7 Appendix B: Product Behavior

The information in this specification is applicable to the following Microsoft products or supplemental software. References to product versions include updates to those products.

The terms "earlier" and "later", when used with a product version, refer to either all preceding versions or all subsequent versions, respectively. The term "through" refers to the inclusive range of versions. Applicable Microsoft products are listed chronologically in this section.

The following tables show the relationships between Microsoft product versions or supplemental software and the roles they perform.

Windows Client releases

Client role

Key Provisioning Server role

Windows 10 v1607 operating system

Yes

No

Windows 11 operating system

Yes

No

Windows Server releases

Client role

Key Provisioning Server role

Windows Server 2016 operating system

Yes

Yes

Windows Server operating system

No

Yes

Windows Server 2019 operating system

Yes

Yes

Windows Server 2022 operating system

No

Yes

Exceptions, if any, are noted in this section. If an update version, service pack or Knowledge Base (KB) number appears with a product name, the behavior changed in that update. The new behavior also applies to subsequent updates unless otherwise specified. If a product edition appears with the product version, behavior is different in that product edition.

Unless otherwise specified, any statement of optional behavior in this specification that is prescribed using the terms "SHOULD" or "SHOULD NOT" implies product behavior in accordance with the SHOULD or SHOULD NOT prescription. Unless otherwise specified, the term "MAY" implies that the product does not follow the prescription.

<1> Section 3.1.5.1.1.2:  The pctx property is not available in Windows Server 2016 unless [MSKB-4022723] is installed.

<2> Section 3.1.5.1.1.3:  In Windows Server 2016 without [MSKB-4022723] installed, the value in the amr claim contains either "mfa" or "http://schemas.microsoft.com/claims/multipleauthn". However, in Windows Server 2016 with [MSKB-4022723] installed and in later versions of the product, the value contains "ngcmfa".

<3> Section 3.2.5.1.1:  Windows 10 v1607, and also Windows Server 2016 without [MSKB-4022723] installed, ignore the pctx property if one is given in the response.