release15 Jul 2024 to 29 Sep 2025
Windows 11: 22H2 · 3.0 to 25H2 · 1.0
126 new settings, 75 changed, 1 removed since 22H2 · 3.0. 3 retained releases apart.
Changes that matter
202 settings · compared with 22H2 · 3.0- Computer · Windows Components\Remote Desktop Services\Remote Desktop Session Host\Remote Session Environment
- Computer · Windows Components\Windows AI
- Computer · Windows Components\Windows AI
- Computer and user · Windows Components\Windows AI
- Computer and user · Windows Components\Windows AI
- Computer · Windows Components\Paint
- Computer · Windows Components\Paint
- Computer · Windows Components\Paint
- Computer · Windows Components\Windows AI
- Computer · System
- User · Windows Components\Windows Copilot
- Computer and user · Windows Components\Windows AI
- Computer and user · Windows Components\Windows AI
- Computer and user · Windows Components\Windows AI
- Computer and user · Windows Components\Windows AI
- Computer · Desktop
- Computer · Windows Components\File Explorer
- Computer · Windows Components\Event Log Service
-
Computer · Control Panel\Regional and Language Options
- A choice in “Restrict users to the following language” is renamed Traditional Chinese (Hong Kong[added: SAR]) (zh-HK)
-
User · Control Panel\Regional and Language Options
- A choice in “Restrict users to the following language” is renamed Traditional Chinese (Hong Kong[added: SAR]) (zh-HK)
-
Computer and user · Windows Components\Internet Explorer\Internet Control Panel\Advanced Page
- A choice in “Secure Protocol combinations” is renamed [added: [Obsolete] ]Only use SSL 2.0 (8)
- A choice in “Secure Protocol combinations” is renamed [added: [Obsolete] ]Use SSL 2.0 and SSL 3.0 (40)
- A choice in “Secure Protocol combinations” is renamed [added: [Obsolete] ]Use SSL 2.0 and TLS 1.0 (136)
- A choice in “Secure Protocol combinations” is renamed [added: [Obsolete] ]Use SSL 2.0, SSL 3.0, and TLS 1.0 (168)
- A choice in “Secure Protocol combinations” is renamed [added: [Obsolete] ]Use SSL 2.0 and TLS 1.1 (520)
- A choice in “Secure Protocol combinations” is renamed [added: [Obsolete] ]Use SSL 2.0, SSL 3.0, and TLS 1.1 (552)
- A choice in “Secure Protocol combinations” is renamed [added: [Obsolete] ]Use SSL 2.0, TLS 1.0, and TLS 1.1 (648)
- A choice in “Secure Protocol combinations” is renamed [added: [Obsolete] ]Use SSL 2.0, SSL 3.0, TLS 1.0, and TLS 1.1 (680)
- A choice in “Secure Protocol combinations” is renamed [added: [Obsolete] ]Use SSL 2.0 and TLS 1.2 (2056)
- A choice in “Secure Protocol combinations” is renamed [added: [Obsolete] ]Use SSL 2.0, SSL 3.0, and TLS 1.2 (2088)
- A choice in “Secure Protocol combinations” is renamed [added: [Obsolete] ]Use SSL 2.0, TLS 1.0, and TLS 1.2 (2184)
- A choice in “Secure Protocol combinations” is renamed [added: [Obsolete] ]Use SSL 2.0, SSL 3.0, TLS 1.0, and TLS 1.2 (2216)
- A choice in “Secure Protocol combinations” is renamed [added: [Obsolete] ]Use SSL 2.0, TLS 1.1, and TLS 1.2 (2568)
- A choice in “Secure Protocol combinations” is renamed [added: [Obsolete] ]Use SSL 2.0, SSL 3.0, TLS 1.1, and TLS 1.2 (2600)
- A choice in “Secure Protocol combinations” is renamed [added: [Obsolete] ]Use SSL 2.0, TLS 1.0, TLS 1.1, and TLS 1.2 (2696)
- A choice in “Secure Protocol combinations” is renamed [added: [Obsolete] ]Use SSL 2.0, SSL 3.0, TLS 1.0, TLS 1.1, and TLS 1.2 (2728)
- Computer and user · Windows Components\Internet Explorer
-
Computer and user · Windows Components\Internet Explorer
- Renamed Replace JScript by loading JScript9Legacy in place of
[removed: JScript via MSHTML/WebOC.][added: JScript.] - Description
This policy setting specifies whether JScript or JScript9Legacy is
[removed: loaded for MSHTML/WebOC/MSXML/Cscript based invocations.][added: loaded.] If you enable this policy[removed: setting,][added: setting or not configured,] JScript9Legacy will be loaded in situations where JScript is instantiated. If you disable this policy, then JScript will be utilized.[removed: If this policy is left unconfigured, then MSHTML will use JScript9Legacy and MSXML/Cscript will use JScript.]Whole description, marked
This policy setting specifies whether JScript or JScript9Legacy is
[removed: loaded for MSHTML/WebOC/MSXML/Cscript based invocations.][added: loaded.] If you enable this policy[removed: setting,][added: setting or not configured,] JScript9Legacy will be loaded in situations where JScript is instantiated. If you disable this policy, then JScript will be utilized.[removed: If this policy is left unconfigured, then MSHTML will use JScript9Legacy and MSXML/Cscript will use JScript.]
- Renamed Replace JScript by loading JScript9Legacy in place of
-
Computer · System\Kerberos
- Supported on At least Windows Server
[removed: 2019 Version 2004,][added: 2019,] Windows 10 Version 2004
- Supported on At least Windows Server
- Computer · System\Kerberos
- Computer · System\LAPS
-
Computer · System\LAPS
- The policy's own registry value SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\LAPS\P
[removed: w][added: asswor]dExpirationProtectionEnabled - Option removed
[removed: PwdExpirationProtectionEnabled] - New option [added: PasswordExpirationProtectionEnabled]
- The policy's own registry value SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\LAPS\P
- Computer · Network\Lanman Server
- Computer · Network\Lanman Server
- Computer · Network\Lanman Server