release15 Jul 2024 to 29 Sep 2025

Windows 11: 23H2 · 1.0 to 25H2 · 1.0

119 new settings, 71 changed, 1 removed since 23H2 · 1.0. 2 retained releases apart.

CSV JSONBrowse its 3,621 settings Vendor download page

New settings

119 settings · compared with 23H2 · 1.0

Turn off API SamplingNew
Computer · Windows Components\App and Device Inventory
Turn off Application FootprintNew
Computer · Windows Components\App and Device Inventory
Let Windows apps make use of Text and image generation features of WindowsNew
Computer · Windows Components\App Privacy
Turn off Install TracingNew
Computer · Windows Components\App and Device Inventory
Turn off compatibility scan for backed up applicationsNew
Computer · Windows Components\App and Device Inventory
Enable App Installer Microsoft Store Source Certificate Validation BypassNew
Computer · Windows Components\Desktop App Installer
Allowed package family names for non-admin user installNew
Computer · Windows Components\App Package Deployment
Set authorized domains for HTTPS authentication in MSIX streaming installNew
Computer · Windows Components\App Package Deployment
Enable App Installer Local Archive Malware Scan OverrideNew
Computer · Windows Components\Desktop App Installer
Remove Default Microsoft Store packages from the system.New
Computer · Windows Components\App Package Deployment
Enable Windows Package Manager command line interfacesNew
Computer · Windows Components\Desktop App Installer
Enable Windows Package Manager ConfigurationNew
Computer · Windows Components\Desktop App Installer
Not allow per-user unsigned packages to install by default (requires explicitly allow per install)New
Computer · Windows Components\App Package Deployment
Configure Multiple Display ModeNew
Computer · System\Display
Configure multicast DNS (mDNS) protocolNew
Computer · Network\DNS Client
Set Cloned Monitor Preferred Resolution SourceNew
Computer · System\Display
Enable / disable CLFS logfile authenticationNew
Computer · System\Filesystem
Disable Internet Explorer 11 Launch Via COM AutomationNew
Computer and user · Windows Components\Internet Explorer
Allow name-based strong mappings for certificatesNew
Computer · System\KDC
Allow Keyboard Filter in remote sessionsNew
Computer and user · System\Keyboard Filter
Audit client does not support signingNew
Computer · Network\Lanman Server
Audit SMB client SPN supportNew
Computer · Network\Lanman Server
Set authentication rate limiter delay (milliseconds)New
Computer · Network\Lanman Server
Block NTLM Server Exception ListNew
Computer · Network\Lanman Workstation
Disabled SMB over QUIC Server Exception ListNew
Computer · Network\Lanman Workstation
Turn off default IPv6 DNS ServersNew
Computer · Network\DNS Client
Enable SMB over QUICNew
Computer · Network\Lanman Workstation
NTLM Enhanced LoggingNew
Computer · System\NTLM
Log Enhanced Domain-wide NTLM LogsNew
Computer · System\Net Logon
Disable Widgets BoardNew
Computer · Windows Components\Widgets