release15 Jul 2024 to 29 Sep 2025

Windows 11: 22H2 · 3.0 to 25H2 · 1.0

126 new settings, 75 changed, 1 removed since 22H2 · 3.0. 3 retained releases apart.

CSV JSONBrowse its 3,621 settings Vendor download page

New settings

126 settings · compared with 22H2 · 3.0

Configure the behavior of the sudo commandNew
Computer · System
Set Copilot Hardware KeyNew
User · Windows Components\Windows Copilot
Set a list of apps to be filtered from snapshots for Recall New
Computer and user · Windows Components\Windows AI
Set a list of URIs to be filtered from snapshots for Recall New
Computer and user · Windows Components\Windows AI
Set maximum duration for storing snapshots used by Recall New
Computer and user · Windows Components\Windows AI
Set maximum storage for snapshots used by Recall New
Computer and user · Windows Components\Windows AI
Allow theme files from network locationsNew
Computer · Desktop
Turn off Advanced Settings source integration in File ExplorerNew
Computer · Windows Components\File Explorer
Limit remote access to the Event Log ServiceNew
Computer · Windows Components\Event Log Service
Allow legacy functionality for Internet Shortcut filesNew
Computer and user · Windows Components\Internet Explorer
Enable Delegated Managed Service Account logonsNew
Computer · System\Kerberos
Configure automatic account managementNew
Computer · System\LAPS
Audit client does not support encryptionNew
Computer · Network\Lanman Server
Audit insecure guest logonNew
Computer · Network\Lanman Server
Enable authentication rate limiterNew
Computer · Network\Lanman Server
Enable remote mailslotsNew
Computer · Network\Lanman Server
Enable SMB over QUICNew
Computer · Network\Lanman Server
Mandate the maximum version of SMBNew
Computer · Network\Lanman Server
Mandate the minimum version of SMBNew
Computer · Network\Lanman Server
Alternative Port MappingsNew
Computer · Network\Lanman Workstation
Audit insecure guest logonNew
Computer · Network\Lanman Workstation
Audit server does not support encryptionNew
Computer · Network\Lanman Workstation
Audit server does not support signingNew
Computer · Network\Lanman Workstation
Block NTLM (LM, NTLM, NTLMv2)New
Computer · Network\Lanman Workstation
Enable Alternative PortsNew
Computer · Network\Lanman Workstation
Enable remote mailslotsNew
Computer · Network\Lanman Workstation
Mandate the maximum version of SMBNew
Computer · Network\Lanman Workstation
Mandate the minimum version of SMBNew
Computer · Network\Lanman Workstation
Require EncryptionNew
Computer · Network\Lanman Workstation
Block NetBIOS-based discovery for domain controller locationNew
Computer · System\Net Logon\DC Locator DNS Records