Public mode

No access to your tenant or devices. Every item links to its source. What this means

Some sources or documents need attention: 258/260 feeds/APIs · 416/439 docs · checked 22:55 UTC Customize Public modeDiscuss ChangeIntel on Discord

GSA Windows client release history

This page's changes and edits · All guidance changes

Microsoft's edit ·

Update GSA Windows client v2.28.94 release notes

Microsoft's commit message in MicrosoftDocs/entra-docs · commit 1da0b08 · +8 −7 lines · also on GitHub

⋯ 1 unchanged line
22 title: Global Secure Access Client for Windows Release Notes
33 description: This article tracks the changes in each released version of the Global Secure Access client for Windows.
44 ms.topic: reference
5 −ms.date: 03/25/2026
5 +ms.date: 04/10/2026
66 ms.author: jayrusso
77 author: HULKsmashGithub
88 ms.reviewer: lirazbarak
⋯ 9 unchanged lines
1818 1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as a [Global Secure Access Administrator](/azure/active-directory/roles/permissions-reference#global-secure-access-administrator).
1919 1. Browse to **Global Secure Access** > **Connect** > **Client download**.
2020 1. Select **Download Client**.
21 −:::image type="content" source="media/reference-windows-client-release-history/client-download-screen.png" alt-text="Screenshot of the client download screen with the Download Client button highlighted.":::
21 +:::image type="content" source="media/reference-windows-client-release-history/client-download-screen.png" alt-text="Screenshot of the client download screen with the Download Client button highlighted." lightbox="media/reference-windows-client-release-history/client-download-screen.png":::
2222
2323 ## Version 2.28.94
24 −Released for download on March 30, 2026.
24 +Released for download on April 11, 2026.
2525 ### Functional changes
26 −- The sign out button shows by default only on Microsoft Entra-registered devices. For Microsoft Entra-joined devices, the option is hidden and you can show it by setting a registry key. For details, see [Hide or unhide system tray menu buttons](how-to-install-windows-client.md#hide-or-unhide-system-tray-menu-buttons).
27 −- The sign out button changed its location in the user interface. It's no longer available in the system tray menu, but in the account control in the main Global Secure Access client window.
26 +- The **Sign Out** button shows by default only on Microsoft Entra-registered devices. For Microsoft Entra-joined devices, the option is hidden and you can show it by setting a registry key. For details, see [Hide or unhide system tray menu buttons](how-to-install-windows-client.md#hide-or-unhide-system-tray-menu-buttons).
27 +- The **Sign Out** button is now in the user interface in the account control in the main Global Secure Access client window. It's no longer available in the system tray menu.
2828 - A user can sign out from the Global Secure Access client and sign in as a different user in a different tenant onboarded to Global Secure Access.
29 −- Traffic logs in the Microsoft Entra admin center include the device join type.
29 +- When the client is signed out, the **Sign In** button replaces **Sign Out** in the account control in the main Global Secure Access client window.
30 +- Traffic logs in the Microsoft Entra admin center include the device join type, cross-tenant access type, and home tenant ID.
3031 - Enhancement to Intelligent Local Access: supports the ability to assign (in the portal) a private application to multiple private networks.
3132 - Enhancement to Intelligent Local Access: adds **Private Networks** section to the **Forwarding profile** tab in the **Advanced diagnostics** tool.
3233 ### Other changes
33 −- Internal internet connection test no longer requires access to `msn.com`. This change removes a dependency on an external website introduced in version 2.26.108.
34 +- Internal internet connection test no longer requires access to `msn.com` (this change removes a dependency on an external website introduced in version 2.26.108). Note: the connection test still requires access to `www.msftconnecttest.com`.
3435 - Advanced log collection includes Kerberos logs and the output of `gpresult`.
3536 - Log collection includes the list of the device's root Certificate Authorities (CAs).
3637 - New telemetries are available.
⋯ 157 unchanged lines

Microsoft's Markdown source from MicrosoftDocs/entra-docs, © Microsoft Corporation, under MIT. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy 10 Oct 01:09 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.

ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 20 Oct 22:55 UTC · 258 of 260 readable · 256 fully read · documentation 416/439 current