Relax SID enforcement

Port Clinton Computer Products 0 Reputation points
2026-03-11T16:17:10.7666667+00:00

Hello,

I am not able to find the "relax SID enforcement" in my Windows 11 Pro 25H2 group policy editor.

How do I optain a GP Editor that has theses settings?

I heard its availble from this site somewhere, but they sent me to this MS Q & A.

Thanks in advance.

Windows for business | Windows Client for IT Pros | Directory services | Deploy group policy objects
0 comments

4 answers

Sort by: Oldest
Most helpful Newest Oldest

  1. AI answer

    2026-03-11T16:17:28.4633333+00:00

    "Relax SID enforcement" is not a built‑in, standard Group Policy setting in the Windows 11 Pro 25H2 ADMX set. It appears only when a specific Known Issue Rollback (KIR) or preview/feature policy package has been installed, which adds a custom Administrative Template.

    To obtain Group Policy settings that are not present by default (such as KIR or preview-related policies), the supported pattern is:

    1. Get the corresponding policy definition package (.msi or .admx/.adml set) from Microsoft.
    2. Install or copy those templates into the policy definitions store on the machine or in the domain Central Store.
    3. Then open the Local Group Policy Editor or Group Policy Management Console and configure the new policy.

    Two relevant patterns from existing guidance:

    1. KIR / Known Issue Rollback policies
      For some Windows issues (including SID‑related ones), Microsoft provides a KIR MSI that, when installed, adds a dedicated node under Administrative Templates (for example, KB5065426_20250923_06201 Known Issue Rollback). The steps are:
      • Download the specific KIR .msi provided by Microsoft for the issue.
      • Run the .msi on the affected device. This installs the policy definition into Administrative Templates.
      • Open gpedit.msc and look under Local Computer Policy > Administrative Templates for the new KB‑specific node.
      • Edit the policy and set it to Enabled or Disabled as instructed for that particular fix, then reboot.
      For example, for a duplicate SID issue, a KIR MSI adds a KB‑specific policy which is then set via Local Group Policy Editor.
    2. Feature/preview policies delivered via MSI
      When a feature or behavior is controlled by a preview/feature policy that is not in-box, Microsoft Support may provide a policy definition MSI:
      • Download the policy definition .msi file as instructed by Microsoft Support.
      • Ensure the OS version in the MSI name matches the device OS.
      • Run the MSI to install the Administrative Template.
      • Open gpedit.msc and navigate to the new node under Computer Configuration > Administrative Templates > KB <#######> Feature Preview > Windows 10/11, version <YYMM>.
      • Edit the policy, set it to Enabled (or as instructed), and restart.

    If "relax SID enforcement" is part of a specific KIR or preview package, it will only appear after the corresponding MSI/template from Microsoft has been installed. Without that package, it will not show up in the Group Policy Editor, even on Windows 11 Pro 25H2.

    For domain‑wide management, the same templates can be placed in the Central Store so they are available in the Group Policy Management Console.

    References:

    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

  2. HLBui 11,575 Reputation points Independent Advisor
    2026-03-11T17:06:22.3633333+00:00

    Hi Port Clinton Computer Products

    The “Relax SID enforcement” setting you’re looking for isn’t something that ships with the standard Windows 11 Pro Group Policy templates. That’s why you don’t see it in your gpedit.msc on 25H2 ,it’s not missing because of a bug, it’s simply not part of the baseline policies included with Pro. Typically, those kinds of advanced policies show up only when you install the latest Administrative Templates (ADMX/ADML files) that match your Windows build. You can grab those directly from Microsoft’s official download center, and once you copy them into your PolicyDefinitions folder, the new settings will light up in the Group Policy Editor.

    Some policies are scoped to Enterprise or Education editions, so even if you import the templates, they won’t apply on Pro. In that case, the option just won’t appear because the OS edition doesn’t support it. If your scenario really requires “Relax SID enforcement,” you may need to look at upgrading to Enterprise or using Intune/Entra ID policy instead, since those give you more flexibility in managing advanced security settings.

    So in short: update your ADMX templates, check your edition, and if it still doesn’t show, that’s by design rather than a glitch.

    If everything is okay, don't forget to share your experience with the issue by "Accept answer". If you need more information, feel free to leave a message. We are happy to help!

    Was this answer helpful?

    0 comments
  3. HLBui 11,575 Reputation points Independent Advisor
    2026-03-12T07:33:41.56+00:00

    Hi Port Clinton Computer Products

    Just checking to see how is everything. Please feel free to let me know if you need any assistance

    Was this answer helpful?

    0 comments
  4. Port Clinton Computer Products 0 Reputation points
    2026-05-04T13:43:21.6733333+00:00

    Hello All,

    Sorry not to get to untill now.

    Unless you have alot of time to simply re clone using software that will change the SysID, none of the above suggestions worked.

    I ended up using Wittytoll.

    It worked, had to adjust a couple things afterwords.

    Thanks for your help.

    Was this answer helpful?

    0 comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.