Windows 11, version 24H2 security baseline

Rick_Munck

Are you aware of any settings in the Win11 24H2 security baselines that might be causing issues with DHCP leases?

During the last weeks we've had several cases with different customers, where computers are losing their network connections and then unable to reconnect because they cannot receive a DHCP lease. For most of them it resolves with a reboot, but a few of them stay disconnected and can only be fixed by a reinstall.

The usual trigger for this issue is the following:

• The user leaves the computer, and it eventually goes to sleep. When the user returns, and the computer awakens, the computer is connected but has lost its DHCP lease. 
• User is switching between wired connection and wifi. This also includes disconnecting from a docking station with wired ethernet.

The cases we've had so far are usually the same computers for these customers every time, but there are differences in make and model, whether it is a stationary computer or a laptop and docking or no docking.

We now have narrowed it down to the fact that it is probably after the appliance of the baselines. Prior to the baselines we have no issues. No issues at all with Win11 23H2 and older versions either.

The one common thing these customers and their computers have is that they do not have an on-premises company domain. They are all purely Entra joined computers, where we have applied the baselines with the provided powershell scripts in the baseline package and the -Win11NonDomainJoined switch.

We are doing the exact same thing with our customer who have an on-premise active directory domain and domain-joined computers, but then with the -Win11DomainJoined switch. With these customers, there are no registered cases of this issue as far as I know.