Windows hardening guidance and key dates
No content change seen yet. Watched since 12 Oct 19:19 UTC, last read 19 Oct 23:40 UTC, next check today 23:40 UTC.
Read the Microsoft source · Link to this observation · My radar
Timeline
From the capture of 12 Oct 19:19 UTC- 12 dates
- 2 undated sections
- 5 with conditions
- Enforcedon or after 11 Jul 2023 Published timing is qualified; effectiveness is not confirmed.
- Audit / monitorno sooner than 9 Apr 2024 Published timing is qualified; effectiveness is not confirmed.
- Enforced by defaultin or after January 2025 Published timing is qualified; effectiveness is not confirmed.
- Retired / removedin or after April 2025 Published timing is qualified; effectiveness is not confirmed.
- Audit / monitor8 Apr 2025 Now: Events or warnings only; nothing is blocked
- Enforced by defaultin or after July 2025 Published timing is qualified; effectiveness is not confirmed.
- Enforcedin or after October 2025 Published timing is qualified; effectiveness is not confirmed.
- Enforcednot begin before January 2026 Published timing is qualified; effectiveness is not confirmed.
- 3 years agoon or after
- Hardening changes by monthMilestone
KB5025885CVE-2023-24932
- 3 years agoon or afterEnforced · unconfirmed
- Hardening changes by monthMilestone
KB5021130RequireSealCVE-2022-38023KB5025885
- 2 years agomonth window
- 2 years ago
- 2 years agono sooner thanAudit / monitor · unconfirmed
KB5025885KB5037754CVE-2024-26248CVE-2024-29056
- 20 months agomonth windowin or afterEnforced by default · unconfirmed
KB5037754
- 20 months ago
Change date: February 19, 2025; Description: Revised the Introduction section wording. Removed the "Hardening changes at a glance" section as the information is out-of-date. Added…
- 17 months agomonth windowin or afterupdate release · Patch Tuesday 8 Apr 2025Retired / removed · unconfirmed
- Hardening changes by monthMilestone
KB5037754PacSignatureValidationLevelCrossDomainFilteringLevel
- 18 months agoAudit / monitor
CVE-2025-26647KB5057784AllowNtAuthPolicyBypass
- 14 months agomonth windowin or afterEnforced by default · unconfirmed
CVE-2025-26647KB5057784AllowNtAuthPolicyBypass
- 11 months agomonth windowin or afterEnforced · unconfirmed
CVE-2025-26647KB5057784AllowNtAuthPolicyBypass
- 8 months agomonth windownot begin beforeEnforced · unconfirmed
KB5025885
Settings and overrides named on this page
Registry values, policies and cmdlets the source mentions, with the dated steps that name them. Read the source for the values to set.
AllowNtAuthPolicyBypassOverride8 Apr 2025July 2025October 2025CrossDomainFilteringLevelApril 2025PacSignatureValidationLevelApril 2025RequireSealOverride11 Jul 2023
Requirements, exceptions and scope
KB5021130KB5014754
Extracted automatically from Microsoft's wording. Confirm dates, conditions and whether they apply to you in the source before acting; a month or quarter is a window, not a day.
Observed history and review priority
Captured 12 Oct 19:19 UTC; extracted 16 Oct 16:10 UTC. Extractor: microsoft-1/9/fc65ebeb286710c0a830833db8a7e5de7e266b79981fe9c7c34479be9369ad3c.
Review priority. Extracted assertions require review · Applicability or exceptions require review
0 date changes and 0 condition changes across 0 compared revisions. Suggested check interval: 24 hours.
Earlier unavailable versions and edits between checks are unknown. A missing statement requires review; it does not mean the policy was cancelled. Recovered historical statements are not original revision snapshots.
Related public evidence
No related evidence found in this installation's recent collection. This does not establish that no announcement exists.
What changed
First observed 18 Oct 2026No field changes in the recorded history.
Cite this recorded revision to keep the same title, summary, facts and links when the page changes.
A day selects the latest observation by the end of that UTC day; today's selection can change until midnight. History starts when this installation records it.