My employer uses Windows Enterprise and it also had Candy Crush and other crapware preinstalled. IIRC one of my coworkers wrote a script to remove the bundled applications.

Employer was supposed to be using Windows deployment tools to create custom enterprise images... But I'm stuck in the same boat. The maintenance overhead is too much for a small business. I am very upset that the default enterprise image is full of crap-ware, and the only alternative was LTSB with no support for Edge or Windows Store.

How are these machines HIPAA compliant when your OS vendor can push random software to them?

Vendors aren't considered threats under HIPPA which, tbf, is pretty rational because if you don't trust the entity that wrote the software or made your hardware you've got much bigger problems.

So what you're saying is we've got much bigger problems.

Microsoft's behavior here and Canonical's behavior shipping search tied into Amazon tracking show that this is not a pretty rational stance.

I trust the system I bought to not be evil as far as anything remotely everyday goes. I don't teudt their softwsre/updates.

HIPAA