ChangeIntelIT change radar
Public mode

No access to your tenant or devices. Every item links to its source. What this means

Some sources or documents need attention: 259/260 feeds/APIs · 416/439 docs · checked 07:58 UTC Customize Public modeDiscuss ChangeIntel on Discord
release15 Jul 2024 to 29 Sep 2025

Windows 11: 22H2 · 3.0 to 25H2 · 1.0

126 new settings, 75 changed, 1 removed since 22H2 · 3.0. 3 retained releases apart.

CSVJSONBrowse its 3,621 settings Vendor download page

Changes that matter

202 settings · compared with 22H2 · 3.0
  • Disconnect remote session on lock for legacy authenticationNew
    Computer · Windows Components\Remote Desktop Services\Remote Desktop Session Host\Security
  • Select RDP transport protocols
    Computer · Windows Components\Remote Desktop Services\Remote Desktop Session Host\Connections
    • Description … to use UDP. You can select one of the following options: "Use [removed: both][added: either] UDP [removed: and TCP", "Use only TCP" ][added: or TCP (default)" ]or "Use [removed: either UDP or TCP (default)"][added: only TCP"] If you select "Use either UDP or TCP" and the UDP connection …
      Whole description, marked

      This policy setting allows you to specify which protocols can be used for Remote Desktop Protocol (RDP) access to this server. If you enable this policy setting, you must specify if you would like RDP to use UDP. You can select one of the following options: "Use [removed: both][added: either] UDP [removed: and TCP", "Use only TCP" ][added: or TCP (default)" ]or "Use [removed: either UDP or TCP (default)"][added: only TCP"] If you select "Use either UDP or TCP" and the UDP connection is successful, most of the RDP traffic will use UDP. If the UDP connection is not successful or if you select "Use only TCP," all of the RDP traffic will use TCP. If you disable or do not configure this policy setting, RDP will choose the optimal protocols for delivering the best user experience.

    • “Select Transport Type” loses the choice [removed: Use both UDP and TCP (0)]
  • Do not allow WebAuthn redirection
    Computer · Windows Components\Remote Desktop Services\Remote Desktop Session Host\Device and Resource Redirection
    • Supported on At least Windows Server [removed: 2019 Version 2004,][added: 2019,] Windows 10 Version 2004
  • Allow access to BitLocker-protected fixed data drives from earlier versions of Windows
    Computer · Windows Components\BitLocker Drive Encryption\Fixed Data Drives
    • Supported on At least Windows Server 2008 R2 or Windows 7[added: through Windows Server 2022 or Windows 11 Version 22H2]
    • Supported on windows:SUPPORTED_Windows7[added: To1122H2]; resolved; [removed: AnyOf; products:MicrosoftWindows [6, ]; products:WindowsServer2008 [1, ]][added: Blank; ]
  • Allow access to BitLocker-protected removable data drives from earlier versions of Windows
    Computer · Windows Components\BitLocker Drive Encryption\Removable Data Drives
    • Supported on At least Windows Server 2008 R2 or Windows 7[added: through Windows Server 2022 or Windows 11 Version 22H2]
    • Supported on windows:SUPPORTED_Windows7[added: To1122H2]; resolved; [removed: AnyOf; products:MicrosoftWindows [6, ]; products:WindowsServer2008 [1, ]][added: Blank; ]
  • Turn on asynchronous inspectionNew
    Computer · Windows Components\Microsoft Defender Antivirus\Network Inspection System
  • Set the Azure AD refresh rateNew
    Computer · Windows Components\Microsoft Defender Antivirus\Device Control
  • Set up a support link for device control notificationsNew
    Computer · Windows Components\Microsoft Defender Antivirus\Device Control
  • Set the retention period for files in the local device control cacheNew
    Computer · Windows Components\Microsoft Defender Antivirus\Device Control
  • Set the data duplication limit (MB)New
    Computer · Windows Components\Microsoft Defender Antivirus\Device Control
  • Set the policy refresh rateNew
    Computer · Windows Components\Microsoft Defender Antivirus\Device Control
  • Turn on device control for specific device typesNew
    Computer · Windows Components\Microsoft Defender Antivirus\Device Control
  • This setting controls datagram processing for network protection.
    Computer · Windows Components\Microsoft Defender Antivirus\Network Inspection System
    • Description Disabled (Default): If Not Conf…[removed: network protection is not allowed to ][added: datagram processing will ]be [removed: configured into block or audit mode on Windows …][added: enabled for network protection.] Enabled: If Enabled, [removed: administrators can control whether Network Protecti…][added: datagram processing ]will be [removed: ignored, otherwise][added: disabled for] network [removed: protection will start on Windows Server depending on the value of EnableNetworkProtection.][added: protection.]
      Whole description, marked

      Disabled (Default): If Not Configured or Disabled, [removed: network protection is not allowed to ][added: datagram processing will ]be [removed: configured into block or audit mode on Windows Server.][added: enabled for network protection.] Enabled: If Enabled, [removed: administrators can control whether Network Protection is allowed to be configured into block or audit mode on Windows Server. Note, that this configuration is dependent on the EnableNetworkProtection configuration. If this configuration is false, EnableNetworkProtection ][added: datagram processing ]will be [removed: ignored, otherwise][added: disabled for] network [removed: protection will start on Windows Server depending on the value of EnableNetworkProtection.][added: protection.]

    • Template definition changed; registry values, options and limits are the same.
  • Disable gradual rollout of Microsoft Defender updates.
    Computer · Windows Components\Microsoft Defender Antivirus\MpEngine
    • Supported on [was: windows:SUPPORTED_Windows_10_RS1][now: At least Windows Server 2016, Windows 10 Version 1607]
    • Supported on [was: windows:SUPPORTED_Windows_10_RS1; unresolved; Blank; ][now: windows:SUPPORTED_Windows_10_0_RS1; resolved; AnyOf; products:MicrosoftWindows [13, ]]
  • Convert warn verdict to blockNew
    Computer · Windows Components\Microsoft Defender Antivirus\Network Inspection System
  • Apply a list of exclusions to specific attack surface reduction (ASR) rulesNew
    Computer · Windows Components\Microsoft Defender Antivirus\Microsoft Defender Exploit Guard\Attack Surface Reduction
  • Prevent users and apps from accessing dangerous websites
    Computer · Windows Components\Microsoft Defender Antivirus\Microsoft Defender Exploit Guard\Network Protection
    • Template definition changed; registry values, options and limits are the same.
  • Enable EDR in block modeNew
    Computer · Windows Components\Microsoft Defender Antivirus\Features
  • Intel TDT Integration LevelNew
    Computer · Windows Components\Microsoft Defender Antivirus\Features
  • Control whether or not exclusions are visible to Local Admins
    Computer · Windows Components\Microsoft Defender Antivirus
    • Renamed Control whether or not exclusions are visible to Local Admins[removed: .]
  • Control whether exclusions are visible to local usersNew
    Computer · Windows Components\Microsoft Defender Antivirus
  • Configure real-time protection and Security Intelligence Updates during OOBENew
    Computer · Windows Components\Microsoft Defender Antivirus\Real-time Protection
  • Configure performance mode statusNew
    Computer · Windows Components\Microsoft Defender Antivirus\Real-time Protection
  • Set exclusions from Brute-Force ProtectionNew
    Computer · Windows Components\Microsoft Defender Antivirus\Remediation\Behavioral Network Blocks\Brute-Force Protection
  • Configure Brute-Force Protection aggressivenessNew
    Computer · Windows Components\Microsoft Defender Antivirus\Remediation\Behavioral Network Blocks\Brute-Force Protection
  • Configure Remote Encryption Protection ModeNew
    Computer · Windows Components\Microsoft Defender Antivirus\Remediation\Behavioral Network Blocks\Brute-Force Protection
  • Configure Brute-Force Protection blocking timeNew
    Computer · Windows Components\Microsoft Defender Antivirus\Remediation\Behavioral Network Blocks\Brute-Force Protection
  • Set exclusions from Remote Encryption ProtectionNew
    Computer · Windows Components\Microsoft Defender Antivirus\Remediation\Behavioral Network Blocks\Remote Encryption Protection
  • Configure how aggressively Remote Encryption Protection blocks threatsNew
    Computer · Windows Components\Microsoft Defender Antivirus\Remediation\Behavioral Network Blocks\Remote Encryption Protection
  • Configure Remote Encryption Protection ModeNew
    Computer · Windows Components\Microsoft Defender Antivirus\Remediation\Behavioral Network Blocks\Remote Encryption Protection
ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 21 Oct 07:58 UTC · 259 of 260 readable · 258 fully read · documentation 416/439 current

No accounts or analytics; your preferences stay in your browser. Information, not advice. ChangeIntel is an independent tool and is not affiliated with or endorsed by Microsoft, Apple, Google, Broadcom (VMware), Jamf, Oracle, Mozilla, or any other vendor it covers. Product names are trademarks of their owners. Built by Evotec.