release15 Jul 2024 to 29 Sep 2025

Windows 11: 23H2 · 1.0 to 25H2 · 1.0

119 new settings, 71 changed, 1 removed since 23H2 · 1.0. 2 retained releases apart.

CSV JSONBrowse its 3,621 settings Vendor download page

New settings

119 settings · compared with 23H2 · 1.0

Turn off Advanced Settings source integration in File ExplorerNew
Computer · Windows Components\File Explorer
Limit remote access to the Event Log ServiceNew
Computer · Windows Components\Event Log Service
Allow legacy functionality for Internet Shortcut filesNew
Computer and user · Windows Components\Internet Explorer
Enable Delegated Managed Service Account logonsNew
Computer · System\Kerberos
Configure automatic account managementNew
Computer · System\LAPS
Audit client does not support encryptionNew
Computer · Network\Lanman Server
Audit insecure guest logonNew
Computer · Network\Lanman Server
Enable authentication rate limiterNew
Computer · Network\Lanman Server
Enable remote mailslotsNew
Computer · Network\Lanman Server
Enable SMB over QUICNew
Computer · Network\Lanman Server
Mandate the maximum version of SMBNew
Computer · Network\Lanman Server
Mandate the minimum version of SMBNew
Computer · Network\Lanman Server
Alternative Port MappingsNew
Computer · Network\Lanman Workstation
Audit insecure guest logonNew
Computer · Network\Lanman Workstation
Audit server does not support encryptionNew
Computer · Network\Lanman Workstation
Audit server does not support signingNew
Computer · Network\Lanman Workstation
Block NTLM (LM, NTLM, NTLMv2)New
Computer · Network\Lanman Workstation
Enable Alternative PortsNew
Computer · Network\Lanman Workstation
Enable remote mailslotsNew
Computer · Network\Lanman Workstation
Mandate the maximum version of SMBNew
Computer · Network\Lanman Workstation
Mandate the minimum version of SMBNew
Computer · Network\Lanman Workstation
Require EncryptionNew
Computer · Network\Lanman Workstation
Block NetBIOS-based discovery for domain controller locationNew
Computer · System\Net Logon\DC Locator DNS Records
Configure RPC packet level privacy setting for incoming connectionsNew
Computer · Printers
Allow Screen RecorderNew
User · Windows Components\Snipping Tool
Configure SAM change password RPC methods policyNew
Computer · System\Security Account Manager
Restrict clipboard transfer from client to serverNew
Computer and user · Windows Components\Remote Desktop Services\Remote Desktop Session Host\Device and Resource Redirection
Restrict clipboard transfer from server to clientNew
Computer and user · Windows Components\Remote Desktop Services\Remote Desktop Session Host\Device and Resource Redirection
Disconnect remote session on lock for Microsoft identity platform authenticationNew
Computer · Windows Components\Remote Desktop Services\Remote Desktop Session Host\Security
Disconnect remote session on lock for legacy authenticationNew
Computer · Windows Components\Remote Desktop Services\Remote Desktop Session Host\Security