Local security options CSP

Timeline

From the capture of 8 Oct 23:45 UTC · an earlier observation

Legacy capture: table structure or oversized sections are unavailable for extraction

Microsoft's revision log on this page · 104 entries

Dates from the page's own change log or history section. They describe earlier edits, not upcoming policy.

Policy CSP - LocalPoliciesSecurityOptionsRequirement1 condition
Policy CSP - LocalPoliciesSecurityOptionsRequirement1 condition
Policy CSP - LocalPoliciesSecurityOptionsExceptionTentative1 condition
Accounts_BlockMicrosoftAccountsScopeRecommendation4 conditions
Accounts_EnableAdministratorAccountStatusRequirementException3 conditions
Accounts_EnableGuestAccountStatusException2 conditions
Accounts_LimitLocalAccountUseOfBlankPasswordsToConsoleLogonOnlyExceptionRecommendation3 conditions
Accounts_LimitLocalAccountUseOfBlankPasswordsToConsoleLogonOnlyException1 condition
Audit_AuditTheUseOfBackupAndRestoreprivilegeScope3 conditions
Audit_ForceAuditPolicySubcategorySettingsToOverrideAuditPolicyCategorySettingsExceptionScope2 conditions
Audit_ShutdownSystemImmediatelyIfUnableToLogSecurityAuditsRequirementScope5 conditions
Devices_AllowedToFormatAndEjectRemovableMediaException1 condition
Devices_AllowUndockWithoutHavingToLogonRequirement1 condition
Devices_AllowUndockWithoutHavingToLogonRequirement1 condition
Devices_AllowUndockWithoutHavingToLogonExceptionRecommendation1 condition
Devices_PreventUsersFromInstallingPrinterDriversWhenConnectingToSharedPrintersRequirement1 condition
Devices_PreventUsersFromInstallingPrinterDriversWhenConnectingToSharedPrintersException1 condition
Devices_RestrictCDROMAccessToLocallyLoggedOnUserOnlyException1 condition
CD-ROM
Devices_RestrictCDROMAccessToLocallyLoggedOnUserOnlyException1 condition
CD-ROM
Devices_RestrictCDROMAccessToLocallyLoggedOnUserOnlyException1 condition
CD-ROM
Devices_RestrictFloppyAccessToLocallyLoggedOnUserOnlyException1 condition
Devices_RestrictFloppyAccessToLocallyLoggedOnUserOnlyException1 condition
Devices_RestrictFloppyAccessToLocallyLoggedOnUserOnlyException1 condition
DomainMember_DigitallyEncryptOrSignSecureChannelDataAlwaysRequirement2 conditions
DomainMember_DigitallyEncryptOrSignSecureChannelDataAlwaysException1 condition
DomainMember_DigitallyEncryptOrSignSecureChannelDataAlwaysException2 conditions
DomainMember_DigitallyEncryptSecureChannelDataWhenPossibleException8 conditions
every 30 daysDomainMember_DisableMachineAccountPasswordChangesMilestoneException2 conditions
DomainMember_MaximumMachineAccountPasswordAgeScope
DomainMember_RequireStrongSessionKeyRequirementException4 conditions
DomainMember_RequireStrongSessionKeyException1 condition
DomainMember_RequireStrongSessionKeyRequirement1 condition
InteractiveLogon_DisplayUserInformationWhenTheSessionIsLockedException1 condition
InteractiveLogon_DisplayUserInformationWhenTheSessionIsLockedException2 conditions
InteractiveLogon_DoNotRequireCTRLALTDELRequirement1 condition
InteractiveLogon_DoNotRequireCTRLALTDELRequirement2 conditions
InteractiveLogon_DoNotRequireCTRLALTDELRequirement1 condition
InteractiveLogon_DoNotRequireCTRLALTDELRequirement
InteractiveLogon_MachineAccountLockoutThresholdException4 conditions
InteractiveLogon_NumberOfPreviousLogonsToCacheException4 conditions
InteractiveLogon_SmartCardRemovalBehaviorException9 conditions
InteractiveLogon_SmartCardRemovalBehaviorRequirement
InteractiveLogon_SmartCardRemovalBehaviorException2 conditions
MicrosoftNetworkClient_DigitallySignCommunicationsAlwaysRequirement
MicrosoftNetworkClient_DigitallySignCommunicationsAlwaysException1 condition
MicrosoftNetworkClient_DigitallySignCommunicationsAlwaysRequirement2 conditions
MicrosoftNetworkClient_DigitallySignCommunicationsAlwaysRequirement4 conditions
MicrosoftNetworkClient_DigitallySignCommunicationsIfServerAgreesRequirementExceptionScope7 conditions
MicrosoftNetworkServer_AmountOfIdleTimeRequiredBeforeSuspendingSessionRequirement2 conditions
MicrosoftNetworkServer_AmountOfIdleTimeRequiredBeforeSuspendingSessionRequirement
MicrosoftNetworkServer_DigitallySignCommunicationsAlwaysRequirement
MicrosoftNetworkServer_DigitallySignCommunicationsAlwaysException1 condition
MicrosoftNetworkServer_DigitallySignCommunicationsAlwaysRequirementException7 conditions
MicrosoftNetworkServer_DigitallySignCommunicationsAlwaysRequirement1 condition
CurrentControlSet
MicrosoftNetworkServer_DigitallySignCommunicationsIfClientAgreesException2 conditions
MicrosoftNetworkServer_DigitallySignCommunicationsIfClientAgreesRequirementExceptionScope6 conditions
CurrentControlSet
MicrosoftNetworkServer_ServerSPNTargetNameValidationLevelRequirementExceptionRecommendation5 conditions
NetworkAccess_LetEveryonePermissionsApplyToAnonymousUsersException2 conditions
NetworkAccess_RemotelyAccessibleRegistryPathsExceptionRecommendation1 condition
CurrentControlSet
NetworkAccess_RemotelyAccessibleRegistryPathsAndSubpathsExceptionRecommendation1 condition
CurrentControlSetDefaultUserConfiguration
NetworkAccess_SharingAndSecurityModelForLocalAccountsRequirementExceptionScope4 conditions
NetworkSecurity_ForceLogoffWhenLogonHoursExpireRequirementException3 conditions
NetworkSecurity_LANManagerAuthenticationLevelException7 conditions
NetworkSecurity_LANManagerAuthenticationLevelException1 condition
NetworkSecurity_LANManagerAuthenticationLevelException5 conditions
NetworkSecurity_LDAPClientSigningRequirementsRequirement4 conditions
NetworkSecurity_LDAPClientSigningRequirementsRequirement1 condition
NetworkSecurity_MinimumSessionSecurityForNTLMSSPBasedClientsScope4 conditions
NetworkSecurity_MinimumSessionSecurityForNTLMSSPBasedClientsScope
NetworkSecurity_MinimumSessionSecurityForNTLMSSPBasedServersScope5 conditions
NetworkSecurity_MinimumSessionSecurityForNTLMSSPBasedServersScope
NetworkSecurity_RestrictNTLM_AddRemoteServerExceptionsForNTLMAuthenticationRecommendation1 condition
RecoveryConsole_AllowAutomaticAdministrativeLogonRequirement2 conditions
RecoveryConsole_AllowFloppyCopyAndAccessToAllDrivesAndAllFoldersScope1 condition
AllowWildCardsAllowAllPathsAllowRemovableMediaNoCopyPrompt
Shutdown_AllowSystemToBeShutDownWithoutHavingToLogOnRequirement2 conditions
SystemCryptography_ForceStrongKeyProtectionRequirement2 conditions
SystemObjects_RequireCaseInsensitivityForNonWindowsSubsystemsScope2 conditions
UserAccountControl_AllowRemoteLogonWithElevatedPrivilegesForDomainUsersInTheLocalAdministratorsGroupWhenAdministratorProtectionIsEnabledScope1 condition
UserAccountControl_AllowRemoteLogonWithElevatedPrivilegesForSpecifiedDomainUsersAndGroupsWhenAdministratorProtectionIsEnabledException2 conditions
UserAccountControl_AllowUIAccessApplicationsToPromptForElevationScope1 condition
UserAccountControl_AllowUIAccessApplicationsToPromptForElevationException1 condition
UserAccountControl_BehaviorOfTheElevationPromptForAdministratorProtectionRequirement2 conditions
UserAccountControl_BehaviorOfTheElevationPromptForAdministratorProtectionRequirement2 conditions
UserAccountControl_BehaviorOfTheElevationPromptForAdministratorsRequirementException2 conditions
UserAccountControl_BehaviorOfTheElevationPromptForAdministratorsRequirement2 conditions
UserAccountControl_BehaviorOfTheElevationPromptForAdministratorsRequirement2 conditions
UserAccountControl_BehaviorOfTheElevationPromptForAdministratorsRequirement2 conditions
UserAccountControl_BehaviorOfTheElevationPromptForAdministratorsRequirement2 conditions
UserAccountControl_BehaviorOfTheElevationPromptForAdministratorsRequirement2 conditions
UserAccountControl_BehaviorOfTheElevationPromptForStandardUsersRequirement2 conditions
UserAccountControl_BehaviorOfTheElevationPromptForStandardUsersRequirement1 condition
UserAccountControl_BehaviorOfTheElevationPromptForStandardUsersRequirement2 conditions
UserAccountControl_DetectApplicationInstallationsAndPromptForElevationRequirementRecommendation2 conditions
UserAccountControl_OnlyElevateExecutableFilesThatAreSignedAndValidatedException1 condition
UserAccountControl_OnlyElevateExecutableFilesThatAreSignedAndValidatedException1 condition
UserAccountControl_OnlyElevateUIAccessApplicationsThatAreInstalledInSecureLocationsRequirementExceptionScope2 conditions
UserAccountControl_OnlyElevateUIAccessApplicationsThatAreInstalledInSecureLocationsException1 condition
UserAccountControl_OnlyElevateUIAccessApplicationsThatAreInstalledInSecureLocationsException2 conditions
UserAccountControl_OnlyElevateUIAccessApplicationsThatAreInstalledInSecureLocationsException1 condition
UserAccountControl_RunAllAdministratorsInAdminApprovalModeRequirement1 condition
UserAccountControl_RunAllAdministratorsInAdminApprovalModeRequirement
UserAccountControl_SwitchToTheSecureDesktopWhenPromptingForElevationException1 condition
UserAccountControl_TypeOfAdminApprovalModeRequirementException2 conditions
UserAccountControl_UseAdminApprovalModeRequirement1 condition

Extracted automatically from Microsoft's wording. Confirm dates, conditions and whether they apply to you in the source before acting; a month or quarter is a window, not a day.

Observed history and review priority

Captured 8 Oct 23:45 UTC; extracted 16 Oct 16:10 UTC. Extractor: microsoft-1/9/fc65ebeb286710c0a830833db8a7e5de7e266b79981fe9c7c34479be9369ad3c/legacy.

Earlier unavailable versions and edits between checks are unknown. A missing statement requires review; it does not mean the policy was cancelled. Recovered historical statements are not original revision snapshots.

Retained observations · 2

Compact evidence remains available after full document bodies expire. Earlier extractions can have different vocabulary or capture limitations.

13 Oct 00:39 UTC · 131 candidates
8 Oct 23:45 UTC · 129 candidates