Public mode

No access to your tenant or devices. Every item links to its source. What this means

Some sources or documents need attention: 258/260 feeds/APIs · 416/439 docs · checked 22:55 UTC Customize Public modeDiscuss ChangeIntel on Discord

Windows 11: 22H2 · 1.0 to 23H2 · 1.0

30 new settings, 10 changed since 22H2 · 1.0. 2 retained releases apart.

Changed settings

10 settings · compared with 22H2 · 1.0
  • Computer · Windows Components\File Explorer
    • Renamed Turn off [removed: files from Office.com][added: account-based insights, recent, favorite, and recommended files] in [removed: Quick access view][added: File Explorer]
    • Description Turning off [removed: files from Office.com ][added: this setting ]will prevent File Explorer from requesting [removed: recent ]cloud file metadata and displaying it in the [removed: Quick access view.][added: homepage and other views in File Explorer. Any insights and files available based on account activity will be stopped in views such as Recent, Recommended, Favorites, etc.]
      Whole description, marked

      Turning off [removed: files from Office.com ][added: this setting ]will prevent File Explorer from requesting [removed: recent ]cloud file metadata and displaying it in the [removed: Quick access view.][added: homepage and other views in File Explorer. Any insights and files available based on account activity will be stopped in views such as Recent, Recommended, Favorites, etc.]

  • Computer · Windows Components\Data Collection and Preview Builds
    • Description [added: This policy is deprecated and will only work on Windows 10 version 1809. Setti…]AllowCommercialDataPipeline configures an Azure Active Directory joined device …device[added: .] If you disable or do not configure this setting, Microsoft will be … have enabled policies like 'Allow Update Comp…Processing[removed: ”][added: ']. See the documentation at https://go.microsoft.com/fwlink/?linkid=2011107 for information on this and other policies …
      Whole description, marked

      [added: This policy is deprecated and will only work on Windows 10 version 1809. Setting this policy will have no effect for other supported versions of Windows. ]AllowCommercialDataPipeline configures an Azure Active Directory joined device so that Microsoft is the processor of the Windows diagnostic data collected from the device, subject to the Product Terms at https://go.microsoft.com/fwlink/?linkid=2185086. To enable this behavior: 1. Enable this policy setting 2. Join an Azure Active Directory account to the device Windows diagnostic data is collected when the Allow Telemetry policy setting is set to value 1 - Required or above. Configuring this setting does not change the Windows diagnostic data collection level set for the device[added: .] If you disable or do not configure this setting, Microsoft will be the controller of the Windows diagnostic data collected from the device and processed in accordance with Microsoft's privacy statement at https://go.microsoft.com/fwlink/?LinkId=521839 unless you have enabled policies like 'Allow Update Compliance Processing' or 'Allow Desktop Analytics Processing[removed: ”][added: ']. See the documentation at https://go.microsoft.com/fwlink/?linkid=2011107 for information on this and other policies that will result in Microsoft being the processor of Windows diagnostic data.

    • Supported on At least Windows Server 2016, Windows 10 Version [removed: 1903][added: 1809]
    • Supported on windows:SUPPORTED_Windows_10_0_RS[removed: 6][added: 5]; resolved; AnyOf; products:MicrosoftWindows [13, ]
  • Computer · Windows Components\Data Collection and Preview Builds
    • Description This policy [added: is deprecated and will only work on Windows 10 version 1809. Setting this policy will have no effect for other supported versions of Windows. This policy ]setting, in combination with the Allow Telemetry and Configure the Commercial ID, …
      Whole description, marked

      This policy [added: is deprecated and will only work on Windows 10 version 1809. Setting this policy will have no effect for other supported versions of Windows. This policy ]setting, in combination with the Allow Telemetry and Configure the Commercial ID, enables organizations to configure the device so that Microsoft is the processor for Windows diagnostic data collected from the device, subject to the Product Terms at https://go.microsoft.com/fwlink/?linkid=2185086. To enable this behavior: 1. Enable this policy setting 2. Join an Azure Active Directory account to the device 3. Set Allow Telemetry to value 1 - Required, or higher 4. Set the Configure the Commercial ID setting for your Desktop Analytics workspace When these policies are configured, Windows diagnostic data collected from the device will be subject to Microsoft processor commitments. This setting has no effect on devices unless they are properly enrolled in Desktop Analytics. If you disable this policy setting, devices will not appear in Desktop Analytics.

    • Supported on At least Windows Server 2016, Windows 10 Version 1[removed: 9][added: 8]09
    • Supported on windows:SUPPORTED_Windows_10_0_RS[removed: 7][added: 5]; resolved; AnyOf; products:MicrosoftWindows [13, ]
  • Computer · Windows Components\Data Collection and Preview Builds
    • Description This policy [added: is deprecated and will only work on Windows 10 version 1809. Setting this policy will have no effect for other supported versions of Windows. This policy ]setting, in combination with the Allow Telemetry and Configure the Commercial ID, …
      Whole description, marked

      This policy [added: is deprecated and will only work on Windows 10 version 1809. Setting this policy will have no effect for other supported versions of Windows. This policy ]setting, in combination with the Allow Telemetry and Configure the Commercial ID, enables organizations to configure the device so that Microsoft is the processor of the Windows diagnostic data collected from the device, subject to the Product Terms at https://go.microsoft.com/fwlink/?linkid=2185086. To enable this behavior: 1. Enable this policy setting 2. Join an Azure Active Directory account to the device 3. Set Allow Telemetry to value 1 - Required, or higher 4. Set the Configure the Commercial ID setting for your Update Compliance workspace When these policies are configured, Windows diagnostic data collected from the device will be subject to Microsoft processor commitments. If you disable or do not configure this policy setting, devices will not appear in Update Compliance.

    • Supported on At least Windows Server 2016, Windows 10 Version 1[removed: 9][added: 8]09
    • Supported on windows:SUPPORTED_Windows_10_0_RS[removed: 7][added: 5]; resolved; AnyOf; products:MicrosoftWindows [13, ]
  • Computer · Windows Components\Data Collection and Preview Builds
    • Description This policy [added: is deprecated and will only work on Windows 10 version 1809. Setting this policy will have no effect for other supported versions of Windows. This policy ]setting configures an Azure Active Directory joined device so that Microsoft is …
      Whole description, marked

      This policy [added: is deprecated and will only work on Windows 10 version 1809. Setting this policy will have no effect for other supported versions of Windows. This policy ]setting configures an Azure Active Directory joined device so that Microsoft is the processor of the Windows diagnostic data collected from the device, subject to the Product Terms at https://go.microsoft.com/fwlink/?linkid=2185086. To enable this behavior: 1. Enable this policy setting 2. Join an Azure Active Directory account to the device 3. Set Allow Telemetry to value 1 - Required, or higher When these policies are configured, Windows diagnostic data collected from the device will be subject to Microsoft processor commitments. If you disable or do not configure this policy setting, devices enrolled to the Windows Update for Business deployment service will not be able to take advantage of some deployment service features.

    • Supported on At least Windows Server 2016, Windows 10 Version 1[removed: 9][added: 8]09
    • Supported on windows:SUPPORTED_Windows_10_0_RS[removed: 7][added: 5]; resolved; AnyOf; products:MicrosoftWindows [13, ]
  • Computer and user · Windows Components\Internet Explorer\Internet Control Panel\Advanced Page
    • “Secure Protocol combinations” gains the choice [added: Only use TLS 1.3 (8192)]
    • “Secure Protocol combinations” gains the choice [added: Use TLS 1.2 and TLS 1.3 (10240)]
    • “Secure Protocol combinations” gains the choice [added: Use TLS 1.1, TLS 1.2, and TLS 1.3 (10752)]
    • “Secure Protocol combinations” gains the choice [added: Use TLS 1.0, TLS 1.1, TLS 1.2, and TLS 1.3 (10880)]
    • “Secure Protocol combinations” gains the choice [added: Use SSL 3.0, TLS 1.0, TLS 1.1, TLS 1.2, and TLS 1.3 (10912)]
  • User · Windows Components\Multitasking
    • Renamed Configure the inclusion of [removed: Microsoft Edge][added: app] tabs into Alt-Tab
    • Description This setting controls the inclusion of [removed: Microsoft Edge ][added: app ]tabs into Alt+Tab. This can be set to show [removed: all tabs, ]the most recent [removed: 3][added: 3, 5] or [removed: 5][added: 20] tabs, or no tabs from [removed: Microsoft Edge.][added: apps.] If this is set to show "Open windows only", the whole feature …
      Whole description, marked

      This setting controls the inclusion of [removed: Microsoft Edge ][added: app ]tabs into Alt+Tab. This can be set to show [removed: all tabs, ]the most recent [removed: 3][added: 3, 5] or [removed: 5][added: 20] tabs, or no tabs from [removed: Microsoft Edge.][added: apps.] If this is set to show "Open windows only", the whole feature will be disabled.

    • A choice in “Pressing Alt + Tab shows” is renamed Open windows and [removed: all][added: 20 most recent] tabs in [removed: Microsoft Edge][added: apps] (1)
    • A choice in “Pressing Alt + Tab shows” is renamed Open windows and 5 most recent tabs in [removed: Microsoft Edge][added: apps] (2)
    • A choice in “Pressing Alt + Tab shows” is renamed Open windows and 3 most recent tabs in [removed: Microsoft Edge][added: apps] (3)
  • Computer · Windows Components\Human Presence
    • Option removed [removed: Choose one of the following actions (ForceInstantDimDropDown)]
    • New option [added: Choose one of the following actions (ForceInstantDimDropdown)]
    • Editor controls or their defaults changed.
  • Computer · Windows Components\Human Presence
    • “Choose one of the following timeouts” gains the choice [added: Immediate (1)]
  • Computer · Windows Components\Remote Desktop Services\Remote Desktop Session Host\Licensing
    • Description … setting, the licensing mode is not specified at the Group Policy level.[added: Note: AAD Per User mode is deprecated on Windows 11 and above.]
      Whole description, marked

      This policy setting allows you to specify the type of Remote Desktop Services client access license (RDS CAL) that is required to connect to this RD Session Host server. You can use this policy setting to select one of two licensing modes: Per User or Per Device. Per User licensing mode requires that each user account connecting to this RD Session Host server have an RDS Per User CAL issued from an RD Licensing server. Per Device licensing mode requires that each device connecting to this RD Session Host server have an RDS Per Device CAL issued from an RD Licensing server. If you enable this policy setting, the Remote Desktop licensing mode that you specify is honored by the Remote Desktop license server and RD Session Host. If you disable or do not configure this policy setting, the licensing mode is not specified at the Group Policy level.[added: Note: AAD Per User mode is deprecated on Windows 11 and above.]

    • “Specify the licensing mode for the RD Session Host server.” gains the choice [added: AAD Per User (6)]
ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 20 Oct 22:55 UTC · 258 of 260 readable · 256 fully read · documentation 416/439 current