Local security options CSP

Timelines and exceptions · All guidance changes

Windows · Official Microsoft guidance

No content change seen yet. Watched since 8 Oct 23:45 UTC, last read today 01:38 UTC, next check 27 Oct 01:38 UTC.

Read the Microsoft source · Link to this observation · My radar

Timeline

From the capture of 8 Oct 23:45 UTC · an earlier observation

Legacy capture: table structure or oversized sections are unavailable for extraction

Microsoft's revision log on this page · 102 entries

Dates from the page's own change log or history section. They describe earlier edits, not upcoming policy.

Policy CSP - LocalPoliciesSecurityOptionsExceptionTentative1 condition
Accounts_BlockMicrosoftAccountsScopeRecommendation4 conditions
Accounts_EnableAdministratorAccountStatusRequirementException3 conditions
Accounts_EnableGuestAccountStatusException2 conditions
Accounts_LimitLocalAccountUseOfBlankPasswordsToConsoleLogonOnlyExceptionRecommendation3 conditions
Accounts_LimitLocalAccountUseOfBlankPasswordsToConsoleLogonOnlyException1 condition
Audit_AuditTheUseOfBackupAndRestoreprivilegeScope3 conditions
Audit_ForceAuditPolicySubcategorySettingsToOverrideAuditPolicyCategorySettingsExceptionScope2 conditions
Audit_ShutdownSystemImmediatelyIfUnableToLogSecurityAuditsRequirementScope5 conditions
Devices_AllowedToFormatAndEjectRemovableMediaException1 condition
Devices_AllowUndockWithoutHavingToLogonRequirement1 condition
Devices_AllowUndockWithoutHavingToLogonRequirement1 condition
Devices_AllowUndockWithoutHavingToLogonExceptionRecommendation1 condition
Devices_PreventUsersFromInstallingPrinterDriversWhenConnectingToSharedPrintersRequirement1 condition
Devices_PreventUsersFromInstallingPrinterDriversWhenConnectingToSharedPrintersException1 condition
Devices_RestrictCDROMAccessToLocallyLoggedOnUserOnlyException1 condition
CD-ROM
Devices_RestrictCDROMAccessToLocallyLoggedOnUserOnlyException1 condition
CD-ROM
Devices_RestrictCDROMAccessToLocallyLoggedOnUserOnlyException1 condition
CD-ROM
Devices_RestrictFloppyAccessToLocallyLoggedOnUserOnlyException1 condition
Devices_RestrictFloppyAccessToLocallyLoggedOnUserOnlyException1 condition
Devices_RestrictFloppyAccessToLocallyLoggedOnUserOnlyException1 condition
DomainMember_DigitallyEncryptOrSignSecureChannelDataAlwaysRequirement2 conditions
DomainMember_DigitallyEncryptOrSignSecureChannelDataAlwaysException1 condition
DomainMember_DigitallyEncryptOrSignSecureChannelDataAlwaysException2 conditions
DomainMember_DigitallyEncryptSecureChannelDataWhenPossibleException8 conditions
every 30 daysDomainMember_DisableMachineAccountPasswordChangesMilestoneException2 conditions
DomainMember_MaximumMachineAccountPasswordAgeScope
DomainMember_RequireStrongSessionKeyRequirementException4 conditions
DomainMember_RequireStrongSessionKeyException1 condition
DomainMember_RequireStrongSessionKeyRequirement1 condition
InteractiveLogon_DisplayUserInformationWhenTheSessionIsLockedException1 condition
InteractiveLogon_DisplayUserInformationWhenTheSessionIsLockedException2 conditions
InteractiveLogon_DoNotRequireCTRLALTDELRequirement1 condition
InteractiveLogon_DoNotRequireCTRLALTDELRequirement2 conditions
InteractiveLogon_DoNotRequireCTRLALTDELRequirement1 condition
InteractiveLogon_DoNotRequireCTRLALTDELRequirement
InteractiveLogon_MachineAccountLockoutThresholdException4 conditions
InteractiveLogon_NumberOfPreviousLogonsToCacheException4 conditions
InteractiveLogon_SmartCardRemovalBehaviorException9 conditions
InteractiveLogon_SmartCardRemovalBehaviorRequirement
InteractiveLogon_SmartCardRemovalBehaviorException2 conditions
MicrosoftNetworkClient_DigitallySignCommunicationsAlwaysRequirement
MicrosoftNetworkClient_DigitallySignCommunicationsAlwaysException1 condition
MicrosoftNetworkClient_DigitallySignCommunicationsAlwaysRequirement2 conditions
MicrosoftNetworkClient_DigitallySignCommunicationsAlwaysRequirement4 conditions
MicrosoftNetworkClient_DigitallySignCommunicationsIfServerAgreesRequirementExceptionScope7 conditions
MicrosoftNetworkServer_AmountOfIdleTimeRequiredBeforeSuspendingSessionRequirement2 conditions
MicrosoftNetworkServer_AmountOfIdleTimeRequiredBeforeSuspendingSessionRequirement
MicrosoftNetworkServer_DigitallySignCommunicationsAlwaysRequirement
MicrosoftNetworkServer_DigitallySignCommunicationsAlwaysException1 condition
MicrosoftNetworkServer_DigitallySignCommunicationsAlwaysRequirementException7 conditions
MicrosoftNetworkServer_DigitallySignCommunicationsAlwaysRequirement1 condition
CurrentControlSet
MicrosoftNetworkServer_DigitallySignCommunicationsIfClientAgreesException2 conditions
MicrosoftNetworkServer_DigitallySignCommunicationsIfClientAgreesRequirementExceptionScope6 conditions
CurrentControlSet
MicrosoftNetworkServer_ServerSPNTargetNameValidationLevelRequirementExceptionRecommendation5 conditions
NetworkAccess_LetEveryonePermissionsApplyToAnonymousUsersException2 conditions
NetworkAccess_RemotelyAccessibleRegistryPathsExceptionRecommendation1 condition
CurrentControlSet
NetworkAccess_RemotelyAccessibleRegistryPathsAndSubpathsExceptionRecommendation1 condition
CurrentControlSetDefaultUserConfiguration
NetworkAccess_SharingAndSecurityModelForLocalAccountsRequirementExceptionScope4 conditions
NetworkSecurity_ForceLogoffWhenLogonHoursExpireRequirementException3 conditions
NetworkSecurity_LANManagerAuthenticationLevelException7 conditions
NetworkSecurity_LANManagerAuthenticationLevelException1 condition
NetworkSecurity_LANManagerAuthenticationLevelException5 conditions
NetworkSecurity_LDAPClientSigningRequirementsRequirement4 conditions
NetworkSecurity_LDAPClientSigningRequirementsRequirement1 condition
NetworkSecurity_MinimumSessionSecurityForNTLMSSPBasedClientsScope4 conditions
NetworkSecurity_MinimumSessionSecurityForNTLMSSPBasedClientsScope
NetworkSecurity_MinimumSessionSecurityForNTLMSSPBasedServersScope5 conditions
NetworkSecurity_MinimumSessionSecurityForNTLMSSPBasedServersScope
NetworkSecurity_RestrictNTLM_AddRemoteServerExceptionsForNTLMAuthenticationRecommendation1 condition
RecoveryConsole_AllowAutomaticAdministrativeLogonRequirement2 conditions
RecoveryConsole_AllowFloppyCopyAndAccessToAllDrivesAndAllFoldersScope1 condition
AllowWildCardsAllowAllPathsAllowRemovableMediaNoCopyPrompt
Shutdown_AllowSystemToBeShutDownWithoutHavingToLogOnRequirement2 conditions
SystemCryptography_ForceStrongKeyProtectionRequirement2 conditions
SystemObjects_RequireCaseInsensitivityForNonWindowsSubsystemsScope2 conditions
UserAccountControl_AllowRemoteLogonWithElevatedPrivilegesForDomainUsersInTheLocalAdministratorsGroupWhenAdministratorProtectionIsEnabledScope1 condition
UserAccountControl_AllowRemoteLogonWithElevatedPrivilegesForSpecifiedDomainUsersAndGroupsWhenAdministratorProtectionIsEnabledException2 conditions
UserAccountControl_AllowUIAccessApplicationsToPromptForElevationScope1 condition
UserAccountControl_AllowUIAccessApplicationsToPromptForElevationException1 condition
UserAccountControl_BehaviorOfTheElevationPromptForAdministratorProtectionRequirement2 conditions
UserAccountControl_BehaviorOfTheElevationPromptForAdministratorProtectionRequirement2 conditions
UserAccountControl_BehaviorOfTheElevationPromptForAdministratorsRequirementException2 conditions
UserAccountControl_BehaviorOfTheElevationPromptForAdministratorsRequirement2 conditions
UserAccountControl_BehaviorOfTheElevationPromptForAdministratorsRequirement2 conditions
UserAccountControl_BehaviorOfTheElevationPromptForAdministratorsRequirement2 conditions
UserAccountControl_BehaviorOfTheElevationPromptForAdministratorsRequirement2 conditions
UserAccountControl_BehaviorOfTheElevationPromptForAdministratorsRequirement2 conditions
UserAccountControl_BehaviorOfTheElevationPromptForStandardUsersRequirement2 conditions
UserAccountControl_BehaviorOfTheElevationPromptForStandardUsersRequirement1 condition
UserAccountControl_BehaviorOfTheElevationPromptForStandardUsersRequirement2 conditions
UserAccountControl_DetectApplicationInstallationsAndPromptForElevationRequirementRecommendation2 conditions
UserAccountControl_OnlyElevateExecutableFilesThatAreSignedAndValidatedException1 condition
UserAccountControl_OnlyElevateExecutableFilesThatAreSignedAndValidatedException1 condition
UserAccountControl_OnlyElevateUIAccessApplicationsThatAreInstalledInSecureLocationsRequirementExceptionScope2 conditions
UserAccountControl_OnlyElevateUIAccessApplicationsThatAreInstalledInSecureLocationsException1 condition
UserAccountControl_OnlyElevateUIAccessApplicationsThatAreInstalledInSecureLocationsException2 conditions
UserAccountControl_OnlyElevateUIAccessApplicationsThatAreInstalledInSecureLocationsException1 condition
UserAccountControl_RunAllAdministratorsInAdminApprovalModeRequirement1 condition
UserAccountControl_RunAllAdministratorsInAdminApprovalModeRequirement
UserAccountControl_SwitchToTheSecureDesktopWhenPromptingForElevationException1 condition
UserAccountControl_TypeOfAdminApprovalModeRequirementException2 conditions
UserAccountControl_UseAdminApprovalModeRequirement1 condition

Extracted automatically from Microsoft's wording. Confirm dates, conditions and whether they apply to you in the source before acting; a month or quarter is a window, not a day.

Observed history and review priority

Captured 8 Oct 23:45 UTC; extracted 22 Oct 18:57 UTC. Extractor: microsoft-1/9/d9863eb412f92fa5ec3a8ca32e2dd7cfe8095530f456ecb1866608d1166a435d/legacy.

Earlier unavailable versions and edits between checks are unknown. A missing statement requires review; it does not mean the policy was cancelled. Recovered historical statements are not original revision snapshots.

Retained observations · 3

Compact evidence remains available after full document bodies expire. Earlier extractions can have different vocabulary or capture limitations.

24 Oct 01:28 UTC · 131 candidates
13 Oct 00:39 UTC · 131 candidates
8 Oct 23:45 UTC · 127 candidates

Retained observations

24 Oct 01:28 UTC
Source metadata changed; retained article content is unchanged.
13 Oct 00:39 UTC
The page title or its body outside the tracked passages changed. Review the source for its effect.
8 Oct 23:45 UTC · shown above

What changed

First observed 18 Oct 2026

No field changes are shown for this selection.

Cite this recorded revision to keep the same title, summary, facts and links when the page changes.

A day selects the latest observation by the end of that UTC day; today's selection can change until midnight. History starts when this installation records it.