6 Appendix A: Product Behavior
The information in this specification is applicable to the following Microsoft products or supplemental software. References to product versions include updates to those products.
The terms "earlier" and "later", when used with a product version, refer to either all preceding versions or all subsequent versions, respectively. The term "through" refers to the inclusive range of versions. Applicable Microsoft products are listed chronologically in this section.
Windows Client
Windows Vista operating system
Windows 7 operating system
Windows 8 operating system
Windows 8.1 operating system
Windows 10 operating system
Windows 11 operating system
Windows Server
Windows Server 2008 operating system
Windows Server 2008 R2 operating system
Windows Server 2012 operating system
Windows Server 2012 R2 operating system
Windows Server 2016 operating system
Windows Server operating system
Windows Server 2019 operating system
Windows Server 2022 operating system
Windows Server 2025 operating system
Exceptions, if any, are noted in this section. If an update version, service pack or Knowledge Base (KB) number appears with a product name, the behavior changed in that update. The new behavior also applies to subsequent updates unless otherwise specified. If a product edition appears with the product version, behavior is different in that product edition.
Unless otherwise specified, any statement of optional behavior in this specification that is prescribed using the terms "SHOULD" or "SHOULD NOT" implies product behavior in accordance with the SHOULD or SHOULD NOT prescription. Unless otherwise specified, the term "MAY" implies that the product does not follow the prescription.
<1> Section 1.7: The maximum supported policy versions (the inherent schema versions) are mapped to Windows releases as follows:
|
Windows Client Release |
Windows Server Release |
Policy Version |
|---|---|---|
|
Windows Vista |
|
0x0200 |
|
Windows Vista operating system with Service Pack 1 (SP1) |
Windows Server 2008 |
0x0201 |
|
Windows 7 |
Windows Server 2008 R2 operating system |
0x020A |
|
Windows 8 |
Windows Server 2012 |
0x0214 |
|
Windows 8.1 |
Windows Server 2012 R2 |
0x0216 |
|
Windows 10 |
|
0x0218, 0x0219 |
|
Windows 10 v1607 operating system |
Windows Server 2016 |
0x021A |
|
Windows 10 v1703 operating system |
|
0x021B |
|
Windows 10 v1709 operating system |
Windows Server operating system |
0x021B |
|
Windows 10 v1803 operating system |
Windows Server v1803 operating system |
0x021C |
|
Windows 10 v1809 operating system |
Windows Server v1809 operating system Windows Server 2019 |
0x021D |
|
Windows 10 v1903 operating system |
Windows Server v1903 operating system |
0x021E |
<2> Section 2.2.2.3: Added new port keywords, values, and corresponding descriptions for DHCP, mDNS, CortanaOut, and TcpCDPSvc tokens in Windows 10 v1809 and Windows Server v1809 and later, and in Windows Server 2019 and later operating systems.
<3> Section 2.2.2.19: LUAuth2_24= is not implemented in Windows Vista through Windows 8.1 and Windows Server 2008 through Windows Server 2012 R2.
<4> Section 2.2.2.19: NNm= is not implemented in Windows Vista through Windows 8.1 and Windows Server 2008 through Windows Server 2012 R2.
<5> Section 2.2.2.19: SecurityRealmId= is not implemented in Windows Vista through Windows 8.1 and Windows Server 2008 through Windows Server 2012 R2.
<6> Section 2.2.2.20: WFDPrint, WFDDisplay, WFDDevices, WFDKmDriver, UPnP, and WFDCDPSvc tokens are not available on Windows Vista through Windows 8 and Windows Server 2008 through Windows Server 2012.
<7> Section 2.2.6.2: The SecurityRealmEnabled= token is available in Windows 10 and Windows Server 2016.
<8> Section 3.1.1: The Firewall and Advanced Security configuration data is stored in registry keys of the managed computer as specified in section 2.2.1 and its subsections.
<9> Section 3.1.4: Windows administrative tools verify the validity of the objects as defined in section 2.2 before writing them to the remote store through Group Policy: Registry Extension Encoding.
<10> Section 3.2.3: On Windows, Group Policy: Firewall and Advanced Security Data Structure client implementations use the RegisterGPNotification API to receive a notification when there is a change in policy (for more information, see [MSDN-RegisterGPNotification]).