Microsoft Entra Global Secure Access
General

Global Secure Access Client Release Notes

In brief

Starting in November 2026, eligible Windows clients automatically receive Global Secure Access upgrades through Windows Update. Version 2.32.294 also adds Prefer local network, faster tunnel creation, and other fixes and improvements.

What Entra admins need to know

Review client minimum versions and decide whether to allow automatic upgrades. If opting out, use the documented installer parameter and maintain updates manually.

This editorial summary was generated by AI from the documentation changes. Verify important details in the full Microsoft Learn article.

Documentation change

The comparison below shows only the changed extract. Use the full-page view for complete context.

Global Secure Access client for Windows release notes

This article lists the released versions ofIT administrators can use these release notes to track new features, fixes, minimum versions, and upgrade behavior for the Global Secure Access client for Windows.

Starting in November 2026, the client also receives upgrades through Windows and the changes in each version. Update. For details, see Automatic upgrades from Windows Update.

Download the latest version

You can download the current version of the Global Secure Access client from the Microsoft Entra admin center.

  1. Select Download Client. :::image type="content" source="media/reference-windows-client-release-history/client-download-screen.png" alt-text="Screenshot of the client download screen with the Download Client button highlighted." lightbox="media/reference-windows-client-release-history/client-download-screen.png":::

Version 2.31.125Automatic upgrades from Windows Update

Released for download on June 2, 2026.

Functional changes

Devices receive these upgrades when they run the following client versions or later:

Platform Minimum client version
Windows x64 2.31.125
Windows on Arm 2.32.294

Opt out of automatic upgrades

To opt out of automatic upgrades, use the following parameter when you install or upgrade the client. Run the installer from a command line, or deploy it through your mobile device management (MDM) solution.

<Global Secure Access installer file> /quiet /norestart EnableWindowsUpdates=0

Version 2.32.294

Released for download on August 26, 2026.

Functional changes

  • Adds a Prefer local network option for cases where the local subnet overlaps with private applications, such as when printing or casting. The option appears in the client settings when an administrator enables it.
  • Accelerates the creation of new tunnels for an improved tunneling experience.

Other changes

  • The client installer includes .NET Runtime version 10.0.9.
  • Removes LastMile for Office 365 telemetry from the Global Secure Access client.
  • New telemetries are available.
  • Accessibility improvements.
  • Miscellaneous bug fixes and improvements.

Version 2.31.125

Released for download on June 2, 2026.

Functional changes

Daily Entra.News

Get daily email updates

Get a concise summary of the latest Microsoft Entra updates delivered straight to your inbox.

Loading the secure signup form…