Windows 11: 22H2 · 1.0 to 24H2 · 1.0
108 new settings, 49 changed, 1 removed since 22H2 · 1.0. 3 retained releases apart.
Changes that matter
158 settings · compared with 22H2 · 1.0-
User · Control Panel\Regional and Language Options
- A choice in “Restrict users to the following language” is renamed Traditional Chinese (Hong Kong[added: SAR]) (zh-HK)
- Computer and user · Windows Components\Internet Explorer
-
Computer and user · Windows Components\Internet Explorer
- Renamed Replace JScript by loading JScript9Legacy in place of
[removed: JScript via MSHTML/WebOC.][added: JScript.] - Description
This policy setting specifies whether JScript or JScript9Legacy is
[removed: loaded for MSHTML/WebOC/MSXML/Cscript based invocations.][added: loaded.] If you enable this policy[removed: setting,][added: setting or not configured,] JScript9Legacy will be loaded in situations where JScript is instantiated. If you disable this policy, then JScript will be utilized.[removed: If this policy is left unconfigured, then MSHTML will use JScript9Legacy and MSXML/Cscript will use JScript.]Whole description, marked
This policy setting specifies whether JScript or JScript9Legacy is
[removed: loaded for MSHTML/WebOC/MSXML/Cscript based invocations.][added: loaded.] If you enable this policy[removed: setting,][added: setting or not configured,] JScript9Legacy will be loaded in situations where JScript is instantiated. If you disable this policy, then JScript will be utilized.[removed: If this policy is left unconfigured, then MSHTML will use JScript9Legacy and MSXML/Cscript will use JScript.]
- Renamed Replace JScript by loading JScript9Legacy in place of
- Computer · System\KDC
-
Computer · System\Kerberos
- Supported on At least Windows Server
[removed: 2019 Version 2004,][added: 2019,] Windows 10 Version 2004
- Supported on At least Windows Server
- Computer · System\Kerberos
- Computer · System\LAPS
- Computer · Network\Lanman Server
- Computer · Network\Lanman Server
- Computer · Network\Lanman Server
- Computer · Network\Lanman Server
- Computer · Network\Lanman Server
- Computer · Network\Lanman Server
- Computer · Network\Lanman Server
- Computer · Network\Lanman Server
- Computer · Network\Lanman Server
- Computer · Network\Lanman Workstation
- Computer · Network\Lanman Workstation
- Computer · Network\Lanman Workstation
- Computer · Network\Lanman Workstation
- Computer · Network\Lanman Workstation
- Computer · Network\Lanman Workstation
- Computer · Network\Lanman Workstation
- Computer · Network\Lanman Workstation
- Computer · Network\Lanman Workstation
- Computer · Network\Lanman Workstation
- Computer · Network\Lanman Workstation
- Computer · Network\Lanman Workstation
-
Computer · System\Local Security Authority
- Description
… current setting in the registry, LSA will run as protected process for [added: all ]clean installed, HVCI capable, client
[removed: SKUs that are domain or cloud domain joined devices.][added: SKUs.] This configuration is not UEFI locked. This can be overridden if the …Whole description, marked
This policy controls the configuration under which LSASS is run. If you do not configure this policy and there is no current setting in the registry, LSA will run as protected process for [added: all ]clean installed, HVCI capable, client
[removed: SKUs that are domain or cloud domain joined devices.][added: SKUs.] This configuration is not UEFI locked. This can be overridden if the policy is configured. If you configure and set this policy setting to "Disabled", LSA will not run as a protected process. If you configure and set this policy setting to "EnabledWithUEFILock," LSA will run as a protected process and this configuration is UEFI locked. If you configure and set this policy setting to "EnabledWithoutUEFILock", LSA will run as a protected process and this configuration is not UEFI locked. - The policy's own registry value
[was: System\CurrentControlSet\Control\Lsa][now: Software\Policies\Microsoft\Windows\System] - Option “Configure LSA to run as a protected process” writes
[was: System\CurrentControlSet\Control\Lsa\RunAsPPL][now: Software\Policies\Microsoft\Windows\System\RunAsPPL]
- Description
… current setting in the registry, LSA will run as protected process for [added: all ]clean installed, HVCI capable, client
- Computer · Windows Components\Windows Hello for Business