release15 Jul 2024 to 29 Sep 2025

Windows 11: 22H2 · 3.0 to 25H2 · 1.0

126 new settings, 75 changed, 1 removed since 22H2 · 3.0. 3 retained releases apart.

CSV JSONBrowse its 3,621 settings Vendor download page

New settings

126 settings · compared with 22H2 · 3.0

Disallow downloads from Microsoft Connected Cache servers when the device connects via VPNNew
Computer · Windows Components\Delivery Optimization
VPN KeywordsNew
Computer · Windows Components\Delivery Optimization
Dev drive filter attach policyNew
Computer · System\Filesystem
Turn off API SamplingNew
Computer · Windows Components\App and Device Inventory
Turn off Application FootprintNew
Computer · Windows Components\App and Device Inventory
Let Windows apps make use of Text and image generation features of WindowsNew
Computer · Windows Components\App Privacy
Turn off Install TracingNew
Computer · Windows Components\App and Device Inventory
Turn off compatibility scan for backed up applicationsNew
Computer · Windows Components\App and Device Inventory
Enable dev driveNew
Computer · System\Filesystem
Enable App Installer Microsoft Store Source Certificate Validation BypassNew
Computer · Windows Components\Desktop App Installer
Allowed package family names for non-admin user installNew
Computer · Windows Components\App Package Deployment
Automatic Data CollectionNew
Computer · Windows Components\Windows Defender SmartScreen\Enhanced Phishing Protection
Set authorized domains for HTTPS authentication in MSIX streaming installNew
Computer · Windows Components\App Package Deployment
Enable App Installer Local Archive Malware Scan OverrideNew
Computer · Windows Components\Desktop App Installer
Remove Default Microsoft Store packages from the system.New
Computer · Windows Components\App Package Deployment
Turn off Windows CopilotNew
User · Windows Components\Windows Copilot
Enable optional updatesNew
Computer · Windows Components\Windows Update\Manage updates offered from Windows Update
Enable Windows Package Manager command line interfacesNew
Computer · Windows Components\Desktop App Installer
Enable Windows Package Manager ConfigurationNew
Computer · Windows Components\Desktop App Installer
Not allow per-user unsigned packages to install by default (requires explicitly allow per install)New
Computer · Windows Components\App Package Deployment
Configure Multiple Display ModeNew
Computer · System\Display
Configure multicast DNS (mDNS) protocolNew
Computer · Network\DNS Client
Set Cloned Monitor Preferred Resolution SourceNew
Computer · System\Display
Enable / disable CLFS logfile authenticationNew
Computer · System\Filesystem
Disable Internet Explorer 11 Launch Via COM AutomationNew
Computer and user · Windows Components\Internet Explorer
Allow name-based strong mappings for certificatesNew
Computer · System\KDC
Allow Keyboard Filter in remote sessionsNew
Computer and user · System\Keyboard Filter
Audit client does not support signingNew
Computer · Network\Lanman Server
Audit SMB client SPN supportNew
Computer · Network\Lanman Server
Set authentication rate limiter delay (milliseconds)New
Computer · Network\Lanman Server