GSA Windows client release history

This page's changes and edits · All guidance changes

Microsoft's edit · 25 Mar 18:56 UTC

Refine release notes wording and formatting

Microsoft's commit message in MicrosoftDocs/entra-docs · commit 3933e54 · +7 −7 lines · also on GitHub

⋯ 20 unchanged lines

2121 :::image type="content" source="media/reference-windows-client-release-history/client-download-screen.png" alt-text="Screenshot of the client download screen with the Download Client button highlighted.":::

2222

2323 ## Version 2.28.94

24 −Released for download on March XX, 2026.

24 +Released for download on March 30, 2026.

2525 ### Functional changes

26 −- The sign out button is shown by default only on Microsoft Entra-registered devices. For Microsoft Entra-joined devices, the option is hidden and can be shown by setting a registry key. For details, see [Hide or unhide system tray menu buttons](how-to-install-windows-client.md#hide-or-unhide-system-tray-menu-buttons).

26 +- The sign out button shows by default only on Microsoft Entra-registered devices. For Microsoft Entra-joined devices, the option is hidden and you can show it by setting a registry key. For details, see [Hide or unhide system tray menu buttons](how-to-install-windows-client.md#hide-or-unhide-system-tray-menu-buttons).

2727 - The sign out button changed its location in the user interface. It's no longer available in the system tray menu, but in the account control in the main Global Secure Access client window.

2828 - A user can sign out from the Global Secure Access client and sign in as a different user in a different tenant onboarded to Global Secure Access.

2929 - Support for logging the device join type in the traffic logs in the Microsoft Entra portal.

30 −- Enhancement to Intelligent Local Access – supports the ability to assign (in the portal) a Private Application to multiple Private Networks.

31 −- Enhancement to Intelligent Local Access – added Private Networks section to the Forwarding Profile tab in the advanced diagnostics tool.

30 +- Enhancement to Intelligent Local Access: supports the ability to assign (in the portal) a private application to multiple private networks.

31 +- Enhancement to Intelligent Local Access: adds **Private Networks** section to the **Forwarding profile** tab in the **Advanced diagnostics** tool.

3232 ### Other changes

33 −- Internal Internet connection test no longer requires access to msn.com (removing a requirement that was introduced in 2.26.108).

33 +- Internal internet connection test no longer requires access to `msn.com`. This change removes a dependency on an external website introduced in version 2.26.108.

3434 - Advanced log collection includes Kerberos logs and the output of gpresult.

35 −- Log collection includes the list of the device's root CAs.

35 +- Log collection includes the list of the device's root Certificate Authorities (CAs).

3636 - New telemetries are available.

3737 - Miscellaneous bug fixes and improvements.

3838

⋯ 100 unchanged lines

139139 > The mTLS connection gradually rolls out to customers through the cloud service. Customers continue to use the Transport Layer Security (TLS) connection until they receive mTLS.

140140 - Adds support for restricting nonprivileged users from disabling and enabling the Global Secure Access client on their device.

141141 - Shows health check tests when loading a log zip file to Advanced diagnostics.

142 −- Adds support for the Hyper-V internal switch: the Global Secure Access client installed on the host bypasses network traffic from Hyper-V guest machines. If needed, the Global Secure Access client can be installed on the guest machine, on the host machine, or both.

142 +- Adds support for the Hyper-V internal switch: the Global Secure Access client installed on the host bypasses network traffic from Hyper-V guest machines. If needed, you can install the Global Secure Access client on the guest machine, on the host machine, or both.

143143 > [!NOTE]

144144 > The Global Secure Access client doesn't support host machines with a Hyper-V external virtual switch.

145145 - Triggers the forwarding profile update when a user signs in to Windows.

⋯ 48 unchanged lines

Microsoft's Markdown source from MicrosoftDocs/entra-docs, © Microsoft Corporation, under MIT. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy 10 Oct 01:09 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.