release15 Jul 2024 to 30 Sep 2024

Windows 11: 22H2 · 3.0 to 24H2 · 1.0

85 new settings, 50 changed, 1 removed since 22H2 · 3.0. 2 retained releases apart.

CSV JSONBrowse its 3,580 settings Vendor download page

New settings

85 settings · compared with 22H2 · 3.0

Disallow downloads from Microsoft Connected Cache servers when the device connects via VPNNew
Computer · Windows Components\Delivery Optimization
VPN KeywordsNew
Computer · Windows Components\Delivery Optimization
Dev drive filter attach policyNew
Computer · System\Filesystem
Turn off API SamplingNew
Computer · Windows Components\App and Device Inventory
Turn off Application FootprintNew
Computer · Windows Components\App and Device Inventory
Turn off Install TracingNew
Computer · Windows Components\App and Device Inventory
Turn off compatibility scan for backed up applicationsNew
Computer · Windows Components\App and Device Inventory
Enable dev driveNew
Computer · System\Filesystem
Enable App Installer Microsoft Store Source Certificate Validation BypassNew
Computer · Windows Components\Desktop App Installer
Automatic Data CollectionNew
Computer · Windows Components\Windows Defender SmartScreen\Enhanced Phishing Protection
Enable App Installer Local Archive Malware Scan OverrideNew
Computer · Windows Components\Desktop App Installer
Turn off Windows CopilotNew
User · Windows Components\Windows Copilot
Enable optional updatesNew
Computer · Windows Components\Windows Update\Manage updates offered from Windows Update
Enable Windows Package Manager command line interfacesNew
Computer · Windows Components\Desktop App Installer
Enable Windows Package Manager ConfigurationNew
Computer · Windows Components\Desktop App Installer
Not allow per-user unsigned packages to install by default (requires explicitly allow per install)New
Computer · Windows Components\App Package Deployment
Configure multicast DNS (mDNS) protocolNew
Computer · Network\DNS Client
Turn off default IPv6 DNS ServersNew
Computer · Network\DNS Client
Configure the behavior of the sudo commandNew
Computer · System
Limit remote access to the Event Log ServiceNew
Computer · Windows Components\Event Log Service
Allow legacy functionality for Internet Shortcut filesNew
Computer and user · Windows Components\Internet Explorer
Allow name-based strong mappings for certificatesNew
Computer · System\KDC
Enable Delegated Managed Service Account logonsNew
Computer · System\Kerberos
Configure automatic account managementNew
Computer · System\LAPS
Audit client does not support encryptionNew
Computer · Network\Lanman Server
Audit client does not support signingNew
Computer · Network\Lanman Server
Audit insecure guest logonNew
Computer · Network\Lanman Server
Set authentication rate limiter delay (milliseconds)New
Computer · Network\Lanman Server
Enable authentication rate limiterNew
Computer · Network\Lanman Server
Enable remote mailslotsNew
Computer · Network\Lanman Server