Public mode

No access to your tenant or devices. Every item links to its source. What this means

Some sources or documents need attention: 258/260 feeds/APIs · 415/439 docs · checked 23:56 UTC Customize Public modeDiscuss ChangeIntel on Discord

Windows 11: 23H2 · 1.0 to 25H2 · 1.0

119 new settings, 71 changed, 1 removed since 23H2 · 1.0. 2 retained releases apart.

Changes that matter

191 settings · compared with 23H2 · 1.0
  • Computer · Windows Components\Delivery Optimization
    • Renamed Minimum RAM capacity (inclusive) required to enable use of [removed: Peer Caching][added: P2P] (in GB)
    • Description Specifies the minimum [added: total ]RAM size in GB required to use [removed: Peer Caching. For example if the minimum set is 1 GB, then devices with 1 GB or higher available RAM will be allowed to use Peer caching. Recommended values: 1 GB to 4 GB.][added: P2P.]
      Whole description, marked

      Specifies the minimum [added: total ]RAM size in GB required to use [removed: Peer Caching. For example if the minimum set is 1 GB, then devices with 1 GB or higher available RAM will be allowed to use Peer caching. Recommended values: 1 GB to 4 GB.][added: P2P.]

    • Option “Minimum RAM capacity (inclusive) required to enable use of P2P (in GB)” Minimum RAM capacity (inclusive) required to enable use of [removed: Peer Caching][added: P2P] (in GB)
    • Editor controls or their defaults changed.
  • Computer and user · Control Panel\Personalization
    • Applies to [was: User][now: Both]
  • Computer · Windows Components\Delivery Optimization
    • Description Specifies the maximum [removed: total ]bytes in GB that Delivery Optimization is allowed to upload to Internet peers in each calendar month.[removed: The value 0 (zero) means "unlimited"; No monthly upload limit is applied if 0 is set.]
      Whole description, marked

      Specifies the maximum [removed: total ]bytes in GB that Delivery Optimization is allowed to upload to Internet peers in each calendar month.[removed: The value 0 (zero) means "unlimited"; No monthly upload limit is applied if 0 is set.]

    • Editor controls or their defaults changed.
  • Computer · Windows Components\Delivery Optimization
    • Description … across all concurrent download activities as a percentage of available download bandwidth.[removed: The default value 0 (zero) means that Delivery Optimization dynamically adjusts to use the available bandwidth for background downloads.]
      Whole description, marked

      Specifies the maximum background download bandwidth that Delivery Optimization uses across all concurrent download activities as a percentage of available download bandwidth.[removed: The default value 0 (zero) means that Delivery Optimization dynamically adjusts to use the available bandwidth for background downloads.]

    • Editor controls or their defaults changed.
  • Computer · Network\DNS Client
    • Description … this policy setting, or if you do not configure this policy setting, [removed: computers][added: the DNS client] will use locally configured settings.
      Whole description, marked

      Specifies if the DNS client would use the DDR protocol. The Discovery of Designated Resolvers (DDR) protocol allows Windows to move from unencrypted DNS to encrypted DNS when only the IP address of a resolver is known. If you enable this policy, the DNS client will use the DDR protocol. If you disable this policy setting, or if you do not configure this policy setting, [removed: computers][added: the DNS client] will use locally configured settings.

    • Supported on At least Windows [removed: Vista][added: 11 Version 23H2]
    • Supported on windows:SUPPORTED_Windows[removed: Vista][added: _11_0_23H2]; resolved; AnyOf; products:MicrosoftWindows [removed: [4,][added: [16,] ]
  • Computer · Windows Components\Delivery Optimization
    • Description … across all concurrent download activities as a percentage of available download bandwidth.[removed: The default value 0 (zero) means that Delivery Optimization dynamically adjusts to use the available bandwidth for foreground downloads.]
      Whole description, marked

      Specifies the maximum foreground download bandwidth that Delivery Optimization uses across all concurrent download activities as a percentage of available download bandwidth.[removed: The default value 0 (zero) means that Delivery Optimization dynamically adjusts to use the available bandwidth for foreground downloads.]

    • Editor controls or their defaults changed.
  • Computer · Network\DNS Client
    • Renamed Configure [removed: DNS over HTTPS (DoH)][added: encrypted] name resolution
    • Description Specifies if the DNS client will perfo…[removed: DNS over HTTPS (DoH).][added: encrypted protocols.] By default, the DNS client will do class…[removed: TCP).][added: TCP port 53).] This setting can enhance the DNS client to use [removed: DoH protocol][added: encrypted protocols] to resolve domain names. To use this policy setting, cli…[removed: DoH: No DoH][added: encryption: no encrypted] name resolution will be performed. Allow [removed: DoH: Perform DoH queries][added: encryption: Use encrypted name resolution] if the configured …
      Whole description, marked

      Specifies if the DNS client will perform name resolution over [removed: DNS over HTTPS (DoH).][added: encrypted protocols.] By default, the DNS client will do classic DNS name resolution (over UDP or [removed: TCP).][added: TCP port 53).] This setting can enhance the DNS client to use [removed: DoH protocol][added: encrypted protocols] to resolve domain names. To use this policy setting, click Enabled, and then select one of the following options from the drop-down list: Prohibit [removed: DoH: No DoH][added: encryption: no encrypted] name resolution will be performed. Allow [removed: DoH: Perform DoH queries][added: encryption: Use encrypted name resolution] if the configured [removed: DNS ]servers support it. If they don't support it, try classic name resolution. Require [removed: DoH:][added: encryption:] Allow only [removed: DoH][added: encrypted] name resolution. If there are no [removed: DoH capable ][added: configured ]DNS servers [removed: configured,][added: that handle encryption,] name resolution will fail. [added: In addition to the generic encryption policy, additional policies can be configured at the individual protocol level. For example, in order to force DoT name resolution only, a combination of "Require encryption" and "Block DoH" would be needed (vice versa to force DoH). For the example above, it is the admin's responsibility to ensure that if DoT is forced, there are valid DoT servers configured on the machine (vice versa for DoH). ]If you disable this policy setting, or if you do not configure this policy setting, [removed: computers][added: the DNS client] will use locally configured settings. DDR (Discovery of Designated Resolvers) plaintext traffic [removed: is][added: will be] allowed as it is necessary for auto-discovering [removed: DoH][added: encryption] settings.

    • Supported on At least Windows [removed: Vista][added: Server 20H2, Windows 10 Version 20H2]
    • Supported on windows:SUPPORTED_Windows[removed: Vista][added: _10_0_20H2_SERVER_20H2]; resolved; AnyOf; products:MicrosoftWindows [removed: [4, ]][added: [13, 14]]
    • Option “Configure encryption options” Configure [removed: DoH][added: encryption] options
    • A choice in “Configure encryption options” is renamed Require [removed: DoH][added: encryption] (3)
    • A choice in “Configure encryption options” is renamed Allow [removed: DoH][added: encryption] (2)
    • A choice in “Configure encryption options” is renamed Prohibit [removed: DoH][added: encryption] (1)
    • New option [added: Configure DoH specific options (DNS_Doh_Setting_Box)]
    • New option [added: Configure DoT specific options (DNS_Dot_Setting_Box)]
    • Editor controls or their defaults changed.
  • Computer · Windows Components\Delivery Optimization
    • Description [removed: Set this policy ][added: Specifies ]to restrict peer selection [removed: via][added: using the] selected [removed: option. Options available are: ][added: method, in addition to the DownloadMode policy. ]0 = [removed: NAT.][added: None] 1 = Subnet mask[removed: .] 2 = Local discovery [removed: (DNS-SD). The default value has changed from 0 (no restriction) to 1 (restrict to the subnet). These options apply to both Download Mode LAN (1) and Group (2).][added: (DNS-SD)]
      Whole description, marked

      [removed: Set this policy ][added: Specifies ]to restrict peer selection [removed: via][added: using the] selected [removed: option. Options available are: ][added: method, in addition to the DownloadMode policy. ]0 = [removed: NAT.][added: None] 1 = Subnet mask[removed: .] 2 = Local discovery [removed: (DNS-SD). The default value has changed from 0 (no restriction) to 1 (restrict to the subnet). These options apply to both Download Mode LAN (1) and Group (2).][added: (DNS-SD)]

    • A choice in “Restrict Peer Selection By” is renamed [removed: NAT][added: None] (0)
    • A choice in “Restrict Peer Selection By” is renamed Subnet [added: mask ](1)
    • A choice in “Restrict Peer Selection By” is renamed Local discovery [added: (DNS-SD) ](2)
  • Computer · Windows Components\Delivery Optimization
    • Editor controls or their defaults changed.
  • Computer · Windows Components\Delivery Optimization
    • Editor controls or their defaults changed.
  • Computer · System\Device Installation
    • Renamed Prevent [removed: device metadata retrieval from the Internet][added: automatic download of applications associated with device metadata]
    • Description This policy setting allows you to prevent Windows from [removed: retrieving device metadata from the Internet. ][added: downloading applications associated with device metadata. ]If you enable this policy setting, Windows does not [removed: retrieve][added: download applications associated with] device metadata for installed [removed: devices from the Internet. ][added: devices. ]This policy setting overrides the setting in the Device Installation Settings dialog … the setting in the Device Installation Settings dialog box controls whether Windows [removed: retrieves device metadata from the Internet.][added: downloads applications associated with device metadata.]
      Whole description, marked

      This policy setting allows you to prevent Windows from [removed: retrieving device metadata from the Internet. ][added: downloading applications associated with device metadata. ]If you enable this policy setting, Windows does not [removed: retrieve][added: download applications associated with] device metadata for installed [removed: devices from the Internet. ][added: devices. ]This policy setting overrides the setting in the Device Installation Settings dialog box (Control Panel > System and Security > System > Advanced System Settings > Hardware tab). If you disable or do not configure this policy setting, the setting in the Device Installation Settings dialog box controls whether Windows [removed: retrieves device metadata from the Internet.][added: downloads applications associated with device metadata.]

  • Computer · System\Display
  • Computer · Network\DNS Client
  • Computer · System\Display
  • Computer · System\Filesystem
  • Computer and user · Windows Components\Internet Explorer
  • Computer · System\KDC
  • Computer and user · System\Keyboard Filter
  • Computer · Network\Lanman Server
  • Computer · Network\Lanman Server
  • Computer · Network\Lanman Server
  • Computer · Network\Lanman Workstation
  • Computer · Network\Lanman Workstation
  • Computer · Network\DNS Client
  • Computer · Network\Lanman Workstation
  • Computer · System\NTLM
  • Computer · System\Net Logon
  • Computer · Windows Components\Widgets
  • Computer · Windows Components\Widgets
  • Computer · Windows Components\OOBE
ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 20 Oct 23:56 UTC · 258 of 260 readable · 256 fully read · documentation 415/439 current