Local security options CSP

Timelines and exceptions · All guidance changes

Windows · Official Microsoft guidanceObserved changes retained

Observed content change

The page title or its body outside the tracked passages changed. Review the source for its effect.

Read to decideThe wording changed without matching a rule; read the changed passages to decide.

Effect uncertain

Read the current Microsoft source · Link to this observation · Compare any two versions

Observation details · observed 13 Oct 00:39 UTC

Observed by ChangeIntel: 13 Oct 00:39 UTC
Source update metadata: 23 Sep 17:34 UTC
First observed on this installation: 8 Oct 23:45 UTC
Last successful check: today 01:38 UTC
Next check due: 27 Oct 01:38 UTC

Observation time is not publication time, and a comparison does not establish an effective date. Full source bodies are not published; this page holds generated summaries, section headings and, as the page's license allows, Microsoft's changed wording. A documentation edit does not confirm feature availability in an environment.

This is an earlier observation; review the latest in My radar.

Timeline

From the capture of 13 Oct 00:39 UTC · an earlier observation

1 relative period
56 undated sections
97 with conditions

Settings and overrides named on this page

Registry values, policies and cmdlets the source mentions, with the dated steps that name them. Read the source for the values to set.

AllowAllPaths
AllowRemovableMedia
AllowWildCards
CD-ROM
DefaultUserConfigurationOverride
NoCopyPrompt

Relative periods

Counted from an event the source describes, such as installing an update; they are not calendar dates.

every 30 daysDomainMember_DisableMachineAccountPasswordChangesMilestoneException2 conditions

Requirements, exceptions and scope

GuidanceExceptionTentative1 condition1 passage
Accounts_BlockMicrosoftAccountsScopeRecommendation4 conditions1 passage
Accounts_EnableAdministratorAccountStatusRequirementException3 conditions1 passage
Accounts_EnableGuestAccountStatusException2 conditions1 passage
Accounts_LimitLocalAccountUseOfBlankPasswordsToConsoleLogonOnlyExceptionRecommendation4 conditions2 passages
Audit_AuditTheUseOfBackupAndRestoreprivilegeScope3 conditions1 passage
Audit_ForceAuditPolicySubcategorySettingsToOverrideAuditPolicyCategorySettingsExceptionScope2 conditions1 passage
Audit_ShutdownSystemImmediatelyIfUnableToLogSecurityAuditsRequirementScope5 conditions1 passage
Devices_AllowedToFormatAndEjectRemovableMediaException1 condition1 passage
Devices_AllowUndockWithoutHavingToLogonRequirementExceptionRecommendation3 conditions3 passages
Devices_PreventUsersFromInstallingPrinterDriversWhenConnectingToSharedPrintersRequirementException2 conditions2 passages
Devices_RestrictCDROMAccessToLocallyLoggedOnUserOnlyException3 conditions3 passages
CD-ROM
Devices_RestrictFloppyAccessToLocallyLoggedOnUserOnlyException3 conditions3 passages
DomainMember_DigitallyEncryptOrSignSecureChannelDataAlwaysRequirementException5 conditions3 passages
DomainMember_DigitallyEncryptSecureChannelDataWhenPossibleException8 conditions1 passage
DomainMember_MaximumMachineAccountPasswordAgeScope1 passage
DomainMember_RequireStrongSessionKeyRequirementException6 conditions3 passages
InteractiveLogon_DisplayUserInformationWhenTheSessionIsLockedException3 conditions3 passages
InteractiveLogon_DoNotRequireCTRLALTDELRequirement4 conditions4 passages
InteractiveLogon_MachineAccountLockoutThresholdException4 conditions1 passage
InteractiveLogon_NumberOfPreviousLogonsToCacheException4 conditions1 passage
InteractiveLogon_SmartCardRemovalBehaviorRequirementException10 conditions3 passages
MicrosoftNetworkClient_DigitallySignCommunicationsAlwaysRequirementException7 conditions4 passages
MicrosoftNetworkClient_DigitallySignCommunicationsIfServerAgreesRequirementExceptionScope7 conditions1 passage
MicrosoftNetworkServer_AmountOfIdleTimeRequiredBeforeSuspendingSessionRequirement2 conditions2 passages
MicrosoftNetworkServer_DigitallySignCommunicationsAlwaysRequirementException9 conditions4 passages
CurrentControlSet
MicrosoftNetworkServer_DigitallySignCommunicationsIfClientAgreesRequirementExceptionScope8 conditions2 passages
CurrentControlSet
MicrosoftNetworkServer_ServerSPNTargetNameValidationLevelRequirementExceptionRecommendation5 conditions1 passage
NetworkAccess_LetEveryonePermissionsApplyToAnonymousUsersException2 conditions1 passage
NetworkAccess_RemotelyAccessibleRegistryPathsExceptionRecommendation1 condition1 passage
CurrentControlSet
NetworkAccess_RemotelyAccessibleRegistryPathsAndSubpathsExceptionRecommendation1 condition1 passage
CurrentControlSetDefaultUserConfiguration
NetworkAccess_SharingAndSecurityModelForLocalAccountsRequirementExceptionScope4 conditions1 passage
NetworkSecurity_ForceLogoffWhenLogonHoursExpireRequirementException3 conditions1 passage
NetworkSecurity_LANManagerAuthenticationLevelException12 conditions6 passages
NetworkSecurity_LDAPClientSigningRequirementsRequirement5 conditions2 passages
NetworkSecurity_MinimumSessionSecurityForNTLMSSPBasedClientsScope4 conditions2 passages
NetworkSecurity_MinimumSessionSecurityForNTLMSSPBasedServersScope5 conditions2 passages
NetworkSecurity_RestrictNTLM_AddRemoteServerExceptionsForNTLMAuthenticationRecommendation1 condition1 passage
RecoveryConsole_AllowAutomaticAdministrativeLogonRequirement2 conditions1 passage
RecoveryConsole_AllowFloppyCopyAndAccessToAllDrivesAndAllFoldersScope1 condition1 passage
AllowWildCardsAllowAllPathsAllowRemovableMediaNoCopyPrompt
Shutdown_AllowSystemToBeShutDownWithoutHavingToLogOnRequirement2 conditions1 passage
SystemCryptography_ForceStrongKeyProtectionRequirement2 conditions1 passage
SystemObjects_RequireCaseInsensitivityForNonWindowsSubsystemsScope2 conditions1 passage
UserAccountControl_AllowRemoteLogonWithElevatedPrivilegesForDomainUsersInTheLocalAdministratorsGroupWhenAdministratorProtectionIsEnabledScope1 condition1 passage
UserAccountControl_AllowRemoteLogonWithElevatedPrivilegesForSpecifiedDomainUsersAndGroupsWhenAdministratorProtectionIsEnabledException2 conditions1 passage
UserAccountControl_AllowUIAccessApplicationsToPromptForElevationExceptionScope2 conditions2 passages
UserAccountControl_BehaviorOfTheElevationPromptForAdministratorProtectionRequirement4 conditions2 passages
UserAccountControl_BehaviorOfTheElevationPromptForAdministratorsRequirementException12 conditions6 passages
UserAccountControl_BehaviorOfTheElevationPromptForStandardUsersRequirement5 conditions3 passages
UserAccountControl_DetectApplicationInstallationsAndPromptForElevationRequirementRecommendation2 conditions1 passage
UserAccountControl_OnlyElevateExecutableFilesThatAreSignedAndValidatedException2 conditions2 passages
UserAccountControl_OnlyElevateUIAccessApplicationsThatAreInstalledInSecureLocationsRequirementExceptionScope5 conditions4 passages
UserAccountControl_RunAllAdministratorsInAdminApprovalModeRequirement1 condition2 passages
UserAccountControl_SwitchToTheSecureDesktopWhenPromptingForElevationException1 condition1 passage
UserAccountControl_TypeOfAdminApprovalModeRequirementException2 conditions1 passage
UserAccountControl_UseAdminApprovalModeRequirement1 condition1 passage

Extracted automatically from Microsoft's wording. Confirm dates, conditions and whether they apply to you in the source before acting; a month or quarter is a window, not a day.

Observed history and review priority

Captured 13 Oct 00:39 UTC; extracted 22 Oct 18:57 UTC. Extractor: microsoft-1/9/d9863eb412f92fa5ec3a8ca32e2dd7cfe8095530f456ecb1866608d1166a435d.

Earlier unavailable versions and edits between checks are unknown. A missing statement requires review; it does not mean the policy was cancelled. Recovered historical statements are not original revision snapshots.

Retained observations · 3

Compact evidence remains available after full document bodies expire. Earlier extractions can have different vocabulary or capture limitations.

24 Oct 01:28 UTC · 131 candidates
13 Oct 00:39 UTC · 131 candidates
8 Oct 23:45 UTC · 127 candidates

Retained observations

24 Oct 01:28 UTC
Source metadata changed; retained article content is unchanged.
13 Oct 00:39 UTC · shown above
8 Oct 23:45 UTC
Baseline for retained history; no earlier retained text to compare.

What changed

First observed 18 Oct 2026

No field changes are shown for this selection.

Cite this recorded revision to keep the same title, summary, facts and links when the page changes.

A day selects the latest observation by the end of that UTC day; today's selection can change until midnight. History starts when this installation records it.