v25.09.17.8

• Adds Prod-Windows-DeviceLockSignIn-Baseline-Device to manage to manage Windows device lock and other sign-in options
• Updates Prod-Windows-Microsoft365Apps-Baseline-User to configure Type of diagnostic data to Optional
• Renames policies:
  • Prod-Windows-BaselinePolicies-User to Prod-Windows-WindowsFeatures-Baseline-User
  • Prod-Windows-BaselinePolicies-Device to Prod-Windows-WindowsFeatures-Baseline-Device
  • Adds Baseline identifier to other policy names

v25.09.09.7

• Create Windows-Avd-AllSessionHosts.json - Filter for single session and multi-session AVD hosts

v25.09.07.6

• Renames windows to windows-baseline
• Creates additional directories windows-extras, windows-asr
• Adds assignments filters to windows-baseline

v25.08.05.5

• Updates Prod-Windows-MicrosoftEdge-Device

Configures Edge sync settings with addressesAndMore, collections, edgeFeatureUsage, edgeWallet, extensions, favorites, history, passwords, settings. Removes these items: apps, openTabs - openTabs duplicates tabs across multiple devices (likely a bug in this feature)

v25.06.08.4

• Update configuration profile descriptions
• Adds seperate compliance policies for Azure Virtual Desktop and Windows 365
• Adds seperate policies for Edge extensions for physical and virtual desktops
• Update Attack Surface Reduction policies to ensure policies in block mode are configured correctly
• Updates Prod-Windows-MicrosoftOneDrive-Device to remove setting Sync Admin Reports
• Remove profiles that require additional testing - ASR in block mode, Delivery optimisations, Windows Firewall settings

v25.06.07

Initial release of policy set.