release15 Jul 2024 to 30 Sep 2024

Windows 11: 22H2 · 3.0 to 24H2 · 1.0

85 new settings, 50 changed, 1 removed since 22H2 · 3.0. 2 retained releases apart.

CSV JSONBrowse its 3,580 settings Vendor download page

New settings

85 settings · compared with 22H2 · 3.0

Enable SMB over QUICNew
Computer · Network\Lanman Server
Mandate the maximum version of SMBNew
Computer · Network\Lanman Server
Mandate the minimum version of SMBNew
Computer · Network\Lanman Server
Alternative Port MappingsNew
Computer · Network\Lanman Workstation
Audit insecure guest logonNew
Computer · Network\Lanman Workstation
Audit server does not support encryptionNew
Computer · Network\Lanman Workstation
Audit server does not support signingNew
Computer · Network\Lanman Workstation
Block NTLM (LM, NTLM, NTLMv2)New
Computer · Network\Lanman Workstation
Block NTLM Server Exception ListNew
Computer · Network\Lanman Workstation
Enable Alternative PortsNew
Computer · Network\Lanman Workstation
Enable remote mailslotsNew
Computer · Network\Lanman Workstation
Enable SMB over QUICNew
Computer · Network\Lanman Workstation
Mandate the maximum version of SMBNew
Computer · Network\Lanman Workstation
Mandate the minimum version of SMBNew
Computer · Network\Lanman Workstation
Require EncryptionNew
Computer · Network\Lanman Workstation
Disable caching of the Windows Hello for Business credential after sign-inNew
Computer · Windows Components\Windows Hello for Business
Block NetBIOS-based discovery for domain controller locationNew
Computer · System\Net Logon\DC Locator DNS Records
Configure RPC packet level privacy setting for incoming connectionsNew
Computer · Printers
Configure Windows protected printNew
Computer · Printers
Allow Screen RecorderNew
User · Windows Components\Snipping Tool
Configure SAM change password RPC methods policyNew
Computer · System\Security Account Manager
Restrict clipboard transfer from client to serverNew
Computer and user · Windows Components\Remote Desktop Services\Remote Desktop Session Host\Device and Resource Redirection
Restrict clipboard transfer from server to clientNew
Computer and user · Windows Components\Remote Desktop Services\Remote Desktop Session Host\Device and Resource Redirection
Disconnect remote session on lock for Microsoft identity platform authenticationNew
Computer · Windows Components\Remote Desktop Services\Remote Desktop Session Host\Security
Disconnect remote session on lock for legacy authenticationNew
Computer · Windows Components\Remote Desktop Services\Remote Desktop Session Host\Security
Turn off Saving Snapshots for WindowsNew
User · Windows Components\Windows AI
Turn on asynchronous inspectionNew
Computer · Windows Components\Microsoft Defender Antivirus\Network Inspection System
Set the Azure AD refresh rateNew
Computer · Windows Components\Microsoft Defender Antivirus\Device Control
Set up a support link for device control notificationsNew
Computer · Windows Components\Microsoft Defender Antivirus\Device Control
Set the retention period for files in the local device control cacheNew
Computer · Windows Components\Microsoft Defender Antivirus\Device Control