Windows 11: 22H2 · 3.0 to 24H2 · 1.0
85 new settings, 50 changed, 1 removed since 22H2 · 3.0. 2 retained releases apart.
Changes that matter
136 settings · compared with 22H2 · 3.0- Computer · Windows Components\Microsoft Defender Antivirus\Device Control
- Computer · Windows Components\Microsoft Defender Antivirus\Device Control
- Computer · Windows Components\Microsoft Defender Antivirus\Device Control
- Computer · Windows Components\Microsoft Defender Antivirus\Device Control
- Computer · Windows Components\Microsoft Defender Antivirus\Device Control
- Computer · Windows Components\Microsoft Defender Antivirus\Device Control
-
Computer · Windows Components\Microsoft Defender Antivirus\Network Inspection System
- Description
Disabled (Default):
If Not Conf…
[removed: network protection is not allowed to ][added: datagram processing will ]be[removed: configured into block or audit mode on Windows …][added: enabled for network protection.] Enabled: If Enabled,[removed: administrators can control whether Network Protecti…][added: datagram processing ]will be[removed: ignored, otherwise][added: disabled for] network[removed: protection will start on Windows Server depending on the value of EnableNetworkProtection.][added: protection.]Whole description, marked
Disabled (Default): If Not Configured or Disabled,
[removed: network protection is not allowed to ][added: datagram processing will ]be[removed: configured into block or audit mode on Windows Server.][added: enabled for network protection.] Enabled: If Enabled,[removed: administrators can control whether Network Protection is allowed to be configured into block or audit mode on Windows Server. Note, that this configuration is dependent on the EnableNetworkProtection configuration. If this configuration is false, EnableNetworkProtection ][added: datagram processing ]will be[removed: ignored, otherwise][added: disabled for] network[removed: protection will start on Windows Server depending on the value of EnableNetworkProtection.][added: protection.] - Template definition changed; registry values, options and limits are the same.
- Description
Disabled (Default):
If Not Conf…
-
Computer · Windows Components\Microsoft Defender Antivirus\MpEngine
- Supported on
[was: windows:SUPPORTED_Windows_10_RS1][now: At least Windows Server 2016, Windows 10 Version 1607] - Supported on
[was: windows:SUPPORTED_Windows_10_RS1; unresolved; Blank; ][now: windows:SUPPORTED_Windows_10_0_RS1; resolved; AnyOf; products:MicrosoftWindows [13, ]]
- Supported on
- Computer · Windows Components\Microsoft Defender Antivirus\Network Inspection System
- Computer · Windows Components\Microsoft Defender Antivirus\Microsoft Defender Exploit Guard\Attack Surface Reduction
-
Computer · Windows Components\Microsoft Defender Antivirus\Microsoft Defender Exploit Guard\Network Protection
- Template definition changed; registry values, options and limits are the same.
- Computer · Windows Components\Microsoft Defender Antivirus\Features
- Computer · Windows Components\Microsoft Defender Antivirus\Features
-
Computer · Windows Components\Microsoft Defender Antivirus
- Renamed Control whether or not exclusions are visible to Local Admins
[removed: .]
- Renamed Control whether or not exclusions are visible to Local Admins
- Computer · Windows Components\Microsoft Defender Antivirus
- Computer · Windows Components\Microsoft Defender Antivirus\Real-time Protection
- Computer · Windows Components\Microsoft Defender Antivirus\Real-time Protection
- Computer · Windows Components\Microsoft Defender Antivirus\Remediation\Behavioral Network Blocks\Brute-Force Protection
- Computer · Windows Components\Microsoft Defender Antivirus\Remediation\Behavioral Network Blocks\Brute-Force Protection
- Computer · Windows Components\Microsoft Defender Antivirus\Remediation\Behavioral Network Blocks\Brute-Force Protection
- Computer · Windows Components\Microsoft Defender Antivirus\Remediation\Behavioral Network Blocks\Brute-Force Protection
- Computer · Windows Components\Microsoft Defender Antivirus\Remediation\Behavioral Network Blocks\Remote Encryption Protection
- Computer · Windows Components\Microsoft Defender Antivirus\Remediation\Behavioral Network Blocks\Remote Encryption Protection
- Computer · Windows Components\Microsoft Defender Antivirus\Remediation\Behavioral Network Blocks\Remote Encryption Protection
- Computer · Windows Components\Microsoft Defender Antivirus\Remediation\Behavioral Network Blocks\Remote Encryption Protection
- Computer · Windows Components\Microsoft Defender Antivirus\Reporting
-
Computer · Windows Components\Microsoft Defender Antivirus
- “Select the channel for Microsoft Defender daily security intelligence updates” loses the choice
[removed: Critical - Time delay (6)]
- “Select the channel for Microsoft Defender daily security intelligence updates” loses the choice
- Computer · Windows Components\Microsoft Defender Antivirus\Scan
-
Computer · Windows Components\Microsoft Defender Antivirus\Scan
- Renamed
[removed: Scan][added: Configure scanning of] network files - Description
This policy setting allows
[removed: you to configure scanning for network files. It][added: the scanning of network files using on access protection. The default] is[removed: recommended that you do not enable this setting.][added: enabled. Recommended to remain enabled in most cases.] If you enable [added: or do not configure ]this setting, network files will be scanned. If you disable[removed: or do not configure]this setting, network files will not be scanned.Whole description, marked
This policy setting allows
[removed: you to configure scanning for network files. It][added: the scanning of network files using on access protection. The default] is[removed: recommended that you do not enable this setting.][added: enabled. Recommended to remain enabled in most cases.] If you enable [added: or do not configure ]this setting, network files will be scanned. If you disable[removed: or do not configure]this setting, network files will not be scanned.
- Renamed
- Computer · Windows Components\Microsoft Defender Antivirus\Scan