistance programs (see point 8).<\/li>\n
Group policies <\/strong>offer centralized management of user rights. They are mainly used in larger company networks in which functions can be restricted or specified on all PCs via the central server. Local group policies are a variant for computers that do not belong to a Windows domain. The editor for this can be activated in the Home edition, or an alternative tool can be used (see box \u201cConfiguring Windows with group policies\u201d).<\/li>\n<\/ul>\n
Encryption with Windows on-board resources<\/h2>\n
With the Home edition of Windows 10 and 11, you cannot encrypt drives with Bitlocker. However, it is possible to integrate encrypted external hard drives or USB sticks into the file system. Encryption must be carried out on another PC on which the Pro or Enterprise edition is installed. <\/p>\n
If no other computer is available, use a virtual PC (point 6 or 7).<\/p>\n
\n
$\"Bitlocker\"$
\n
Security for external drives: Encrypt the drive with Bitlocker under Windows Pro. Although the Home Edition cannot create it, it can still integrate it into the file system.<\/p>\n
<\/figcaption><\/figure>\n
Microsoft<\/p>\n<\/div>\n
Go to \u201cSettings\u201d (Win-I), search for Bitlocker <\/strong>and click on \u201cManage Bitlocker.\u201d Click on the desired drive and then on \u201cActivate Bitlocker.\u201d<\/p>\n
Tick the box \u201cUse password to unlock the drive\u201d and enter a sufficiently secure password. After clicking on \u201cNext,\u201d save the recovery key in a file, for example. Follow the further instructions of the wizard.<\/p>\n
A drive encrypted in this way can also be used with the Home edition. If you open it in the file manager by double-clicking on it, Windows will ask you for the password.<\/p>\n
Device encryption of Windows 11 24H2<\/h2>\n
Microsoft has equipped Windows 11 24H2 Home with a new function that can be used to encrypt the system drive. Bitlocker provides the basis, albeit with fewer options than the Pro edition. Windows login with a Microsoft account is also required.<\/p>\n
\n
$\"Windows$
\n
In Windows 11 24H2 Home: Activate \u201cDevice encryption\u201d in the \u201cSettings\u201d if you want Windows to encrypt the system partition. A Microsoft account is required for this.<\/p>\n<\/figcaption><\/figure>\n
Chris Hoffman \/ IDG<\/p>\n<\/div>\n
If you are using version 24H2, you should check the option in the \u201cSettings\u201d under \u201cPrivacy and security > Device encryption.\u201d<\/p>\n
If \u201cDevice encryption\u201d is not displayed, the system requirements for Windows 11 are probably not met. Then check in the firmware settings of the PC whether TPM and Secure Boot are activated.<\/p>\n
If you activate device encryption, you should save the associated recovery key. You can determine the key via account.microsoft.com\/devices\/recoverykey<\/a> after logging in with your Microsoft account. <\/p>\n
The recovery key is required so that you can access your data via a rescue or secondary system in the event of Windows or hardware problems.<\/p>\n
See also<\/strong>: How to make Microsoft Windows services work for you<\/a><\/p>\n
Encrypt drives with Veracrypt<\/h2>\n
If you don\u2019t want to or can\u2019t use Bitlocker or device encryption, Veracrypt<\/a> is an almost equivalent alternative. The tool also has the advantage that it is available for Linux and Mac OS. You can also use it to integrate encrypted Windows drives under these systems.<\/p>\n
In terms of security, it is difficult to compare Bitlocker and Veracrypt. With the open source tool Veracrypt, you can examine the source code and check the code quality and implementation of the algorithms. This is not possible with Bitlocker. <\/p>\n
Neither method can promise 100 percent security \u2014 ultimately, the use of any software is a question of trust.<\/p>\n
A study conducted by the Fraunhofer Institute for Secure Information Technology (SIT)<\/a> in 2020 is entitled \u201cVeraCrypt with minor flaws.\u201d No serious vulnerabilities were found.<\/p>\n
Veracrypt is not as well integrated into the system as Bitlocker. It is somewhat cumbersome to use and you have to enter the password for decryption every time you restart Windows. For security reasons, the password should be more than 20 characters long and sufficiently complex.<\/p>\n
If this is too much effort for you, you should consider whether you really need to encrypt the entire hard drive. Perhaps the solution presented in point 5 will suffice. Please also note that Veracrypt only requests the password on a restart. When reactivating after \u201cSleep,\u201d only the Windows password is requested by default.<\/p>\n
If you want to encrypt the system partition, proceed as follows:<\/p>\n
Step 1:<\/strong> The use of Veracrypt is considered secure. Nevertheless, it is advisable to create a complete backup of the Windows partition or at least the personal files. <\/p>\n
If, for example, the power fails during encryption, the files on the hard drive will no longer be readable. Also have a USB stick ready that is formatted with the FAT32 file system. <\/p>\n
About 5MB of free space is sufficient and you can also use the stick for other purposes.<\/p>\n
\n
$\"Veracrypt$
\n
In Veracrypt you will have to create a sufficiently long password for an encrypted drive to be used every time you restart your computer.<\/p>\n<\/figcaption><\/figure>\n
Veracrypt<\/p>\n<\/div>\n
Step 2:<\/strong> In Veracrypt, go to \u201cSystem > Encrypt system partition\/system drive.\u201d Follow the easy-to-understand instructions of the wizard. You can accept the defaults almost everywhere.<\/p>\n
When entering the password, please note that the Veracrypt bootloader works with the U.S. keyboard layout. The program takes this into account and switches the keyboard layout when entering the password. Tick the \u201cShow password\u201d box to see the actual password.<\/p>\n
Step 3:<\/strong> The wizard prompts you to create a rescue data carrier. By default, Veracrypt saves the required file under the name \u201cVeraCrypt Rescue Disk.zip\u201d in your \u201cDocuments\u201d folder. <\/p>\n
Unzip the file and copy the \u201cEFI\u201d folder it contains to your FAT32-formatted USB stick. After clicking on \u201cNext,\u201d the wizard will check whether the folder is present.<\/p>\n
Step 4: <\/strong>In the \u201cSystem encryption pre-test\u201d step, click on \u201cTest.\u201d Read the description, which is best printed out. Click on \u201cYes\u201d when you are prompted to restart the PC. Type in the password and confirm with the Enter key.<\/p>\n
If Veracrypt does not accept the password, for example if it is entered incorrectly, press the Esc key. Windows will then start as usual from the previously unencrypted hard drive and you will have to configure the encryption again. <\/p>\n
Otherwise, Windows will start after you enter the password. After Windows logon, the \u201cPre-test completed\u201d window appears automatically, in which you click on \u201cEncrypt.\u201d Veracrypt then starts the encryption process, which may take some time. A window will inform you of the progress.<\/p>\n
Step 5:<\/strong> Try booting from the rescue drive. You may need to change the boot sequence in the firmware setup. The rescue system offers a simple menu that can be used to repair the Veracrypt boot loader, load an alternative boot loader, or decrypt the system partition.<\/p>\n
\n
Upgrade from Windows 11 Home to Pro<\/h2>\n
The Home edition can be converted to a Pro edition without reinstallation. All you need is a new product key. <\/p>\n
Microsoft currently charges $99 for the upgrade in the official store. In the PCWorld shop, however, you can get the official upgrade for just $59<\/a>.<\/p>\n
If you have purchased a Pro key, go to \u201cSystem\u201d in the \u201cSettings\u201d under Windows 11, click on \u201cActivation\u201d and then on \u201cUpdate Windows Edition.\u201d Click on \u201cChange\u201d after \u201cChange product key\u201d and enter the new product key.<\/p>\n
\n
$\"Windows$ <\/figure>\n
Foundry<\/p>\n<\/div>\n<\/div>\n
Encrypted container with Veracrypt<\/h2>\n
If you encrypt your Windows partition, you no longer have to worry about the security of individual files. On the other hand, it is not particularly convenient to have to enter a long and complicated password when restarting the system.<\/p>\n
For more security, only encrypt the files that are really worth protecting. To do this, use Veracrypt to create an encrypted container file that holds the sensitive files.<\/p>\n
\n
$\"Veracrypt$
\n
Secure container: Create an encrypted container file with Veracrypt. Store sensitive and important documents in it. The file can be stored on any drive.<\/p>\n<\/figcaption><\/figure>\n
Veracrypt<\/p>\n<\/div>\n
Step 1:<\/strong> In Veracrypt, go to \u201cVolume > Create new volume.\u201d Leave the first option \u201cCreate encrypted container file\u201d and click on \u201cNext\u201d and again on \u201cNext.\u201d<\/p>\n
Step 2: <\/strong>Specify the storage location and file name after clicking on \u201cFile.\u201d Follow the further instructions of the wizard.<\/p>\n
Step 3<\/strong>: In the \u201cVolume password\u201d window, enter a sufficiently complex password with 20 characters or more. If you tick the \u201cShow password\u201d box, you can check the entry.<\/p>\n
Step 4 (optional): <\/strong>You can also use a short password or a PIN if you also create a key file. To do this, tick the box next to \u201cUse key file\u201d and then click on \u201cKey files.\u201d<\/p>\n
Click on \u201cCreate key file(s)\u201d and generate the entropy by moving the mouse. Enter a name for the key file, click on the \u201cCreate and save key file(s)\u201d button and select the storage location. <\/p>\n
Save the file to a USB stick. The container cannot be unlocked without the stick or the key file in combination with the password.<\/p>\n
Close the window, click on \u201cAdd files,\u201d select the key file you have just created, and click on \u201cOK.\u201d Continue with the wizard.<\/p>\n
Step 5: <\/strong>In the Veracrypt main window, click on a free drive letter, go to \u201cVolume > Select file\u201d and specify the file created in Step 2. Then click on \u201cVolume > Mount volume\u201d and enter the password.<\/p>\n
If you created a key file in step 4, tick \u201cUse key file,\u201d click on \u201cKey files,\u201d and specify the file via \u201cAdd files.\u201d<\/p>\n
Step 6: <\/strong>For faster access to the encrypted container, right-click on the (virtual) drive in the Veracrypt main window and select \u201cAdd to favorites\u201d in the context menu.<\/p>\n
Tick the box \u201cMount selected volume at login\u201d and confirm with \u201cOK.\u201d Veracrypt then automatically opens a window for entering the password after the Windows logon.<\/p>\n
If you are using a key file, you should specify this via \u201cSettings > Default key files.\u201d Otherwise, you will have to select the file each time in the password entry window. You can specify the same key file when creating further data containers.<\/p>\n
Virtual second PC with Virtualbox<\/h2>\nVirtualbox<\/a> is open source software and therefore available free of charge for all Windows editions. The range of functions corresponds roughly to Microsoft\u2019s Hyper-V. Install Virtualbox and the Virtualbox extension package, which is required for some functions, such as remote access and encryption of virtual hard disks.<\/p>\n
Click on the \u201cNew\u201d button to start a wizard for setting up a virtual machine in Virtualbox. You enter the ISO image with the installation system and specify the operating system and the size of the RAM and virtual hard drive.<\/p>\n
After completing the wizard, click on \u201cStart\u201d and install the operating system as usual.<\/p>\n
\n
$\"Virtualbox\"$
\n
Configure VMs with Virtualbox: A wizard supports you with the installation of the system. You will need the ISO file of the Linux or Windows installation system, for example.<\/p>\n<\/figcaption><\/figure>\n
Oracle<\/p>\n<\/div>\n
In the virtual machine window, go to \u201cDevices > Insert guest extensions\u201d and install the guest extensions from the virtual DVD drive. The optimized drivers ensure better graphics performance, for example.<\/p>\n
Remote access or remote maintenance via the network<\/h2>\n
\n
$\"Rustdesk$
\n
Remotely control another PC: The free Rustdesk enables access to a remote desktop. This works in the local network and also over the Internet without further configuration.<\/p>\n<\/figcaption><\/figure>\n
Rustdesk<\/p>\n<\/div>\n
You do not have to rely on the remote desktop connection of the Pro edition for remote access. There is plenty of software for this task. For example, the open source solution Rustdesk<\/a> is free of charge. <\/p>\n
The program does not require a firewall configuration. The connection is established in encrypted form via the provider\u2019s switching server.<\/p>\n
The program works without installation \u2014 the people involved only need to start it. The person seeking help tells you the ID and password displayed. You then establish the connection, which the person on the other PC must confirm.<\/p>\n
Actions that require increased rights must also be confirmed. For convenient use, however, you should install Rustdesk using the button at the bottom left of the window. This also enables unattended access to a computer. You must set a password for this in the settings under \u201cSecurity.\u201d<\/p>\n
\n
Further reading: <\/strong>Every Windows operating system, ranked<\/a><\/p>\n<\/blockquote>\n
<\/body><\/div>\n
This article originally appeared on our sister publication PC-WELT<\/a> and was translated and localized from German.<\/p>\n
\n
\n\t\t
\n\t\tAuthor: Roland Freist<\/a>, Contributor, PCWorld\t\t<\/h3>\n
\n
\n\t\t\t\t<\/p>\n
Roland Freist is a freelance IT journalist covering topics related to Windows, applications, networks, security and the Internet.<\/p>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n
\t<\/main><\/p>\n<\/div>\n
Read More<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"
Skip to content Image: Chris Hoffman \/ IDG Microsoft mainly supplies Windows in two different editions: Home and Professional. Windows 11 Home is pre-installed on many PCs, while the Pro edition is often installed on business devices. This is because Windows 11 Pro can be integrated into a company\u2019s network infrastructure (Active Directory), whereas the<\/p>\n","protected":false},"author":1,"featured_media":847306,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[640,23032],"tags":[6172,5412],"class_list":{"0":"post-847305","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-dont","8":"category-windows","9":"tag-dont","10":"tag-windows"},"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/newsycanuse.com\/index.php\/wp-json\/wp\/v2\/posts\/847305","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/newsycanuse.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/newsycanuse.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/newsycanuse.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/newsycanuse.com\/index.php\/wp-json\/wp\/v2\/comments?post=847305"}],"version-history":[{"count":0,"href":"https:\/\/newsycanuse.com\/index.php\/wp-json\/wp\/v2\/posts\/847305\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/newsycanuse.com\/index.php\/wp-json\/wp\/v2\/media\/847306"}],"wp:attachment":[{"href":"https:\/\/newsycanuse.com\/index.php\/wp-json\/wp\/v2\/media?parent=847305"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/newsycanuse.com\/index.php\/wp-json\/wp\/v2\/categories?post=847305"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/newsycanuse.com\/index.php\/wp-json\/wp\/v2\/tags?post=847305"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}