release15 Jul 2024 to 29 Sep 2025

Windows 11: 22H2 · 1.0 to 25H2 · 1.0

149 new settings, 73 changed, 1 removed since 22H2 · 1.0. 4 retained releases apart.

CSV JSONBrowse its 3,621 settings Vendor download page

New settings

149 settings · compared with 22H2 · 1.0

Not allow per-user unsigned packages to install by default (requires explicitly allow per install)New
Computer · Windows Components\App Package Deployment
Hide Internet Explorer 11 retirement notificationNew
Computer and user · Windows Components\Internet Explorer
Enable password backup for DSRM accountsNew
Computer · System\LAPS
Enable password encryptionNew
Computer · System\LAPS
Do not allow password expiration time longer than required by policyNew
Computer · System\LAPS
Turn on multiple expanded toast notifications in action centerNew
User · Start Menu and Taskbar\Notifications
Force Allow Dim When External Display ConnectedNew
Computer · Windows Components\Human Presence
Force Allow Lock When External Display ConnectedNew
Computer · Windows Components\Human Presence
Force Allow Wake When External Display ConnectedNew
Computer · Windows Components\Human Presence
Force Disable Wake When Battery Saver OnNew
Computer · Windows Components\Human Presence
Configure Multiple Display ModeNew
Computer · System\Display
Configure multicast DNS (mDNS) protocolNew
Computer · Network\DNS Client
Do not sync language preferences settingsNew
Computer · Windows Components\Sync your settings
Set Cloned Monitor Preferred Resolution SourceNew
Computer · System\Display
Enable / disable CLFS logfile authenticationNew
Computer · System\Filesystem
Remove Personalized Website Recommendations from the Recommended section in the Start MenuNew
Computer and user · Start Menu and Taskbar
Disable Internet Explorer 11 Launch Via COM AutomationNew
Computer and user · Windows Components\Internet Explorer
Allow name-based strong mappings for certificatesNew
Computer · System\KDC
Allow Keyboard Filter in remote sessionsNew
Computer and user · System\Keyboard Filter
Audit client does not support signingNew
Computer · Network\Lanman Server
Audit SMB client SPN supportNew
Computer · Network\Lanman Server
Set authentication rate limiter delay (milliseconds)New
Computer · Network\Lanman Server
Block NTLM Server Exception ListNew
Computer · Network\Lanman Workstation
Disabled SMB over QUIC Server Exception ListNew
Computer · Network\Lanman Workstation
Turn off default IPv6 DNS ServersNew
Computer · Network\DNS Client
Enable SMB over QUICNew
Computer · Network\Lanman Workstation
NTLM Enhanced LoggingNew
Computer · System\NTLM
Log Enhanced Domain-wide NTLM LogsNew
Computer · System\Net Logon
Disable Widgets BoardNew
Computer · Windows Components\Widgets
Scan packed executablesNew
Computer · Windows Components\Microsoft Defender Antivirus\Scan