Guidance changes

Observed changes to selected Microsoft guidance. Review in My radar · Timelines and exceptions

Summaries identify wording to review. “May need admin action” is reserved for dates, prerequisites, endpoints, permissions and defaults; a match does not confirm a policy change or availability in your environment.

How this works

Checks start a history on this installation. Observation time is not Microsoft's edit time, and edits made before collection or reverted between checks are unknown. History is limited to 20 source revisions per page.

Where a page's source is in a public Microsoft documentation repository on GitHub, its page also lists Microsoft's commits, and a change shows Microsoft's newest commit message between the two checks. That commit is the likeliest explanation, not a confirmed one: several commits can land between checks, shared include files change pages too, and commit dates are when the source changed, which can precede publication.

Changes sharing a sole source-commit candidate fold together. Other busy days fold by UTC observation date; they do not imply one upstream edit. Expand an entry to read every page. Article references show literal targets and labels, including relative addresses; image bytes are not captured or compared.

Where Microsoft publishes a page's source under an open license (CC BY 4.0, or MIT for Entra), a change shows the changed passages in Microsoft's wording, with removed and added words marked. Other pages show short quotes of the changed words only. Full document copies are not published here.

Documentation discovery

440 curated addresses seed monitoring. 29 discovered addresses are currently selected, within the configured limit of 80 discovered documents.

Inventory backfill is enabled. Repository history is enabled where a validated public source is available. These channels have separate request budgets and do not establish a complete repository or documentation archive.

Inventories completed: 22
Inventories pending: 2
Discovered candidates: 44
Selected discoveries: 29
Run state: ReadFailure
Last successful inventory read: 20 Oct 2026

Discovering an older entry today does not make it a new Microsoft announcement. New explicit KB aliases share a selection identity. Previously attempted alias addresses remain available with their own histories.

Baseline security mode settingsSharePoint · found through an approved public inventory
New-SPOSiteSharePoint · found through an approved public inventory
Set-SPOTenantSharePoint · found through an approved public inventory
PropertyBag Element (Property Bag)SharePoint · found through an approved public inventory
Overview of the SharePoint FrameworkSharePoint · found through an approved public inventory
Security considerations of allowing custom scriptSharePoint · found through an approved public inventory
About the SharePoint Administrator role in Microsoft 365SharePoint · found through an approved public inventory
KB5008383—Active Directory permissions updates (CVE-2021-42291)Windows · found through an approved public inventory
KB5014754: Certificate-based authentication changes on Windows domain controllersWindows · found through an approved public inventory
Secure Boot DB and DBX variable update eventsWindows Server · found through an approved public inventory
KB5020805: How to manage Kerberos protocol changes related to CVE-2022-37967Windows · found through an approved public inventory
KB5021130: How to manage the Netlogon protocol changes related to CVE-2022-38023Windows · found through an approved public inventory
KB5021131: How to manage the Kerberos protocol changes related to CVE-2022-37966Windows Server · found through an approved public inventory
How to manage the Windows Boot Manager revocations for Secure Boot changes associated with CVE-2023-24932Windows · found through an approved public inventory
Secure Boot DB and DBX variable update eventsWindows Server · found through an approved public inventory
A Closer Look at the High Confidence DatabaseWindows Server · found through an approved public inventory
Windows 10 support has ended on October 14, 2025Windows Server · found through an approved public inventory
Protections for CVE-2025-26647 (Kerberos Authentication)Windows · found through an approved public inventory
How to manage PAC Validation changes related to CVE-2024-26248 and CVE-2024-29056Windows · found through an approved public inventory
KB5020805: How to manage Kerberos protocol changes related to CVE-2022-37967Windows Server · found through an approved public inventory
Overview of NTLM auditing enhancements in Windows 11, version 24H2, Windows Server 2019, and later versionsWindows · found through an approved public inventory
KB5021131: How to manage the Kerberos protocol changes related to CVE-2022-37966Windows Server · found through an approved public inventory
How to back up and restore the registry in WindowsWindows Server · found through an approved public inventory
KB5014754: Certificate-based authentication changes on Windows domain controllersWindows Server · found through an approved public inventory
KB5014754: Certificate-based authentication changes on Windows domain controllersWindows Server · found through an approved public inventory
Recovery DriveWindows · found through an approved public inventory
Find your BitLocker recovery keyWindows · found through an approved public inventory
Support tip: Implementing strong mapping in Microsoft Intune certificatesWindows Server · found through an approved public inventory
Enable strong name-based mapping in government scenariosMicrosoft 365 Apps · found through an approved public inventory

Review public inventory candidates

14 of 14 configured Learn inventories retained

5806 listed pages are outside the current monitored selection. These are curation candidates, not captured documents or newly published changes. Failed inventory reads retain the last accepted list; collection health is on Sources.

To monitor a reviewed page, add its full URL, product and title to PublicDocumentation:AdditionalPages. Up to 50 additions share the existing request, document and retention limits. This page never activates collection.

Configure a Conditional Access policy for Explicit Forward ProxyGlobal Secure Access · entra/global-secure-access · last accepted inventory 14 Nov 2026https://learn.microsoft.com/en-us/entra/global-secure-access/how-to-configure-conditional-access-policy-for-explicit-forward-proxy
Configure cloud firewall for Global Secure Access clients (preview)Global Secure Access · entra/global-secure-access · last accepted inventory 14 Nov 2026https://learn.microsoft.com/en-us/entra/global-secure-access/how-to-configure-cloud-firewall-clients
Configure content policiesGlobal Secure Access · entra/global-secure-access · last accepted inventory 14 Nov 2026https://learn.microsoft.com/en-us/entra/global-secure-access/tutorial-internet-access-content-policies
Configure custom proxy automatic configuration file hostingGlobal Secure Access · entra/global-secure-access · last accepted inventory 14 Nov 2026https://learn.microsoft.com/en-us/entra/global-secure-access/how-to-custom-proxy-file-hosting
Configure Explicit Forward Proxy for Microsoft Edge with Intune mobile application managementGlobal Secure Access · entra/global-secure-access · last accepted inventory 14 Nov 2026https://learn.microsoft.com/en-us/entra/global-secure-access/how-to-configure-explicit-forward-proxy-intune-policy
Configure HTTP header session managementGlobal Secure Access · entra/global-secure-access · last accepted inventory 14 Nov 2026https://learn.microsoft.com/en-us/entra/global-secure-access/how-to-configure-explicit-forward-proxy-headers
Configure per-app accessGlobal Secure Access · entra/global-secure-access · last accepted inventory 14 Nov 2026https://learn.microsoft.com/en-us/entra/global-secure-access/how-to-configure-per-app-access
Configure per-app access to private resourcesGlobal Secure Access · entra/global-secure-access · last accepted inventory 14 Nov 2026https://learn.microsoft.com/en-us/entra/global-secure-access/quickstart-per-app-access
Configure Private Access to enable SSH-based server administrationGlobal Secure Access · entra/global-secure-access · last accepted inventory 14 Nov 2026https://learn.microsoft.com/en-us/entra/global-secure-access/how-to-manage-ssh-server-administration
Configure Private Access with Privileged Identity Management (PIM)Global Secure Access · entra/global-secure-access · last accepted inventory 14 Nov 2026https://learn.microsoft.com/en-us/entra/global-secure-access/how-to-configure-global-access-with-pim
Configure Quick AccessGlobal Secure Access · entra/global-secure-access · last accepted inventory 14 Nov 2026https://learn.microsoft.com/en-us/entra/global-secure-access/how-to-configure-quick-access
Configure Quick Access to private resourcesGlobal Secure Access · entra/global-secure-access · last accepted inventory 14 Nov 2026https://learn.microsoft.com/en-us/entra/global-secure-access/quickstart-quick-access
Configure sign-in every time (preview)Global Secure Access · entra/global-secure-access · last accepted inventory 14 Nov 2026https://learn.microsoft.com/en-us/entra/global-secure-access/how-to-configure-sign-in-every-time
Configure the AI Gateway prompt injection protectionGlobal Secure Access · entra/global-secure-access · last accepted inventory 14 Nov 2026https://learn.microsoft.com/en-us/entra/global-secure-access/how-to-ai-prompt-injection-protection
Configure threat intelligenceGlobal Secure Access · entra/global-secure-access · last accepted inventory 14 Nov 2026https://learn.microsoft.com/en-us/entra/global-secure-access/tutorial-internet-access-threat-intelligence
Configure TLS inspection with a Microsoft-managed certificate (Preview)Global Secure Access · entra/global-secure-access · last accepted inventory 14 Nov 2026https://learn.microsoft.com/en-us/entra/global-secure-access/how-to-transport-layer-security-settings-managed-certificate
Configure TLS inspection with your own certificateGlobal Secure Access · entra/global-secure-access · last accepted inventory 14 Nov 2026https://learn.microsoft.com/en-us/entra/global-secure-access/how-to-transport-layer-security-settings
Configure universal tenant restrictionsGlobal Secure Access · entra/global-secure-access · last accepted inventory 14 Nov 2026https://learn.microsoft.com/en-us/entra/global-secure-access/tutorial-microsoft-traffic-tenant-restrictions
Configure URL filteringGlobal Secure Access · entra/global-secure-access · last accepted inventory 14 Nov 2026https://learn.microsoft.com/en-us/entra/global-secure-access/tutorial-internet-access-url-filtering
Configure web content filteringGlobal Secure Access · entra/global-secure-access · last accepted inventory 14 Nov 2026https://learn.microsoft.com/en-us/entra/global-secure-access/tutorial-internet-access-web-content-filtering
Connect a remote network when your CPE is behind a NAT deviceGlobal Secure Access · entra/global-secure-access · last accepted inventory 14 Nov 2026https://learn.microsoft.com/en-us/entra/global-secure-access/how-to-create-remote-network-cpe-behind-nat
Create a custom Data Loss Prevention (DLP) profileGlobal Secure Access · entra/global-secure-access · last accepted inventory 14 Nov 2026https://learn.microsoft.com/en-us/entra/global-secure-access/how-to-full-data-loss-protection
Create a remote networkGlobal Secure Access · entra/global-secure-access · last accepted inventory 14 Nov 2026https://learn.microsoft.com/en-us/entra/global-secure-access/how-to-create-remote-networks
Create a remote networkGlobal Secure Access · entra/global-secure-access · last accepted inventory 14 Nov 2026https://learn.microsoft.com/en-us/entra/global-secure-access/quickstart-remote-network
Create a remote network with a custom Internet Key Exchange (IKE) policyGlobal Secure Access · entra/global-secure-access · last accepted inventory 14 Nov 2026https://learn.microsoft.com/en-us/entra/global-secure-access/how-to-create-remote-network-custom-ike-policy
Create a TLS certificate using ADCSGlobal Secure Access · entra/global-secure-access · last accepted inventory 14 Nov 2026https://learn.microsoft.com/en-us/entra/global-secure-access/scripts/powershell-active-directory-certificate-service
Create a TLS certificate using OpenSSLGlobal Secure Access · entra/global-secure-access · last accepted inventory 14 Nov 2026https://learn.microsoft.com/en-us/entra/global-secure-access/scripts/powershell-open-secure-sockets-layer
Customize the block pageGlobal Secure Access · entra/global-secure-access · last accepted inventory 14 Nov 2026https://learn.microsoft.com/en-us/entra/global-secure-access/how-to-customize-block-page
Daily health checkGlobal Secure Access · entra/global-secure-access · last accepted inventory 14 Nov 2026https://learn.microsoft.com/en-us/entra/global-secure-access/reference-daily-health-check
Data storage and privacyGlobal Secure Access · entra/global-secure-access · last accepted inventory 14 Nov 2026https://learn.microsoft.com/en-us/entra/global-secure-access/reference-data-storage-and-privacy
Delete a Private Access profileGlobal Secure Access · entra/global-secure-access · last accepted inventory 14 Nov 2026https://learn.microsoft.com/en-us/entra/global-secure-access/how-to-delete-traffic-forwarding-profile
Deploy for Microsoft Entra Internet AccessGlobal Secure Access · entra/global-secure-access · last accepted inventory 14 Nov 2026https://learn.microsoft.com/en-us/entra/architecture/gsa-deployment-guide-internet-access
Deploy for Microsoft Entra Private AccessGlobal Secure Access · entra/global-secure-access · last accepted inventory 14 Nov 2026https://learn.microsoft.com/en-us/entra/architecture/gsa-deployment-guide-private-access
Deployment logsGlobal Secure Access · entra/global-secure-access · last accepted inventory 14 Nov 2026https://learn.microsoft.com/en-us/entra/global-secure-access/how-to-view-deployment-logs
Discover applicationsGlobal Secure Access · entra/global-secure-access · last accepted inventory 14 Nov 2026https://learn.microsoft.com/en-us/entra/global-secure-access/tutorial-internet-access-application-discovery
Enable Intelligent Local Access (preview)Global Secure Access · entra/global-secure-access · last accepted inventory 14 Nov 2026https://learn.microsoft.com/en-us/entra/global-secure-access/enable-intelligent-local-access
Enable Multi-Geo capabilityGlobal Secure Access · entra/global-secure-access · last accepted inventory 14 Nov 2026https://learn.microsoft.com/en-us/entra/global-secure-access/how-to-enable-multi-geo
Enable source IP restorationGlobal Secure Access · entra/global-secure-access · last accepted inventory 14 Nov 2026https://learn.microsoft.com/en-us/entra/global-secure-access/tutorial-microsoft-traffic-source-ip-restoration
Enable the compliant network checkGlobal Secure Access · entra/global-secure-access · last accepted inventory 14 Nov 2026https://learn.microsoft.com/en-us/entra/global-secure-access/tutorial-microsoft-traffic-compliant-network
Enable the Microsoft traffic profileGlobal Secure Access · entra/global-secure-access · last accepted inventory 14 Nov 2026https://learn.microsoft.com/en-us/entra/global-secure-access/tutorial-microsoft-traffic-enable-profile