release15 Jul 2024 to 30 Sep 2024

Windows 11: 22H2 · 1.0 to 24H2 · 1.0

108 new settings, 49 changed, 1 removed since 22H2 · 1.0. 3 retained releases apart.

CSV JSONBrowse its 3,580 settings Vendor download page

New settings

108 settings · compared with 22H2 · 1.0

Block NTLM (LM, NTLM, NTLMv2)New
Computer · Network\Lanman Workstation
Block NTLM Server Exception ListNew
Computer · Network\Lanman Workstation
Enable Alternative PortsNew
Computer · Network\Lanman Workstation
Enable remote mailslotsNew
Computer · Network\Lanman Workstation
Enable SMB over QUICNew
Computer · Network\Lanman Workstation
Mandate the maximum version of SMBNew
Computer · Network\Lanman Workstation
Mandate the minimum version of SMBNew
Computer · Network\Lanman Workstation
Require EncryptionNew
Computer · Network\Lanman Workstation
Disable caching of the Windows Hello for Business credential after sign-inNew
Computer · Windows Components\Windows Hello for Business
Block NetBIOS-based discovery for domain controller locationNew
Computer · System\Net Logon\DC Locator DNS Records
Configure RPC packet level privacy setting for incoming connectionsNew
Computer · Printers
Configure Windows protected printNew
Computer · Printers
Allow Screen RecorderNew
User · Windows Components\Snipping Tool
Configure SAM change password RPC methods policyNew
Computer · System\Security Account Manager
Restrict clipboard transfer from client to serverNew
Computer and user · Windows Components\Remote Desktop Services\Remote Desktop Session Host\Device and Resource Redirection
Restrict clipboard transfer from server to clientNew
Computer and user · Windows Components\Remote Desktop Services\Remote Desktop Session Host\Device and Resource Redirection
Disconnect remote session on lock for Microsoft identity platform authenticationNew
Computer · Windows Components\Remote Desktop Services\Remote Desktop Session Host\Security
Disconnect remote session on lock for legacy authenticationNew
Computer · Windows Components\Remote Desktop Services\Remote Desktop Session Host\Security
Turn off Saving Snapshots for WindowsNew
User · Windows Components\Windows AI
Turn on asynchronous inspectionNew
Computer · Windows Components\Microsoft Defender Antivirus\Network Inspection System
Set the Azure AD refresh rateNew
Computer · Windows Components\Microsoft Defender Antivirus\Device Control
Set up a support link for device control notificationsNew
Computer · Windows Components\Microsoft Defender Antivirus\Device Control
Set the retention period for files in the local device control cacheNew
Computer · Windows Components\Microsoft Defender Antivirus\Device Control
Set the data duplication limit (MB)New
Computer · Windows Components\Microsoft Defender Antivirus\Device Control
Set the policy refresh rateNew
Computer · Windows Components\Microsoft Defender Antivirus\Device Control
Turn on device control for specific device typesNew
Computer · Windows Components\Microsoft Defender Antivirus\Device Control
Convert warn verdict to blockNew
Computer · Windows Components\Microsoft Defender Antivirus\Network Inspection System
Apply a list of exclusions to specific attack surface reduction (ASR) rulesNew
Computer · Windows Components\Microsoft Defender Antivirus\Microsoft Defender Exploit Guard\Attack Surface Reduction
Enable EDR in block modeNew
Computer · Windows Components\Microsoft Defender Antivirus\Features
Intel TDT Integration LevelNew
Computer · Windows Components\Microsoft Defender Antivirus\Features